$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft File: i2WlKUN31oY3jEaz6drXzbW2Z5E.mft (raw, json) Hash identifier: DoKgcVOzvDLI7+Dhe6TzE9XFX3uw2C23i0qoSzn7c/o= Subject key identifier: 72:D7:B6:93:5A:21:61:67:E1:C3:5E:61:F5:BC:05:5E:B2:E7:48:B1 Authority key identifier: 8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 Certificate issuer: /CN=A9127C2D/serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft Manifest number: 012F Signing time: Tue 01 Jul 2025 05:04:30 +0000 Manifest this update: Tue 01 Jul 2025 05:04:29 +0000 Manifest next update: Tue 08 Jul 2025 05:04:29 +0000 Files and hashes: 1: i2WlKUN31oY3jEaz6drXzbW2Z5E.crl (hash: sAQ3SQ7IQMIVzgXv3wOBMMg9smdCu5C68jCGHkOCK9Y=) 2: A2F568A08CDC11EEA05B6E55C4F9AE02.roa (hash: 1BbW+GzFmicFxrJi47abULi9jqJhPlJkmCnwzd461wM=) 3: 83298B188CDD11EE9C0A8258C4F9AE02.roa (hash: uYX2IlbgkFVHpSI6ncTYHrhhVumZeL9bEclaECevCas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:04:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C2D, serialNumber=8B65A5294377D686378C46B3E9DAD7CDB5B66791 Validity Not Before: Jul 1 05:04:29 2025 GMT Not After : Jul 8 05:04:29 2025 GMT Subject: CN=68636c5d-9d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8d:5f:c4:be:f4:36:98:95:52:18:68:24:6c: 35:8e:db:c1:5b:6f:de:53:64:f2:6e:11:77:ea:b5: a6:94:87:ad:22:da:73:44:21:6f:d9:aa:10:5a:53: 94:16:f8:1e:b6:4f:cb:74:6d:e1:09:04:ee:79:b6: b8:18:22:b9:94:b8:a8:98:cb:31:6b:85:a7:8b:f8: be:b0:8b:aa:10:8c:e1:ed:f1:a6:34:89:fd:5e:de: b2:31:2b:cf:61:ef:ab:d5:bb:e9:26:86:b2:a1:a9: d2:ed:16:78:eb:77:40:14:7f:76:3f:1c:cc:fa:49: 9a:55:af:68:90:d6:4d:7c:40:00:3b:11:84:7f:2c: 87:67:91:6b:d4:9e:8b:73:7d:b9:6e:32:46:ab:98: ba:f8:85:7b:25:de:6f:b7:96:f1:17:2c:a8:43:19: 86:39:c6:fd:6e:ac:62:df:05:2c:57:04:68:95:53: a1:86:bc:50:b2:d0:4e:cc:64:ff:c5:b6:5b:89:be: 4f:97:a0:03:af:03:c2:d8:ba:e7:0f:91:7a:63:aa: 8a:a0:bb:ed:46:cf:f3:5a:09:c9:69:28:63:2a:48: b2:9c:e6:de:69:eb:16:e9:0d:f8:08:18:42:7b:99: c1:7a:9f:31:c6:97:66:d8:c1:66:10:79:93:d8:6e: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D7:B6:93:5A:21:61:67:E1:C3:5E:61:F5:BC:05:5E:B2:E7:48:B1 X509v3 Authority Key Identifier: keyid:8B:65:A5:29:43:77:D6:86:37:8C:46:B3:E9:DA:D7:CD:B5:B6:67:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2WlKUN31oY3jEaz6drXzbW2Z5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C2D/9E39F9368C9E11EE87C8EE78C4F9AE02/i2WlKUN31oY3jEaz6drXzbW2Z5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2a:27:50:0e:f5:32:ca:bb:75:07:ee:bb:88:3a:ab:cc:27: d5:96:50:fe:a0:53:3a:08:ff:76:77:ed:af:15:f8:86:6b:9c: 6d:0b:be:88:65:da:45:31:d3:42:94:26:45:dc:49:a3:2d:94: 73:58:6d:e9:bf:62:fe:99:cc:11:82:d9:91:91:c5:dd:da:4a: 02:b3:91:e8:bb:4a:ea:a6:d4:98:e1:53:5a:97:09:90:87:19: 9d:a5:1e:90:25:1f:be:49:40:5f:0f:3a:e4:05:58:62:e9:93: 95:3c:f6:e2:8f:32:3a:f6:6f:8c:17:f4:94:7f:8c:4f:76:8b: 31:4b:bb:a3:55:ad:b2:49:7c:ef:5c:74:0d:a8:35:2b:32:6a: da:fd:f0:7a:13:4c:8d:bc:a9:20:21:94:b5:f7:95:83:d3:73: 91:87:e1:12:ad:2e:39:b4:90:49:ec:ec:47:f4:61:e9:1e:18: 9f:c6:2e:f6:98:bd:fd:87:09:4c:d6:a8:68:c5:7c:01:a0:09: f5:0d:fc:7f:d7:3f:8a:d6:17:15:69:74:15:6c:73:1d:68:f6: 12:26:91:6e:a6:0d:57:10:f9:c1:17:17:63:dc:43:14:97:bf: 70:8c:90:d6:7e:6f:83:1c:e1:81:f6:20:68:ba:15:91:ab:43: 16:f5:57:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDMkQxMTAvBgNVBAUTKDhCNjVBNTI5NDM3N0Q2ODYzNzhDNDZCM0U5REFEN0NE QjVCNjY3OTEwHhcNMjUwNzAxMDUwNDI5WhcNMjUwNzA4MDUwNDI5WjAYMRYwFAYD VQQDEw02ODYzNmM1ZC05ZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Y1fxL70NpiVUhhoJGw1jtvBW2/eU2TybhF36rWmlIetItpzRCFv2aoQWlOU Fvgetk/LdG3hCQTueba4GCK5lLiomMsxa4Wni/i+sIuqEIzh7fGmNIn9Xt6yMSvP Ye+r1bvpJoayoanS7RZ463dAFH92PxzM+kmaVa9okNZNfEAAOxGEfyyHZ5Fr1J6L c325bjJGq5i6+IV7Jd5vt5bxFyyoQxmGOcb9bqxi3wUsVwRolVOhhrxQstBOzGT/ xbZbib5Pl6ADrwPC2LrnD5F6Y6qKoLvtRs/zWgnJaShjKkiynObeaesW6Q34CBhC e5nBep8xxpdm2MFmEHmT2G60+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLXtpNa IWFn4cNeYfW8BV6y50ixMB8GA1UdIwQYMBaAFItlpSlDd9aGN4xGs+na1821tmeR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0MyRC85RTM5RjkzNjhD OUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFvWTNqRWF6NmRyWHpiVzJa NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyV2xLVU4zMW9ZM2pFYXo2ZHJYemJXMlo1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0MyRC85RTM5RjkzNjhDOUUxMUVFODdDOEVFNzhDNEY5QUUwMi9pMldsS1VOMzFv WTNqRWF6NmRyWHpiVzJaNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcKidQDvUyyrt1B+67iDqrzCfVllD+oFM6CP92d+2vFfiGa5xtC76I ZdpFMdNClCZF3EmjLZRzWG3pv2L+mcwRgtmRkcXd2koCs5Hou0rqptSY4VNalwmQ hxmdpR6QJR++SUBfDzrkBVhi6ZOVPPbijzI69m+MF/SUf4xPdosxS7ujVa2ySXzv XHQNqDUrMmra/fB6E0yNvKkgIZS195WD03ORh+ESrS45tJBJ7OxH9GHpHhifxi72 mL39hwlM1qhoxXwBoAn1Dfx/1z+K1hcVaXQVbHMdaPYSJpFupg1XEPnBFxdj3EMU l79wjJDWfm+DHOGB9iBouhWRq0MW9VfD -----END CERTIFICATE-----Generated at Wed Jul 2 07:13:48 2025 by rpki-client