$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: hYTFAplTrES6uz8vga656TtsTgoDBXzsHv/RmLjU4Ew= Subject key identifier: EC:A5:08:59:BA:E9:6D:71:65:86:D9:68:F6:8F:5F:0C:14:65:E9:8B Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 019B Signing time: Thu 19 Jun 2025 02:50:47 +0000 Manifest this update: Thu 19 Jun 2025 02:50:47 +0000 Manifest next update: Thu 26 Jun 2025 02:50:47 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: EglW+tEYxojUylUXAB47LRJw+gRJZcy/fqdEaxcb/bM=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: Jun 19 02:50:47 2025 GMT Not After : Jun 26 02:50:47 2025 GMT Subject: CN=68537b07-7df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b1:16:6c:1e:c0:21:fe:fb:55:6f:8c:05:b2: 4e:35:ae:b8:de:5c:35:4f:44:64:fd:c6:cf:72:48: f2:a2:10:a9:20:f7:2b:cf:a0:e2:5e:66:db:86:98: 7b:cf:34:fe:65:b1:5c:e0:6a:ff:8c:1d:a8:80:0d: 5d:ff:82:c7:fc:ec:45:b2:e3:89:bc:22:a2:3b:99: c4:c4:cd:96:23:3f:ae:58:11:34:e7:62:ac:b6:05: 63:12:74:af:2a:fa:75:e1:a2:8e:ba:6e:61:93:81: 56:f1:38:8e:80:ec:96:82:be:89:b0:e0:ad:42:a7: 4f:8c:19:fc:52:ae:5b:d9:1d:5f:a1:46:51:82:08: 31:bd:19:6f:0c:61:22:3d:fe:48:b0:97:5f:ae:69: 6f:0e:98:c9:6e:0f:03:a4:bb:8d:a3:82:ad:e2:5f: de:cc:b2:9d:d7:2e:aa:8d:8e:af:4c:f2:c9:7b:e3: e4:dd:05:7e:14:8d:68:93:6e:aa:5c:17:70:e7:ae: e1:5f:e1:0a:23:6c:de:c2:45:59:67:fb:23:46:ba: a0:87:2a:2f:91:42:cc:b0:70:0e:53:6e:1f:43:0d: 26:36:f4:d0:34:59:0c:5b:08:44:cb:45:67:25:d8: 5f:74:e6:dd:ed:8e:de:9c:0e:38:d3:d4:a7:4c:ab: 0d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A5:08:59:BA:E9:6D:71:65:86:D9:68:F6:8F:5F:0C:14:65:E9:8B X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f5:32:3d:a1:9c:96:8f:a3:d6:e2:d3:69:af:f5:3b:ad:11: 89:f7:11:8f:0a:7e:f1:7d:4d:3c:38:1e:6a:74:13:cd:e8:68: 34:7a:c5:1f:ad:94:0d:3d:d2:6d:d7:c3:4d:27:03:a8:f2:30: c5:58:35:00:de:36:b8:56:59:ef:ae:dc:1d:bf:fe:04:90:25: 41:4d:b4:07:fb:d3:be:90:cc:86:46:ca:a9:a0:e8:36:86:c9: a5:9e:d7:5b:23:63:40:c9:5d:74:82:bb:ff:69:57:b6:94:8e: 15:4d:4b:c8:c4:6c:6c:62:4b:48:ce:bd:66:eb:08:0e:c9:1b: e7:7a:cd:3b:77:33:1b:1b:69:92:42:c5:d4:9f:21:49:f9:01: 95:01:3f:45:78:3b:dd:87:56:b0:44:a3:5b:82:24:16:d9:a2: ea:ab:27:ef:b3:91:30:f0:fb:15:39:6c:27:e7:90:35:37:98: a8:98:c8:bf:74:3a:04:a8:a6:c0:ba:89:b1:4f:64:8f:a7:ee: 6b:25:bf:ab:16:1a:94:e1:41:72:ee:7c:7a:12:89:d1:7e:15: ea:bc:07:cb:cd:8b:43:c1:ae:28:c0:4a:1e:07:a4:e9:ba:b8: 22:2a:c5:86:52:ed:7a:5f:4f:34:07:71:89:89:d4:05:7c:b1: 5d:44:4b:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwNjE5MDI1MDQ3WhcNMjUwNjI2MDI1MDQ3WjAYMRYwFAYD VQQDEw02ODUzN2IwNy03ZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurEWbB7AIf77VW+MBbJONa643lw1T0Rk/cbPckjyohCpIPcrz6DiXmbbhph7 zzT+ZbFc4Gr/jB2ogA1d/4LH/OxFsuOJvCKiO5nExM2WIz+uWBE052KstgVjEnSv Kvp14aKOum5hk4FW8TiOgOyWgr6JsOCtQqdPjBn8Uq5b2R1foUZRgggxvRlvDGEi Pf5IsJdfrmlvDpjJbg8DpLuNo4Kt4l/ezLKd1y6qjY6vTPLJe+Pk3QV+FI1ok26q XBdw567hX+EKI2zewkVZZ/sjRrqghyovkULMsHAOU24fQw0mNvTQNFkMWwhEy0Vn JdhfdObd7Y7enA4409SnTKsNPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOylCFm6 6W1xZYbZaPaPXwwUZemLMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl9TI9oZyWj6PW4tNpr/U7rRGJ9xGPCn7xfU08OB5qdBPN6Gg0esUf rZQNPdJt18NNJwOo8jDFWDUA3ja4Vlnvrtwdv/4EkCVBTbQH+9O+kMyGRsqpoOg2 hsmlntdbI2NAyV10grv/aVe2lI4VTUvIxGxsYktIzr1m6wgOyRvnes07dzMbG2mS QsXUnyFJ+QGVAT9FeDvdh1awRKNbgiQW2aLqqyfvs5Ew8PsVOWwn55A1N5iomMi/ dDoEqKbAuomxT2SPp+5rJb+rFhqU4UFy7nx6EonRfhXqvAfLzYtDwa4owEoeB6Tp urgiKsWGUu16X080B3GJidQFfLFdREuz -----END CERTIFICATE-----Generated at Fri Jun 20 00:15:57 2025 by rpki-client