$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft File: 2DPFFS4_LSebiQT4PQDdkKymK9U.mft (raw, json) Hash identifier: p04IBSXEzvxX2EMEdn0PBIT+DpwRlDJ4osefxi/ICG8= Subject key identifier: B6:41:AE:34:F7:DC:F3:B2:29:D6:32:D4:71:A9:61:AE:D1:7F:25:8F Authority key identifier: D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 Certificate issuer: /CN=A9186D9F/serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft Manifest number: B4 Signing time: Sat 07 Jun 2025 05:27:11 +0000 Manifest this update: Sat 07 Jun 2025 05:27:11 +0000 Manifest next update: Sat 14 Jun 2025 05:27:11 +0000 Files and hashes: 1: 2DPFFS4_LSebiQT4PQDdkKymK9U.crl (hash: HZMds98/oHctrizD0QjcqpZG6552DQLz/2ZIL3+YrgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 05:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186D9F, serialNumber=D833C5152E3F2D279B8904F83D00DD90ACA62BD5 Validity Not Before: Jun 7 05:27:11 2025 GMT Not After : Jun 14 05:27:11 2025 GMT Subject: CN=6843cdaf-1dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:d4:62:14:d8:fc:5e:44:e7:94:65:7a:ce: c5:46:61:7d:83:72:1b:9f:14:77:80:5c:1a:36:87: 2a:f7:38:00:e0:bf:6b:e1:9b:80:f6:2d:04:c0:d7: 01:f4:06:5f:8f:98:fe:cd:7e:dc:44:48:77:73:c5: f1:84:4d:7e:14:33:be:73:06:51:24:09:41:78:5d: 9b:5a:10:c2:d3:4d:d2:55:3b:14:8a:d1:ff:02:13: 46:29:f1:f8:4d:c4:f8:9a:3c:82:b2:95:e3:2f:45: 03:90:74:9b:29:f5:cd:04:c6:2b:94:e7:95:83:5d: 1a:ca:13:11:d7:1a:d9:9b:1d:d6:30:3b:c3:31:26: 5e:26:8e:3f:64:80:ed:40:b5:4a:e0:88:b2:ae:83: 12:31:e2:70:18:0a:80:fa:d7:18:1f:d4:b0:f8:6c: b7:9e:97:77:78:d0:4e:83:ad:ea:2a:32:aa:d9:89: 1d:65:d4:48:d8:32:e9:bf:a0:27:52:6d:df:f0:48: c1:9e:f6:e2:9a:68:8a:90:0c:64:d7:f7:31:2d:30: ec:6c:fd:e0:a4:48:8d:98:08:b9:35:04:94:13:fe: 54:69:9e:49:13:64:4a:84:28:55:2d:6d:9a:54:b1: 05:2d:d2:da:1f:cd:43:1a:ef:6b:cf:94:d2:c3:d8: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:41:AE:34:F7:DC:F3:B2:29:D6:32:D4:71:A9:61:AE:D1:7F:25:8F X509v3 Authority Key Identifier: keyid:D8:33:C5:15:2E:3F:2D:27:9B:89:04:F8:3D:00:DD:90:AC:A6:2B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DPFFS4_LSebiQT4PQDdkKymK9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/B290A3462E0411EF86F29D79C4F9AE02/2DPFFS4_LSebiQT4PQDdkKymK9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:14:5a:07:95:40:08:5f:47:66:68:87:10:22:5f:32:39:4a: 1c:5e:04:03:a1:bc:c3:7c:e0:6d:2d:2f:39:7d:9c:e1:4f:19: 74:10:a7:10:cc:ee:1f:ed:39:26:4b:f8:9f:c3:51:90:26:ae: c8:03:e9:a3:1e:ff:40:be:d3:9f:f3:52:9e:2e:bb:75:d5:c8: e1:ec:d0:9c:76:51:08:65:67:d1:44:22:5e:f2:66:ed:39:e1: b6:01:62:c2:9e:59:72:61:d8:bd:d3:12:35:6a:3c:c4:f8:5c: 1b:fc:59:2b:5d:b0:62:a7:0b:ca:da:a3:92:8f:51:8a:f9:30: 98:fd:b6:42:f3:d2:13:64:c1:c0:34:09:e9:78:66:52:2a:6b: 02:f4:7a:23:45:11:ac:4a:8e:ae:34:a4:13:2c:65:2b:20:b5: 2a:b4:54:76:f6:82:f8:7b:ff:29:7b:50:3b:7c:8a:ec:58:8e: d6:fd:c6:d3:ce:70:ef:b7:d6:1d:a4:06:83:f3:04:52:61:f0: 51:aa:02:2e:c7:ff:c5:ac:45:56:d6:b9:61:b3:da:8d:5e:3e: 64:dd:4c:02:27:6b:19:71:01:69:e0:cf:0c:33:89:71:99:9c: cb:50:36:29:82:fb:dd:42:38:b4:6a:2d:6d:d9:81:33:f5:05: 02:3a:ba:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZEOUYxMTAvBgNVBAUTKEQ4MzNDNTE1MkUzRjJEMjc5Qjg5MDRGODNEMDBERDkw QUNBNjJCRDUwHhcNMjUwNjA3MDUyNzExWhcNMjUwNjE0MDUyNzExWjAYMRYwFAYD VQQDEw02ODQzY2RhZi0xZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4/UYhTY/F5E55Rles7FRmF9g3IbnxR3gFwaNocq9zgA4L9r4ZuA9i0EwNcB 9AZfj5j+zX7cREh3c8XxhE1+FDO+cwZRJAlBeF2bWhDC003SVTsUitH/AhNGKfH4 TcT4mjyCspXjL0UDkHSbKfXNBMYrlOeVg10ayhMR1xrZmx3WMDvDMSZeJo4/ZIDt QLVK4IiyroMSMeJwGAqA+tcYH9Sw+Gy3npd3eNBOg63qKjKq2YkdZdRI2DLpv6An Um3f8EjBnvbimmiKkAxk1/cxLTDsbP3gpEiNmAi5NQSUE/5UaZ5JE2RKhChVLW2a VLEFLdLaH81DGu9rz5TSw9iB9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZBrjT3 3POyKdYy1HGpYa7RfyWPMB8GA1UdIwQYMBaAFNgzxRUuPy0nm4kE+D0A3ZCspivV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9CMjkwQTM0NjJF MDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xTZWJpUVQ0UFFEZGtLeW1L OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEUEZGUzRfTFNlYmlRVDRQUURka0t5bUs5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkQ5Ri9CMjkwQTM0NjJFMDQxMUVGODZGMjlENzlDNEY5QUUwMi8yRFBGRlM0X0xT ZWJpUVQ0UFFEZGtLeW1LOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiFFoHlUAIX0dmaIcQIl8yOUocXgQDobzDfOBtLS85fZzhTxl0EKcQ zO4f7TkmS/ifw1GQJq7IA+mjHv9AvtOf81KeLrt11cjh7NCcdlEIZWfRRCJe8mbt OeG2AWLCnllyYdi90xI1ajzE+Fwb/FkrXbBipwvK2qOSj1GK+TCY/bZC89ITZMHA NAnpeGZSKmsC9HojRRGsSo6uNKQTLGUrILUqtFR29oL4e/8pe1A7fIrsWI7W/cbT znDvt9YdpAaD8wRSYfBRqgIux//FrEVW1rlhs9qNXj5k3UwCJ2sZcQFp4M8MM4lx mZzLUDYpgvvdQji0ai1t2YEz9QUCOrrH -----END CERTIFICATE-----Generated at Sun Jun 8 13:46:15 2025 by rpki-client