$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: vJPqvKUW254e0g11menIGQP7HZjPyJ9GMKfA9OKp3Lk= Subject key identifier: 08:9E:83:DD:83:40:83:A9:B1:9B:D5:04:16:E1:7B:1E:DC:37:BC:D9 Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 0494 Signing time: Thu 03 Jul 2025 00:19:55 +0000 Manifest this update: Thu 03 Jul 2025 00:19:55 +0000 Manifest next update: Thu 10 Jul 2025 00:19:55 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: mMCGJDcb6owzK6fxJvuSjJkJNPu4QB1HTOBBLZrX+2M=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: oCq0GS/e8jzWI+qfCm+Q9EBQNv1mP52MN9gsJPInZfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: Jul 3 00:19:55 2025 GMT Not After : Jul 10 00:19:55 2025 GMT Subject: CN=6865ccab-f4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:48:c6:3f:8c:7a:0f:d5:09:79:ba:ae:dd: 27:87:25:bb:e8:68:4e:86:41:92:eb:03:0a:27:c0: 7a:37:55:fc:4d:84:c7:b1:f6:42:e9:44:fa:3f:0d: 61:11:9e:5e:82:f3:84:8c:7b:a6:cc:b4:ef:b0:7b: e6:2f:37:73:82:5c:75:fd:01:d3:85:df:bc:05:b8: b1:cd:11:ee:d6:de:c1:c8:ee:17:7c:b9:70:54:89: 64:02:6e:d7:e7:73:00:0f:cf:be:11:90:a1:af:d3: 07:4e:0a:f8:41:b6:15:3b:7c:c0:3f:dd:9d:8f:6b: 2d:62:b1:14:7d:4d:5c:d2:e9:f4:a5:13:31:68:ef: de:0f:fa:28:8f:0d:8f:89:5d:eb:20:df:bf:41:9e: 58:b7:0e:9c:e6:4a:3f:db:00:97:20:c3:3d:f9:c8: 9a:af:00:85:19:dc:c2:c3:03:8d:4e:22:0e:d0:9a: 51:96:d5:95:2f:b7:62:26:23:98:f6:bb:f1:ef:4e: 61:c8:ae:fe:e4:74:d8:55:48:d1:e9:db:e1:17:dc: d4:c7:e8:d7:a9:3e:83:b2:67:cd:98:33:ad:88:de: 75:e2:5c:52:60:55:df:fa:10:29:15:a1:b5:07:a1: 5b:02:e1:51:9a:38:79:a6:11:dc:b2:61:5c:e1:4c: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9E:83:DD:83:40:83:A9:B1:9B:D5:04:16:E1:7B:1E:DC:37:BC:D9 X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:35:44:10:f3:d8:74:37:81:0b:e7:e9:04:50:09:22:73:55: 6f:2f:96:3c:31:39:9e:c6:60:92:86:39:90:0c:07:07:61:ee: 25:58:68:83:2c:3c:bb:83:50:d6:a8:e5:22:d4:c0:6e:c4:86: c8:45:a6:9b:1c:14:38:60:46:d5:7d:50:36:15:f7:08:95:11: 62:3d:ce:e5:e9:12:7e:53:cd:5a:28:57:c2:63:6a:d7:b8:21: 80:c4:fd:72:2f:b4:7f:bd:aa:5f:d5:4e:59:58:9f:15:db:51: 0b:7c:35:03:78:5c:8e:d8:a0:44:32:ab:69:04:5b:ab:eb:7e: 73:54:01:4f:82:fd:be:39:2f:f5:12:53:64:e4:77:4a:84:33: da:24:85:ad:41:d0:2d:35:15:9e:8e:c3:8b:d5:6f:25:a2:6a: 84:a1:57:24:f2:c0:6b:ff:08:c6:d7:47:fd:7e:80:16:08:11: a3:d4:7a:24:e1:67:16:87:d2:38:75:3a:4b:89:5f:f7:50:55: 02:a2:4c:9d:93:57:a3:ac:9d:99:b2:72:79:90:ac:9d:ca:9b: 15:be:1c:c9:1f:82:be:6c:9d:e0:19:e7:75:0c:f7:fe:ad:2a: 0a:a0:e6:f5:79:f1:f7:85:13:8f:ef:c9:d3:5e:04:78:10:83: b3:75:65:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjUwNzAzMDAxOTU1WhcNMjUwNzEwMDAxOTU1WjAYMRYwFAYD VQQDEw02ODY1Y2NhYi1mNGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2G5Ixj+Meg/VCXm6rt0nhyW76GhOhkGS6wMKJ8B6N1X8TYTHsfZC6UT6Pw1h EZ5egvOEjHumzLTvsHvmLzdzglx1/QHThd+8BbixzRHu1t7ByO4XfLlwVIlkAm7X 53MAD8++EZChr9MHTgr4QbYVO3zAP92dj2stYrEUfU1c0un0pRMxaO/eD/oojw2P iV3rIN+/QZ5Ytw6c5ko/2wCXIMM9+ciarwCFGdzCwwONTiIO0JpRltWVL7diJiOY 9rvx705hyK7+5HTYVUjR6dvhF9zUx+jXqT6DsmfNmDOtiN514lxSYFXf+hApFaG1 B6FbAuFRmjh5phHcsmFc4Ux19QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAieg92D QIOpsZvVBBbhex7cN7zZMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/NUQQ89h0N4EL5+kEUAkic1VvL5Y8MTmexmCShjmQDAcHYe4lWGiD LDy7g1DWqOUi1MBuxIbIRaabHBQ4YEbVfVA2FfcIlRFiPc7l6RJ+U81aKFfCY2rX uCGAxP1yL7R/vapf1U5ZWJ8V21ELfDUDeFyO2KBEMqtpBFur635zVAFPgv2+OS/1 ElNk5HdKhDPaJIWtQdAtNRWejsOL1W8lomqEoVck8sBr/wjG10f9foAWCBGj1Hok 4WcWh9I4dTpLiV/3UFUCokydk1ejrJ2ZsnJ5kKydypsVvhzJH4K+bJ3gGed1DPf+ rSoKoOb1efH3hROP78nTXgR4EIOzdWVO -----END CERTIFICATE-----Generated at Fri Jul 4 17:28:56 2025 by rpki-client