$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: +D5rvUu/XSezzuXvedcxFvY+1NHl/X+34OZRtpJqszw= Subject key identifier: 80:82:3E:7E:CF:14:FF:5A:E2:77:48:2E:5F:2A:0F:7B:20:F1:B0:B1 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 1B Signing time: Tue 01 Jul 2025 08:42:30 +0000 Manifest this update: Tue 01 Jul 2025 08:42:29 +0000 Manifest next update: Tue 08 Jul 2025 08:42:29 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: A2+nyv9+znc8JHGUT4AwNd2RtpFICSRpX2d3vnrOfEo=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Jul 1 08:42:29 2025 GMT Not After : Jul 8 08:42:29 2025 GMT Subject: CN=68639f75-9587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fa:b3:dc:34:70:09:84:a6:7a:1d:a6:75:52: 78:77:a8:81:16:23:91:af:52:6e:e1:e2:34:ab:3e: 15:49:00:da:8a:aa:02:e9:ef:a2:05:9d:08:95:5e: 64:9d:bf:07:98:33:79:b7:bc:46:5a:b4:38:5b:5a: 11:02:05:95:51:3d:70:c8:0a:37:51:00:02:b6:41: 10:0c:93:ea:20:e5:c9:3f:74:83:6f:e4:cc:cd:ff: 7a:11:0d:87:ea:e8:26:86:61:bd:4e:50:3a:05:0e: 4f:5f:92:36:63:cf:1b:d3:6a:22:58:1c:00:6c:3d: b6:30:66:29:d4:d0:33:87:b6:0e:69:d6:8a:17:24: 26:2d:d5:c5:26:2f:73:37:29:27:13:a1:4f:33:b4: 3e:48:7d:1d:67:29:31:2f:97:70:c1:c9:9c:07:75: f9:68:3e:af:ba:e2:a1:7e:e1:8e:78:0f:45:ab:44: c9:f1:af:13:65:7d:de:be:91:c4:24:45:67:e9:af: d2:4d:b6:61:90:e1:af:2d:e4:a8:ac:22:e1:fa:81: 7b:b1:e5:f1:1e:f0:2e:30:57:03:67:2b:d6:a8:08: 48:9c:ec:85:7c:4e:8e:6e:46:ce:3c:45:da:d2:fc: 51:1d:76:ed:d0:36:a6:15:60:1e:6a:9e:f4:dd:aa: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:82:3E:7E:CF:14:FF:5A:E2:77:48:2E:5F:2A:0F:7B:20:F1:B0:B1 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:51:87:f2:0b:c5:72:f7:69:f2:3c:14:73:aa:c5:32:b7:69: db:c5:17:97:eb:6e:97:f0:c1:51:4a:50:d8:b3:0e:0b:c1:dd: 50:dc:2c:18:fc:8a:87:5f:0c:42:b8:a8:02:85:5e:d5:d6:ae: fc:cd:81:e1:3a:91:3a:96:c0:73:d8:e6:62:e2:19:06:0d:66: 52:eb:a4:ee:96:f9:3b:f6:68:31:09:b1:df:22:10:03:fe:3a: 7b:91:43:36:06:4d:77:37:ae:7e:18:a9:6a:ae:04:82:c3:73: 00:6a:11:68:66:6f:e5:e5:c3:42:f3:8f:16:b3:12:fd:1d:d7: ea:f3:f5:7d:aa:8f:7b:57:e5:f4:23:03:fa:84:24:e5:d0:ae: 75:bd:c9:e1:25:ca:f1:65:97:88:4f:f7:d1:b7:de:c2:ec:72: 5c:f8:1a:95:46:47:f2:f2:06:dd:f0:c4:6f:3d:e5:13:90:1a: 1d:6f:a5:14:63:64:cc:8e:90:46:74:02:2c:68:f5:66:d1:6e: 01:8c:a1:70:47:70:03:c9:27:e4:93:56:8f:c1:4d:63:b2:ab: ff:b9:e3:99:ce:15:dc:3d:55:e0:6b:e6:31:09:93:18:70:ce: 38:f7:e4:34:6c:e2:7a:42:50:8a:61:34:f4:ce:13:64:fc:3f: bf:c7:26:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTA3MDEwODQyMjlaFw0yNTA3MDgwODQyMjlaMBgxFjAUBgNV BAMTDTY4NjM5Zjc1LTk1ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy+rPcNHAJhKZ6HaZ1Unh3qIEWI5GvUm7h4jSrPhVJANqKqgLp76IFnQiVXmSd vweYM3m3vEZatDhbWhECBZVRPXDICjdRAAK2QRAMk+og5ck/dINv5MzN/3oRDYfq 6CaGYb1OUDoFDk9fkjZjzxvTaiJYHABsPbYwZinU0DOHtg5p1ooXJCYt1cUmL3M3 KScToU8ztD5IfR1nKTEvl3DByZwHdfloPq+64qF+4Y54D0WrRMnxrxNlfd6+kcQk RWfpr9JNtmGQ4a8t5KisIuH6gXux5fEe8C4wVwNnK9aoCEic7IV8To5uRs48RdrS /FEddu3QNqYVYB5qnvTdqgUHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgII+fs8U /1rid0guXyoPeyDxsLEwHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFFRh/ILxXL3afI8FHOqxTK3advFF5frbpfwwVFKUNizDgvB3VDcLBj8 iodfDEK4qAKFXtXWrvzNgeE6kTqWwHPY5mLiGQYNZlLrpO6W+Tv2aDEJsd8iEAP+ OnuRQzYGTXc3rn4YqWquBILDcwBqEWhmb+Xlw0LzjxazEv0d1+rz9X2qj3tX5fQj A/qEJOXQrnW9yeElyvFll4hP99G33sLsclz4GpVGR/LyBt3wxG895ROQGh1vpRRj ZMyOkEZ0Aixo9WbRbgGMoXBHcAPJJ+STVo/BTWOyq/+545nOFdw9VeBr5jEJkxhw zjj35DRs4npCUIphNPTOE2T8P7/HJmk= -----END CERTIFICATE-----Generated at Tue Jul 1 15:25:09 2025 by rpki-client