$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: oMWIA698Ee7A0GmpRYX/dkfZdU+xUQzMNVphINk791U= Subject key identifier: 91:6E:F5:65:CB:4B:21:69:03:2F:5D:6B:AF:64:01:C3:CD:7D:ED:13 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 76 Signing time: Thu 03 Jul 2025 07:01:42 +0000 Manifest this update: Thu 03 Jul 2025 07:01:41 +0000 Manifest next update: Thu 10 Jul 2025 07:01:41 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: YByhbDHOfp4uamVY6veU8Q7gkTmSNz9kqqevT3rddUE=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Jul 3 07:01:41 2025 GMT Not After : Jul 10 07:01:41 2025 GMT Subject: CN=68662ad6-fd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c6:9a:88:1b:c7:08:54:93:83:2b:39:35:46: 9f:a5:4d:ad:0c:71:bd:3d:ad:38:56:0c:1a:bf:5a: 83:15:5d:e2:90:c0:73:0b:30:f7:09:eb:36:ed:78: 75:78:b2:db:6e:52:4a:cf:0f:3d:43:f0:60:8e:c2: 62:cf:e1:5d:54:25:48:9e:c3:97:ba:8c:1a:43:fc: 14:5b:ac:30:e2:5a:80:86:71:c9:67:1f:fe:28:e5: 50:15:9a:f8:29:26:48:f1:fd:31:7f:8a:0e:1b:3e: 5a:43:e9:d8:97:ff:43:5e:c9:87:86:3a:55:f6:91: 4b:e4:52:90:bb:dd:4f:37:9d:70:58:7a:e2:48:72: aa:53:8b:4e:1c:fd:58:26:fb:40:2b:3b:11:e3:6d: 5f:0e:13:3f:79:f5:31:d7:98:07:e3:f2:7d:4f:ac: 64:49:aa:96:e5:86:43:45:e7:e1:2a:e3:f4:65:d3: 3e:1e:2d:f6:fc:52:f6:87:69:65:93:cc:be:09:36: ad:15:7b:3d:72:5b:b5:d2:16:23:a6:bb:54:a2:ec: 32:ea:af:06:ba:82:a7:1b:36:f3:33:b7:d8:af:bf: 3b:d8:7f:38:b4:b6:da:f8:46:f6:6f:ea:67:71:20: 7d:62:4a:61:d8:bf:35:de:19:2f:d5:e1:b6:8c:50: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6E:F5:65:CB:4B:21:69:03:2F:5D:6B:AF:64:01:C3:CD:7D:ED:13 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cf:62:57:3c:c5:9b:71:a5:c8:70:dc:46:ea:27:80:9c:e5: 7a:cb:63:bb:09:93:62:c5:85:f6:a3:eb:28:31:19:a5:17:83: 6b:19:d1:8f:a8:5c:c8:2f:08:72:0f:2d:d4:3a:fc:b1:00:c7: c2:b2:5d:2c:36:9b:e0:2b:5f:af:20:88:ea:c8:a4:17:17:bb: c8:53:45:94:86:d1:01:ac:8c:54:bb:01:23:f4:20:d5:a2:9c: 34:89:45:b0:f8:27:be:49:ae:58:75:c2:ec:7c:17:51:f8:c6: 23:29:d9:8d:e1:d4:f6:07:fa:4e:31:a2:97:fb:2c:fb:e6:21: a3:02:d0:f2:dd:d1:0b:a5:d1:da:cd:64:ea:d4:72:c1:13:61: 86:7a:e0:40:9e:1c:79:a0:c7:d6:47:01:57:4c:aa:7c:02:8f: c2:96:97:60:b3:8c:18:07:7c:d5:7c:36:70:0c:bf:84:87:50: 25:a3:8e:fe:05:41:a5:0c:d2:32:f6:70:ce:f3:4b:8e:ed:93: 3b:ef:d5:1f:fa:36:93:f6:67:73:3e:fb:d4:6a:cc:8c:81:07: 15:ea:03:3a:8f:d2:91:a5:85:41:d1:45:2a:dd:69:8f:98:72: a1:e9:53:9b:17:46:9c:2c:54:a4:48:91:f0:2e:90:d9:45:6a: ec:d2:22:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoREIzREZEODZDRUJGRUFFRDNBQUYxNURFQUVFNjk2NTIz NDc0NkEyOTAeFw0yNTA3MDMwNzAxNDFaFw0yNTA3MTAwNzAxNDFaMBgxFjAUBgNV BAMTDTY4NjYyYWQ2LWZkMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDmxpqIG8cIVJODKzk1Rp+lTa0Mcb09rThWDBq/WoMVXeKQwHMLMPcJ6zbteHV4 sttuUkrPDz1D8GCOwmLP4V1UJUiew5e6jBpD/BRbrDDiWoCGcclnH/4o5VAVmvgp Jkjx/TF/ig4bPlpD6diX/0NeyYeGOlX2kUvkUpC73U83nXBYeuJIcqpTi04c/Vgm +0ArOxHjbV8OEz959THXmAfj8n1PrGRJqpblhkNF5+Eq4/Rl0z4eLfb8UvaHaWWT zL4JNq0Vez1yW7XSFiOmu1Si7DLqrwa6gqcbNvMzt9ivvzvYfzi0ttr4RvZv6mdx IH1iSmHYvzXeGS/V4baMUGXxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkW71ZctL IWkDL11rr2QBw8197RMwHwYDVR0jBBgwFoAU2z39hs6/6u06rxXeruaWUjR0aikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwL0E3OEYxQjEyQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnozOWhzNl82dTA2cnhYZXJ1YVdValIwYWlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwL0E3OEYxQjEyQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUw NnJ4WGVydWFXVWpSMGFpay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbPYlc8xZtxpchw3EbqJ4Cc5XrLY7sJk2LFhfaj6ygxGaUXg2sZ0Y+o XMgvCHIPLdQ6/LEAx8KyXSw2m+ArX68giOrIpBcXu8hTRZSG0QGsjFS7ASP0INWi nDSJRbD4J75Jrlh1wux8F1H4xiMp2Y3h1PYH+k4xopf7LPvmIaMC0PLd0Qul0drN ZOrUcsETYYZ64ECeHHmgx9ZHAVdMqnwCj8KWl2CzjBgHfNV8NnAMv4SHUCWjjv4F QaUM0jL2cM7zS47tkzvv1R/6NpP2Z3M++9RqzIyBBxXqAzqP0pGlhUHRRSrdaY+Y cqHpU5sXRpwsVKRIkfAukNlFauzSItk= -----END CERTIFICATE-----Generated at Fri Jul 4 19:18:32 2025 by rpki-client