$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft File: 2QewWcyN7ki84-g5oeaIF6LWOtQ.mft (raw, json) Hash identifier: zgpKhWMah8IKkBjt5hY1oRt1uTFiqoSI58kazUeYMe8= Subject key identifier: EB:51:0B:3A:D6:13:95:74:BF:B1:8D:03:3A:68:47:1E:32:E7:B2:E0 Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 Certificate issuer: /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft Manifest number: 0787 Signing time: Wed 04 Jun 2025 21:17:57 +0000 Manifest this update: Wed 04 Jun 2025 21:17:57 +0000 Manifest next update: Wed 11 Jun 2025 21:17:57 +0000 Files and hashes: 1: 2QewWcyN7ki84-g5oeaIF6LWOtQ.crl (hash: FEiGh5sPUeRVRk3xiB3xy+ERMZT9IvY3Ss/gIIoF90M=) 2: 083499C00F7711EBBCB67820C4F9AE02.roa (hash: iH4fPRrd7IgPg8RKrkUWfUFk9KGwtBM2lg9Wq+mePiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 21:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4 Validity Not Before: Jun 4 21:17:57 2025 GMT Not After : Jun 11 21:17:57 2025 GMT Subject: CN=6840b805-a821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:d9:52:8d:88:bf:ae:91:6e:d7:b6:90:d3: 10:c1:32:0c:9c:78:b5:ab:79:f5:23:95:ff:28:b1: 74:dd:de:98:f0:16:9f:0f:48:78:22:cb:e1:fa:25: d4:ee:14:79:1d:b6:40:ff:fa:7c:b3:a4:c0:28:3c: 0f:c1:ae:ab:bb:26:b4:68:30:be:f2:08:1c:92:28: 5c:c1:45:b5:8f:d1:b9:13:1f:9b:90:d0:a0:f5:33: cc:b6:79:c2:37:63:79:50:66:4e:0b:da:d2:37:9d: bc:2f:ff:d8:59:bc:03:4e:74:c0:bf:c2:88:92:bc: f6:8b:8c:9e:c6:c3:4a:cb:fc:18:4d:db:74:f5:1e: b8:18:b8:bd:7b:03:b7:4a:d8:b0:a2:f6:21:95:a7: 02:fd:55:15:c0:63:14:7f:17:bc:5d:88:96:87:f4: f2:62:b5:ee:b1:18:7e:ca:0c:c9:db:43:ff:d6:80: d9:f3:a5:15:95:ff:9a:c3:06:7d:8a:dd:67:46:83: 2e:01:9c:06:9e:32:65:6b:d9:68:3d:b5:f5:30:b2: 31:82:f5:ed:15:01:8b:7b:35:7f:a7:ba:53:54:01: 29:a7:c3:a9:15:18:20:2b:9c:a2:8e:4a:fe:d5:9d: f2:de:e4:10:e1:67:8b:63:4a:78:03:81:9b:a2:de: 87:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:51:0B:3A:D6:13:95:74:BF:B1:8D:03:3A:68:47:1E:32:E7:B2:E0 X509v3 Authority Key Identifier: keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:46:29:89:ba:3d:71:03:ea:d3:d8:1e:72:fc:44:fe:c8:2e: 41:30:e9:79:6f:88:ea:c4:1e:cb:97:32:94:03:c7:fe:bf:ba: cf:77:9f:e5:e5:02:a7:f1:12:0f:d6:3a:e7:6a:1c:a1:b6:8d: 9e:62:59:95:16:f9:dd:ac:a9:e5:35:a6:79:44:5e:55:40:75: ab:5d:4e:70:b7:cf:17:23:69:5d:bb:f1:cc:18:d3:1e:36:0d: fd:60:e2:54:e3:04:97:4a:a3:10:5d:bc:70:48:d6:13:8d:c6: 02:25:4b:0b:5f:24:42:84:4c:30:13:b8:52:ed:e3:18:70:47: 8f:8d:93:2d:cf:ca:a2:39:2b:aa:4f:b0:9d:65:94:52:35:91: 63:2a:8e:bf:2d:4b:fd:66:13:d3:cb:3e:1e:22:8b:6c:5a:05: f9:06:0b:88:aa:1d:11:8a:fd:8d:f2:2e:9e:4e:bc:4d:14:03: bc:63:79:71:e2:12:1c:61:14:f6:90:89:6b:83:b0:c1:c4:2e: ff:73:b5:ac:a6:eb:10:22:62:74:e4:e5:45:bd:dd:68:94:89: a8:a9:c5:d6:6a:d3:c7:43:6a:5b:5f:56:8e:0e:7c:eb:78:53: 2c:3f:13:64:63:54:8d:1d:9a:e2:5a:61:f1:d1:a1:92:ed:c1: dc:c9:0c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODZGNTExMTAvBgNVBAUTKEQ5MDdCMDU5Q0M4REVFNDhCQ0UzRTgzOUExRTY4ODE3 QTJENjNBRDQwHhcNMjUwNjA0MjExNzU3WhcNMjUwNjExMjExNzU3WjAYMRYwFAYD VQQDEw02ODQwYjgwNS1hODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsybZUo2Iv66Rbte2kNMQwTIMnHi1q3n1I5X/KLF03d6Y8BafD0h4Isvh+iXU 7hR5HbZA//p8s6TAKDwPwa6ruya0aDC+8ggckihcwUW1j9G5Ex+bkNCg9TPMtnnC N2N5UGZOC9rSN528L//YWbwDTnTAv8KIkrz2i4yexsNKy/wYTdt09R64GLi9ewO3 StiwovYhlacC/VUVwGMUfxe8XYiWh/TyYrXusRh+ygzJ20P/1oDZ86UVlf+awwZ9 it1nRoMuAZwGnjJla9loPbX1MLIxgvXtFQGLezV/p7pTVAEpp8OpFRggK5yijkr+ 1Z3y3uQQ4WeLY0p4A4Gbot6HlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtRCzrW E5V0v7GNAzpoRx4y57LgMB8GA1UdIwQYMBaAFNkHsFnMje5IvOPoOaHmiBei1jrU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkY1MS9CMjk5MzI2MDBG NzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5TjdraTg0LWc1b2VhSUY2TFdP dFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRZXdXY3lON2tpODQtZzVvZWFJRjZMV090US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NkY1MS9CMjk5MzI2MDBGNzUxMUVCOUQwMDIwMUZDNEY5QUUwMi8yUWV3V2N5Tjdr aTg0LWc1b2VhSUY2TFdPdFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPRimJuj1xA+rT2B5y/ET+yC5BMOl5b4jqxB7LlzKUA8f+v7rPd5/l 5QKn8RIP1jrnahyhto2eYlmVFvndrKnlNaZ5RF5VQHWrXU5wt88XI2ldu/HMGNMe Ng39YOJU4wSXSqMQXbxwSNYTjcYCJUsLXyRChEwwE7hS7eMYcEePjZMtz8qiOSuq T7CdZZRSNZFjKo6/LUv9ZhPTyz4eIotsWgX5BguIqh0Riv2N8i6eTrxNFAO8Y3lx 4hIcYRT2kIlrg7DBxC7/c7WspusQImJ05OVFvd1olImoqcXWatPHQ2pbX1aODnzr eFMsPxNkY1SNHZriWmHx0aGS7cHcyQwX -----END CERTIFICATE-----Generated at Thu Jun 5 20:02:43 2025 by rpki-client