$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: C7othkojf927So7InbHhkixdTBnvzG78Gx0RAIpMaJ8= Subject key identifier: F1:21:31:B1:10:E7:A4:B8:45:A4:A7:56:13:4E:5F:D1:FF:9A:EB:2F Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 0187 Signing time: Tue 17 Jun 2025 02:44:50 +0000 Manifest this update: Tue 17 Jun 2025 02:44:50 +0000 Manifest next update: Tue 24 Jun 2025 02:44:50 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: p0HC99MgbhV3NgLpFUz3qvhZqR2XucgioBBEllb2Rfg=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 02:44:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Jun 17 02:44:50 2025 GMT Not After : Jun 24 02:44:50 2025 GMT Subject: CN=6850d6a2-e518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:b9:71:7d:02:ee:d6:1e:49:86:99:4a:9f: f9:7f:6e:d5:ac:6b:46:af:9a:6e:01:f9:bd:dc:89: ac:bf:9d:d0:93:55:9f:1f:1b:7b:d8:11:64:18:1c: 00:f7:74:cd:50:1e:49:68:39:70:42:a2:1b:31:9a: 2c:75:4b:e5:f9:86:4d:fa:df:f4:cb:75:31:4f:f1: 4c:ca:86:6a:9e:e9:2a:49:90:28:ea:59:fc:a1:3c: b5:83:18:75:91:db:65:88:9f:2d:73:44:d6:fb:9b: 36:bd:64:eb:b4:d0:6d:6e:08:1d:c0:81:98:82:aa: 47:f2:ef:d1:30:0e:02:41:8d:33:4f:9e:b1:d9:4c: 74:20:db:d2:f1:f7:92:a8:45:ee:a6:aa:7b:cf:45: 5a:01:3f:ee:07:51:25:0f:70:8a:66:bf:f6:bb:d6: bb:f0:c7:c8:d9:0f:f9:77:aa:81:cc:45:7d:82:50: dd:32:cd:f3:3b:c9:dd:5c:4a:db:e3:80:d3:8e:db: 6f:bf:21:9d:01:38:e1:b0:02:a8:cf:cd:89:6f:5d: 00:ce:5c:39:f2:10:29:48:f4:82:d9:e5:d7:99:c6: 48:ce:11:ca:75:3a:a0:b8:b2:ae:f0:9e:4c:62:fa: 56:86:37:76:58:22:80:d8:bd:16:5b:1a:40:51:53: d1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:21:31:B1:10:E7:A4:B8:45:A4:A7:56:13:4E:5F:D1:FF:9A:EB:2F X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a4:63:89:d9:b5:c8:17:8c:ee:ea:d8:3b:84:71:84:97:13: 83:18:89:c7:6a:a0:8b:c4:64:10:8a:dd:ef:ed:d9:1c:e8:3f: 3f:f3:f2:c4:ac:dd:2b:e4:2d:11:29:46:51:36:0a:ae:a8:0d: 68:e8:f6:cd:80:9e:32:f7:d0:05:18:a5:42:b3:bb:25:36:74: 65:44:41:6d:c0:9c:6d:f7:22:f0:19:8e:d3:b7:b1:3f:73:1c: 00:38:e2:a2:0f:6d:9a:c0:db:48:9b:0e:8c:1b:01:aa:50:13: 97:50:46:42:65:ee:3c:fe:b0:d2:84:57:89:e0:7e:b2:a8:b7: 84:6e:bf:f9:6e:26:ac:0e:3a:99:11:6d:0d:38:a1:47:21:e6: 24:28:04:59:74:2d:bb:8b:fc:86:51:eb:69:c3:65:4e:74:8f: d0:ea:bb:25:ef:20:70:f2:3b:b2:95:88:fe:a5:4a:86:61:48: 9d:ca:5c:df:1a:95:16:ba:ed:41:4e:5c:7a:51:ec:12:57:ec: ff:23:2a:e0:26:32:fe:38:e8:6e:18:e1:f6:18:fd:09:ab:08: 78:cb:39:99:49:15:96:91:aa:eb:0c:d8:41:8c:cc:9c:2f:5b: a2:fb:cd:11:04:a9:0c:5d:5e:71:b2:a5:78:b3:85:ba:3f:c9: 48:8b:db:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUwNjE3MDI0NDUwWhcNMjUwNjI0MDI0NDUwWjAYMRYwFAYD VQQDEw02ODUwZDZhMi1lNTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUS5cX0C7tYeSYaZSp/5f27VrGtGr5puAfm93Imsv53Qk1WfHxt72BFkGBwA 93TNUB5JaDlwQqIbMZosdUvl+YZN+t/0y3UxT/FMyoZqnukqSZAo6ln8oTy1gxh1 kdtliJ8tc0TW+5s2vWTrtNBtbggdwIGYgqpH8u/RMA4CQY0zT56x2Ux0INvS8feS qEXupqp7z0VaAT/uB1ElD3CKZr/2u9a78MfI2Q/5d6qBzEV9glDdMs3zO8ndXErb 44DTjttvvyGdATjhsAKoz82Jb10Azlw58hApSPSC2eXXmcZIzhHKdTqguLKu8J5M YvpWhjd2WCKA2L0WWxpAUVPRJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPEhMbEQ 56S4RaSnVhNOX9H/musvMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxpGOJ2bXIF4zu6tg7hHGElxODGInHaqCLxGQQit3v7dkc6D8/8/LE rN0r5C0RKUZRNgquqA1o6PbNgJ4y99AFGKVCs7slNnRlREFtwJxt9yLwGY7Tt7E/ cxwAOOKiD22awNtImw6MGwGqUBOXUEZCZe48/rDShFeJ4H6yqLeEbr/5biasDjqZ EW0NOKFHIeYkKARZdC27i/yGUetpw2VOdI/Q6rsl7yBw8juylYj+pUqGYUidylzf GpUWuu1BTlx6UewSV+z/IyrgJjL+OOhuGOH2GP0Jqwh4yzmZSRWWkarrDNhBjMyc L1ui+80RBKkMXV5xsqV4s4W6P8lIi9sp -----END CERTIFICATE-----Generated at Wed Jun 18 11:32:40 2025 by rpki-client