$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: Dm8srqWmmsjSb/43iAm/HIHIzvi5ITU/rJP8/hG5ND8= Subject key identifier: 95:F4:7D:61:0D:3A:27:45:67:51:50:E0:80:F8:AB:03:66:A0:D1:4F Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0986 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0978 Signing time: Sat 14 Jun 2025 19:58:49 +0000 Manifest this update: Sat 14 Jun 2025 19:58:49 +0000 Manifest next update: Sat 21 Jun 2025 19:58:49 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: JDAs4DmIfRnVYFZk8L7WvQ142/cjEnsV4KePQ17T0l8=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2438 (0x986) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Jun 14 19:58:49 2025 GMT Not After : Jun 21 19:58:49 2025 GMT Subject: CN=684dd479-b6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5f:0d:2f:1e:6a:36:56:61:ca:1f:4e:85:d2: 2e:b6:8d:a5:64:45:1d:58:ee:78:2c:46:cb:a4:f3: e8:16:98:55:83:bf:6b:1c:2c:e8:e4:b0:fb:d7:83: 9f:11:8d:19:7f:a3:8a:d3:cd:d0:d3:07:7f:11:9d: 45:1a:8d:ee:7b:3c:51:cd:a3:73:d7:0e:71:7f:e5: 1e:78:88:ff:40:0d:a3:dc:df:f0:0f:9f:ee:28:1e: d8:de:b2:53:dd:0e:1f:6b:ca:8f:69:6e:4a:e6:57: 25:c5:6d:1d:90:07:9f:52:b8:26:f3:13:31:a0:dc: 98:d3:96:8e:10:76:7b:5c:56:d3:ad:d8:7e:db:5a: 8c:3b:f7:e8:c6:9c:5d:25:0d:66:a6:ff:71:2e:e2: 33:73:af:df:76:67:21:1b:4f:fa:07:cb:12:f6:e2: d9:ec:bf:3b:fd:b8:be:4d:cc:47:ea:14:44:a1:5c: 2f:aa:10:65:65:0e:a6:0f:3b:c9:a5:cf:31:36:b2: ea:d9:69:8b:26:f1:6a:75:96:63:c4:4f:9d:91:fe: 8d:69:b6:16:2f:60:52:3a:b4:e1:33:a7:01:29:aa: 7f:ad:c6:90:b8:6e:c8:97:56:bf:36:16:50:c0:82: cf:42:ed:45:cf:ac:0a:f2:94:4a:10:18:33:52:42: 15:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F4:7D:61:0D:3A:27:45:67:51:50:E0:80:F8:AB:03:66:A0:D1:4F X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:31:68:b5:60:d9:1b:59:1d:9c:80:78:10:9c:a8:da:b5:42: a3:7c:b3:87:14:e4:c5:1b:d2:87:d8:42:a1:83:47:74:5c:cb: 23:c9:fc:17:83:44:ba:05:f0:0d:cf:f6:a8:84:58:f2:60:88: 6d:45:04:a7:18:71:11:86:a3:43:ff:c0:75:a9:08:c3:d2:f4: 71:e5:ab:5f:7a:46:ad:7f:81:aa:c3:01:79:b5:56:c2:98:5f: f2:7b:cb:a5:a1:2c:6f:06:81:62:da:2a:c9:ba:be:8d:36:99: 98:f7:f0:74:d7:d2:56:f4:31:60:2c:f7:f0:96:f6:15:37:c3: 1f:0f:91:ea:34:6a:b1:07:53:d8:1c:bb:65:2a:42:d0:14:2f: 8c:84:cb:7f:5a:db:33:f6:2a:74:06:42:00:29:7c:46:76:68: 80:d1:87:cf:fb:ff:c6:98:45:95:63:83:ef:09:d2:cf:69:44: d5:57:29:63:3d:1d:c1:e5:3d:65:e4:fc:d9:3a:c6:eb:71:ed: e4:8c:dd:7d:5d:cf:cf:ae:e7:51:27:5a:dd:45:43:e5:3c:e1: 65:11:51:45:11:a0:6f:86:fb:3e:da:25:09:14:13:04:f5:19: fc:ba:5a:e7:c3:01:c1:bd:04:72:3a:98:02:d4:32:a9:b1:0b: 1b:da:03:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwNjE0MTk1ODQ5WhcNMjUwNjIxMTk1ODQ5WjAYMRYwFAYD VQQDEw02ODRkZDQ3OS1iNmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5F8NLx5qNlZhyh9OhdIuto2lZEUdWO54LEbLpPPoFphVg79rHCzo5LD714Of EY0Zf6OK083Q0wd/EZ1FGo3uezxRzaNz1w5xf+UeeIj/QA2j3N/wD5/uKB7Y3rJT 3Q4fa8qPaW5K5lclxW0dkAefUrgm8xMxoNyY05aOEHZ7XFbTrdh+21qMO/foxpxd JQ1mpv9xLuIzc6/fdmchG0/6B8sS9uLZ7L87/bi+TcxH6hREoVwvqhBlZQ6mDzvJ pc8xNrLq2WmLJvFqdZZjxE+dkf6NabYWL2BSOrThM6cBKap/rcaQuG7Il1a/NhZQ wILPQu1Fz6wK8pRKEBgzUkIVSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX0fWEN OidFZ1FQ4ID4qwNmoNFPMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbMWi1YNkbWR2cgHgQnKjatUKjfLOHFOTFG9KH2EKhg0d0XMsjyfwX g0S6BfANz/aohFjyYIhtRQSnGHERhqND/8B1qQjD0vRx5atfekatf4GqwwF5tVbC mF/ye8uloSxvBoFi2irJur6NNpmY9/B019JW9DFgLPfwlvYVN8MfD5HqNGqxB1PY HLtlKkLQFC+MhMt/Wtsz9ip0BkIAKXxGdmiA0YfP+//GmEWVY4PvCdLPaUTVVylj PR3B5T1l5PzZOsbrce3kjN19Xc/PrudRJ1rdRUPlPOFlEVFFEaBvhvs+2iUJFBME 9Rn8ulrnwwHBvQRyOpgC1DKpsQsb2gM1 -----END CERTIFICATE-----Generated at Sun Jun 15 09:48:24 2025 by rpki-client