$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: sYY9IH/uCmLRn5J2WQ9Cxpi7poU6bx/5m69fVw4w4Do= Subject key identifier: F1:76:E6:73:89:12:31:63:7A:9A:B5:C9:5C:06:92:06:6D:FB:F2:F1 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: CE Signing time: Tue 01 Jul 2025 06:22:11 +0000 Manifest this update: Tue 01 Jul 2025 06:22:10 +0000 Manifest next update: Tue 08 Jul 2025 06:22:10 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: CajPHG5hBWnxhxNRPFcfwtMkj/FoZYd6AgAYmmt4sPE=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Jul 1 06:22:10 2025 GMT Not After : Jul 8 06:22:10 2025 GMT Subject: CN=68637e93-949e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:1a:64:c7:00:58:3f:ea:83:30:f1:41:93: 6c:ed:1d:59:b6:8a:f1:77:25:2a:49:6b:37:d1:b6: ea:46:33:24:fe:3e:dd:f0:6e:aa:58:5e:6e:b7:2c: 91:00:1f:8e:71:86:ce:7b:2b:f6:c8:bc:03:ec:d3: 7d:8a:96:58:4c:93:10:b2:0d:81:bf:31:31:bd:4d: b8:ce:18:b9:30:18:14:7c:58:13:d5:27:e8:03:23: 6f:b0:38:7f:78:50:f1:25:5e:4b:df:71:b8:02:86: 3b:4c:c6:ee:b1:27:35:a5:46:0c:d5:98:69:88:a8: ea:87:3b:a4:14:ff:3f:fb:9d:f3:5a:d0:d8:59:a4: 3f:56:28:e9:db:89:a3:22:d5:c1:3e:a4:fd:be:6f: 77:9b:7c:9f:f2:d6:c1:bf:b6:d4:0e:4e:5d:db:0f: 85:02:4d:cc:3c:de:52:e7:82:fc:f0:31:38:04:d1: 5e:03:e0:a9:df:17:4e:df:5f:ca:40:fe:6a:89:d8: 83:06:d9:c1:51:6b:d4:68:22:a5:5e:85:63:0f:22: df:4f:b3:a2:6c:0a:2b:0c:43:e1:3b:0f:49:2b:1b: 25:db:7e:c2:f5:65:af:59:e2:31:5a:01:39:e1:c8: 1c:4a:12:ef:5b:8e:75:0d:50:4c:49:b5:3b:d8:54: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:E6:73:89:12:31:63:7A:9A:B5:C9:5C:06:92:06:6D:FB:F2:F1 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:ad:cc:fc:cd:54:85:1d:d0:9e:38:72:a8:2a:02:bd:ce:17: a2:d1:9d:9d:79:e7:9a:d7:2c:49:13:ce:e4:a7:42:7f:ee:06: 0b:13:40:25:5a:5c:b0:b9:51:3e:c8:39:2c:95:c0:26:88:cc: 18:05:aa:8e:f5:7b:d4:36:e1:a3:c1:17:2b:ee:8d:17:4c:9b: 29:4a:e3:0c:f7:11:cd:30:72:18:85:a3:e1:cb:6d:38:e2:25: fc:a6:b5:b8:d2:f5:3b:a7:48:7b:d6:ff:dc:8c:3e:d7:c3:8f: 7e:8d:10:2f:51:e0:95:05:d1:4d:f2:35:16:ae:9b:bd:50:7b: 21:bf:70:ae:5a:4c:cd:31:32:54:d6:74:be:3c:34:bd:85:15: f0:34:6b:f3:16:4f:4a:3f:eb:ed:18:a6:96:4c:a0:0f:f2:f5: b3:88:f4:d4:2f:49:ef:7b:bb:db:30:77:ce:d5:99:db:8f:d4: 73:6d:dc:3d:70:af:ca:34:59:15:c3:18:cf:8b:ee:3f:2e:b2: d2:ae:13:63:62:62:aa:06:2e:3f:1f:a8:4d:00:99:e2:82:be: 62:e3:d4:9c:a4:f1:91:45:f9:f5:4d:1f:72:05:9d:07:e0:78: 1e:3b:31:84:51:4f:45:37:14:d9:b8:8c:75:1b:56:f3:0f:15: fc:99:30:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUwNzAxMDYyMjEwWhcNMjUwNzA4MDYyMjEwWjAYMRYwFAYD VQQDEw02ODYzN2U5My05NDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IgaZMcAWD/qgzDxQZNs7R1ZtorxdyUqSWs30bbqRjMk/j7d8G6qWF5utyyR AB+OcYbOeyv2yLwD7NN9ipZYTJMQsg2BvzExvU24zhi5MBgUfFgT1SfoAyNvsDh/ eFDxJV5L33G4AoY7TMbusSc1pUYM1ZhpiKjqhzukFP8/+53zWtDYWaQ/Vijp24mj ItXBPqT9vm93m3yf8tbBv7bUDk5d2w+FAk3MPN5S54L88DE4BNFeA+Cp3xdO31/K QP5qidiDBtnBUWvUaCKlXoVjDyLfT7OibAorDEPhOw9JKxsl237C9WWvWeIxWgE5 4cgcShLvW451DVBMSbU72FQAjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF25nOJ EjFjepq1yVwGkgZt+/LxMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABrcz8zVSFHdCeOHKoKgK9zhei0Z2deeea1yxJE87kp0J/7gYLE0Al WlywuVE+yDkslcAmiMwYBaqO9XvUNuGjwRcr7o0XTJspSuMM9xHNMHIYhaPhy204 4iX8prW40vU7p0h71v/cjD7Xw49+jRAvUeCVBdFN8jUWrpu9UHshv3CuWkzNMTJU 1nS+PDS9hRXwNGvzFk9KP+vtGKaWTKAP8vWziPTUL0nve7vbMHfO1Znbj9Rzbdw9 cK/KNFkVwxjPi+4/LrLSrhNjYmKqBi4/H6hNAJnigr5i49ScpPGRRfn1TR9yBZ0H 4HgeOzGEUU9FNxTZuIx1G1bzDxX8mTBm -----END CERTIFICATE-----Generated at Thu Jul 3 05:33:02 2025 by rpki-client