$ rpki-client -vvf rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft File: N2EhKhZwpXGatx-iA7kuxobyEXc.mft (raw, json) Hash identifier: OLz0vgfnJd4P3ld2rsbgmThKEDb0AzQHVNssgH/ISPg= Subject key identifier: 8B:9E:DD:AB:7C:17:B6:E5:F5:8B:0E:54:B1:55:B2:F8:4B:63:8A:97 Authority key identifier: 37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 Certificate issuer: /CN=A9142037/serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft Manifest number: 4C Signing time: Tue 01 Jul 2025 08:05:20 +0000 Manifest this update: Tue 01 Jul 2025 08:05:19 +0000 Manifest next update: Tue 08 Jul 2025 08:05:19 +0000 Files and hashes: 1: N2EhKhZwpXGatx-iA7kuxobyEXc.crl (hash: LTMUba7IFUIGcQqAgOM4hY9gEf1pBRR4jr/OeuTXoTQ=) 2: 191B6DA2E41811EF8E3F233AC4F9AE02.roa (hash: vcq+JOCdxjFG1D5wGuVH3+pI9poPc4zyyjKKMXsqhWE=) 3: FAEA8E38E41911EFA96DA35FC4F9AE02.roa (hash: RxRZ1dH5JkRHUJw1N/ksvTcKPSxp60O8KTnJFH3sluU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142037, serialNumber=3761212A1670A5719AB71FA203B92EC686F21177 Validity Not Before: Jul 1 08:05:19 2025 GMT Not After : Jul 8 08:05:19 2025 GMT Subject: CN=686396bf-6523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:95:56:d7:bb:ce:7a:6b:14:36:53:96:ba: c5:8a:ae:69:4a:cc:1d:83:ba:8c:97:af:54:6a:2b: 27:6d:75:dd:e3:92:d4:66:b5:b7:c4:94:24:46:ab: f8:0d:ae:e6:d9:f0:83:6c:31:c4:94:61:08:15:84: a0:76:40:f2:e5:9f:90:bc:7a:28:b4:79:2f:82:0b: 9d:11:16:7f:58:8c:3d:c3:8e:a3:cb:a1:15:57:4d: 40:af:07:49:43:9e:b5:53:c2:dc:5b:37:f5:d2:da: 18:c8:18:ec:3b:b5:a4:3a:d2:1b:af:a3:55:4e:46: 64:93:93:d0:74:2f:21:fe:8c:d9:58:e1:84:48:4e: ae:60:72:88:de:91:51:eb:f2:55:39:13:b1:5e:9d: f2:ff:98:3d:46:6e:26:ee:43:3a:37:b9:7d:e9:9a: ee:f0:c5:a3:3f:d0:22:0e:0c:f8:3f:3d:ac:71:ae: 38:aa:36:24:51:52:5f:f8:d4:bb:4b:49:8a:ca:9a: bd:4f:fc:89:ad:91:0f:ca:f4:38:42:a3:6d:95:1f: a1:3a:65:35:cf:15:de:1e:a8:8f:5f:80:09:aa:01: 81:2a:60:25:0a:f4:cf:8d:df:9a:3e:0b:41:48:e1: 0e:b1:ed:e9:86:ca:f2:51:bd:e7:3e:c7:d9:3e:f6: 11:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9E:DD:AB:7C:17:B6:E5:F5:8B:0E:54:B1:55:B2:F8:4B:63:8A:97 X509v3 Authority Key Identifier: keyid:37:61:21:2A:16:70:A5:71:9A:B7:1F:A2:03:B9:2E:C6:86:F2:11:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2EhKhZwpXGatx-iA7kuxobyEXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142037/5C05C0C8E41711EF96E2FF38C4F9AE02/N2EhKhZwpXGatx-iA7kuxobyEXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cb:4c:fd:7d:dd:ff:dd:c8:95:83:bc:92:8a:1e:5e:e4:37: e3:fe:e0:91:a9:72:5d:25:15:dc:37:f4:78:5e:c5:40:e6:ed: f0:38:5c:eb:25:a8:b5:9c:96:b6:31:51:27:c9:8d:b7:74:a2: bc:6e:f3:96:6c:b8:9d:2b:1f:4e:c5:4c:25:c0:a8:34:6c:9b: c2:6c:23:1f:f1:e2:73:27:fb:65:ca:1a:ad:b0:77:ce:09:4b: ec:44:ce:c1:c2:95:e4:1c:48:13:3d:b6:ac:2d:82:92:9b:d3: 35:7f:ff:84:33:79:ab:97:8b:aa:1c:d7:2c:a9:93:74:76:1b: d9:87:e8:fe:40:70:44:e1:5d:f5:32:c3:bc:7f:73:81:1e:e4: 47:fa:34:68:c5:23:91:23:f7:14:5c:61:89:23:6e:d9:60:eb: 8c:54:c1:df:45:2b:e0:50:12:d2:ba:d4:cd:75:b2:3d:3f:21: 2e:b1:a9:a4:d2:5c:e5:77:a0:82:f5:d4:c9:a4:c8:ce:8c:80: 11:a9:dd:e6:79:59:23:8d:21:a8:6a:f4:af:01:88:4f:27:8b: ce:b7:cb:31:82:b5:4b:a5:d1:02:97:e9:0e:7d:34:06:83:31: 8f:77:ce:75:f8:95:bf:9f:3e:97:88:7d:31:df:da:3b:b9:3d: a4:be:c6:1e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjAzNzExMC8GA1UEBRMoMzc2MTIxMkExNjcwQTU3MTlBQjcxRkEyMDNCOTJFQzY4 NkYyMTE3NzAeFw0yNTA3MDEwODA1MTlaFw0yNTA3MDgwODA1MTlaMBgxFjAUBgNV BAMTDTY4NjM5NmJmLTY1MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9NpVW17vOemsUNlOWusWKrmlKzB2DuoyXr1RqKydtdd3jktRmtbfElCRGq/gN rubZ8INsMcSUYQgVhKB2QPLln5C8eii0eS+CC50RFn9YjD3DjqPLoRVXTUCvB0lD nrVTwtxbN/XS2hjIGOw7taQ60huvo1VORmSTk9B0LyH+jNlY4YRITq5gcojekVHr 8lU5E7FenfL/mD1GbibuQzo3uX3pmu7wxaM/0CIODPg/PaxxrjiqNiRRUl/41LtL SYrKmr1P/ImtkQ/K9DhCo22VH6E6ZTXPFd4eqI9fgAmqAYEqYCUK9M+N35o+C0FI 4Q6x7emGyvJRvec+x9k+9hHHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUi57dq3wX tuX1iw5UsVWy+EtjipcwHwYDVR0jBBgwFoAUN2EhKhZwpXGatx+iA7kuxobyEXcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMDM3LzVDMDVDMEM4RTQx NzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhHYXR4LWlBN2t1eG9ieUVY Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTjJFaEtoWndwWEdhdHgtaUE3a3V4b2J5RVhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MDM3LzVDMDVDMEM4RTQxNzExRUY5NkUyRkYzOEM0RjlBRTAyL04yRWhLaFp3cFhH YXR4LWlBN2t1eG9ieUVYYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACrLTP193f/dyJWDvJKKHl7kN+P+4JGpcl0lFdw39HhexUDm7fA4XOsl qLWclrYxUSfJjbd0orxu85ZsuJ0rH07FTCXAqDRsm8JsIx/x4nMn+2XKGq2wd84J S+xEzsHCleQcSBM9tqwtgpKb0zV//4QzeauXi6oc1yypk3R2G9mH6P5AcEThXfUy w7x/c4Ee5Ef6NGjFI5Ej9xRcYYkjbtlg64xUwd9FK+BQEtK61M11sj0/IS6xqaTS XOV3oIL11MmkyM6MgBGp3eZ5WSONIahq9K8BiE8ni863yzGCtUul0QKX6Q59NAaD MY93znX4lb+fPpeIfTHf2ju5PaS+xh4= -----END CERTIFICATE-----Generated at Thu Jul 3 00:34:22 2025 by rpki-client