$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: 0jFvgqfQuB7VMIodsnZlT219bE4DLb1pFEYaH5azsMg= Subject key identifier: 6A:A8:62:59:A5:F8:87:65:6E:3C:9A:B8:23:21:BA:DE:D0:89:43:F1 Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 0305 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 02F2 Signing time: Tue 01 Jul 2025 02:00:09 +0000 Manifest this update: Tue 01 Jul 2025 02:00:09 +0000 Manifest next update: Tue 08 Jul 2025 02:00:09 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: X9uCr+pKnkk3uHZ6SMKLco1iNSs7S2BVRvvDeJENXow=) 2: 5C236C16552611EFA2BEAC53C4F9AE02.roa (hash: iZ6c16QJfgq60QRYgFglwDZaB7UfKpWeC5/RltitIB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 773 (0x305) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: Jul 1 02:00:09 2025 GMT Not After : Jul 8 02:00:09 2025 GMT Subject: CN=68634129-6dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:05:33:e2:6c:aa:54:64:55:59:3d:c7:9a: d1:5a:51:5b:18:c9:60:ad:8f:0f:2e:c4:7f:5f:02: db:ba:81:ef:ad:4f:35:a8:f8:1f:4c:db:5c:2d:0c: 0d:72:5e:d1:9d:83:3b:c6:66:4c:74:87:f1:32:81: be:e4:b2:f3:16:03:cc:35:06:af:00:af:f1:78:5b: 42:60:7c:64:f6:58:39:e9:cc:ea:89:5f:9d:f9:94: c4:fc:eb:c1:0d:81:e7:44:30:13:dd:c7:54:52:a7: 3f:0d:a3:46:c4:71:23:14:1e:6d:32:f3:45:5f:d8: 35:20:2e:c1:cb:4b:e0:32:27:4f:7d:c7:1b:71:a6: c7:48:a1:f6:ba:f3:2b:15:2a:38:85:55:ce:99:b9: 54:5c:bb:45:15:9f:9f:f6:ac:20:79:5f:b4:85:c9: f0:f6:82:d8:92:ce:cb:aa:e6:9f:42:ae:91:ff:c0: 0f:12:51:e0:c7:8b:d3:ab:3a:cd:4f:8a:50:2e:f3: 3e:e4:bd:97:26:55:25:0a:e2:fb:4e:0c:f0:69:35: e0:89:26:1d:63:2c:f8:43:a3:ca:39:94:95:12:e2: d5:7e:3e:86:ad:38:9f:2d:3e:13:85:87:74:fa:8d: 3f:f4:f9:f1:c1:7d:30:c9:7e:f9:0a:99:46:10:3f: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A8:62:59:A5:F8:87:65:6E:3C:9A:B8:23:21:BA:DE:D0:89:43:F1 X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b0:93:9a:a2:4c:4c:b6:a9:bf:0e:9a:25:f9:10:27:81:7b: bb:ad:fa:9f:ec:d5:05:1d:9d:4a:4d:7f:94:81:ab:ac:1a:58: df:4d:04:e8:6c:03:97:54:be:f2:20:a8:d5:81:47:3c:a1:e5: 77:3a:4e:ef:ec:7c:63:1f:8d:d5:60:21:d3:48:ba:b0:a5:15: 5a:a3:8c:df:9c:f9:9f:18:ac:2a:8f:11:d5:02:11:26:e0:d7: 1e:1a:95:de:a9:5f:64:e3:9a:f9:77:d4:8e:8a:2d:26:1f:ec: a9:45:5f:f1:0c:45:af:b8:92:98:c1:84:e0:1c:e2:14:db:6d: 74:5b:0a:6e:e0:a6:98:b2:0e:6d:08:96:84:c3:02:dd:62:af: a9:d5:a2:cd:9d:cd:fe:90:04:c4:92:ae:33:17:3f:48:77:60: f0:93:c9:6d:19:15:94:be:82:e2:2f:49:9f:d3:8e:22:5c:b5: 72:5a:4f:c2:8b:fe:19:e9:a7:c4:1c:bb:12:b3:c6:13:91:34: 0e:0c:13:95:ee:ab:7f:1e:29:82:3d:9d:45:52:45:88:e7:ca: 88:ef:22:ee:b2:4a:6d:f1:1f:04:de:e9:17:ce:40:17:c2:d8: 5c:67:0b:f2:96:0e:de:d0:ea:4c:b4:51:09:97:da:eb:27:e5: 15:7a:8b:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjUwNzAxMDIwMDA5WhcNMjUwNzA4MDIwMDA5WjAYMRYwFAYD VQQDEw02ODYzNDEyOS02ZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14wFM+JsqlRkVVk9x5rRWlFbGMlgrY8PLsR/XwLbuoHvrU81qPgfTNtcLQwN cl7RnYM7xmZMdIfxMoG+5LLzFgPMNQavAK/xeFtCYHxk9lg56czqiV+d+ZTE/OvB DYHnRDAT3cdUUqc/DaNGxHEjFB5tMvNFX9g1IC7By0vgMidPfccbcabHSKH2uvMr FSo4hVXOmblUXLtFFZ+f9qwgeV+0hcnw9oLYks7LquafQq6R/8APElHgx4vTqzrN T4pQLvM+5L2XJlUlCuL7TgzwaTXgiSYdYyz4Q6PKOZSVEuLVfj6GrTifLT4ThYd0 +o0/9PnxwX0wyX75CplGED+wawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqoYlml +IdlbjyauCMhut7QiUPxMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANsJOaokxMtqm/Dpol+RAngXu7rfqf7NUFHZ1KTX+UgausGljfTQTo bAOXVL7yIKjVgUc8oeV3Ok7v7HxjH43VYCHTSLqwpRVao4zfnPmfGKwqjxHVAhEm 4NceGpXeqV9k45r5d9SOii0mH+ypRV/xDEWvuJKYwYTgHOIU2210Wwpu4KaYsg5t CJaEwwLdYq+p1aLNnc3+kATEkq4zFz9Id2Dwk8ltGRWUvoLiL0mf044iXLVyWk/C i/4Z6afEHLsSs8YTkTQODBOV7qt/HimCPZ1FUkWI58qI7yLuskpt8R8E3ukXzkAX wthcZwvylg7e0OpMtFEJl9rrJ+UVeou0 -----END CERTIFICATE-----Generated at Tue Jul 1 19:39:03 2025 by rpki-client