$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: JZQ2ktU1HAVddzLFDVJn7OHWysHYAGolC1ajL2qZgc0= Subject key identifier: A9:A3:C1:37:49:76:50:5C:33:8B:61:AC:F2:85:0B:9E:1F:A4:38:23 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0981 Signing time: Wed 02 Jul 2025 20:23:10 +0000 Manifest this update: Wed 02 Jul 2025 20:23:09 +0000 Manifest next update: Wed 09 Jul 2025 20:23:09 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: Ie57m7VTtkoSZjX4zpzPNkBzJJnGn4bHevM/rst/LMM=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Jul 2 20:23:09 2025 GMT Not After : Jul 9 20:23:09 2025 GMT Subject: CN=6865952e-a8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:6a:d3:b8:b2:fe:21:1a:5e:56:f2:ba:92: 98:bb:f5:f4:f0:16:11:0e:a8:d3:8b:84:cf:ee:45: 1d:0b:27:f6:55:aa:c7:c3:41:f3:56:ca:d5:ba:da: 55:29:23:a2:c5:a7:a8:ec:19:13:e5:1f:e9:8c:c6: 61:51:ed:07:f0:8d:dc:72:e5:e3:1f:01:73:c3:68: 84:8c:dd:e6:f2:64:60:a9:96:83:9b:f4:96:1d:78: f5:a9:f3:06:25:a8:3c:fc:ee:e6:2a:66:e6:6e:97: 0f:4d:24:c9:06:01:f6:56:da:b0:97:1e:00:17:82: 4d:dc:7a:43:2c:a0:6c:45:f9:e5:1f:53:0d:fd:10: c2:8b:7b:2d:f8:61:0a:bf:35:af:a0:cf:b4:df:2c: 1f:94:50:c0:e0:12:cc:04:a7:fb:37:85:c4:bc:34: bf:8a:1a:bc:58:82:d6:d1:2d:95:29:9e:d8:9d:89: e9:37:0a:16:c5:d7:53:f4:c5:37:15:be:6f:8c:08: ad:8e:62:76:6e:b5:03:f4:72:e8:33:67:1a:a4:40: 84:b3:c2:0e:49:76:ea:a3:6c:36:a2:41:b8:16:be: 3e:1c:fe:f8:16:48:31:17:76:99:8c:db:d0:a9:6e: e9:18:7f:ba:de:b8:40:2c:a9:19:ba:e3:3b:eb:63: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:C1:37:49:76:50:5C:33:8B:61:AC:F2:85:0B:9E:1F:A4:38:23 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6a:fb:7d:8a:72:62:07:f9:7a:4d:7e:8b:7f:7a:63:9a:4c: 70:f0:69:b9:f0:01:86:d9:a4:25:9a:30:95:90:e6:b1:03:2c: 9d:95:9c:7e:f8:3e:c1:58:67:32:00:2b:9e:77:1e:68:31:bf: 62:ec:10:77:39:e1:be:fb:25:fc:a2:17:14:c7:6f:31:64:4c: 61:c4:7f:37:04:d7:ca:74:97:85:29:09:23:17:3b:0f:5d:db: ec:7d:fc:0d:0e:e5:c4:a6:6d:dc:4a:38:24:53:f7:8f:4c:e0: 36:98:8b:0e:62:7b:fb:8d:95:c5:7e:8d:0b:09:e5:23:0f:42: a4:73:f8:28:f6:a2:4e:1c:79:ef:f4:2a:97:cc:65:6b:36:65: 46:f1:7d:b3:95:2d:a1:fd:bb:c7:25:fd:f5:51:ae:ee:ba:bc: 41:74:96:72:75:e8:b5:6f:d7:00:e0:e5:18:21:fb:a9:78:04: 28:50:68:a2:eb:cf:45:c6:65:19:2d:5e:35:39:30:08:e8:0e: c1:60:d5:ed:2f:b3:57:63:ca:cc:b3:74:5c:ad:f1:91:5f:e1: 8c:6f:63:37:31:82:de:aa:a3:a2:14:11:54:78:cf:55:f9:9f: 2b:12:24:f4:c3:b9:e2:f4:5f:e1:82:47:0e:b2:ba:07:19:b6: 0e:88:4e:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwNzAyMjAyMzA5WhcNMjUwNzA5MjAyMzA5WjAYMRYwFAYD VQQDEw02ODY1OTUyZS1hOGQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzApq07iy/iEaXlbyupKYu/X08BYRDqjTi4TP7kUdCyf2VarHw0HzVsrVutpV KSOixaeo7BkT5R/pjMZhUe0H8I3ccuXjHwFzw2iEjN3m8mRgqZaDm/SWHXj1qfMG Jag8/O7mKmbmbpcPTSTJBgH2Vtqwlx4AF4JN3HpDLKBsRfnlH1MN/RDCi3st+GEK vzWvoM+03ywflFDA4BLMBKf7N4XEvDS/ihq8WILW0S2VKZ7YnYnpNwoWxddT9MU3 Fb5vjAitjmJ2brUD9HLoM2capECEs8IOSXbqo2w2okG4Fr4+HP74FkgxF3aZjNvQ qW7pGH+63rhALKkZuuM762M6ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmjwTdJ dlBcM4thrPKFC54fpDgjMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKavt9inJiB/l6TX6Lf3pjmkxw8Gm58AGG2aQlmjCVkOaxAyydlZx+ +D7BWGcyACuedx5oMb9i7BB3OeG++yX8ohcUx28xZExhxH83BNfKdJeFKQkjFzsP XdvsffwNDuXEpm3cSjgkU/ePTOA2mIsOYnv7jZXFfo0LCeUjD0Kkc/go9qJOHHnv 9CqXzGVrNmVG8X2zlS2h/bvHJf31Ua7uurxBdJZydei1b9cA4OUYIfupeAQoUGii 689FxmUZLV41OTAI6A7BYNXtL7NXY8rMs3RcrfGRX+GMb2M3MYLeqqOiFBFUeM9V +Z8rEiT0w7ni9F/hgkcOsroHGbYOiE4x -----END CERTIFICATE-----Generated at Fri Jul 4 14:32:36 2025 by rpki-client