$ rpki-client -vvf rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft File: x2h2G8gatP5_1EAVSCYcuocge-o.mft (raw, json) Hash identifier: SQcdDjJZFep7dLCfHEB9tlsAv5zPfWPyYoHvkUZi+Kw= Subject key identifier: BC:47:A9:8D:FB:C7:F5:05:25:CA:60:C2:2C:54:08:F6:37:84:12:B9 Authority key identifier: C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA Certificate issuer: /CN=A9118022/serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Certificate serial: 0E2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft Manifest number: 0E0C Signing time: Mon 16 Jun 2025 17:48:58 +0000 Manifest this update: Mon 16 Jun 2025 17:48:58 +0000 Manifest next update: Mon 23 Jun 2025 17:48:58 +0000 Files and hashes: 1: x2h2G8gatP5_1EAVSCYcuocge-o.crl (hash: CvRoKpTCTJUpRAMa9GOSxLgP9I1waN+Cr9Ie3ZyGCjs=) 2: 127D33EC027011EB98FEC44BC4F9AE02.roa (hash: WKzAcG2HI+Rmp0I06ZjLFib0fSkn15at9z87zdNmyk8=) 3: 1C99C7E021D911EB85DAFE71C4F9AE02.roa (hash: SWjsz2ZRwBkKRs3lCM8x1HuP6oZ8eAnIrMziwftZzas=) 4: 670DF186232111EB9896B783C4F9AE02.roa (hash: Uzh2H0WzqUhAdOejeRuGcUfDdr3mQiiZM4aNaZoNZlE=) 5: 1609CE067A4A11EB99C11F5FC4F9AE02.roa (hash: /6vaZiCWJmBFNJgiNOI49M1x4iJoUHYLtfB+8hNudBk=) 6: 1D93B82C21D911EB85DAFE71C4F9AE02.roa (hash: E9L/TTXk+Px8nGO4KJnm/ouPNchL+BTaTG1X0znr2Rg=) 7: 1BBE249C21D911EB85DAFE71C4F9AE02.roa (hash: EwzDgqgyP+42whL7/ceKehIKyd0tgvQ5kUq+8PMWfXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 17:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3630 (0xe2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118022, serialNumber=C768761BC81AB4FE7FD4401548261CBA87207BEA Validity Not Before: Jun 16 17:48:58 2025 GMT Not After : Jun 23 17:48:58 2025 GMT Subject: CN=6850590a-6063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:eb:ce:b0:62:4a:fa:1a:c9:95:1c:3f:87: f6:12:cb:70:2e:8f:b0:93:e7:52:f9:a5:a3:a8:fe: 8b:3b:13:48:50:2c:cd:b8:c8:ec:62:d9:77:a5:ac: 4c:31:a5:45:16:94:12:06:fc:56:97:85:80:fc:86: 7a:df:4b:d9:d4:93:c0:15:82:aa:a1:f0:d6:d2:3a: ba:a7:7c:89:91:41:44:9a:bd:07:f6:41:ad:46:89: 26:52:18:7e:0a:e3:c5:51:92:1a:b1:e0:7b:86:4f: 78:de:07:16:73:22:77:37:fa:32:1d:16:9c:e1:d7: 76:d0:c0:e5:10:18:be:bc:3b:bb:cf:ce:f3:79:02: 62:37:75:0c:23:18:52:59:65:27:ee:49:c2:b4:4b: f2:f1:94:58:d6:7e:71:33:8e:3c:96:e3:1b:36:e4: ce:34:4d:77:7b:ce:3f:96:4f:39:3a:cf:6f:b7:85: 5e:95:08:65:94:f8:ac:4b:b5:9d:96:5f:ab:e2:cd: a9:eb:2a:fb:21:87:eb:33:cd:44:e9:32:31:b8:a0: 44:b1:fc:ef:53:25:d8:17:78:69:cb:0b:6e:84:60: c1:da:eb:32:8e:4a:d0:7f:8e:9a:a0:4e:1f:e1:46: 9f:0a:06:35:93:81:e6:d9:e7:97:bd:6f:f4:a8:86: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:47:A9:8D:FB:C7:F5:05:25:CA:60:C2:2C:54:08:F6:37:84:12:B9 X509v3 Authority Key Identifier: keyid:C7:68:76:1B:C8:1A:B4:FE:7F:D4:40:15:48:26:1C:BA:87:20:7B:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x2h2G8gatP5_1EAVSCYcuocge-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118022/C61C256AADCC11E9AC672F4BC4F9AE02/x2h2G8gatP5_1EAVSCYcuocge-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:94:e8:4d:ae:3e:9f:5a:2d:e9:07:fa:dc:e1:cc:69:71:10: ff:3b:2b:da:78:5b:1e:b6:d4:3b:ab:0f:f0:1c:bc:48:44:35: 43:6a:d8:62:d0:5c:bd:55:15:28:da:27:62:14:5f:a8:93:34: d7:1a:a5:88:2c:07:16:dd:58:87:69:85:e1:30:c2:a4:c7:21: 11:62:c9:3c:aa:6a:e6:f1:3c:c5:c0:8b:e4:9b:50:34:4f:18: 2f:fe:49:bb:69:94:5c:52:22:9e:98:d2:fb:bc:25:fe:6e:9f: 9c:22:2f:fb:d4:1f:ee:11:86:d8:37:e9:ac:71:71:bf:ed:7b: a9:12:d5:fc:3b:a2:12:72:c6:c1:a1:a6:60:3c:1b:b8:2b:7e: b9:06:b5:75:f5:14:d0:bb:01:df:18:6a:4b:ea:4a:8b:92:dd: bb:fb:f4:06:3a:2a:c5:e9:ef:3d:59:92:f5:1a:52:d9:3e:ec: d2:36:cb:9d:59:82:fd:77:a1:e9:e0:69:12:04:29:fb:f0:72: 4c:e2:af:82:fb:4e:e2:70:00:a3:e2:9c:4c:5f:14:71:8d:6e: 6c:b6:93:a7:d7:70:7a:74:31:db:ec:f9:86:d2:6c:2b:60:8a: a2:5b:91:05:3e:de:8e:d7:ad:aa:8e:af:d4:3a:71:ef:e3:e1: c6:83:a8:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTgwMjIxMTAvBgNVBAUTKEM3Njg3NjFCQzgxQUI0RkU3RkQ0NDAxNTQ4MjYxQ0JB ODcyMDdCRUEwHhcNMjUwNjE2MTc0ODU4WhcNMjUwNjIzMTc0ODU4WjAYMRYwFAYD VQQDEw02ODUwNTkwYS02MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCvrzrBiSvoayZUcP4f2EstwLo+wk+dS+aWjqP6LOxNIUCzNuMjsYtl3paxM MaVFFpQSBvxWl4WA/IZ630vZ1JPAFYKqofDW0jq6p3yJkUFEmr0H9kGtRokmUhh+ CuPFUZIaseB7hk943gcWcyJ3N/oyHRac4dd20MDlEBi+vDu7z87zeQJiN3UMIxhS WWUn7knCtEvy8ZRY1n5xM448luMbNuTONE13e84/lk85Os9vt4VelQhllPisS7Wd ll+r4s2p6yr7IYfrM81E6TIxuKBEsfzvUyXYF3hpywtuhGDB2usyjkrQf46aoE4f 4UafCgY1k4Hm2eeXvW/0qIYNkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxHqY37 x/UFJcpgwixUCPY3hBK5MB8GA1UdIwQYMBaAFMdodhvIGrT+f9RAFUgmHLqHIHvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODAyMi9DNjFDMjU2QUFE Q0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQNV8xRUFWU0NZY3VvY2dl LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3gyaDJHOGdhdFA1XzFFQVZTQ1ljdW9jZ2Utby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODAyMi9DNjFDMjU2QUFEQ0MxMUU5QUM2NzJGNEJDNEY5QUUwMi94MmgyRzhnYXRQ NV8xRUFWU0NZY3VvY2dlLW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQlOhNrj6fWi3pB/rc4cxpcRD/OyvaeFsettQ7qw/wHLxIRDVDathi 0Fy9VRUo2idiFF+okzTXGqWILAcW3ViHaYXhMMKkxyERYsk8qmrm8TzFwIvkm1A0 Txgv/km7aZRcUiKemNL7vCX+bp+cIi/71B/uEYbYN+mscXG/7XupEtX8O6IScsbB oaZgPBu4K365BrV19RTQuwHfGGpL6kqLkt27+/QGOirF6e89WZL1GlLZPuzSNsud WYL9d6Hp4GkSBCn78HJM4q+C+07icACj4pxMXxRxjW5stpOn13B6dDHb7PmG0mwr YIqiW5EFPt6O162qjq/UOnHv4+HGg6gu -----END CERTIFICATE-----Generated at Wed Jun 18 07:32:32 2025 by rpki-client