$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: AOsFGUBmEhK9uwLutPx+mwAxhJVx0YXNmDqeHkgY+4o= Subject key identifier: 05:AD:D0:8F:0D:16:DB:F3:26:C6:C1:7D:AD:CB:33:D1:9F:A9:26:ED Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 07E7 Signing time: Sat 14 Jun 2025 20:46:18 +0000 Manifest this update: Sat 14 Jun 2025 20:46:17 +0000 Manifest next update: Sat 21 Jun 2025 20:46:17 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: LM3ZLAKAGM+6SoELXpCKimppE5j3pUmxEU1sPSU8Dbw=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: 6+tk9n+mwKmveOFrTOSyNOKqHKQyrXgQ60Gavs+tji8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: Jun 14 20:46:17 2025 GMT Not After : Jun 21 20:46:17 2025 GMT Subject: CN=684ddf99-7391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fa:4b:76:43:03:19:d0:48:0d:4d:72:65:96: c0:30:53:86:d4:bd:30:67:33:30:94:15:ea:48:59: ed:58:06:32:23:f8:0e:1d:de:a3:f2:9e:02:38:b9: 2b:be:e4:1b:dc:2d:53:01:50:8e:a1:ec:63:aa:7d: 36:08:48:6e:7e:99:e1:a5:a0:75:b2:f2:bb:b1:33: ee:ed:0c:ab:f5:5b:19:ca:aa:97:e7:9f:60:b8:bb: 78:7d:99:34:0e:6e:0d:47:37:c3:8b:99:e0:53:00: db:dc:f5:ad:a0:4b:ae:3e:3f:30:a6:ff:e0:0f:23: 26:a8:1f:b2:17:7a:69:dd:34:1a:77:f4:0c:2f:db: 8c:48:61:51:f9:de:7e:91:6f:24:55:cf:36:f3:80: ec:e1:fe:2c:f7:16:79:db:83:77:fb:0a:b4:6c:48: b4:03:fa:cd:3f:7f:79:6a:cb:f4:4c:91:30:b9:f3: 3f:d4:c2:a3:8f:4a:55:1f:35:de:9e:bf:88:50:49: 23:76:38:2d:72:0d:13:c6:cf:5e:24:7f:d6:94:93: 1d:5c:c9:d6:48:03:a1:93:77:62:70:8d:3a:5b:32: 0c:89:ab:16:11:d6:b2:d7:4f:9c:72:92:88:5a:95: 52:b2:81:9c:31:00:76:36:99:77:36:0b:61:26:d5: ff:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AD:D0:8F:0D:16:DB:F3:26:C6:C1:7D:AD:CB:33:D1:9F:A9:26:ED X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:96:f9:44:5c:f7:86:04:60:5a:09:75:b0:ca:bb:ad:f0:6d: e4:28:94:50:e4:44:21:24:b9:d2:93:d0:a9:f5:98:99:79:88: 73:2c:c5:d5:07:73:6e:f6:f3:e7:4e:87:36:fb:04:46:e3:bd: 26:eb:3d:94:eb:da:36:3e:82:4f:2a:06:0f:c8:85:31:da:38: 34:87:d5:1d:fe:87:94:95:87:9a:40:8e:77:98:76:3f:f4:1b: b0:b4:c7:ae:a7:14:ac:79:57:50:d8:0a:e5:bd:5e:fe:46:3e: 07:69:cd:1c:8b:a1:81:e3:f3:97:30:4b:41:d1:ce:03:24:e2: d8:33:2c:ca:bf:2f:b7:5d:83:ca:94:6d:c9:d4:61:b5:99:0a: 97:60:6e:a0:44:e7:42:8e:5c:5e:ef:74:6c:9b:96:78:77:ee: c8:58:e1:23:4b:cc:88:81:20:b0:37:14:67:19:89:68:3b:bb: 75:ee:96:be:3a:df:4f:58:11:87:29:e5:ab:ca:07:65:ff:7b: 01:14:53:50:f0:51:62:8e:5b:ce:13:17:c3:51:b2:0d:7d:a3: a0:62:8e:d2:ca:62:a8:ff:ea:a8:f6:de:2f:c6:8b:bb:de:05: 3b:42:9a:fa:1e:1e:55:d2:dd:99:6d:d1:41:39:1e:9b:c9:d2: 55:a8:eb:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUwNjE0MjA0NjE3WhcNMjUwNjIxMjA0NjE3WjAYMRYwFAYD VQQDEw02ODRkZGY5OS03MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm/pLdkMDGdBIDU1yZZbAMFOG1L0wZzMwlBXqSFntWAYyI/gOHd6j8p4COLkr vuQb3C1TAVCOoexjqn02CEhufpnhpaB1svK7sTPu7Qyr9VsZyqqX559guLt4fZk0 Dm4NRzfDi5ngUwDb3PWtoEuuPj8wpv/gDyMmqB+yF3pp3TQad/QML9uMSGFR+d5+ kW8kVc8284Ds4f4s9xZ524N3+wq0bEi0A/rNP395asv0TJEwufM/1MKjj0pVHzXe nr+IUEkjdjgtcg0Txs9eJH/WlJMdXMnWSAOhk3dicI06WzIMiasWEday10+ccpKI WpVSsoGcMQB2Npl3NgthJtX/PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWt0I8N FtvzJsbBfa3LM9GfqSbtMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzlvlEXPeGBGBaCXWwyrut8G3kKJRQ5EQhJLnSk9Cp9ZiZeYhzLMXV B3Nu9vPnToc2+wRG470m6z2U69o2PoJPKgYPyIUx2jg0h9Ud/oeUlYeaQI53mHY/ 9BuwtMeupxSseVdQ2ArlvV7+Rj4Hac0ci6GB4/OXMEtB0c4DJOLYMyzKvy+3XYPK lG3J1GG1mQqXYG6gROdCjlxe73Rsm5Z4d+7IWOEjS8yIgSCwNxRnGYloO7t17pa+ Ot9PWBGHKeWrygdl/3sBFFNQ8FFijlvOExfDUbINfaOgYo7SymKo/+qo9t4vxou7 3gU7Qpr6Hh5V0t2ZbdFBOR6bydJVqOtz -----END CERTIFICATE-----Generated at Sun Jun 15 07:12:19 2025 by rpki-client