$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft File: 2UW2DwCc3xVcQp1Aha62z-BrzgA.mft (raw, json) Hash identifier: pf8fJ4ZKpXHYofJDMr7i2+Zga4ZdYjrXfXv9m+S60SQ= Subject key identifier: DA:36:17:31:0D:9D:18:91:33:BF:22:78:8A:D9:01:DC:5F:C4:FD:65 Authority key identifier: D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 Certificate issuer: /CN=A9149CEF/serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft Manifest number: 04C7 Signing time: Thu 03 Jul 2025 00:09:22 +0000 Manifest this update: Thu 03 Jul 2025 00:09:21 +0000 Manifest next update: Thu 10 Jul 2025 00:09:21 +0000 Files and hashes: 1: 2UW2DwCc3xVcQp1Aha62z-BrzgA.crl (hash: RjOusoQCRs3sYSCSrrdUEvSZ9o7dMVWw5TxyghJ5kD4=) 2: AFAC764C2C1711EC817C5912C4F9AE02.roa (hash: Pxv8dePi1EpNPNL4ZdJ0nYxVU1Z8dZuP+ncTQy+eHOw=) 3: AF22E83C2C1711EC817C5912C4F9AE02.roa (hash: Qsapn7T7BSoVN2a752N9muKYuA54q3bOkNtfwyaphBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CEF, serialNumber=D945B60F009CDF155C429D4085AEB6CFE06BCE00 Validity Not Before: Jul 3 00:09:21 2025 GMT Not After : Jul 10 00:09:21 2025 GMT Subject: CN=6865ca31-1100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:f0:6a:46:85:8a:88:53:19:fd:9f:29:96: 1d:ea:62:c3:fe:d5:dd:be:bd:24:43:04:37:ca:b5: 1c:37:56:55:44:41:60:00:c0:ab:74:7b:eb:23:0d: f9:42:aa:e0:ec:f0:7e:d5:82:1c:fa:4e:c4:85:5a: 74:48:bb:ba:2d:ed:46:a7:c5:62:51:a7:0c:9a:b9: 97:68:2b:2b:11:54:e9:93:80:f4:d3:d1:a7:c2:e3: 83:f2:61:95:1b:a9:a4:b2:a4:4a:c0:ca:18:49:2c: f8:bb:44:76:06:b4:17:58:62:b6:d0:2b:7b:79:a1: 1d:ac:fa:bc:ff:f2:f7:d2:28:93:10:10:d7:83:c3: 37:79:9f:23:74:4f:a4:ef:1a:0d:02:f8:14:c3:46: e1:3b:8d:8b:bf:d9:00:db:e8:14:ff:98:b9:4a:42: dd:f1:01:af:a1:73:61:38:36:5b:b0:90:85:47:4c: d1:bb:83:03:2c:29:dd:27:ac:42:97:36:bd:d0:c8: c7:e5:fa:7f:7d:25:87:10:2f:30:02:0b:97:0c:b8: 17:be:ef:9d:ce:d5:3e:f1:9f:67:c2:a8:c2:23:ac: e8:42:f6:24:34:ca:30:70:43:1a:ff:51:7a:2d:36: da:5c:59:93:6f:72:3f:43:36:49:b8:d5:23:83:87: 29:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:36:17:31:0D:9D:18:91:33:BF:22:78:8A:D9:01:DC:5F:C4:FD:65 X509v3 Authority Key Identifier: keyid:D9:45:B6:0F:00:9C:DF:15:5C:42:9D:40:85:AE:B6:CF:E0:6B:CE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2UW2DwCc3xVcQp1Aha62z-BrzgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CEF/C4019D242C1311ECB4580842C4F9AE02/2UW2DwCc3xVcQp1Aha62z-BrzgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e9:56:df:d5:34:f9:68:d0:dd:19:b9:e5:77:b0:00:5c:47: ad:89:d1:b8:04:31:03:44:e1:6b:e6:fc:c1:17:dd:58:3e:10: 16:09:13:26:49:1a:0d:0d:07:8c:d6:69:be:26:d2:6f:09:95: a1:ee:f5:38:8e:4d:a3:40:af:f6:16:22:a2:b1:89:b6:f1:db: 93:05:44:bd:84:a0:58:3d:d9:bd:cf:6b:b3:7c:56:c8:2f:77: 66:b5:ed:1f:c7:a7:05:92:ca:90:fd:de:1b:9a:66:6e:f1:1c: 1c:05:60:fc:c3:a6:75:33:80:79:c7:b3:6d:9b:b2:2f:6b:6a: cd:39:bd:1d:df:a8:b8:d0:19:43:b2:c7:9f:16:d7:8d:81:c4: be:1f:cf:3a:4e:2d:0c:9a:ff:d7:38:82:b6:0e:9f:c6:c4:54: 25:97:61:e0:c7:d2:c5:d1:f6:e7:9e:7a:07:fa:e7:5d:08:30: 4a:1a:4b:47:58:42:b5:91:10:0b:e5:4e:89:60:be:07:d3:8d: 9c:45:38:73:ae:bd:d5:cc:5b:0e:bf:c0:b5:31:e2:24:5d:ce: 99:aa:88:78:44:b5:27:ff:9e:7b:12:78:94:32:e9:b1:d8:95: 26:45:be:ac:17:21:5b:d5:85:ec:b1:d5:2e:ee:c8:90:82:7e: 4f:26:02:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDRUYxMTAvBgNVBAUTKEQ5NDVCNjBGMDA5Q0RGMTU1QzQyOUQ0MDg1QUVCNkNG RTA2QkNFMDAwHhcNMjUwNzAzMDAwOTIxWhcNMjUwNzEwMDAwOTIxWjAYMRYwFAYD VQQDEw02ODY1Y2EzMS0xMTAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0q3wakaFiohTGf2fKZYd6mLD/tXdvr0kQwQ3yrUcN1ZVREFgAMCrdHvrIw35 Qqrg7PB+1YIc+k7EhVp0SLu6Le1Gp8ViUacMmrmXaCsrEVTpk4D009GnwuOD8mGV G6mksqRKwMoYSSz4u0R2BrQXWGK20Ct7eaEdrPq8//L30iiTEBDXg8M3eZ8jdE+k 7xoNAvgUw0bhO42Lv9kA2+gU/5i5SkLd8QGvoXNhODZbsJCFR0zRu4MDLCndJ6xC lza90MjH5fp/fSWHEC8wAguXDLgXvu+dztU+8Z9nwqjCI6zoQvYkNMowcEMa/1F6 LTbaXFmTb3I/QzZJuNUjg4cpSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNo2FzEN nRiRM78ieIrZAdxfxP1lMB8GA1UdIwQYMBaAFNlFtg8AnN8VXEKdQIWuts/ga84A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNFRi9DNDAxOUQyNDJD MTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4VmNRcDFBaGE2MnotQnJ6 Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJVVzJEd0NjM3hWY1FwMUFoYTYyei1CcnpnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNFRi9DNDAxOUQyNDJDMTMxMUVDQjQ1ODA4NDJDNEY5QUUwMi8yVVcyRHdDYzN4 VmNRcDFBaGE2MnotQnJ6Z0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy6Vbf1TT5aNDdGbnld7AAXEetidG4BDEDROFr5vzBF91YPhAWCRMm SRoNDQeM1mm+JtJvCZWh7vU4jk2jQK/2FiKisYm28duTBUS9hKBYPdm9z2uzfFbI L3dmte0fx6cFksqQ/d4bmmZu8RwcBWD8w6Z1M4B5x7Ntm7Iva2rNOb0d36i40BlD ssefFteNgcS+H886Ti0Mmv/XOIK2Dp/GxFQll2Hgx9LF0fbnnnoH+uddCDBKGktH WEK1kRAL5U6JYL4H042cRThzrr3VzFsOv8C1MeIkXc6Zqoh4RLUn/557EniUMumx 2JUmRb6sFyFb1YXssdUu7siQgn5PJgJV -----END CERTIFICATE-----Generated at Fri Jul 4 03:20:49 2025 by rpki-client