$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: HzlPSkoDlx5ii3xn8cwgAh76e2Z5sQizvCSLTSGUJNk= Subject key identifier: 5F:89:CF:05:C5:09:3C:AB:B8:1A:23:98:05:26:1A:FB:DE:4C:F4:CD Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 16 Signing time: Thu 03 Jul 2025 08:16:01 +0000 Manifest this update: Thu 03 Jul 2025 08:16:00 +0000 Manifest next update: Thu 10 Jul 2025 08:16:00 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: mrH1R9PwFLnh1In8RG8O9M9Ruf8UJ3UZJ9va+WvbL/c=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Jul 3 08:16:00 2025 GMT Not After : Jul 10 08:16:00 2025 GMT Subject: CN=68663c40-ff88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:56:b1:34:a0:2f:e2:90:ce:b7:a5:5b:fd: 94:1a:b9:7c:ca:8c:58:93:1f:c7:c3:cd:c3:c4:e1: dd:9e:50:46:9b:36:7e:1c:18:ef:f0:d5:77:2c:d5: e9:e2:a7:7f:a9:77:b4:cf:c3:61:b5:35:28:34:48: af:ba:a8:93:a0:d9:ae:38:9c:0f:98:69:11:21:76: 06:94:84:d5:00:1c:a5:87:fa:89:b3:cc:2d:39:02: d0:0d:3a:b7:c3:6a:c5:be:e5:9d:5c:16:56:92:42: 9e:89:67:0a:07:7b:93:e7:ae:70:61:7b:27:40:e6: 79:09:9e:e6:7a:bb:19:46:84:4a:7c:71:74:7a:68: ac:b7:b6:e0:24:ef:7a:09:b8:f7:24:22:e2:77:04: 77:18:53:a4:bc:e2:7c:13:1e:09:56:af:b0:2f:57: be:7a:10:81:a8:79:bd:db:2a:03:c0:b2:4d:82:95: 6b:fb:47:0b:a0:91:0c:ac:a5:b6:4b:21:43:c6:07: 3e:98:f3:5f:c7:95:8d:13:df:2f:ec:1f:43:95:57: 65:53:65:7d:84:0b:ad:d7:40:d9:f9:94:91:c1:54: 68:18:17:0e:1c:d1:c7:86:47:63:0a:ef:99:f2:3f: 50:b3:01:88:27:0e:f5:be:bc:0b:68:d6:bd:81:70: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:89:CF:05:C5:09:3C:AB:B8:1A:23:98:05:26:1A:FB:DE:4C:F4:CD X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:98:a0:90:31:7a:82:e6:10:4f:56:e8:7d:8a:54:c0:29:37: 4c:f7:93:8a:09:f6:41:c9:f7:d1:a5:71:33:06:fa:7f:ac:70: a4:3d:03:69:56:1c:e7:da:96:09:4b:38:30:18:a1:19:54:6a: 65:94:c1:ad:78:98:42:2c:dc:18:bd:5e:b0:2e:16:d8:c3:c3: e3:21:e1:8f:73:0b:a2:a1:f7:2d:5a:3c:bc:ec:18:23:b7:d4: 9f:03:01:de:3b:0e:f2:9f:d1:b2:bf:b4:68:2f:f3:0d:a4:ab: fc:18:70:c0:53:94:1c:65:4c:20:dd:80:d2:3b:93:c6:c4:8c: 73:09:68:0a:d8:56:b0:33:8f:0a:ba:01:93:66:a9:e0:56:52: 84:16:7d:71:bb:c1:65:93:5d:fe:de:60:3e:0c:8a:f2:ce:fe: f0:e4:b5:17:44:40:19:24:c0:0d:5c:75:15:4d:16:f4:e2:a0: 2a:80:5c:11:40:48:a1:75:b2:5e:4b:24:f7:a0:e8:4d:e0:a4: 18:49:9f:c2:68:c2:de:07:44:c0:11:7a:ce:39:36:2b:b6:fd: d9:07:b6:fe:be:a6:2c:c5:94:d6:61:ca:ce:95:4f:01:ce:4d: be:56:f4:34:9f:10:dc:a5:19:5a:d1:0f:42:32:a9:56:3b:88: c0:0e:7c:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTA3MDMwODE2MDBaFw0yNTA3MTAwODE2MDBaMBgxFjAUBgNV BAMTDTY4NjYzYzQwLWZmODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCrFaxNKAv4pDOt6Vb/ZQauXzKjFiTH8fDzcPE4d2eUEabNn4cGO/w1Xcs1eni p3+pd7TPw2G1NSg0SK+6qJOg2a44nA+YaREhdgaUhNUAHKWH+omzzC05AtANOrfD asW+5Z1cFlaSQp6JZwoHe5PnrnBheydA5nkJnuZ6uxlGhEp8cXR6aKy3tuAk73oJ uPckIuJ3BHcYU6S84nwTHglWr7AvV756EIGoeb3bKgPAsk2ClWv7RwugkQyspbZL IUPGBz6Y81/HlY0T3y/sH0OVV2VTZX2EC63XQNn5lJHBVGgYFw4c0ceGR2MK75ny P1CzAYgnDvW+vAto1r2BcHcJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX4nPBcUJ PKu4GiOYBSYa+95M9M0wHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAGYoJAxeoLmEE9W6H2KVMApN0z3k4oJ9kHJ99GlcTMG+n+scKQ9A2lW HOfalglLODAYoRlUamWUwa14mEIs3Bi9XrAuFtjDw+Mh4Y9zC6Kh9y1aPLzsGCO3 1J8DAd47DvKf0bK/tGgv8w2kq/wYcMBTlBxlTCDdgNI7k8bEjHMJaArYVrAzjwq6 AZNmqeBWUoQWfXG7wWWTXf7eYD4MivLO/vDktRdEQBkkwA1cdRVNFvTioCqAXBFA SKF1sl5LJPeg6E3gpBhJn8Jowt4HRMARes45Niu2/dkHtv6+pizFlNZhys6VTwHO Tb5W9DSfENylGVrRD0IyqVY7iMAOfE4= -----END CERTIFICATE-----Generated at Thu Jul 3 17:35:42 2025 by rpki-client