$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: 8ItXbLa7KKtd1XpHmnALb+eTCqUXG0PxhxlKiejKm+0= Subject key identifier: 42:71:08:C9:3A:0E:35:8A:8A:F3:89:B6:18:D4:F1:F2:C7:6E:10:1B Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 09D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 09C9 Signing time: Wed 02 Jul 2025 20:12:32 +0000 Manifest this update: Wed 02 Jul 2025 20:12:32 +0000 Manifest next update: Wed 09 Jul 2025 20:12:32 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: c2DJ+bRvKq+MamxrDgNZlCr5U0b0PqsbfFAEGOcy8fA=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: qAQSazWUf2FePmcHd1Qj+eRlLm7Ky5QuPvw10+7M0lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2513 (0x9d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: Jul 2 20:12:32 2025 GMT Not After : Jul 9 20:12:32 2025 GMT Subject: CN=686592b0-d58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:83:97:95:ce:14:d9:f1:d3:84:23:be:1e: 44:89:08:76:48:0a:aa:c0:ed:48:f7:ad:7b:6f:85: 61:05:33:dd:4f:31:fe:07:59:56:c6:67:e9:f4:82: 0d:c3:b7:64:a5:2b:c1:5e:39:f6:48:a9:7b:56:fd: ed:05:57:dd:de:20:82:01:cb:c0:45:05:12:33:35: 2d:e0:3a:e3:0d:5b:6e:36:ce:3e:81:9b:96:a2:9f: 7e:86:72:8b:87:0e:2c:4f:40:e0:91:cd:39:cb:f4: c8:5b:8d:e5:d2:26:6f:34:f0:8e:8b:f3:b7:23:42: 40:86:ef:b0:ac:7e:d4:62:07:c0:f1:63:d2:37:63: b9:db:7d:f5:31:61:1f:97:7d:2b:5a:85:88:a7:6b: 0a:13:75:89:c3:f3:21:cc:f4:0c:48:80:d3:7c:bb: 91:57:ee:82:ca:b0:88:2d:9e:51:87:f6:a0:32:5f: e6:91:d3:18:53:a6:88:1e:12:fe:3f:f6:62:d3:bf: f0:e7:41:6d:cc:30:69:17:0e:64:08:e1:4d:45:87: 50:4c:86:70:8a:f1:ad:eb:a2:a8:7b:49:69:8a:ab: 06:c0:9e:80:26:7e:91:d5:72:ef:d4:f7:5b:e0:2b: fa:57:43:37:b6:ba:bc:35:6f:03:d3:56:4b:8d:6e: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:71:08:C9:3A:0E:35:8A:8A:F3:89:B6:18:D4:F1:F2:C7:6E:10:1B X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:b7:e2:69:a7:88:59:fe:5e:87:e0:7d:00:8d:94:7f:94:4c: c7:09:21:51:7b:e0:3c:49:de:f9:78:98:bb:f4:77:e6:bf:93: fc:e5:79:56:23:66:2d:3c:e4:14:84:97:77:64:e9:13:43:a4: c4:e3:6c:64:1d:c5:8d:86:c5:97:0c:0c:1d:38:50:a0:e8:b7: e6:64:24:93:dd:b7:81:5c:9b:20:2d:b4:d4:33:e0:91:38:66: a7:a0:1f:c7:a1:24:c6:64:02:5b:fb:91:43:42:76:93:38:cd: 45:4c:d8:7d:78:ce:e4:a4:e3:63:83:dc:b5:e9:4a:62:28:3c: e8:17:91:13:13:a3:fe:57:08:ae:d6:1f:1f:d4:52:ab:a5:78: 58:de:83:d2:51:a6:d8:24:64:e0:b9:02:46:f5:f2:62:ec:63: 01:08:55:87:53:bb:5d:57:e4:1b:13:eb:84:08:33:a3:eb:77: 89:c0:56:dc:ec:fa:b6:7f:5b:68:0b:74:7c:4a:9f:74:95:46: 63:bd:12:58:9f:31:3d:0b:d0:2a:4d:12:05:a7:8d:c4:0e:c1: 12:eb:82:25:97:d0:c9:d7:0f:f3:63:76:e2:20:9e:1c:4e:88: d8:5e:f8:3c:5d:fa:1d:df:59:96:02:36:92:02:02:1b:52:6b: 7d:b8:a9:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjUwNzAyMjAxMjMyWhcNMjUwNzA5MjAxMjMyWjAYMRYwFAYD VQQDEw02ODY1OTJiMC1kNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZmDl5XOFNnx04Qjvh5EiQh2SAqqwO1I9617b4VhBTPdTzH+B1lWxmfp9IIN w7dkpSvBXjn2SKl7Vv3tBVfd3iCCAcvARQUSMzUt4DrjDVtuNs4+gZuWop9+hnKL hw4sT0Dgkc05y/TIW43l0iZvNPCOi/O3I0JAhu+wrH7UYgfA8WPSN2O52331MWEf l30rWoWIp2sKE3WJw/MhzPQMSIDTfLuRV+6CyrCILZ5Rh/agMl/mkdMYU6aIHhL+ P/Zi07/w50FtzDBpFw5kCOFNRYdQTIZwivGt66Koe0lpiqsGwJ6AJn6R1XLv1Pdb 4Cv6V0M3trq8NW8D01ZLjW5iXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJxCMk6 DjWKivOJthjU8fLHbhAbMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXt+Jpp4hZ/l6H4H0AjZR/lEzHCSFRe+A8Sd75eJi79Hfmv5P85XlW I2YtPOQUhJd3ZOkTQ6TE42xkHcWNhsWXDAwdOFCg6LfmZCST3beBXJsgLbTUM+CR OGanoB/HoSTGZAJb+5FDQnaTOM1FTNh9eM7kpONjg9y16UpiKDzoF5ETE6P+Vwiu 1h8f1FKrpXhY3oPSUabYJGTguQJG9fJi7GMBCFWHU7tdV+QbE+uECDOj63eJwFbc 7Pq2f1toC3R8Sp90lUZjvRJYnzE9C9AqTRIFp43EDsES64Ill9DJ1w/zY3biIJ4c TojYXvg8Xfod31mWAjaSAgIbUmt9uKlk -----END CERTIFICATE-----Generated at Fri Jul 4 01:11:05 2025 by rpki-client