$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft File: 2kcELjdqlHP8Dt_IRFc53RMorg4.mft (raw, json) Hash identifier: KzvAqt3QcMzPEkhasqGiBFzOSzM9YGIG6F3cT5/QzDw= Subject key identifier: D0:52:BD:C0:A7:90:E6:6E:9F:F8:BF:5F:57:8B:B6:D6:75:9A:CB:76 Authority key identifier: DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E Certificate issuer: /CN=A9191DF4/serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Certificate serial: 0E19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft Manifest number: 0E00 Signing time: Sat 28 Jun 2025 17:39:46 +0000 Manifest this update: Sat 28 Jun 2025 17:39:45 +0000 Manifest next update: Sat 05 Jul 2025 17:39:45 +0000 Files and hashes: 1: 2kcELjdqlHP8Dt_IRFc53RMorg4.crl (hash: bt5JtBzRuMueIUqdaBXewbpumAI0Ta0tC1jwVFatBDY=) 2: B5D4A156598B11EC82C8685CC4F9AE02.roa (hash: 4QYUWAD8mV7goqY2eyB8OTjIn05Ok4IHRMJOhxEL9Q0=) 3: B922DB22E84211EA918B8F09C4F9AE02.roa (hash: WrORF911HLcFuZdH0HRCb0Ilepojo6I2DwL+ZjMpcO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 17:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3609 (0xe19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DF4, serialNumber=DA47042E376A9473FC0EDFC8445739DD1328AE0E Validity Not Before: Jun 28 17:39:45 2025 GMT Not After : Jul 5 17:39:45 2025 GMT Subject: CN=686028e1-4995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1d:59:ac:da:d1:75:2c:3c:cc:ff:e9:1d:40: 02:1a:e6:22:c9:b6:25:3e:92:c5:ea:cb:e7:51:1a: ba:e6:9d:a2:9e:24:5e:72:3c:3c:49:db:dd:45:d1: 2e:f0:2e:f2:8c:1b:ef:ac:98:7a:14:32:bc:40:74: f5:bd:54:11:6e:f5:ce:ea:6b:36:7b:a4:a7:8c:b4: 8a:e6:23:25:3b:b0:24:b0:5f:fe:06:f7:44:70:f8: 8b:d0:d5:16:bb:67:e1:78:8d:a0:2f:ed:86:cc:68: ef:39:60:6d:9e:50:f6:df:34:31:32:2b:5a:6d:21: a3:66:67:76:01:90:bf:84:f6:2e:ca:d9:02:f1:82: af:8e:38:c0:14:9c:d5:32:01:e0:d2:9b:1a:f2:7e: e4:a7:cd:8a:51:2a:d2:68:7d:30:6a:64:ec:3f:52: 07:90:f6:23:79:f0:2b:18:ee:c9:99:48:a7:a1:4c: 97:8c:ff:f9:a5:5a:5d:74:6f:ab:80:a9:33:77:3b: a8:5b:56:5e:67:64:98:59:36:ca:79:a9:10:f7:00: 87:a7:82:c2:47:c6:52:9b:e2:35:37:bf:f3:65:08: ec:44:62:1b:f7:fa:ca:6b:95:6a:a8:10:fa:7b:f3: 0c:6e:f6:8f:d8:86:c5:a4:1b:96:e7:e8:ef:23:07: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:52:BD:C0:A7:90:E6:6E:9F:F8:BF:5F:57:8B:B6:D6:75:9A:CB:76 X509v3 Authority Key Identifier: keyid:DA:47:04:2E:37:6A:94:73:FC:0E:DF:C8:44:57:39:DD:13:28:AE:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcELjdqlHP8Dt_IRFc53RMorg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DF4/F41D1C18B38E11E986282B73C4F9AE02/2kcELjdqlHP8Dt_IRFc53RMorg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fa:7f:65:f6:f5:21:67:0e:a5:ec:70:de:0e:3c:78:81:13: 45:31:2f:41:fe:7e:82:d6:31:1d:97:96:dc:9c:55:7d:cc:72: eb:f5:3e:cf:77:09:75:8b:fe:44:95:f6:0a:6b:8f:70:16:83: 70:83:f6:17:a8:ef:e8:de:aa:3b:64:78:b6:ee:16:29:ea:2c: d1:a1:04:7b:8d:c1:d4:7f:3a:59:28:9b:da:ae:0a:3a:b8:86: f4:ed:ca:75:47:6b:2f:e2:03:9b:0b:44:51:45:ec:f0:ef:bb: f2:22:5e:72:1f:e3:90:24:70:09:5b:b2:16:54:15:d7:bd:ac: b6:ee:0d:03:1c:f2:42:b4:b7:0c:3e:f2:0b:01:fd:f3:bb:83: 4e:15:48:89:b2:f3:ef:13:d8:a8:90:12:0c:04:b5:97:00:f8: 5b:7e:25:7a:95:3f:6a:f1:f1:ef:fa:03:f3:cd:e7:5e:ff:f5: 16:df:69:2c:12:29:f1:9f:77:0d:8d:b8:ea:04:bb:8a:89:08: ff:5d:05:da:94:55:67:ac:3c:bf:da:dc:d0:18:85:0d:0b:ab: 67:88:21:37:8d:22:5c:9a:e6:54:8c:28:e0:20:a3:92:5a:8e: f5:56:92:c3:42:71:e4:1f:3a:1c:ac:b9:f4:00:e6:53:5c:f1: 46:e9:41:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERjQxMTAvBgNVBAUTKERBNDcwNDJFMzc2QTk0NzNGQzBFREZDODQ0NTczOURE MTMyOEFFMEUwHhcNMjUwNjI4MTczOTQ1WhcNMjUwNzA1MTczOTQ1WjAYMRYwFAYD VQQDEw02ODYwMjhlMS00OTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0B1ZrNrRdSw8zP/pHUACGuYiybYlPpLF6svnURq65p2iniRecjw8SdvdRdEu 8C7yjBvvrJh6FDK8QHT1vVQRbvXO6ms2e6SnjLSK5iMlO7AksF/+BvdEcPiL0NUW u2fheI2gL+2GzGjvOWBtnlD23zQxMitabSGjZmd2AZC/hPYuytkC8YKvjjjAFJzV MgHg0psa8n7kp82KUSrSaH0wamTsP1IHkPYjefArGO7JmUinoUyXjP/5pVpddG+r gKkzdzuoW1ZeZ2SYWTbKeakQ9wCHp4LCR8ZSm+I1N7/zZQjsRGIb9/rKa5VqqBD6 e/MMbvaP2IbFpBuW5+jvIwfxbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBSvcCn kOZun/i/X1eLttZ1mst2MB8GA1UdIwQYMBaAFNpHBC43apRz/A7fyERXOd0TKK4O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURGNC9GNDFEMUMxOEIz OEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxIUDhEdF9JUkZjNTNSTW9y ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrY0VMamRxbEhQOER0X0lSRmM1M1JNb3JnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURGNC9GNDFEMUMxOEIzOEUxMUU5ODYyODJCNzNDNEY5QUUwMi8ya2NFTGpkcWxI UDhEdF9JUkZjNTNSTW9yZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+n9l9vUhZw6l7HDeDjx4gRNFMS9B/n6C1jEdl5bcnFV9zHLr9T7P dwl1i/5ElfYKa49wFoNwg/YXqO/o3qo7ZHi27hYp6izRoQR7jcHUfzpZKJvargo6 uIb07cp1R2sv4gObC0RRRezw77vyIl5yH+OQJHAJW7IWVBXXvay27g0DHPJCtLcM PvILAf3zu4NOFUiJsvPvE9iokBIMBLWXAPhbfiV6lT9q8fHv+gPzzede//UW32ks Einxn3cNjbjqBLuKiQj/XQXalFVnrDy/2tzQGIUNC6tniCE3jSJcmuZUjCjgIKOS Wo71VpLDQnHkHzocrLn0AOZTXPFG6UF/ -----END CERTIFICATE-----Generated at Sun Jun 29 14:16:51 2025 by rpki-client