$ rpki-client -vvf rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft File: 0C2Q-5EqWWC75Wy051NRaiTG73s.mft (raw, json) Hash identifier: pp8kK/Z7KpEahQvSk2kMDord3k85KizO48/nmaPwzzc= Subject key identifier: 24:AC:EF:F1:71:FD:82:20:85:E0:19:B9:B9:97:21:B1:ED:EA:BB:D3 Authority key identifier: D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B Certificate issuer: /CN=A9148FE8/serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Certificate serial: 0ADC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft Manifest number: 0AD0 Signing time: Wed 04 Jun 2025 19:23:22 +0000 Manifest this update: Wed 04 Jun 2025 19:23:22 +0000 Manifest next update: Wed 11 Jun 2025 19:23:22 +0000 Files and hashes: 1: 0C2Q-5EqWWC75Wy051NRaiTG73s.crl (hash: U6VLTjGsSQrQCMSAdlKJ6aw6BKinGXvJs1bxk0xkOVA=) 2: 4AEE5D144EFC11EA9D00310FC4F9AE02.roa (hash: rFiMZXa2OxD0Ej0KwFsbxfHbUbN1ZogDT7O8NAGWwno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2780 (0xadc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148FE8, serialNumber=D02D90FB912A5960BBE56CB4E753516A24C6EF7B Validity Not Before: Jun 4 19:23:22 2025 GMT Not After : Jun 11 19:23:22 2025 GMT Subject: CN=68409d2a-f5fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:43:2d:ba:09:d9:7b:75:83:56:6c:07:6d:6d: a4:f2:73:ad:91:97:d6:e0:4f:f9:18:cb:df:87:8c: 6e:1a:ff:19:bb:c7:f2:31:52:13:9f:6c:b9:f7:c0: 99:73:f6:08:b9:b0:0e:50:5d:25:3a:5d:e1:8a:b2: ed:6c:b5:2e:f5:f6:73:5e:b6:8a:1e:08:e2:81:d5: c7:fe:9f:aa:1b:7a:36:77:03:cb:2b:35:fe:9f:a2: 35:75:76:7c:e7:89:4d:e2:66:b2:90:e1:56:16:18: c6:d0:30:17:8b:53:66:f4:3c:47:54:74:f3:4f:f4: 8b:15:ee:f5:aa:cb:cb:ef:57:ce:4b:44:9c:40:f3: 51:db:10:02:b7:28:01:7c:b3:26:90:63:63:fe:ee: 8b:13:4b:4f:2d:b9:15:db:f6:82:0e:d5:e5:6b:d1: 49:b1:78:eb:74:95:c1:5b:7e:05:a7:d8:56:26:42: 3d:f0:b3:77:e0:e5:92:1a:71:e0:e7:a1:65:52:a4: a8:2c:d8:ae:d1:d7:75:29:4c:bb:5c:5a:64:3d:bf: 6c:d7:dc:25:ba:a0:27:04:51:09:3f:0d:64:33:61: 8c:3f:b3:10:fc:0e:51:5a:85:f1:cd:64:c7:55:f5: f2:a7:90:8e:2b:e7:e9:5f:c2:64:2c:4f:f1:75:bc: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:AC:EF:F1:71:FD:82:20:85:E0:19:B9:B9:97:21:B1:ED:EA:BB:D3 X509v3 Authority Key Identifier: keyid:D0:2D:90:FB:91:2A:59:60:BB:E5:6C:B4:E7:53:51:6A:24:C6:EF:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0C2Q-5EqWWC75Wy051NRaiTG73s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148FE8/12F96FB24EFB11EA8D694D0DC4F9AE02/0C2Q-5EqWWC75Wy051NRaiTG73s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:18:75:08:2f:8a:7e:e7:27:61:93:67:96:9a:fd:d9:0a:2a: 87:72:83:bd:1c:7c:9b:79:22:87:2e:30:55:20:c7:ed:51:46: 18:b7:32:b7:3f:7c:dc:f3:02:a4:81:81:d4:23:eb:44:1a:8a: fd:8c:7c:9c:bd:b0:0d:f5:ee:51:3d:3f:54:76:6b:df:f1:28: 67:5b:3e:fe:b9:f0:21:a0:8f:6e:f0:40:7b:77:60:ad:c7:f0: 2b:6a:bd:dc:42:8e:b4:fa:26:09:53:76:2f:a7:3e:ca:99:1d: 9f:4c:80:6d:48:a7:a1:89:bc:4e:ae:3d:8c:37:e6:d8:49:e3: 74:ab:4d:92:7c:d6:84:26:f3:6b:af:fb:90:9f:53:d7:f3:d5: 3a:ec:e0:4e:88:af:c3:31:2e:b9:c0:66:c5:c8:61:87:6a:84: a1:86:a3:9b:35:94:16:14:9a:62:86:1e:bb:a3:d5:d9:c6:f4: ca:80:99:e2:04:fe:74:61:10:bb:95:14:01:99:ad:1f:a0:e3: 87:96:79:2b:a1:c7:f0:1a:d4:dd:d9:64:10:a7:4f:48:3c:41: f4:e5:f3:72:63:19:39:f2:e1:5d:58:99:7e:d2:82:7e:d6:7e: 34:d0:46:72:fd:3d:88:8d:59:85:89:10:ea:1e:06:09:30:4f: b3:38:6a:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhGRTgxMTAvBgNVBAUTKEQwMkQ5MEZCOTEyQTU5NjBCQkU1NkNCNEU3NTM1MTZB MjRDNkVGN0IwHhcNMjUwNjA0MTkyMzIyWhcNMjUwNjExMTkyMzIyWjAYMRYwFAYD VQQDEw02ODQwOWQyYS1mNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmkMtugnZe3WDVmwHbW2k8nOtkZfW4E/5GMvfh4xuGv8Zu8fyMVITn2y598CZ c/YIubAOUF0lOl3hirLtbLUu9fZzXraKHgjigdXH/p+qG3o2dwPLKzX+n6I1dXZ8 54lN4maykOFWFhjG0DAXi1Nm9DxHVHTzT/SLFe71qsvL71fOS0ScQPNR2xACtygB fLMmkGNj/u6LE0tPLbkV2/aCDtXla9FJsXjrdJXBW34Fp9hWJkI98LN34OWSGnHg 56FlUqSoLNiu0dd1KUy7XFpkPb9s19wluqAnBFEJPw1kM2GMP7MQ/A5RWoXxzWTH VfXyp5COK+fpX8JkLE/xdbxdCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSs7/Fx /YIgheAZubmXIbHt6rvTMB8GA1UdIwQYMBaAFNAtkPuRKllgu+VstOdTUWokxu97 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEZFOC8xMkY5NkZCMjRF RkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdXQzc1V3kwNTFOUmFpVEc3 M3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBDMlEtNUVxV1dDNzVXeTA1MU5SYWlURzczcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEZFOC8xMkY5NkZCMjRFRkIxMUVBOEQ2OTREMERDNEY5QUUwMi8wQzJRLTVFcVdX Qzc1V3kwNTFOUmFpVEc3M3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQGHUIL4p+5ydhk2eWmv3ZCiqHcoO9HHybeSKHLjBVIMftUUYYtzK3 P3zc8wKkgYHUI+tEGor9jHycvbAN9e5RPT9Udmvf8ShnWz7+ufAhoI9u8EB7d2Ct x/Arar3cQo60+iYJU3Yvpz7KmR2fTIBtSKehibxOrj2MN+bYSeN0q02SfNaEJvNr r/uQn1PX89U67OBOiK/DMS65wGbFyGGHaoShhqObNZQWFJpihh67o9XZxvTKgJni BP50YRC7lRQBma0foOOHlnkrocfwGtTd2WQQp09IPEH05fNyYxk58uFdWJl+0oJ+ 1n400EZy/T2IjVmFiRDqHgYJME+zOGqf -----END CERTIFICATE-----Generated at Fri Jun 6 17:18:02 2025 by rpki-client