$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: g0wJLyfEa3SSVuWzENVojdA4Ef9d7c9MRQO/W4Fiesg= Subject key identifier: D0:72:26:AD:12:BD:D2:D0:92:56:1C:48:21:F9:41:78:53:43:EC:CE Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0EB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0EA9 Signing time: Sun 20 Jul 2025 17:42:29 +0000 Manifest this update: Sun 20 Jul 2025 17:42:29 +0000 Manifest next update: Sun 27 Jul 2025 17:42:28 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: o4yK0qBU8The9jIDRTMULg0owT3OAvbaksB46LgHZyg=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: Lhup7Zk9zUWbpx4YvLoYtp8k4a6DjCWODZVfnB4MNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:42:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3762 (0xeb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: Jul 20 17:42:29 2025 GMT Not After : Jul 27 17:42:28 2025 GMT Subject: CN=687d2a85-b249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:67:ca:56:83:a8:ff:79:f9:56:71:a2:f8: 09:bc:2a:4a:0a:cf:c5:f0:2e:1b:45:5f:59:78:f4: bf:b5:de:ad:4a:95:69:84:cc:da:31:ec:1e:67:38: 64:e5:7f:c8:c7:cb:81:7e:5a:3c:c6:74:1a:46:19: 5d:5e:52:50:f2:51:fc:2e:1b:e5:1d:6a:d4:2e:cc: b2:6b:a5:a3:31:33:26:96:6b:2c:2d:46:6f:0a:8b: 21:94:ac:f2:80:5b:d4:d7:98:cc:2d:d0:4f:a8:de: 9c:b8:55:01:e7:ea:1a:60:eb:0e:14:ff:bf:fc:fc: 46:6c:5b:a1:75:47:82:36:a0:c6:1d:b2:93:ba:76: ab:84:a1:4c:79:6f:bc:b7:9e:42:08:e8:6f:01:45: 2c:7d:83:b8:04:6f:d2:81:89:40:05:b0:03:91:12: 8c:6f:9b:3a:3a:56:89:02:73:08:77:0e:68:55:75: 61:e3:b6:b5:b3:45:ab:ac:71:fc:f7:e8:83:4b:fd: 15:8a:32:8c:39:f2:02:3c:b9:a2:a4:fc:86:b0:7a: b4:ab:b8:4e:6b:2a:a4:f1:6f:3d:13:da:a9:58:43: c0:8e:25:34:07:39:4d:57:a1:24:08:68:23:e0:0f: 4c:bb:c1:3c:ce:ce:5c:66:2d:16:ee:83:77:e5:d8: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:72:26:AD:12:BD:D2:D0:92:56:1C:48:21:F9:41:78:53:43:EC:CE X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b9:09:46:04:fc:b9:ed:e6:d9:5e:dc:af:37:ef:27:98:66: 27:3c:bf:d8:23:53:01:3a:48:61:54:90:cf:33:79:a1:6d:49: 9f:d7:46:d2:4f:43:be:81:99:e7:91:db:5e:fc:31:60:60:a4: 0d:b9:c0:f9:69:c3:04:7e:8b:e9:c3:b6:e1:b3:c0:fb:6a:88: 00:41:43:63:ae:12:6f:d5:91:e4:0d:55:1e:7f:86:cf:42:a4: a0:87:e0:c7:60:2b:10:ca:49:27:c7:72:c2:12:04:02:f0:26: f8:8e:4b:23:bb:9f:5e:e6:c8:da:c8:5e:fa:27:86:a9:da:0d: 52:99:63:68:96:d1:f3:9e:1c:cb:93:4a:f5:b3:3d:55:0c:a1: 44:21:33:b1:93:d0:2a:b1:fa:c6:37:24:00:41:3e:88:40:b3: 3f:55:f4:8f:8c:5b:36:8a:c9:7d:92:7a:e3:e7:1b:1f:21:d5: f6:7c:30:8d:81:ad:a8:3d:73:c2:17:e1:be:cc:c3:27:08:6b: 56:20:fb:d4:75:73:0b:39:bd:1b:53:00:50:d9:d2:2c:af:76: b5:60:a2:5a:81:4d:c0:3a:2f:f5:98:cb:0d:1d:e5:7d:e5:17: 92:85:fa:39:cd:4f:7d:74:2a:0c:40:66:3e:cf:3c:b1:27:e7: 7f:b9:c6:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjUwNzIwMTc0MjI5WhcNMjUwNzI3MTc0MjI4WjAYMRYwFAYD VQQDEw02ODdkMmE4NS1iMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2c1nylaDqP95+VZxovgJvCpKCs/F8C4bRV9ZePS/td6tSpVphMzaMeweZzhk 5X/Ix8uBflo8xnQaRhldXlJQ8lH8LhvlHWrULsyya6WjMTMmlmssLUZvCoshlKzy gFvU15jMLdBPqN6cuFUB5+oaYOsOFP+//PxGbFuhdUeCNqDGHbKTunarhKFMeW+8 t55CCOhvAUUsfYO4BG/SgYlABbADkRKMb5s6OlaJAnMIdw5oVXVh47a1s0WrrHH8 9+iDS/0VijKMOfICPLmipPyGsHq0q7hOayqk8W89E9qpWEPAjiU0BzlNV6EkCGgj 4A9Mu8E8zs5cZi0W7oN35djzVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNByJq0S vdLQklYcSCH5QXhTQ+zOMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVuQlGBPy57ebZXtyvN+8nmGYnPL/YI1MBOkhhVJDPM3mhbUmf10bS T0O+gZnnkdte/DFgYKQNucD5acMEfovpw7bhs8D7aogAQUNjrhJv1ZHkDVUef4bP QqSgh+DHYCsQykknx3LCEgQC8Cb4jksju59e5sjayF76J4ap2g1SmWNoltHznhzL k0r1sz1VDKFEITOxk9AqsfrGNyQAQT6IQLM/VfSPjFs2isl9knrj5xsfIdX2fDCN ga2oPXPCF+G+zMMnCGtWIPvUdXMLOb0bUwBQ2dIsr3a1YKJagU3AOi/1mMsNHeV9 5ReShfo5zU99dCoMQGY+zzyxJ+d/uca3 -----END CERTIFICATE-----Generated at Mon Jul 21 23:50:45 2025 by rpki-client