$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft File: 2H4ClpVGrcVaesygjK2yh5vGmck.mft (raw, json) Hash identifier: p6CZ+tQRXF8jdDwg9+gYDByuMtNJ3IvLGu8VyjpHFuc= Subject key identifier: 48:2F:9D:52:7B:11:65:42:3F:01:6C:B2:22:FE:02:CF:21:FF:F2:8D Authority key identifier: D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 Certificate issuer: /CN=A9185B5F/serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft Manifest number: 0188 Signing time: Fri 13 Jun 2025 02:34:55 +0000 Manifest this update: Fri 13 Jun 2025 02:34:55 +0000 Manifest next update: Fri 20 Jun 2025 02:34:55 +0000 Files and hashes: 1: 2H4ClpVGrcVaesygjK2yh5vGmck.crl (hash: tmcPsBpuKdyPSLrRawbb/KecR9v/IaZr7rtulyEm87c=) 2: A4B0D326F0A311ED99A1471CC4F9AE02.roa (hash: YT1DLrJvP+2w7lodtwm2stNsNaNoq+ytHid9uR561S8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185B5F, serialNumber=D87E02969546ADC55A7ACCA08CADB2879BC699C9 Validity Not Before: Jun 13 02:34:55 2025 GMT Not After : Jun 20 02:34:55 2025 GMT Subject: CN=684b8e4f-925b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3d:f2:f8:fe:1d:e2:9e:58:98:71:e3:d6:a8: 21:5f:53:1c:85:a5:1b:6b:73:fb:b8:8a:0a:cc:ec: 04:25:4d:2e:14:b9:f7:2e:21:f9:a8:ab:cd:35:71: 94:c0:44:97:98:21:8c:b6:68:43:a7:bd:4c:ae:6f: a2:21:32:3c:d9:dc:4a:41:14:46:21:d0:e1:f5:b5: b8:bc:ac:f8:28:4b:be:9d:cd:59:2c:76:50:05:a5: 55:dd:b5:4a:32:ec:8f:8b:74:30:73:1b:bc:da:5c: 80:80:e4:37:9f:9b:a7:58:8f:9b:be:4a:5a:28:75: ac:28:17:36:0e:00:72:58:9c:c4:0c:c9:7c:5d:b4: f7:88:8f:7b:aa:86:5a:1e:3e:1b:c6:47:37:3d:73: 2c:a4:8b:c5:24:8a:64:f0:99:c6:ce:85:3a:70:cb: 6a:42:36:4a:50:2b:7a:12:18:d2:45:d0:9c:54:41: 4d:9c:b7:61:2e:cd:20:e6:75:73:a4:fb:5b:40:f1: 6e:48:a2:ef:5e:fb:b1:eb:2b:67:ef:92:d7:61:41: 72:76:f0:52:99:f9:95:7a:0e:55:d3:42:50:09:3f: 89:a3:76:13:0d:ad:ad:4b:11:4a:77:95:03:55:ef: 3f:ef:89:8a:ef:c1:01:62:c5:c4:0c:5d:e6:9f:bd: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2F:9D:52:7B:11:65:42:3F:01:6C:B2:22:FE:02:CF:21:FF:F2:8D X509v3 Authority Key Identifier: keyid:D8:7E:02:96:95:46:AD:C5:5A:7A:CC:A0:8C:AD:B2:87:9B:C6:99:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2H4ClpVGrcVaesygjK2yh5vGmck.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B5F/8E418020F09B11EDA606BD62C4F9AE02/2H4ClpVGrcVaesygjK2yh5vGmck.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:7b:b1:e6:44:2e:b0:08:cf:b1:33:5c:40:f2:33:d7:a6:cd: 39:5c:ef:0a:b4:21:2d:48:0c:14:17:11:35:7e:7d:82:b2:10: b7:89:db:1e:04:f7:ef:d4:93:4f:a9:3d:fe:76:50:b6:93:ed: f4:b8:18:1e:5b:3f:e4:5a:60:e9:dd:90:f1:50:68:a3:bb:80: fb:2f:e8:85:1a:d0:15:ab:cb:14:a5:00:89:24:ec:c7:fa:01: 67:d8:02:d0:fd:d6:8d:dc:a4:15:70:36:9c:db:21:11:0b:15: 7f:c9:b6:05:05:e8:a1:ed:14:2c:ae:a1:23:63:4a:65:c1:d0: 8d:77:01:6d:e0:f1:f7:5d:4d:ba:93:66:ba:95:0e:24:ba:c3: 1f:bc:58:9c:c7:2f:74:24:b9:ec:81:f6:37:75:11:18:ef:59: 51:a1:e6:92:d5:d9:c9:7b:32:bb:b0:4c:ab:aa:9e:70:b5:3d: 94:48:40:7a:df:d7:19:eb:b6:b7:68:04:47:d6:3d:9c:c7:f5: b5:0e:82:af:88:cd:02:0b:84:35:a3:dd:99:74:7f:f0:d5:7b: 28:c2:d6:25:29:96:84:69:c8:84:1e:74:ab:4e:94:01:f9:54: bd:4e:38:a1:0f:db:56:d7:2b:31:3e:a6:2e:47:42:40:73:f6: 46:01:cc:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVCNUYxMTAvBgNVBAUTKEQ4N0UwMjk2OTU0NkFEQzU1QTdBQ0NBMDhDQURCMjg3 OUJDNjk5QzkwHhcNMjUwNjEzMDIzNDU1WhcNMjUwNjIwMDIzNDU1WjAYMRYwFAYD VQQDEw02ODRiOGU0Zi05MjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqT3y+P4d4p5YmHHj1qghX1MchaUba3P7uIoKzOwEJU0uFLn3LiH5qKvNNXGU wESXmCGMtmhDp71Mrm+iITI82dxKQRRGIdDh9bW4vKz4KEu+nc1ZLHZQBaVV3bVK MuyPi3Qwcxu82lyAgOQ3n5unWI+bvkpaKHWsKBc2DgByWJzEDMl8XbT3iI97qoZa Hj4bxkc3PXMspIvFJIpk8JnGzoU6cMtqQjZKUCt6EhjSRdCcVEFNnLdhLs0g5nVz pPtbQPFuSKLvXvux6ytn75LXYUFydvBSmfmVeg5V00JQCT+Jo3YTDa2tSxFKd5UD Ve8/74mK78EBYsXEDF3mn71y9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEgvnVJ7 EWVCPwFssiL+As8h//KNMB8GA1UdIwQYMBaAFNh+ApaVRq3FWnrMoIytsoebxpnJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUI1Ri84RTQxODAyMEYw OUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3JjVmFlc3lnaksyeWg1dkdt Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJINENscFZHcmNWYWVzeWdqSzJ5aDV2R21jay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUI1Ri84RTQxODAyMEYwOUIxMUVEQTYwNkJENjJDNEY5QUUwMi8ySDRDbHBWR3Jj VmFlc3lnaksyeWg1dkdtY2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVe7HmRC6wCM+xM1xA8jPXps05XO8KtCEtSAwUFxE1fn2CshC3idse BPfv1JNPqT3+dlC2k+30uBgeWz/kWmDp3ZDxUGiju4D7L+iFGtAVq8sUpQCJJOzH +gFn2ALQ/daN3KQVcDac2yERCxV/ybYFBeih7RQsrqEjY0plwdCNdwFt4PH3XU26 k2a6lQ4kusMfvFicxy90JLnsgfY3dREY71lRoeaS1dnJezK7sEyrqp5wtT2USEB6 39cZ67a3aARH1j2cx/W1DoKviM0CC4Q1o92ZdH/w1XsowtYlKZaEaciEHnSrTpQB +VS9TjihD9tW1ysxPqYuR0JAc/ZGAcxw -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:16 2025 by rpki-client