$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: MU8CnbCjxjOCoA3uTzJflzaAB5FKMrhRtVLVIgRRX+Y= Subject key identifier: 7E:D9:4B:8E:41:F9:CC:89:6A:18:B3:BA:89:41:9F:56:F4:CB:0E:F0 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 03A4 Signing time: Fri 13 Jun 2025 00:18:09 +0000 Manifest this update: Fri 13 Jun 2025 00:18:09 +0000 Manifest next update: Fri 20 Jun 2025 00:18:09 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: F/cGHghKJrGkR3BT1ikh5QMO57xqcCTcpzm8QnmBMoo=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Jun 13 00:18:09 2025 GMT Not After : Jun 20 00:18:09 2025 GMT Subject: CN=684b6e41-03d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:ef:39:c1:4d:f3:fb:90:9d:d8:e5:ae:d2: b2:d6:21:f5:82:f7:67:1d:40:70:67:d1:b0:81:2c: 43:ca:45:00:e2:0e:3f:59:df:41:db:a8:d4:25:20: a7:37:f1:d8:37:b4:b2:66:d5:de:32:50:72:a1:ce: 0a:b8:3f:b8:1a:d2:2c:37:09:2a:49:e8:3c:91:61: a3:78:38:bc:6d:9f:6a:d6:7c:52:8b:fa:04:1e:53: f7:9e:98:0d:2f:67:8e:4b:d0:57:6c:54:70:48:b7: 90:34:db:f4:47:e4:fc:e3:0a:77:99:09:df:ff:2a: 10:d7:b5:08:e9:d7:43:17:1c:42:81:82:a3:2a:46: 1b:d2:4b:22:3a:fe:11:9b:f7:48:fd:82:0f:c3:7b: 79:52:54:0f:77:e0:df:fe:f8:d8:1d:d4:7a:90:14: d4:b6:25:33:40:76:c8:75:d8:a6:c6:b9:ae:9c:cc: ef:0f:54:b6:bf:b9:8e:b3:a1:da:fc:d2:1e:23:01: 0b:e3:37:a1:4c:05:aa:e6:a6:fb:f6:f3:08:49:0b: bd:c0:2a:0e:8f:17:82:4b:89:51:3c:0a:cd:82:bc: b4:99:5c:28:60:bc:ec:17:a1:33:5b:bf:a9:23:ff: 3e:13:20:43:7a:ff:01:71:c1:26:30:dd:48:2e:1d: f6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D9:4B:8E:41:F9:CC:89:6A:18:B3:BA:89:41:9F:56:F4:CB:0E:F0 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4f:38:ab:57:8b:de:94:24:d0:8c:67:32:95:56:3d:7c:6b: 7e:3d:05:0a:03:35:1c:1a:5d:04:1e:2a:7e:cb:ff:4e:43:a1: a6:8a:48:dc:a3:35:ec:31:d4:72:45:37:48:0c:e3:95:ce:f5: 2e:44:2e:43:1b:98:a8:ca:b9:0f:20:f4:31:80:e3:87:f0:19: 9f:da:97:7f:0e:f9:6b:f4:b3:b7:46:ae:73:04:7a:f7:17:53: 26:fa:68:ce:a1:8a:be:e2:32:93:9b:d2:74:d7:31:52:60:8a: 28:c7:77:fc:f9:64:0e:91:3e:21:ba:b9:0d:4f:1d:a3:3b:3f: 06:72:c0:68:88:20:0c:37:d1:2e:78:07:37:f6:31:01:0c:e5: f8:e4:28:b9:cc:cc:7b:62:f2:1e:35:f9:58:2b:37:3b:a9:de: 33:e8:22:db:db:24:f6:81:b7:a0:ca:41:b4:52:8a:51:e5:d9: 51:08:bf:69:dd:8d:d4:4e:51:81:b9:b5:c7:0c:c2:3f:01:55: e0:2b:8e:42:68:45:c0:c4:50:4c:6e:be:98:74:76:0c:2c:24: a7:96:bf:54:6e:3f:4f:e7:ee:ea:0c:f4:03:7a:3f:54:4e:45: 29:4c:ac:84:f4:3d:f7:92:57:e0:39:2f:6d:b3:c9:e2:e9:a5: 9a:0d:eb:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUwNjEzMDAxODA5WhcNMjUwNjIwMDAxODA5WjAYMRYwFAYD VQQDEw02ODRiNmU0MS0wM2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvzPvOcFN8/uQndjlrtKy1iH1gvdnHUBwZ9GwgSxDykUA4g4/Wd9B26jUJSCn N/HYN7SyZtXeMlByoc4KuD+4GtIsNwkqSeg8kWGjeDi8bZ9q1nxSi/oEHlP3npgN L2eOS9BXbFRwSLeQNNv0R+T84wp3mQnf/yoQ17UI6ddDFxxCgYKjKkYb0ksiOv4R m/dI/YIPw3t5UlQPd+Df/vjYHdR6kBTUtiUzQHbIddimxrmunMzvD1S2v7mOs6Ha /NIeIwEL4zehTAWq5qb79vMISQu9wCoOjxeCS4lRPArNgry0mVwoYLzsF6EzW7+p I/8+EyBDev8BccEmMN1ILh32zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7ZS45B +cyJahizuolBn1b0yw7wMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8TzirV4velCTQjGcylVY9fGt+PQUKAzUcGl0EHip+y/9OQ6Gmikjc ozXsMdRyRTdIDOOVzvUuRC5DG5ioyrkPIPQxgOOH8Bmf2pd/Dvlr9LO3Rq5zBHr3 F1Mm+mjOoYq+4jKTm9J01zFSYIoox3f8+WQOkT4hurkNTx2jOz8GcsBoiCAMN9Eu eAc39jEBDOX45Ci5zMx7YvIeNflYKzc7qd4z6CLb2yT2gbegykG0UopR5dlRCL9p 3Y3UTlGBubXHDMI/AVXgK45CaEXAxFBMbr6YdHYMLCSnlr9Ubj9P5+7qDPQDej9U TkUpTKyE9D33klfgOS9ts8ni6aWaDevr -----END CERTIFICATE-----Generated at Sat Jun 14 18:34:39 2025 by rpki-client