$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: p24ad0IVOEm2FIin2gGFfjy7rHAiaA5LS5bZYzDArcs= Subject key identifier: 83:14:95:BA:ED:94:3F:43:88:EC:82:B0:E1:CB:DA:D8:8B:E6:81:87 Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 08DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 08D8 Signing time: Wed 02 Jul 2025 20:41:05 +0000 Manifest this update: Wed 02 Jul 2025 20:41:05 +0000 Manifest next update: Wed 09 Jul 2025 20:41:05 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: 2j5Zob+pPk7Qs3susi/99xTPiDVFY/+nfxAGdgrnvK8=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: v6eXZmLrZttsFYphww5DwQSaxSYNhoXZnZd8akGhwqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2270 (0x8de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: Jul 2 20:41:05 2025 GMT Not After : Jul 9 20:41:05 2025 GMT Subject: CN=68659961-125d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cc:bc:6b:1f:51:ff:a8:c8:9c:91:c7:b5:8b: 9f:f5:0d:00:4d:e5:65:ba:d3:40:4d:38:de:92:18: 7f:7c:1d:ed:09:ec:c6:8f:89:98:6f:7b:63:4f:77: 1d:a1:27:e8:a9:c6:f9:a9:18:c4:c3:81:31:25:70: 0c:32:3d:c5:28:00:16:0b:32:74:4e:23:94:34:99: 90:af:90:b6:44:b9:b1:ab:87:47:fc:3b:ff:d2:63: 9c:7e:1f:26:a0:9e:31:6a:e1:ad:4e:02:10:c1:e6: 6f:d2:fa:28:55:68:10:6c:7d:01:d3:83:57:ad:e8: 74:0e:69:aa:3d:49:d8:9e:4c:86:86:25:0e:4c:04: 97:d8:2d:80:98:dc:94:0f:e2:af:ca:c3:5d:e7:36: 7e:25:4c:2f:12:18:56:ec:d9:4f:75:7b:52:b5:d3: fd:85:b5:ea:77:8a:cb:ae:ee:45:cd:5c:b6:6c:27: f3:70:2e:a0:76:0c:73:b7:bc:c7:0c:59:07:92:bb: 21:f8:e5:0d:b4:72:1b:8f:0d:13:9c:0f:91:d3:bd: 3c:a3:39:1b:71:a9:c9:a3:79:45:50:8b:e9:46:d7: c6:f4:1a:73:15:81:67:11:7d:65:ac:a5:78:39:49: 1b:4e:ce:85:39:fd:75:5e:9a:e7:df:97:1d:03:e8: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:95:BA:ED:94:3F:43:88:EC:82:B0:E1:CB:DA:D8:8B:E6:81:87 X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a1:3f:00:7c:2d:88:81:b5:05:65:b8:39:be:1c:15:33:4c: d2:6f:bf:e8:6a:51:cc:27:f2:1f:42:c6:34:02:05:0a:2f:a7: 89:c2:bc:d8:e4:67:86:03:2d:c5:16:dd:43:fa:e2:7c:fb:1d: fe:10:a2:ae:da:bd:80:7d:33:b6:24:e4:25:6d:46:b0:eb:12: f4:92:8b:b4:a5:bd:6c:38:ae:f3:a8:85:48:90:6c:eb:76:94: 8c:02:cc:d5:59:6a:d9:30:4a:8c:21:07:fc:5c:26:9c:a7:e6: 24:f4:d3:01:6c:b6:00:21:23:b3:1b:da:c9:cd:ff:66:b2:df: 4c:16:6a:15:60:8b:c5:8d:23:92:86:87:48:39:02:08:73:e1: 48:35:14:86:0d:9d:c2:d2:99:9c:82:aa:cd:2d:a8:23:62:bd: fd:76:a6:82:ef:b2:65:42:45:5f:0f:ab:48:16:f2:73:75:a1: 60:72:e7:1d:70:fb:6c:62:a9:72:ae:a4:8b:eb:af:9f:1b:c8: e4:7c:8b:d2:1b:be:cc:fd:09:70:90:c6:0c:3b:f9:09:51:2d: 7c:69:37:05:7e:b5:29:0f:26:62:62:b8:5b:0b:ea:c2:8a:b9: 11:9a:60:8d:20:25:7c:47:50:d5:30:35:c9:a9:1a:e7:c6:42: c0:55:e4:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjUwNzAyMjA0MTA1WhcNMjUwNzA5MjA0MTA1WjAYMRYwFAYD VQQDEw02ODY1OTk2MS0xMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA68y8ax9R/6jInJHHtYuf9Q0ATeVlutNATTjekhh/fB3tCezGj4mYb3tjT3cd oSfoqcb5qRjEw4ExJXAMMj3FKAAWCzJ0TiOUNJmQr5C2RLmxq4dH/Dv/0mOcfh8m oJ4xauGtTgIQweZv0vooVWgQbH0B04NXreh0DmmqPUnYnkyGhiUOTASX2C2AmNyU D+KvysNd5zZ+JUwvEhhW7NlPdXtStdP9hbXqd4rLru5FzVy2bCfzcC6gdgxzt7zH DFkHkrsh+OUNtHIbjw0TnA+R0708ozkbcanJo3lFUIvpRtfG9BpzFYFnEX1lrKV4 OUkbTs6FOf11Xprn35cdA+iZbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMUlbrt lD9DiOyCsOHL2tiL5oGHMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuoT8AfC2IgbUFZbg5vhwVM0zSb7/oalHMJ/IfQsY0AgUKL6eJwrzY 5GeGAy3FFt1D+uJ8+x3+EKKu2r2AfTO2JOQlbUaw6xL0kou0pb1sOK7zqIVIkGzr dpSMAszVWWrZMEqMIQf8XCacp+Yk9NMBbLYAISOzG9rJzf9mst9MFmoVYIvFjSOS hodIOQIIc+FINRSGDZ3C0pmcgqrNLagjYr39dqaC77JlQkVfD6tIFvJzdaFgcucd cPtsYqlyrqSL66+fG8jkfIvSG77M/QlwkMYMO/kJUS18aTcFfrUpDyZiYrhbC+rC irkRmmCNICV8R1DVMDXJqRrnxkLAVeTB -----END CERTIFICATE-----Generated at Thu Jul 3 18:31:25 2025 by rpki-client