$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: zmeXS2owXtNb4MIOh/rwSfUNaTqEFzOgU1vfYdyqKa4= Subject key identifier: E3:F1:4D:2B:38:54:B4:B8:72:82:A9:58:A9:CF:7C:83:DA:52:DA:7B Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: CC Signing time: Thu 05 Jun 2025 05:04:15 +0000 Manifest this update: Thu 05 Jun 2025 05:04:14 +0000 Manifest next update: Thu 12 Jun 2025 05:04:14 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: a2HIebIpW5kZoH6+59nf0iHrobeW5MTBxB6pu5a2N1k=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:04:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Jun 5 05:04:14 2025 GMT Not After : Jun 12 05:04:14 2025 GMT Subject: CN=6841254e-771b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:24:03:13:c3:c4:53:5d:3e:eb:01:33:cf:92: ae:c2:54:be:40:53:a2:b5:37:82:09:0b:da:63:d0: e7:24:2c:79:39:31:7c:bd:40:f3:ee:e6:14:61:4c: 6a:4d:e3:1f:f7:80:98:fe:13:d0:26:3f:63:87:1d: c1:da:d9:2c:66:5c:12:a1:60:fb:8b:61:ec:a8:4a: 0a:44:23:83:3a:ae:48:32:ee:53:f4:76:d4:f2:77: c9:77:e9:fd:88:e6:46:c1:5f:2a:69:6e:41:81:a6: e8:01:dd:8e:c4:3b:bf:18:aa:d2:ff:23:9d:ab:05: 71:3b:bc:ae:9e:00:57:30:56:96:04:3b:93:d2:2d: 5c:e8:0a:51:84:c8:f9:b9:75:b8:a1:c9:e4:d6:2f: 3d:e3:3e:8f:ff:26:a4:1f:24:c3:1a:d4:df:7f:ed: 86:3c:67:cc:32:c8:af:61:69:3e:ce:85:1d:55:9f: 04:3b:8c:5b:ee:06:b1:f1:6a:27:59:0c:a4:e0:6d: c7:6e:9d:e2:14:50:e3:57:3a:b8:2a:a3:5b:23:be: 42:96:72:6f:18:e5:79:7f:e5:ef:57:89:13:e3:16: e3:f4:75:58:99:79:fa:db:d0:11:c1:87:5c:d7:ab: 71:85:21:85:cf:59:55:95:b8:bb:89:f5:20:58:97: 96:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F1:4D:2B:38:54:B4:B8:72:82:A9:58:A9:CF:7C:83:DA:52:DA:7B X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:14:ce:d1:72:1f:ca:bb:02:48:57:db:dd:99:dc:7e:6e:ea: c4:5e:fa:90:b1:ec:a4:e9:24:b7:ee:72:b5:b9:f6:7c:56:9c: 7a:71:01:ba:5b:17:4b:6e:d9:da:7f:09:80:99:2f:83:7a:1a: 5c:54:5f:8c:78:45:23:4b:1b:41:c4:14:48:51:ee:3d:8e:20: af:25:c1:98:e2:39:53:8b:a9:2e:76:a8:32:ed:ce:f3:16:be: d5:35:94:e0:a3:81:da:08:ea:ba:0f:b9:1e:26:57:a6:1e:42: 7d:f8:d2:7e:c4:a1:8c:21:fd:54:61:c2:de:a6:90:84:34:21: b9:82:b4:63:1a:12:c3:16:15:3d:cb:d0:23:ce:a1:0c:f2:01: 46:33:56:bc:7d:a4:a3:54:ea:20:90:7e:63:57:ca:02:d2:9a: 34:3b:50:01:ef:8a:6a:58:ea:ea:ae:7a:be:8f:6d:21:23:e2: 27:cb:8a:11:83:7d:5f:34:7a:3e:64:2f:33:5f:d0:dd:3f:eb: 1a:51:94:a3:f8:b9:9d:69:ce:f1:45:64:3a:60:09:6f:f2:84: 53:d7:fa:f4:53:41:46:12:a9:95:3f:09:31:ea:be:c4:2a:0a: 7c:bb:25:86:df:cc:cb:79:22:b3:f9:b2:3a:50:7b:35:c9:90: c5:4e:3a:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUwNjA1MDUwNDE0WhcNMjUwNjEyMDUwNDE0WjAYMRYwFAYD VQQDEw02ODQxMjU0ZS03NzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CQDE8PEU10+6wEzz5KuwlS+QFOitTeCCQvaY9DnJCx5OTF8vUDz7uYUYUxq TeMf94CY/hPQJj9jhx3B2tksZlwSoWD7i2HsqEoKRCODOq5IMu5T9HbU8nfJd+n9 iOZGwV8qaW5BgaboAd2OxDu/GKrS/yOdqwVxO7yungBXMFaWBDuT0i1c6ApRhMj5 uXW4ocnk1i894z6P/yakHyTDGtTff+2GPGfMMsivYWk+zoUdVZ8EO4xb7gax8Won WQyk4G3Hbp3iFFDjVzq4KqNbI75ClnJvGOV5f+XvV4kT4xbj9HVYmXn629ARwYdc 16txhSGFz1lVlbi7ifUgWJeW1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOPxTSs4 VLS4coKpWKnPfIPaUtp7MB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdFM7Rch/KuwJIV9vdmdx+burEXvqQseyk6SS37nK1ufZ8Vpx6cQG6 WxdLbtnafwmAmS+DehpcVF+MeEUjSxtBxBRIUe49jiCvJcGY4jlTi6kudqgy7c7z Fr7VNZTgo4HaCOq6D7keJlemHkJ9+NJ+xKGMIf1UYcLeppCENCG5grRjGhLDFhU9 y9AjzqEM8gFGM1a8faSjVOogkH5jV8oC0po0O1AB74pqWOrqrnq+j20hI+Iny4oR g31fNHo+ZC8zX9DdP+saUZSj+Lmdac7xRWQ6YAlv8oRT1/r0U0FGEqmVPwkx6r7E Kgp8uyWG38zLeSKz+bI6UHs1yZDFTjrX -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:09 2025 by rpki-client