$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: a7PTv9RSZ7dpdqybKu6n6ep2aZ0fMBKbxLSmttkeC+w= Subject key identifier: 2A:6D:7B:C7:18:1D:F5:61:EC:13:1D:69:A5:24:05:B2:43:3C:BD:CB Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: DE Signing time: Tue 01 Jul 2025 06:07:37 +0000 Manifest this update: Tue 01 Jul 2025 06:07:37 +0000 Manifest next update: Tue 08 Jul 2025 06:07:37 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: flunvDcrUlK2hG8B5cv9M6si4bGm3zx351JnAuJDBFE=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Jul 1 06:07:37 2025 GMT Not After : Jul 8 06:07:37 2025 GMT Subject: CN=68637b29-8078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9b:e0:dd:fc:45:f1:8c:27:bc:de:80:a3:9b: 9b:fe:da:6d:3c:ff:94:77:45:d0:43:ea:fc:01:5d: 43:e3:a4:d3:70:95:98:bc:da:62:09:c9:f5:8c:90: 0b:3f:85:0a:3a:83:40:2b:d8:2f:e4:76:6b:75:f0: f3:c0:bf:58:38:9e:49:8e:0d:60:6f:42:fe:c1:c9: d3:8f:a6:a9:f9:e9:4f:64:6e:ee:2b:c1:1b:95:49: 02:e6:e7:2c:ba:5a:ae:f5:f3:6e:5b:20:c4:bd:d4: bc:cf:72:19:fd:76:87:05:c7:fe:8f:de:b7:97:1c: d0:54:80:55:b0:b8:4b:6f:42:5b:3d:63:aa:be:d3: 7a:a1:3d:16:32:7c:43:ea:17:9b:74:fe:41:cb:56: c0:87:37:8a:35:81:21:6f:c4:50:f6:07:5f:71:0c: 78:24:21:de:1d:5e:df:0e:1b:95:ba:b5:53:2e:4f: bb:1c:32:fe:75:7e:45:a7:73:64:c4:df:b7:49:e0: 6b:c9:5f:df:8f:75:b6:fd:d4:43:45:21:f6:bd:e6: 43:a1:04:c4:c8:c6:35:8b:23:82:47:ec:1a:81:ea: 58:5e:8b:26:bf:dd:ae:8f:c4:a3:2e:10:2b:a7:bd: 0c:75:34:5f:f7:2e:f4:b2:92:da:b6:89:b0:c4:79: 9b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6D:7B:C7:18:1D:F5:61:EC:13:1D:69:A5:24:05:B2:43:3C:BD:CB X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:df:f4:24:d6:25:0c:26:42:36:82:04:dd:57:05:60:6a:c0: 62:80:73:34:29:22:a7:1c:b7:1e:ea:ad:06:24:b3:85:56:6d: 96:d2:0c:6b:30:2c:be:a6:f8:6d:83:93:c1:e5:b6:b7:72:3f: 45:41:3d:77:31:63:2d:ff:b1:05:3b:57:d5:f5:59:e0:67:b1: 3c:01:35:c6:c8:c4:d0:c3:a1:45:ca:2c:04:40:80:4d:27:b7: 54:3b:1d:89:f7:f9:e3:f0:0e:88:cb:43:36:10:74:de:0b:27: 61:5c:c3:c3:8b:cf:7a:90:47:3b:72:82:0e:e6:5a:a1:92:2a: d9:ef:dd:c0:29:48:7d:76:b1:ce:94:5d:7c:c1:39:9f:6d:2f: a4:ae:ba:0c:99:ac:e0:6a:61:21:57:aa:bc:bb:83:c3:18:40: 7e:7e:1e:88:22:57:ee:4b:c0:04:e3:ee:46:e0:3d:d9:c6:35: 9e:f5:74:a7:ad:e9:8d:bd:45:0f:51:73:8f:6d:25:56:fe:f3: 15:71:e1:48:2e:8d:54:b2:7d:ac:d9:1f:7b:57:78:4c:63:86: a1:ff:36:fd:6b:c7:cc:47:ee:cd:32:31:b9:8b:67:6d:f7:70: ac:57:a4:96:28:ee:ce:f2:5d:81:9f:65:22:97:c5:fa:61:1e: fb:f9:f2:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwNzAxMDYwNzM3WhcNMjUwNzA4MDYwNzM3WjAYMRYwFAYD VQQDEw02ODYzN2IyOS04MDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZvg3fxF8YwnvN6Ao5ub/tptPP+Ud0XQQ+r8AV1D46TTcJWYvNpiCcn1jJAL P4UKOoNAK9gv5HZrdfDzwL9YOJ5Jjg1gb0L+wcnTj6ap+elPZG7uK8EblUkC5ucs ulqu9fNuWyDEvdS8z3IZ/XaHBcf+j963lxzQVIBVsLhLb0JbPWOqvtN6oT0WMnxD 6hebdP5By1bAhzeKNYEhb8RQ9gdfcQx4JCHeHV7fDhuVurVTLk+7HDL+dX5Fp3Nk xN+3SeBryV/fj3W2/dRDRSH2veZDoQTEyMY1iyOCR+wagepYXosmv92uj8SjLhAr p70MdTRf9y70spLatomwxHmbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpte8cY HfVh7BMdaaUkBbJDPL3LMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA23/Qk1iUMJkI2ggTdVwVgasBigHM0KSKnHLce6q0GJLOFVm2W0gxr MCy+pvhtg5PB5ba3cj9FQT13MWMt/7EFO1fV9VngZ7E8ATXGyMTQw6FFyiwEQIBN J7dUOx2J9/nj8A6Iy0M2EHTeCydhXMPDi896kEc7coIO5lqhkirZ793AKUh9drHO lF18wTmfbS+krroMmazgamEhV6q8u4PDGEB+fh6IIlfuS8AE4+5G4D3ZxjWe9XSn remNvUUPUXOPbSVW/vMVceFILo1Usn2s2R97V3hMY4ah/zb9a8fMR+7NMjG5i2dt 93CsV6SWKO7O8l2Bn2Uil8X6YR77+fL1 -----END CERTIFICATE-----Generated at Wed Jul 2 14:54:41 2025 by rpki-client