$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: j6ylIXE+Y6SentJc6M/KPXPvXx6gaRea6kJVErp/8Sg= Subject key identifier: 7F:EF:F1:B3:58:4F:7F:D3:99:C7:95:35:8F:2E:5A:E6:74:10:7A:79 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0ADD Signing time: Mon 30 Jun 2025 19:34:42 +0000 Manifest this update: Mon 30 Jun 2025 19:34:41 +0000 Manifest next update: Mon 07 Jul 2025 19:34:41 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: H8r2ddOgZc9R2WX8auPjKq4zfjqDYTn5N4Q9l6+BUVU=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Jun 30 19:34:41 2025 GMT Not After : Jul 7 19:34:41 2025 GMT Subject: CN=6862e6d1-86c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:12:88:16:19:a6:6f:03:66:ab:57:6b:a5: fd:d3:23:59:de:25:70:8b:db:da:21:24:73:15:ca: 3a:fd:e7:ce:57:86:3a:d5:09:fe:9a:c7:75:db:04: 85:6f:df:40:06:a6:0f:f3:d8:bc:21:c9:e6:55:f6: f1:df:0a:81:6f:12:f0:3c:eb:f6:7b:ed:08:26:c8: a7:53:a3:86:c9:dc:ad:fa:8c:8f:15:49:1b:a9:c5: 44:60:ad:f3:57:eb:94:b0:4a:55:43:6a:b1:c8:26: 42:10:1d:3c:3a:62:20:61:e8:ad:50:fd:92:e7:9d: a2:b5:61:24:ac:ba:15:27:c9:e9:34:24:a9:51:5b: 36:cf:d0:75:b1:36:04:03:08:d5:7c:ef:b6:11:73: 5f:c3:b9:a1:27:96:00:f1:30:9d:72:70:c7:cd:68: 66:b2:38:ae:54:8f:7b:82:c3:53:86:85:cd:57:06: 0d:49:93:55:2b:56:4f:17:89:b1:b8:7a:8e:65:4b: b7:34:18:b2:52:6b:23:47:54:55:05:a3:7f:6e:95: df:ae:7b:b0:4a:01:d5:93:62:01:94:83:3a:ad:4c: a1:a6:8c:d6:a1:c0:bd:d4:e4:d1:70:bd:a2:0f:95: 29:17:b6:d4:3c:02:06:7f:4d:a2:04:0b:10:1d:85: ae:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EF:F1:B3:58:4F:7F:D3:99:C7:95:35:8F:2E:5A:E6:74:10:7A:79 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:d2:5e:d2:03:00:07:85:f6:97:60:3e:ae:4d:7f:67:ab:cf: b7:3f:a7:bb:8b:30:fa:4c:aa:c3:58:f8:f6:bc:59:c3:e0:ec: fd:66:83:22:dd:ea:3e:b3:8c:1d:13:5c:01:14:ac:8b:8a:c3: 1e:8e:d5:95:1e:6f:db:d4:d4:f6:0e:7c:d8:53:a7:dd:a1:71: 07:89:32:52:60:0e:84:16:00:6b:f2:b9:93:96:2d:5e:71:a3: 19:69:ac:a9:ac:1a:88:c0:23:e6:1e:8a:4c:93:5c:fd:af:8a: f5:6c:c9:12:2a:62:1c:f4:c2:e5:98:94:57:0a:3a:29:7e:aa: b8:94:05:f5:6b:ba:96:0a:31:5d:e6:46:e5:d8:2f:ba:a6:43: 8f:ed:5b:e7:d7:35:47:12:6c:47:be:62:99:9e:36:3f:1c:a1: 0c:09:87:cb:26:f9:f0:29:72:be:16:18:73:1e:b4:23:e2:f5: a1:7c:c9:d2:f7:67:55:1b:40:97:3e:f3:37:98:a5:17:6c:b8: ba:d4:23:30:27:95:d0:a7:43:df:3f:da:be:8c:88:20:dd:1c: d4:bf:44:25:62:e3:c6:d9:e7:13:30:9c:d1:74:c2:45:1b:e7: fb:79:3c:36:86:44:cb:d4:99:7d:13:38:45:2b:41:26:70:2b: 79:5d:e4:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwNjMwMTkzNDQxWhcNMjUwNzA3MTkzNDQxWjAYMRYwFAYD VQQDEw02ODYyZTZkMS04NmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQcSiBYZpm8DZqtXa6X90yNZ3iVwi9vaISRzFco6/efOV4Y61Qn+msd12wSF b99ABqYP89i8IcnmVfbx3wqBbxLwPOv2e+0IJsinU6OGydyt+oyPFUkbqcVEYK3z V+uUsEpVQ2qxyCZCEB08OmIgYeitUP2S552itWEkrLoVJ8npNCSpUVs2z9B1sTYE AwjVfO+2EXNfw7mhJ5YA8TCdcnDHzWhmsjiuVI97gsNThoXNVwYNSZNVK1ZPF4mx uHqOZUu3NBiyUmsjR1RVBaN/bpXfrnuwSgHVk2IBlIM6rUyhpozWocC91OTRcL2i D5UpF7bUPAIGf02iBAsQHYWuJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/v8bNY T3/TmceVNY8uWuZ0EHp5MB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx0l7SAwAHhfaXYD6uTX9nq8+3P6e7izD6TKrDWPj2vFnD4Oz9ZoMi 3eo+s4wdE1wBFKyLisMejtWVHm/b1NT2DnzYU6fdoXEHiTJSYA6EFgBr8rmTli1e caMZaayprBqIwCPmHopMk1z9r4r1bMkSKmIc9MLlmJRXCjopfqq4lAX1a7qWCjFd 5kbl2C+6pkOP7Vvn1zVHEmxHvmKZnjY/HKEMCYfLJvnwKXK+FhhzHrQj4vWhfMnS 92dVG0CXPvM3mKUXbLi61CMwJ5XQp0PfP9q+jIgg3RzUv0QlYuPG2ecTMJzRdMJF G+f7eTw2hkTL1Jl9EzhFK0EmcCt5XeT+ -----END CERTIFICATE-----Generated at Wed Jul 2 19:26:20 2025 by rpki-client