$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: 4HIFNKTy+A87HPF5ZAdygprLCW12ksYCjS/Y+BpI2vE= Subject key identifier: 80:91:AD:5F:E1:5D:64:CC:3E:B6:46:0F:99:A1:0C:47:C6:72:DB:E1 Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 0677 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 066D Signing time: Fri 30 May 2025 22:36:37 +0000 Manifest this update: Fri 30 May 2025 22:36:37 +0000 Manifest next update: Fri 06 Jun 2025 22:36:37 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: SzppfhHqhqxYHWFUvCgn6Q/njxRDwPwPrumACF9ZyCQ=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: jy45pLpGUEHdAvcc7aV1J1N0BlCts0GUmsU/8qKGZrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1655 (0x677) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: May 30 22:36:37 2025 GMT Not After : Jun 6 22:36:37 2025 GMT Subject: CN=683a32f5-b3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:1e:0d:3d:e2:a1:2a:4f:69:92:ae:c4:4b: 31:69:59:b1:38:55:df:bf:e8:ac:e7:0e:94:3b:98: 8e:4a:42:25:95:fa:13:9f:fb:67:4d:92:87:a2:ae: 9b:f6:20:62:f3:c7:88:a3:c1:1e:d5:ed:41:73:8b: f6:ef:44:df:0d:d5:a4:88:b2:e4:42:da:1b:e9:ea: 08:40:94:a3:86:38:99:d9:ab:2d:02:5a:8b:41:56: 80:ef:34:80:45:04:59:09:17:12:a2:c4:37:c1:77: 7d:72:d8:91:4f:3d:0f:49:13:92:8c:f4:bf:0a:57: 10:b8:64:7d:28:68:53:0e:3c:77:64:74:f7:7a:78: 08:fd:3c:8c:57:5f:34:26:32:1e:5e:2c:01:65:23: 5c:f0:ae:ab:f7:89:92:c1:16:02:6f:cb:61:3e:3c: fc:4a:2a:56:dc:79:49:a9:ec:de:eb:71:95:ec:69: dc:82:d1:7b:2c:b6:98:f2:d3:f4:4d:c9:ee:58:73: ac:23:5d:2f:37:41:45:63:76:01:b8:09:67:54:10: 7b:f4:6c:e7:ef:f0:ce:54:b6:ec:d4:c4:52:ed:f3: 17:32:98:bf:d7:9b:46:b2:bc:de:5f:76:a4:fa:3d: 6d:8c:a0:d4:53:e3:99:78:2b:38:91:b1:e2:41:f6: 41:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:91:AD:5F:E1:5D:64:CC:3E:B6:46:0F:99:A1:0C:47:C6:72:DB:E1 X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:83:8f:88:d0:c8:db:4f:13:e5:f2:ea:31:c7:4d:de:81:f6: ac:c2:5f:a0:f3:32:53:76:e1:2a:f9:53:03:bd:5e:b1:cc:c8: a4:84:bb:7b:3f:ad:f6:32:43:6c:10:a9:99:a4:41:32:88:0d: f9:a8:d9:70:5a:f9:d8:04:a8:7c:87:fa:64:7a:69:14:c4:bb: 29:8c:98:80:e7:90:6e:af:63:0e:f5:89:ad:58:a3:51:99:2e: 38:e4:0a:dd:f7:c2:8a:ed:ef:90:80:db:47:d0:a0:85:03:c0: f2:47:ee:f8:11:9a:95:0e:3e:77:38:46:eb:24:92:cd:91:20: 30:32:54:a7:7d:b0:c4:f6:bf:31:8f:07:b5:ba:72:28:e1:65: 6a:82:ea:91:bd:2f:0b:12:89:4e:c0:9b:3e:b9:20:95:bd:53: 66:6a:10:ba:fe:4f:af:59:1f:2b:32:1a:bd:e6:76:f9:8c:57: 82:a7:b6:b7:5c:93:53:9e:b0:75:08:cc:de:0c:f4:8e:5f:2b: 44:cc:2b:84:d9:31:e9:cf:5b:85:73:ee:3b:c1:25:54:6c:51: ce:77:f7:a8:01:c1:e3:4a:39:91:bd:1b:47:bf:c6:5e:ad:e0: 91:2e:89:ff:cb:b8:16:83:2a:4c:ed:b5:20:c6:94:6c:c4:df: d0:8d:25:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBncwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjUwNTMwMjIzNjM3WhcNMjUwNjA2MjIzNjM3WjAYMRYwFAYD VQQDEw02ODNhMzJmNS1iM2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJYeDT3ioSpPaZKuxEsxaVmxOFXfv+is5w6UO5iOSkIllfoTn/tnTZKHoq6b 9iBi88eIo8Ee1e1Bc4v270TfDdWkiLLkQtob6eoIQJSjhjiZ2astAlqLQVaA7zSA RQRZCRcSosQ3wXd9ctiRTz0PSROSjPS/ClcQuGR9KGhTDjx3ZHT3engI/TyMV180 JjIeXiwBZSNc8K6r94mSwRYCb8thPjz8SipW3HlJqeze63GV7GncgtF7LLaY8tP0 TcnuWHOsI10vN0FFY3YBuAlnVBB79Gzn7/DOVLbs1MRS7fMXMpi/15tGsrzeX3ak +j1tjKDUU+OZeCs4kbHiQfZBkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICRrV/h XWTMPrZGD5mhDEfGctvhMB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAg4+I0MjbTxPl8uoxx03egfaswl+g8zJTduEq+VMDvV6xzMikhLt7 P632MkNsEKmZpEEyiA35qNlwWvnYBKh8h/pkemkUxLspjJiA55Bur2MO9YmtWKNR mS445Ard98KK7e+QgNtH0KCFA8DyR+74EZqVDj53OEbrJJLNkSAwMlSnfbDE9r8x jwe1unIo4WVqguqRvS8LEolOwJs+uSCVvVNmahC6/k+vWR8rMhq95nb5jFeCp7a3 XJNTnrB1CMzeDPSOXytEzCuE2THpz1uFc+47wSVUbFHOd/eoAcHjSjmRvRtHv8Ze reCRLon/y7gWgypM7bUgxpRsxN/QjSUe -----END CERTIFICATE-----Generated at Sat May 31 17:17:25 2025 by rpki-client