$ rpki-client -vvf rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft File: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft (raw, json) Hash identifier: VCQlsmso+Jkeyh+BdEaPk+squBx/7SQBe8V1GwOezGA= Subject key identifier: 71:11:DD:59:E6:8B:DC:63:9E:48:EF:14:FC:78:C4:80:C9:3A:A8:63 Authority key identifier: D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E Certificate issuer: /CN=A9147049/serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Certificate serial: 25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft Manifest number: 24 Signing time: Sat 19 Jul 2025 08:03:56 +0000 Manifest this update: Sat 19 Jul 2025 08:03:56 +0000 Manifest next update: Sat 26 Jul 2025 08:03:56 +0000 Files and hashes: 1: 2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl (hash: Bfiub8ef6mbftkv12LuwNE4EsoiUSersYO5OZMJVb7k=) 2: 321C6B5C2C6711F0B5DEE20CC4F9AE02.roa (hash: 5ze9WVBdkB3caAS6RW6n0SGf/tYNePtmefl2XUHO5EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37 (0x25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147049, serialNumber=D9D1B055FEFC89F5803A7FA8E2B902619F338D8E Validity Not Before: Jul 19 08:03:56 2025 GMT Not After : Jul 26 08:03:56 2025 GMT Subject: CN=687b516c-8eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8a:75:33:37:99:09:f0:b9:45:f2:07:a2:84: c2:d2:8c:fa:ce:69:53:04:af:a5:48:d2:0c:6e:e1: 2e:3d:12:7f:93:7e:2b:20:9a:e9:6b:d4:67:ee:4f: 02:6e:a8:0a:6f:eb:1a:5f:6c:13:b6:53:67:86:7e: 3e:44:52:19:2b:2e:ad:31:7a:e6:fa:77:e9:aa:13: 38:bd:be:8d:ae:79:7e:b1:e6:93:7a:2c:75:31:c0: 86:46:ec:c2:21:e8:4e:3a:c1:63:29:27:81:e8:a8: 96:28:f7:e4:65:86:d1:6f:47:0f:12:e1:0b:61:ef: 77:b8:76:bc:3f:7c:ec:82:6d:a8:91:30:fc:a9:12: da:7c:f2:7e:08:1b:68:d6:94:6d:e1:5f:20:71:e0: ff:27:bb:be:99:de:34:68:5f:21:68:e3:4d:e7:43: 4c:1d:2c:2d:af:b5:99:13:62:60:01:a5:f5:26:40: 8b:7b:c7:75:70:b8:e7:4e:ad:9e:a1:4e:e2:7b:12: c6:1c:0b:97:67:48:e2:86:70:42:03:b9:c2:02:d5: 9e:82:5e:4f:6f:43:1c:74:26:94:7c:7c:56:fb:e6: a8:8d:dc:5c:06:68:f5:a9:f9:ca:e2:5d:9c:93:62: 86:c1:fe:4b:68:47:47:e9:ad:7c:ef:39:e6:eb:06: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:11:DD:59:E6:8B:DC:63:9E:48:EF:14:FC:78:C4:80:C9:3A:A8:63 X509v3 Authority Key Identifier: keyid:D9:D1:B0:55:FE:FC:89:F5:80:3A:7F:A8:E2:B9:02:61:9F:33:8D:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dGwVf78ifWAOn-o4rkCYZ8zjY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147049/B09CBD662C6611F09DA56B0BC4F9AE02/2dGwVf78ifWAOn-o4rkCYZ8zjY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ca:ce:48:8b:ff:f5:93:56:62:0a:8e:9b:11:b6:a5:06:80: 89:5b:3f:fa:18:64:63:e4:96:11:b4:cd:a4:0a:ac:21:73:85: 54:24:00:cf:cb:a1:b0:2d:52:6e:c1:2a:84:2c:c0:2a:30:1e: d4:8b:46:22:b7:26:38:2d:be:04:33:7d:50:7b:e8:c6:24:b4: b7:9e:82:8a:5d:cc:f2:64:3e:62:ed:a7:80:dc:69:98:8a:d0: 41:59:ec:10:da:51:28:29:69:1a:b4:5d:5e:43:f0:1d:57:db: 0b:59:ba:db:4d:2b:4a:7d:22:e5:62:c7:e5:79:58:a3:31:b6: ce:cf:98:cf:aa:23:f8:63:d8:fc:17:a6:14:53:9c:df:83:77: c2:97:dc:5e:ca:80:a6:df:b9:3e:1b:b9:f0:b5:a4:b6:39:03: 57:60:9c:af:6f:9e:3e:ee:ff:7d:02:1a:9f:87:c3:73:15:64: b9:de:08:c1:28:0a:77:fd:bc:f8:22:7c:4d:6d:72:5c:2f:e5: e0:0a:78:7d:53:b4:45:6a:3b:80:ce:7f:cb:92:d3:cf:92:b3: bc:d7:06:3d:63:74:4d:5a:cd:86:27:f5:8e:b8:1f:7b:20:f4: 74:bf:17:53:3d:86:51:a7:de:e5:05:64:1d:57:95:7f:25:24: af:19:19:72 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzA0OTExMC8GA1UEBRMoRDlEMUIwNTVGRUZDODlGNTgwM0E3RkE4RTJCOTAyNjE5 RjMzOEQ4RTAeFw0yNTA3MTkwODAzNTZaFw0yNTA3MjYwODAzNTZaMBgxFjAUBgNV BAMTDTY4N2I1MTZjLThlYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7inUzN5kJ8LlF8geihMLSjPrOaVMEr6VI0gxu4S49En+Tfisgmulr1GfuTwJu qApv6xpfbBO2U2eGfj5EUhkrLq0xeub6d+mqEzi9vo2ueX6x5pN6LHUxwIZG7MIh 6E46wWMpJ4HoqJYo9+RlhtFvRw8S4Qth73e4drw/fOyCbaiRMPypEtp88n4IG2jW lG3hXyBx4P8nu76Z3jRoXyFo403nQ0wdLC2vtZkTYmABpfUmQIt7x3VwuOdOrZ6h TuJ7EsYcC5dnSOKGcEIDucIC1Z6CXk9vQxx0JpR8fFb75qiN3FwGaPWp+criXZyT YobB/ktoR0fprXzvOebrBtgTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcRHdWeaL 3GOeSO8U/HjEgMk6qGMwHwYDVR0jBBgwFoAU2dGwVf78ifWAOn+o4rkCYZ8zjY4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3MDQ5L0IwOUNCRDY2MkM2 NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZXQU9uLW80cmtDWVo4empZ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMmRHd1ZmNzhpZldBT24tbzRya0NZWjh6alk0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 MDQ5L0IwOUNCRDY2MkM2NjExRjA5REE1NkIwQkM0RjlBRTAyLzJkR3dWZjc4aWZX QU9uLW80cmtDWVo4empZNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXKzkiL//WTVmIKjpsRtqUGgIlbP/oYZGPklhG0zaQKrCFzhVQkAM/L obAtUm7BKoQswCowHtSLRiK3JjgtvgQzfVB76MYktLeegopdzPJkPmLtp4DcaZiK 0EFZ7BDaUSgpaRq0XV5D8B1X2wtZuttNK0p9IuVix+V5WKMxts7PmM+qI/hj2PwX phRTnN+Dd8KX3F7KgKbfuT4bufC1pLY5A1dgnK9vnj7u/30CGp+Hw3MVZLneCMEo Cnf9vPgifE1tclwv5eAKeH1TtEVqO4DOf8uS08+Ss7zXBj1jdE1azYYn9Y64H3sg 9HS/F1M9hlGn3uUFZB1XlX8lJK8ZGXI= -----END CERTIFICATE-----Generated at Sun Jul 20 14:23:33 2025 by rpki-client