$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: ZWYOd4MKDtaR0q1H7uCI9qOG2Ft5TTycYpDrkgp0GhU= Subject key identifier: 0F:0C:4D:D4:44:4D:20:B8:54:51:87:87:0B:39:E7:1D:38:69:C4:36 Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 01B0 Signing time: Thu 19 Jun 2025 02:42:09 +0000 Manifest this update: Thu 19 Jun 2025 02:42:08 +0000 Manifest next update: Thu 26 Jun 2025 02:42:08 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: LyOPMiSQCWk3iai0SvK417IXkGeh0+SBiIQ6uqxm3xs=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 02:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Jun 19 02:42:08 2025 GMT Not After : Jun 26 02:42:08 2025 GMT Subject: CN=68537900-e2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:e0:17:2f:a9:b7:ce:97:df:f2:56:2e:c4: 19:cc:4e:fa:7b:4d:4b:07:e4:f9:f8:36:ca:b7:2c: 50:b8:ba:11:62:5a:ef:5d:dc:39:be:80:96:77:cd: 9c:67:3f:94:ce:1d:bc:79:8e:6b:d9:13:69:d4:69: 80:d2:15:f8:1d:38:85:6e:bc:23:ea:cf:f0:4c:b5: d9:34:88:33:6b:28:0d:49:b4:06:81:17:bd:94:0d: e2:e5:a3:12:5a:a2:c5:a3:a7:18:67:b9:2b:9c:3e: 2f:ba:f9:34:5b:10:1b:dc:0c:a6:5e:87:fe:83:11: 62:68:f6:53:75:16:b8:f9:a6:b9:6f:97:cb:32:e5: 28:af:ba:b5:f4:86:44:cd:49:1f:df:88:10:61:12: c1:21:f7:97:e7:ca:99:57:01:0e:6d:ec:ab:ad:90: 46:a6:25:6c:95:d1:61:85:e8:6f:e4:ca:6e:31:e8: 40:e9:61:06:22:e7:7f:ef:d6:68:3d:d0:e6:8e:76: 46:18:0b:bc:59:a6:b2:73:25:dc:a3:df:93:06:59: 91:ef:66:d1:c5:5d:b3:84:f1:f1:1a:a9:55:67:05: 53:1c:88:7c:ac:27:f6:63:bd:c3:05:5c:65:5e:13: c7:45:1c:e2:0a:bd:27:fd:5d:15:32:2a:61:ab:cf: ef:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0C:4D:D4:44:4D:20:B8:54:51:87:87:0B:39:E7:1D:38:69:C4:36 X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:d3:f1:75:f2:fe:8e:08:de:46:89:da:d6:4b:64:f6:f1:71: 2e:98:bf:f1:d6:43:92:1f:dc:44:f0:75:2e:07:ef:5e:a2:18: 54:35:84:a5:41:ca:b3:f9:ac:06:c4:fa:0c:4d:b6:79:4f:51: 93:ff:7a:b7:eb:94:1c:81:c4:7d:75:e5:fa:29:0e:a8:c5:8f: a7:ce:d5:30:b7:76:fa:7a:db:37:e8:e6:75:5c:f2:c7:8b:9f: 93:86:2a:df:0f:4a:68:00:75:2d:e1:1d:b0:f7:8a:37:c9:dc: be:aa:17:32:ab:0c:9b:8e:32:00:ff:55:26:60:0c:7b:8b:9b: 01:98:9f:4e:67:7e:a5:83:8d:9d:45:c8:86:bd:56:39:dd:69: b2:1b:64:55:c3:4f:2c:45:67:14:8c:27:90:f6:0e:df:e2:3b: 36:b4:da:35:25:2b:43:8d:c9:8f:87:16:69:90:fa:01:7b:a0: 42:63:e1:21:d9:8b:04:38:20:3e:f8:a9:0a:d0:f5:3f:47:dd: fb:95:10:17:f6:11:8b:7a:a0:5b:46:1d:20:4c:8d:cf:1e:81: 14:62:43:ac:02:e1:7d:d5:0f:af:14:07:53:1f:71:5b:dc:ed: cd:bf:16:85:8d:02:90:dd:0d:da:bb:75:d9:da:90:70:a3:eb: 9b:7c:68:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjUwNjE5MDI0MjA4WhcNMjUwNjI2MDI0MjA4WjAYMRYwFAYD VQQDEw02ODUzNzkwMC1lMmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5bgFy+pt86X3/JWLsQZzE76e01LB+T5+DbKtyxQuLoRYlrvXdw5voCWd82c Zz+Uzh28eY5r2RNp1GmA0hX4HTiFbrwj6s/wTLXZNIgzaygNSbQGgRe9lA3i5aMS WqLFo6cYZ7krnD4vuvk0WxAb3AymXof+gxFiaPZTdRa4+aa5b5fLMuUor7q19IZE zUkf34gQYRLBIfeX58qZVwEObeyrrZBGpiVsldFhhehv5MpuMehA6WEGIud/79Zo PdDmjnZGGAu8WaaycyXco9+TBlmR72bRxV2zhPHxGqlVZwVTHIh8rCf2Y73DBVxl XhPHRRziCr0n/V0VMiphq8/vUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8MTdRE TSC4VFGHhws55x04acQ2MB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBj0/F18v6OCN5GidrWS2T28XEumL/x1kOSH9xE8HUuB+9eohhUNYSl Qcqz+awGxPoMTbZ5T1GT/3q365QcgcR9deX6KQ6oxY+nztUwt3b6ets36OZ1XPLH i5+ThirfD0poAHUt4R2w94o3ydy+qhcyqwybjjIA/1UmYAx7i5sBmJ9OZ36lg42d RciGvVY53WmyG2RVw08sRWcUjCeQ9g7f4js2tNo1JStDjcmPhxZpkPoBe6BCY+Eh 2YsEOCA++KkK0PU/R937lRAX9hGLeqBbRh0gTI3PHoEUYkOsAuF91Q+vFAdTH3Fb 3O3NvxaFjQKQ3Q3au3XZ2pBwo+ubfGgA -----END CERTIFICATE-----Generated at Fri Jun 20 14:23:25 2025 by rpki-client