$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: kWwqhqSUJ8ocaI6zMRAYJruRzjamic4mh7s2co6t4DM= Subject key identifier: A7:E1:1B:A6:0F:0C:B3:25:EF:79:70:F7:01:9B:80:EF:CC:99:51:B8 Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: D4 Signing time: Thu 07 Aug 2025 06:05:52 +0000 Manifest this update: Thu 07 Aug 2025 06:05:52 +0000 Manifest next update: Thu 14 Aug 2025 06:05:52 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: 3wZ7wpdAFQ3pEMFwQXJ2wDepj2h3y7RqVwox1NseDmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Aug 7 06:05:52 2025 GMT Not After : Aug 14 06:05:52 2025 GMT Subject: CN=68944240-4d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:c4:5d:69:06:3a:04:06:e4:14:70:79:79: 80:19:49:25:23:1b:31:d4:0c:69:15:35:68:b8:4e: f0:c3:fb:3f:2a:6d:5f:97:51:2e:4f:bd:88:1c:47: c2:9d:af:fe:53:d0:b2:43:70:2a:ac:20:8b:c9:e9: b3:14:42:f7:9d:8f:9b:92:23:ab:21:03:9a:ad:28: a4:65:f5:b0:1e:f3:7d:aa:1f:67:e2:12:9c:e7:0e: 05:48:c8:12:bc:f0:8c:77:9e:93:53:19:76:e5:4b: 84:db:eb:29:94:33:2f:52:6b:9f:a9:e8:6c:83:0b: 34:4b:b3:c9:75:1e:26:e1:24:d4:87:e9:34:f3:a0: cd:53:90:22:4f:43:9d:4a:5b:fe:f0:b7:e6:83:47: ea:0e:74:fa:44:4b:6a:b3:8a:5f:d7:83:83:16:9e: f4:b6:49:1d:31:3a:89:4f:18:01:c8:87:f7:1d:ce: a9:24:ff:59:84:a8:1c:6d:dd:fe:4e:2e:33:98:11: fa:ad:51:4e:67:05:23:1d:d6:0c:d8:b3:28:15:69: d5:d7:31:13:fc:ab:d8:41:93:92:be:d0:b5:41:c6: 70:89:13:06:2b:08:3b:e3:c4:a3:9e:88:a5:9f:89: ba:a9:75:8f:49:ab:de:5a:f6:93:e7:dc:b7:a0:53: 18:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:1B:A6:0F:0C:B3:25:EF:79:70:F7:01:9B:80:EF:CC:99:51:B8 X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:23:b2:3f:24:6c:f4:41:bd:36:f1:d9:ef:38:a3:a3:07:35: fe:c9:fd:6b:08:47:f2:2e:c6:f6:1d:8d:73:7c:99:e5:e0:e2: ff:a4:f5:cd:81:f3:50:e9:9e:f4:ba:97:24:52:df:35:de:dd: ab:70:d7:01:61:df:80:6a:8d:f9:dd:0a:d3:5a:fa:65:f6:c7: 90:b5:9a:b0:be:43:42:cf:3b:2e:7b:ef:59:a5:d1:9e:a4:b8: 29:69:59:b4:99:58:52:d6:68:52:e8:ff:26:25:c6:b3:11:fd: c8:98:87:ef:89:5c:77:91:08:92:a5:e8:d1:db:89:8e:b5:4e: c9:c8:24:e8:f0:ee:68:c5:cf:df:22:03:6a:58:c0:69:c0:1a: f9:09:6a:69:6c:46:c8:30:7e:b8:e0:57:59:a8:9b:ab:e5:02: e5:d9:95:3c:ef:d5:d3:38:10:fc:cb:c0:93:3f:38:89:0f:7e: 38:11:12:54:ba:19:ff:63:0e:4f:3d:15:04:92:23:2e:d1:2e: 12:28:56:b3:63:14:74:01:d3:9b:d3:0c:35:68:38:d6:98:f9: 91:6d:ce:31:83:63:12:68:bc:0e:8c:eb:ff:75:36:99:36:f5: 65:45:81:48:e5:18:7d:31:f8:41:a7:c1:dc:2d:be:96:5d:a7: 93:c2:df:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjUwODA3MDYwNTUyWhcNMjUwODE0MDYwNTUyWjAYMRYwFAYD VQQDEw02ODk0NDI0MC00ZDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqSHEXWkGOgQG5BRweXmAGUklIxsx1AxpFTVouE7ww/s/Km1fl1EuT72IHEfC na/+U9CyQ3AqrCCLyemzFEL3nY+bkiOrIQOarSikZfWwHvN9qh9n4hKc5w4FSMgS vPCMd56TUxl25UuE2+splDMvUmufqehsgws0S7PJdR4m4STUh+k086DNU5AiT0Od Slv+8Lfmg0fqDnT6REtqs4pf14ODFp70tkkdMTqJTxgByIf3Hc6pJP9ZhKgcbd3+ Ti4zmBH6rVFOZwUjHdYM2LMoFWnV1zET/KvYQZOSvtC1QcZwiRMGKwg748Sjnoil n4m6qXWPSaveWvaT59y3oFMYXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKfhG6YP DLMl73lw9wGbgO/MmVG4MB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfI7I/JGz0Qb028dnvOKOjBzX+yf1rCEfyLsb2HY1zfJnl4OL/pPXN gfNQ6Z70upckUt813t2rcNcBYd+Aao353QrTWvpl9seQtZqwvkNCzzsue+9ZpdGe pLgpaVm0mVhS1mhS6P8mJcazEf3ImIfviVx3kQiSpejR24mOtU7JyCTo8O5oxc/f IgNqWMBpwBr5CWppbEbIMH644FdZqJur5QLl2ZU879XTOBD8y8CTPziJD344ERJU uhn/Yw5PPRUEkiMu0S4SKFazYxR0AdOb0ww1aDjWmPmRbc4xg2MSaLwOjOv/dTaZ NvVlRYFI5Rh9MfhBp8HcLb6WXaeTwt/L -----END CERTIFICATE-----Generated at Fri Aug 8 10:20:32 2025 by rpki-client