$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: MQWQxaLwC5ZObIDVzRzbWzXgrvLFQDi1cHReHzkRAjk= Subject key identifier: 84:EE:5A:3A:14:B8:7D:4E:C6:7C:B8:B0:46:16:A8:9C:26:6A:EE:1A Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 0782 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 077D Signing time: Wed 14 May 2025 21:30:57 +0000 Manifest this update: Wed 14 May 2025 21:30:56 +0000 Manifest next update: Wed 21 May 2025 21:30:56 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: BmfqWjvdhAZidQ25CWlWIJlJlJTFX1z+99AW0O18gIY=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 21:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1922 (0x782) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: May 14 21:30:56 2025 GMT Not After : May 21 21:30:56 2025 GMT Subject: CN=68250b90-8cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:6d:e9:06:8e:b6:ff:94:92:fc:5d:26:56: e4:43:3f:de:2e:ad:70:ed:5d:2c:22:57:b3:e9:17: a8:5e:26:e4:cf:88:bc:a9:f5:82:4b:c7:6d:7c:c6: 50:a4:fe:d0:81:6a:cd:19:56:1f:2d:86:fe:76:19: ee:f9:c2:43:90:bd:2b:31:b8:ac:b7:e3:b1:72:6a: 56:f1:15:a9:87:a9:cd:0f:f4:9d:b6:de:a0:47:ff: 6c:ac:c3:67:16:26:23:ba:e2:26:c0:3a:d1:6d:d4: ae:c0:1a:73:dc:74:10:85:c9:b8:a8:1a:d1:79:ef: 8a:f3:ef:66:45:70:23:61:3c:5d:10:37:cd:70:1e: f5:4e:b7:a6:ec:72:1b:8d:3f:cd:08:f5:c8:5b:2b: d6:1a:b3:30:bc:1b:29:01:3f:37:bc:b2:13:91:b7: 1d:88:3b:27:bd:a2:96:6a:b5:25:15:19:44:99:fc: 27:dc:e2:b6:0d:8f:fc:e8:52:a4:80:3a:5c:6b:76: 3d:2d:ce:ca:fe:0f:8b:f9:9b:d3:7f:63:00:01:56: ac:f4:df:61:ef:41:3e:5d:c6:cd:70:8f:07:5f:c9: ea:49:88:5f:31:77:f4:ce:fb:6e:f5:d5:a5:13:3b: a7:bb:e4:83:83:8f:b4:86:c5:b3:09:d8:c1:69:9b: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EE:5A:3A:14:B8:7D:4E:C6:7C:B8:B0:46:16:A8:9C:26:6A:EE:1A X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:62:7c:d5:5e:93:e5:ce:6c:d5:1a:f3:e4:6c:41:09:4f:25: 17:df:d0:9a:c6:d4:ca:aa:65:58:70:2c:1a:b3:c4:86:3f:cc: 08:f3:62:dd:46:24:64:93:6f:ba:a4:d1:22:35:80:db:96:42: 4b:3d:be:d9:c2:70:3f:94:2f:7e:07:b9:1f:7c:b4:c8:05:51: a7:70:8d:95:b6:fe:68:87:9d:4d:70:7c:55:21:43:20:1d:e2: 9b:92:ad:98:ca:93:3a:67:ed:43:8c:98:02:ae:a3:64:61:ae: a0:d2:43:fc:e8:19:99:42:30:49:48:96:ae:38:a8:1a:cd:eb: 81:d2:76:90:55:13:df:72:e7:10:0b:c9:30:57:50:30:50:16: 1a:81:9e:4a:29:b5:24:ee:39:2e:12:82:ac:1c:0b:81:dc:38: fa:65:8c:66:bd:cd:cf:71:a0:6d:ed:e9:a3:bc:b7:82:b2:c8: 78:cd:c4:78:13:c9:ae:a8:ec:84:b8:19:81:69:8b:18:8c:28: 43:33:0c:4b:1b:6d:75:13:93:9f:fd:96:29:ed:e9:83:e2:62: ec:7a:41:6d:47:13:ec:0e:75:c0:28:85:f9:bb:68:dd:f2:c8: b9:35:02:75:fa:02:da:90:8d:54:e5:df:0c:1d:ce:9d:28:96: 63:fe:3a:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjUwNTE0MjEzMDU2WhcNMjUwNTIxMjEzMDU2WjAYMRYwFAYD VQQDEw02ODI1MGI5MC04Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRJt6QaOtv+UkvxdJlbkQz/eLq1w7V0sIlez6ReoXibkz4i8qfWCS8dtfMZQ pP7QgWrNGVYfLYb+dhnu+cJDkL0rMbist+OxcmpW8RWph6nND/Sdtt6gR/9srMNn FiYjuuImwDrRbdSuwBpz3HQQhcm4qBrRee+K8+9mRXAjYTxdEDfNcB71Trem7HIb jT/NCPXIWyvWGrMwvBspAT83vLITkbcdiDsnvaKWarUlFRlEmfwn3OK2DY/86FKk gDpca3Y9Lc7K/g+L+ZvTf2MAAVas9N9h70E+XcbNcI8HX8nqSYhfMXf0zvtu9dWl Ezunu+SDg4+0hsWzCdjBaZtlFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITuWjoU uH1Oxny4sEYWqJwmau4aMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbYnzVXpPlzmzVGvPkbEEJTyUX39CaxtTKqmVYcCwas8SGP8wI82Ld RiRkk2+6pNEiNYDblkJLPb7ZwnA/lC9+B7kffLTIBVGncI2Vtv5oh51NcHxVIUMg HeKbkq2YypM6Z+1DjJgCrqNkYa6g0kP86BmZQjBJSJauOKgazeuB0naQVRPfcucQ C8kwV1AwUBYagZ5KKbUk7jkuEoKsHAuB3Dj6ZYxmvc3PcaBt7emjvLeCssh4zcR4 E8muqOyEuBmBaYsYjChDMwxLG211E5Of/ZYp7emD4mLsekFtRxPsDnXAKIX5u2jd 8si5NQJ1+gLakI1U5d8MHc6dKJZj/jqE -----END CERTIFICATE-----Generated at Fri May 16 06:10:49 2025 by rpki-client