$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: g8HefxsBScY8Xn6SXjVRqnLcGlRg5P/KrPU7e9ToOxk= Subject key identifier: FA:A7:B7:22:CF:29:67:46:32:70:F2:54:44:6E:7E:AF:C3:67:D3:9F Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 13 Signing time: Sun 15 Jun 2025 07:04:51 +0000 Manifest this update: Sun 15 Jun 2025 07:04:51 +0000 Manifest next update: Sun 22 Jun 2025 07:04:51 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: AEuUaQ0cFaGLOQowj6z8fdClMYebU7lFon4lwMJsecQ=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Jun 15 07:04:51 2025 GMT Not After : Jun 22 07:04:51 2025 GMT Subject: CN=684e7093-edde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:26:3d:7b:8b:af:ff:fb:87:67:02:ce:15: 39:4f:91:fa:f7:59:2d:d8:74:ea:a8:ea:4d:e0:b8: 53:9a:0c:dd:23:f7:23:a8:d3:20:ad:f7:fc:db:f2: 96:a2:20:8f:99:d2:99:26:23:50:a9:39:8d:ee:e1: 35:3a:4a:17:1b:4b:6e:62:6b:ab:7b:ef:39:65:0a: 48:0c:88:04:80:27:39:db:0c:a5:46:38:5c:20:75: 00:f9:5d:62:bb:72:e9:91:51:cf:b4:ba:7d:80:40: bf:3c:7a:77:81:ad:3f:10:f3:15:c7:11:86:51:08: 44:90:00:1a:aa:1a:eb:fa:ea:5a:9a:a6:62:a4:3b: 07:86:00:a8:32:4a:53:87:9b:84:fc:0a:8c:91:54: d3:8e:61:99:e5:13:6a:37:e8:e1:93:88:b5:cf:18: af:d6:53:d0:3f:e1:20:02:59:00:68:59:78:11:bd: 11:bd:0b:46:12:9b:45:d8:bc:0a:b6:b5:27:5e:a7: f9:68:75:cc:56:ce:20:d4:49:86:eb:83:0b:1a:01: 83:e9:93:e3:59:f1:76:21:0b:ad:1a:a9:06:a0:ba: 10:5f:90:91:ea:d3:18:06:d4:05:2d:f0:b0:00:06: 96:32:5b:c3:b6:02:30:e1:00:7d:76:e3:bb:0f:1c: 12:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A7:B7:22:CF:29:67:46:32:70:F2:54:44:6E:7E:AF:C3:67:D3:9F X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:92:65:3c:b9:d4:23:57:ed:d2:dd:d9:0b:68:5c:f8:be:42: 74:dd:95:13:80:6b:c6:62:28:39:4e:38:74:21:97:8d:a8:f1: 45:ec:d9:3b:5e:17:e5:56:78:15:c8:0f:2f:ff:bb:3a:4f:e0: 1e:25:af:ae:4c:7e:a6:51:b0:f6:39:10:44:22:f5:14:3a:e8: 1c:dc:a4:c0:2b:3b:d1:ab:89:47:27:94:44:9d:04:8a:67:98: 5a:95:26:16:f2:99:88:ea:55:ab:12:6d:36:c2:87:e0:07:3c: 6a:b3:aa:e6:ca:cd:62:ea:86:da:cb:f2:85:16:09:c3:9f:74: 53:70:90:d8:53:c8:0c:04:54:05:99:64:e7:e0:b9:d4:0f:3e: e0:18:e2:c6:60:23:5f:eb:2d:d8:9c:66:01:7b:cf:0a:d8:f8: 94:0b:3e:ef:d7:c9:60:e6:69:ab:47:b4:8d:ac:81:52:3c:90: 3b:e4:56:a6:10:49:a4:af:47:82:30:f4:3a:19:81:7e:87:a6: 9e:d2:79:37:42:02:42:49:a6:62:2d:98:1e:37:04:7a:1e:70: dc:82:a0:5f:be:70:bb:2d:60:31:90:a7:68:03:fd:17:b9:08: 42:9a:d0:ad:fa:56:5b:2e:ad:a6:5f:36:f0:7e:d9:b6:59:0a: dc:bb:9c:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTA2MTUwNzA0NTFaFw0yNTA2MjIwNzA0NTFaMBgxFjAUBgNV BAMTDTY4NGU3MDkzLWVkZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDhIiY9e4uv//uHZwLOFTlPkfr3WS3YdOqo6k3guFOaDN0j9yOo0yCt9/zb8pai II+Z0pkmI1CpOY3u4TU6ShcbS25ia6t77zllCkgMiASAJznbDKVGOFwgdQD5XWK7 cumRUc+0un2AQL88eneBrT8Q8xXHEYZRCESQABqqGuv66lqapmKkOweGAKgySlOH m4T8CoyRVNOOYZnlE2o36OGTiLXPGK/WU9A/4SACWQBoWXgRvRG9C0YSm0XYvAq2 tSdep/lodcxWziDUSYbrgwsaAYPpk+NZ8XYhC60aqQaguhBfkJHq0xgG1AUt8LAA BpYyW8O2AjDhAH1247sPHBJDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+qe3Is8p Z0YycPJURG5+r8Nn058wHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIOSZTy51CNX7dLd2QtoXPi+QnTdlROAa8ZiKDlOOHQhl42o8UXs2Tte F+VWeBXIDy//uzpP4B4lr65MfqZRsPY5EEQi9RQ66BzcpMArO9GriUcnlESdBIpn mFqVJhbymYjqVasSbTbCh+AHPGqzqubKzWLqhtrL8oUWCcOfdFNwkNhTyAwEVAWZ ZOfgudQPPuAY4sZgI1/rLdicZgF7zwrY+JQLPu/XyWDmaatHtI2sgVI8kDvkVqYQ SaSvR4Iw9DoZgX6Hpp7SeTdCAkJJpmItmB43BHoecNyCoF++cLstYDGQp2gD/Re5 CEKa0K36VlsuraZfNvB+2bZZCty7nG4= -----END CERTIFICATE-----Generated at Tue Jun 17 01:26:37 2025 by rpki-client