$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: TbZnqvfk5zp7zXpAg/vq7b/r1ziZontvfsv/0QR+UxQ= Subject key identifier: 65:5F:9A:AC:F3:B1:59:11:20:C4:58:FF:2D:13:3D:3C:67:9A:E1:91 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0C14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0C0E Signing time: Wed 18 Jun 2025 17:56:09 +0000 Manifest this update: Wed 18 Jun 2025 17:56:09 +0000 Manifest next update: Wed 25 Jun 2025 17:56:09 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: QEvNwwMW+8hdfPFfPT+3kxOZgrlOIUdtX0fsfX1z9kg=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: fJj5V7B0tj2U/amxOYn7MfT1h8cR0RvRgHTxKdHbOM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 17:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3092 (0xc14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Jun 18 17:56:09 2025 GMT Not After : Jun 25 17:56:09 2025 GMT Subject: CN=6852fdb9-b77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3a:2b:3c:36:83:f8:e8:b9:75:60:a6:1a:60: ba:66:eb:d6:bb:2f:27:5b:da:0e:32:c5:b8:e9:9c: da:a2:2e:b0:27:6b:6b:9d:33:38:b7:e0:29:57:31: 82:27:45:63:2e:d0:dd:a4:cd:b0:68:72:6f:0f:dd: f4:c6:d3:60:93:a0:47:57:55:25:7e:98:71:71:40: 59:44:21:d5:ae:2a:8e:9d:75:85:66:e3:19:b8:50: 46:1d:aa:be:6e:a8:91:ed:2c:4d:2c:2b:39:d3:40: 34:2f:45:18:f8:08:18:b5:81:42:7b:c9:7c:a1:28: 4c:a0:23:06:8c:c1:88:59:23:fe:b0:ab:e3:7d:c2: 20:ba:08:2c:78:47:e2:56:3d:7f:00:a7:6b:d4:89: 7f:32:d5:86:73:29:23:3c:df:52:51:85:78:d5:bb: a1:89:a6:f0:95:65:8e:e5:f8:79:dd:eb:07:68:fd: 7e:2b:77:0f:2f:42:c0:ac:cd:f3:dd:4c:58:8c:01: 55:d6:12:22:81:97:78:3c:e2:7a:ec:2d:7c:f4:25: 00:49:f2:23:66:c9:8b:fe:47:b1:55:83:98:f1:89: ac:19:b5:af:63:fb:e8:f9:9b:42:67:ef:d7:ab:dc: 9b:f9:5a:f0:97:30:2c:d1:05:24:c8:0a:eb:be:50: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5F:9A:AC:F3:B1:59:11:20:C4:58:FF:2D:13:3D:3C:67:9A:E1:91 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:d0:e4:6d:67:66:6f:7a:bd:da:7f:66:14:c6:2f:8c:2f:90: 12:98:c3:e7:c4:ff:8c:ca:83:97:fa:46:88:bb:93:dc:65:21: 69:d1:45:ca:1b:70:bd:4c:c9:b8:c9:d6:ba:28:d7:5d:c0:d8: d3:45:53:7c:b0:a8:28:d7:2d:fe:44:d7:b3:21:bd:1a:58:36: 08:53:b5:bb:34:e2:2a:da:9f:fe:28:7f:a7:55:ef:26:25:f7: 20:38:e7:c9:cb:7a:aa:74:39:4a:2a:32:db:9c:6f:93:92:6d: 96:a4:99:08:30:ac:1f:9b:40:7b:67:08:49:95:c0:a1:b2:a7: 5c:29:48:2c:8b:d3:b1:23:3e:ed:b2:03:78:17:f7:9b:5a:af: 19:f1:21:4c:0b:dd:84:9e:ea:98:cc:ec:44:b2:34:2f:4f:40: 38:b0:3e:84:92:be:82:c8:0f:29:46:b1:69:61:fc:dc:c1:9b: 59:b6:ed:46:48:e0:8f:2e:ec:79:9b:86:47:83:2e:9e:2e:5f: fb:f5:aa:45:e5:6b:44:a0:73:1d:7b:28:52:19:8d:bd:c2:76: 6b:2b:6c:38:04:0d:61:e9:99:a1:92:d2:4e:fb:eb:60:a9:fd: ec:6e:00:36:46:22:83:20:ef:3c:5b:1d:f2:b8:d5:b7:c4:fe: da:18:60:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjUwNjE4MTc1NjA5WhcNMjUwNjI1MTc1NjA5WjAYMRYwFAYD VQQDEw02ODUyZmRiOS1iNzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zorPDaD+Oi5dWCmGmC6ZuvWuy8nW9oOMsW46Zzaoi6wJ2trnTM4t+ApVzGC J0VjLtDdpM2waHJvD930xtNgk6BHV1UlfphxcUBZRCHVriqOnXWFZuMZuFBGHaq+ bqiR7SxNLCs500A0L0UY+AgYtYFCe8l8oShMoCMGjMGIWSP+sKvjfcIguggseEfi Vj1/AKdr1Il/MtWGcykjPN9SUYV41buhiabwlWWO5fh53esHaP1+K3cPL0LArM3z 3UxYjAFV1hIigZd4POJ67C189CUASfIjZsmL/kexVYOY8YmsGbWvY/vo+ZtCZ+/X q9yb+VrwlzAs0QUkyArrvlBW0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVfmqzz sVkRIMRY/y0TPTxnmuGRMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB10ORtZ2Zver3af2YUxi+ML5ASmMPnxP+MyoOX+kaIu5PcZSFp0UXK G3C9TMm4yda6KNddwNjTRVN8sKgo1y3+RNezIb0aWDYIU7W7NOIq2p/+KH+nVe8m JfcgOOfJy3qqdDlKKjLbnG+Tkm2WpJkIMKwfm0B7ZwhJlcChsqdcKUgsi9OxIz7t sgN4F/ebWq8Z8SFMC92EnuqYzOxEsjQvT0A4sD6Ekr6CyA8pRrFpYfzcwZtZtu1G SOCPLux5m4ZHgy6eLl/79apF5WtEoHMdeyhSGY29wnZrK2w4BA1h6ZmhktJO++tg qf3sbgA2RiKDIO88Wx3yuNW3xP7aGGBx -----END CERTIFICATE-----Generated at Thu Jun 19 10:26:30 2025 by rpki-client