$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: +PT0NxDu36u4Y25cOIsMu1B+sBzrsrw7d3j70vaoguI= Subject key identifier: 0D:EB:83:DD:82:EA:0F:9B:BE:DD:45:4F:B0:95:E6:62:0B:06:0B:CC Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0948 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0940 Signing time: Mon 30 Jun 2025 20:24:35 +0000 Manifest this update: Mon 30 Jun 2025 20:24:34 +0000 Manifest next update: Mon 07 Jul 2025 20:24:34 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: gGTi0RJ91YvbbMKgiIIwIiqYC48NURo591NOGJTYGKk=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:24:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2376 (0x948) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Jun 30 20:24:34 2025 GMT Not After : Jul 7 20:24:34 2025 GMT Subject: CN=6862f282-50ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:22:20:dc:9e:5a:37:93:f5:8a:5a:0f:82:23: b7:c3:74:d5:e0:08:dd:22:90:c9:10:85:25:aa:3d: d3:5a:5b:da:8e:7e:7e:44:c7:d5:35:6f:26:19:2c: a9:3c:a0:ba:56:0e:02:91:ea:f8:b9:dd:74:6b:43: 3a:bb:c5:44:f5:28:e8:29:c4:4f:9d:f2:0d:56:c2: 2c:f5:6b:0a:bb:e0:15:e4:fe:a0:17:b0:64:30:2a: 70:d0:4f:d5:ef:cc:dc:f7:8c:23:19:b6:8d:85:30: 43:0c:c4:ab:2e:01:96:a9:e4:a5:19:26:27:d6:2f: 96:3d:33:7c:f6:bf:88:6b:6a:8f:6b:ab:36:92:99: 18:00:65:63:6d:77:37:b7:09:20:7d:98:44:4b:55: 32:58:95:cc:72:23:35:30:bb:a8:ce:51:f1:b7:ec: 50:d0:c5:87:19:7e:11:d9:2f:25:e8:19:82:9f:f4: 26:df:0b:78:86:fb:6f:e3:e0:9c:18:26:f3:2e:4c: ae:c1:7f:b8:b8:56:df:0a:e6:d7:45:e1:cf:6a:7b: 88:95:4f:92:d6:07:b1:06:7f:b1:9c:0c:0f:61:da: ae:a6:aa:7b:18:ff:12:5c:dc:e7:02:59:35:61:4d: 4f:b5:12:4f:08:d1:a8:ce:9b:ec:17:69:0b:c0:69: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EB:83:DD:82:EA:0F:9B:BE:DD:45:4F:B0:95:E6:62:0B:06:0B:CC X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:3f:ae:64:0f:1f:11:de:d5:50:e7:ba:87:88:15:bf:93:a8: 83:8c:29:73:a9:40:63:44:4f:54:a8:73:db:fb:0a:67:fa:76: f2:47:98:ba:46:a9:ec:20:c6:66:7e:9a:ea:61:d4:46:5f:c3: 09:b6:1e:83:69:61:d6:16:2e:d7:49:70:00:75:93:54:20:b8: d2:b4:37:7c:50:6f:36:da:6d:25:18:b0:7e:b5:09:ee:59:5d: 6a:c9:92:54:4c:52:ea:48:f8:0f:59:4e:7e:8e:00:3a:49:1a: 4f:5f:81:c1:df:b2:5c:1a:9f:65:e3:7e:65:24:6c:d2:66:1d: c8:1f:bb:f4:0f:ba:6b:0f:e7:ea:87:61:ce:03:c1:65:ee:fe: 22:5e:02:b4:b1:9f:d1:73:9c:87:7d:5d:6a:a2:e3:95:52:0b: b1:42:23:03:80:be:da:38:3f:15:1e:ae:e2:3e:ff:61:2e:37: 4e:b9:7e:d3:5c:c3:ce:0f:f6:4c:01:85:08:45:9f:c7:f9:4f: 01:6d:74:5a:0e:ce:0f:65:94:fd:ea:6c:d8:97:9b:35:d6:cc: 3a:8c:50:d8:97:85:5e:8f:de:5c:85:fe:47:22:dc:09:4f:64: 1a:b6:11:df:5f:38:89:a7:7d:23:7b:e9:8c:29:af:0b:4f:c3: 61:b6:e8:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUwNjMwMjAyNDM0WhcNMjUwNzA3MjAyNDM0WjAYMRYwFAYD VQQDEw02ODYyZjI4Mi01MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yIg3J5aN5P1iloPgiO3w3TV4AjdIpDJEIUlqj3TWlvajn5+RMfVNW8mGSyp PKC6Vg4Cker4ud10a0M6u8VE9SjoKcRPnfINVsIs9WsKu+AV5P6gF7BkMCpw0E/V 78zc94wjGbaNhTBDDMSrLgGWqeSlGSYn1i+WPTN89r+Ia2qPa6s2kpkYAGVjbXc3 twkgfZhES1UyWJXMciM1MLuozlHxt+xQ0MWHGX4R2S8l6BmCn/Qm3wt4hvtv4+Cc GCbzLkyuwX+4uFbfCubXReHPanuIlU+S1gexBn+xnAwPYdqupqp7GP8SXNznAlk1 YU1PtRJPCNGozpvsF2kLwGnRGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3rg92C 6g+bvt1FT7CV5mILBgvMMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWP65kDx8R3tVQ57qHiBW/k6iDjClzqUBjRE9UqHPb+wpn+nbyR5i6 RqnsIMZmfprqYdRGX8MJth6DaWHWFi7XSXAAdZNUILjStDd8UG822m0lGLB+tQnu WV1qyZJUTFLqSPgPWU5+jgA6SRpPX4HB37JcGp9l435lJGzSZh3IH7v0D7prD+fq h2HOA8Fl7v4iXgK0sZ/Rc5yHfV1qouOVUguxQiMDgL7aOD8VHq7iPv9hLjdOuX7T XMPOD/ZMAYUIRZ/H+U8BbXRaDs4PZZT96mzYl5s11sw6jFDYl4Vej95chf5HItwJ T2QathHfXziJp30je+mMKa8LT8Nhtugx -----END CERTIFICATE-----Generated at Wed Jul 2 20:51:28 2025 by rpki-client