$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: 6gJQfhYBFRr3/Ajjq5nDoLJ8qjf1rntCdDZ2ns89r/Q= Subject key identifier: 63:49:BA:6F:B8:50:E5:B3:25:D9:2A:F3:FF:B1:99:53:8F:21:AE:40 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 079A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 0795 Signing time: Wed 02 Jul 2025 21:38:14 +0000 Manifest this update: Wed 02 Jul 2025 21:38:14 +0000 Manifest next update: Wed 09 Jul 2025 21:38:14 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: iMFqqyk+XD/JrAmIZrpu6mkXbf5thDz9+uTi9BQdWtc=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1946 (0x79a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Jul 2 21:38:14 2025 GMT Not After : Jul 9 21:38:14 2025 GMT Subject: CN=6865a6c6-4138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f2:bc:2f:fe:3c:ae:79:af:ce:05:0f:dd:50: c0:56:e8:aa:dd:93:b1:ae:54:ec:af:ae:7c:a6:c6: 04:32:d0:a8:1b:03:ad:d2:57:30:02:eb:87:41:7d: 90:e0:78:07:90:40:32:8f:17:b3:dd:14:b9:45:54: 54:a2:2d:58:cd:01:3e:12:9d:48:c9:11:e6:bf:ce: bb:60:78:27:ba:fd:9d:0d:d9:bb:75:19:0e:ed:01: 82:72:e1:5b:9c:8b:48:b2:c3:36:40:f5:3e:20:02: e9:86:7d:c6:89:16:66:30:f3:f9:06:e8:be:df:bd: a4:12:b5:d0:4a:9d:5a:b2:9b:63:af:f8:93:fa:eb: cd:8f:d8:f6:98:db:24:2e:ae:70:75:13:66:8d:c2: f2:35:36:9e:41:be:24:d7:4a:ea:82:ab:3e:f0:09: 5b:1d:b6:73:03:e5:e7:9a:cf:9f:8d:e3:c1:da:15: ae:97:09:ca:80:fa:82:4a:29:33:21:38:1f:7b:64: 04:f0:fc:e8:e3:fb:e4:41:a0:87:c0:48:41:15:ab: ba:9f:89:8a:e0:46:eb:a7:6e:a1:7c:3d:88:2d:a6: 67:96:b8:86:1e:bc:ee:46:59:49:56:91:f1:c8:1d: fb:89:f6:49:30:66:90:61:b4:75:04:11:b0:3f:2d: ac:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:49:BA:6F:B8:50:E5:B3:25:D9:2A:F3:FF:B1:99:53:8F:21:AE:40 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:0e:52:9e:ec:7c:54:e6:d3:7c:e3:59:1f:4c:d9:af:c3:dd: 6d:3d:09:02:03:11:ae:8b:1a:0b:ab:8d:94:20:d7:42:99:70: 0a:63:c3:52:66:0f:86:b8:3a:93:ec:47:3c:74:7f:29:1e:45: 3d:3c:d7:95:5d:6f:ad:a3:47:ab:fb:7c:f4:e2:08:a6:5c:b2: 88:0f:aa:00:05:fb:02:2c:c7:47:fb:6c:fb:cc:48:16:d0:fa: 54:5d:5f:23:67:9c:a7:1d:8d:58:a5:3a:2b:61:34:ed:f5:27: e0:33:09:c3:6b:2a:32:e5:02:44:40:45:d2:7c:4f:d0:a4:ac: 13:95:3f:92:7c:8e:9c:d0:21:f7:60:82:16:4f:62:22:b9:34: cf:2c:12:09:89:f7:37:82:79:b9:eb:55:07:33:6b:d1:3b:1c: 4f:c6:6e:c7:d5:6f:87:a3:75:4b:a0:00:42:4c:e0:b5:24:d6: 9b:6a:39:88:6f:c9:15:c7:c0:cb:19:cd:cd:3b:56:7f:86:e9: e8:2e:6e:d0:40:30:9e:02:f1:a7:77:7c:c3:4b:31:10:f8:f2: 05:32:1e:93:85:3e:c2:55:e4:3c:94:cd:b3:ec:43:4e:9e:db: 0b:8b:a3:2a:96:73:19:94:eb:51:d2:77:ce:86:aa:7d:04:91: 44:db:5d:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjUwNzAyMjEzODE0WhcNMjUwNzA5MjEzODE0WjAYMRYwFAYD VQQDEw02ODY1YTZjNi00MTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvK8L/48rnmvzgUP3VDAVuiq3ZOxrlTsr658psYEMtCoGwOt0lcwAuuHQX2Q 4HgHkEAyjxez3RS5RVRUoi1YzQE+Ep1IyRHmv867YHgnuv2dDdm7dRkO7QGCcuFb nItIssM2QPU+IALphn3GiRZmMPP5Bui+372kErXQSp1asptjr/iT+uvNj9j2mNsk Lq5wdRNmjcLyNTaeQb4k10rqgqs+8AlbHbZzA+Xnms+fjePB2hWulwnKgPqCSikz ITgfe2QE8Pzo4/vkQaCHwEhBFau6n4mK4Ebrp26hfD2ILaZnlriGHrzuRllJVpHx yB37ifZJMGaQYbR1BBGwPy2sGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGNJum+4 UOWzJdkq8/+xmVOPIa5AMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpDlKe7HxU5tN841kfTNmvw91tPQkCAxGuixoLq42UINdCmXAKY8NS Zg+GuDqT7Ec8dH8pHkU9PNeVXW+to0er+3z04gimXLKID6oABfsCLMdH+2z7zEgW 0PpUXV8jZ5ynHY1YpTorYTTt9SfgMwnDayoy5QJEQEXSfE/QpKwTlT+SfI6c0CH3 YIIWT2IiuTTPLBIJifc3gnm561UHM2vROxxPxm7H1W+Ho3VLoABCTOC1JNabajmI b8kVx8DLGc3NO1Z/hunoLm7QQDCeAvGnd3zDSzEQ+PIFMh6ThT7CVeQ8lM2z7ENO ntsLi6MqlnMZlOtR0nfOhqp9BJFE213R -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:14 2025 by rpki-client