$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: zvYnY3EpowlFqjDDGzP8nRXZwoxwdvVCJqA7jqgMc6s= Subject key identifier: 32:2B:26:F5:7A:C8:F2:1B:C8:C2:1A:00:2B:88:D4:6E:64:3C:FF:A4 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 0793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 078E Signing time: Wed 18 Jun 2025 21:14:05 +0000 Manifest this update: Wed 18 Jun 2025 21:14:04 +0000 Manifest next update: Wed 25 Jun 2025 21:14:04 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: 1pHkuXdSnrQPwlYVa/oL2PI345i0X1RdIhxKOEuvEHk=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1939 (0x793) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Jun 18 21:14:04 2025 GMT Not After : Jun 25 21:14:04 2025 GMT Subject: CN=68532c1d-b74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:f9:dc:3b:6b:7e:f5:71:5f:a4:23:e4:63: bd:9f:f1:24:d4:1f:92:02:e6:ab:1e:61:c8:72:d3: 7d:4e:ce:5e:1b:25:01:ae:91:ee:e6:cf:b6:9c:fa: 62:25:bc:2c:36:2a:e5:27:2f:ed:2f:6c:b6:f2:9d: b1:f5:f8:e2:e9:31:a7:10:32:1a:fc:9e:b4:b9:04: 49:0a:22:64:78:89:f1:31:98:aa:e0:27:18:6a:df: 47:01:60:18:c6:f8:70:08:93:35:81:b9:b6:3a:b8: 86:2b:dc:47:12:88:be:b6:eb:fe:1d:6b:7e:67:ca: a2:fd:a0:3a:9a:9a:c8:d9:3d:15:07:e1:bd:01:e2: 34:79:68:95:3f:c0:aa:ee:94:30:8d:61:76:c2:ea: 85:77:36:e9:53:1e:6e:8b:17:d1:8f:1c:c6:43:48: 48:49:20:39:a6:40:c8:f9:fe:04:72:7c:64:d1:83: 6e:f5:9a:05:a3:42:2f:26:77:c0:55:48:ef:8e:54: 95:b7:35:48:8c:99:70:bb:87:6d:0e:d4:14:b2:f7: c0:8b:91:a5:f6:7c:c8:ed:6a:b5:e5:ec:33:a6:48: 2c:cd:ee:1e:b6:df:7d:07:a9:f8:fa:96:9a:db:3f: b1:ce:66:be:d4:2a:7b:bc:85:08:47:86:29:32:4a: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2B:26:F5:7A:C8:F2:1B:C8:C2:1A:00:2B:88:D4:6E:64:3C:FF:A4 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d6:aa:bb:d9:fd:50:b7:65:11:16:c3:cc:0b:d0:b9:35:10: ea:76:0b:25:21:4a:46:ec:de:eb:1e:17:cc:8e:74:89:75:dd: ab:49:53:04:15:c4:1c:88:ec:a3:fd:5a:02:02:8b:8e:9c:26: 4d:44:28:fa:be:5b:0d:8b:7f:ea:a4:63:ab:d7:84:8e:17:a8: de:bd:fe:4f:1c:29:9c:03:14:b4:a8:f9:74:95:bf:5f:ae:c4: 4c:7c:c6:0c:de:b2:29:20:f5:96:91:df:c7:21:07:12:f5:00: 6c:8c:c8:cf:53:52:00:ea:00:96:62:80:22:b4:6d:ef:64:85: b9:b2:8c:a4:a5:6a:68:63:c7:57:e1:22:64:82:69:4c:c4:66: 70:67:30:ed:6a:23:e3:89:5c:03:2a:0e:f5:08:8b:47:1b:cd: 83:8a:03:b5:66:be:48:9b:bb:c3:15:c8:33:0b:9b:f3:40:c9: 70:3b:ed:c4:cc:6d:e2:d0:c8:79:05:34:cb:e0:51:2a:2d:7e: f1:9a:fe:9b:07:c5:48:5d:c1:7a:4c:b7:dd:5c:fe:d8:28:55: 88:6a:d7:d5:fa:17:a2:e6:35:79:44:c1:0d:5b:52:29:16:e2: 49:ab:c5:67:51:ca:d3:34:77:02:11:e9:8f:ef:4f:ca:8a:42: 9d:fa:54:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjUwNjE4MjExNDA0WhcNMjUwNjI1MjExNDA0WjAYMRYwFAYD VQQDEw02ODUzMmMxZC1iNzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNv53DtrfvVxX6Qj5GO9n/Ek1B+SAuarHmHIctN9Ts5eGyUBrpHu5s+2nPpi JbwsNirlJy/tL2y28p2x9fji6TGnEDIa/J60uQRJCiJkeInxMZiq4CcYat9HAWAY xvhwCJM1gbm2OriGK9xHEoi+tuv+HWt+Z8qi/aA6mprI2T0VB+G9AeI0eWiVP8Cq 7pQwjWF2wuqFdzbpUx5uixfRjxzGQ0hISSA5pkDI+f4Ecnxk0YNu9ZoFo0IvJnfA VUjvjlSVtzVIjJlwu4dtDtQUsvfAi5Gl9nzI7Wq15ewzpkgsze4ett99B6n4+paa 2z+xzma+1Cp7vIUIR4YpMkqTjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIrJvV6 yPIbyMIaACuI1G5kPP+kMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO1qq72f1Qt2URFsPMC9C5NRDqdgslIUpG7N7rHhfMjnSJdd2rSVME FcQciOyj/VoCAouOnCZNRCj6vlsNi3/qpGOr14SOF6jevf5PHCmcAxS0qPl0lb9f rsRMfMYM3rIpIPWWkd/HIQcS9QBsjMjPU1IA6gCWYoAitG3vZIW5soykpWpoY8dX 4SJkgmlMxGZwZzDtaiPjiVwDKg71CItHG82DigO1Zr5Im7vDFcgzC5vzQMlwO+3E zG3i0Mh5BTTL4FEqLX7xmv6bB8VIXcF6TLfdXP7YKFWIatfV+hei5jV5RMENW1Ip FuJJq8VnUcrTNHcCEemP70/KikKd+lTD -----END CERTIFICATE-----Generated at Fri Jun 20 11:39:30 2025 by rpki-client