$ rpki-client -vvf rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft File: 2szbgPh19VKJMaiCXRqvoYCpsXk.mft (raw, json) Hash identifier: k6MayZ+v9ZjUnmwXyv3uzT7WvsEWrS/OfagTJPTmSkE= Subject key identifier: 85:5B:30:17:E3:2D:ED:6A:65:D0:5D:77:E5:70:B4:80:92:93:B9:34 Authority key identifier: DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 Certificate issuer: /CN=A918D701/serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft Manifest number: 01A1 Signing time: Sat 07 Jun 2025 02:56:20 +0000 Manifest this update: Sat 07 Jun 2025 02:56:19 +0000 Manifest next update: Sat 14 Jun 2025 02:56:19 +0000 Files and hashes: 1: 2szbgPh19VKJMaiCXRqvoYCpsXk.crl (hash: bRfDpayqhq8HulE/VI3L+gVfUXkZTgo0RPjmsZe2iTY=) 2: 98D5AE30C88C11ED907C1C0EC4F9AE02.roa (hash: /+RFC3ph8TBdVcE4Ho9sjOY2q50Lm+IUGN0ewBHECtI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:56:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D701, serialNumber=DACCDB80F875F5528931A8825D1AAFA180A9B179 Validity Not Before: Jun 7 02:56:19 2025 GMT Not After : Jun 14 02:56:19 2025 GMT Subject: CN=6843aa53-c902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:07:5b:7d:0b:38:fb:9a:8c:41:10:ed:1e: 5e:71:d7:fd:80:c1:8a:a9:83:89:d9:a3:25:c0:19: 05:97:53:85:95:e6:35:9b:aa:03:d4:a8:97:a6:81: a3:3b:a9:44:24:e0:a7:d5:d0:8e:2d:34:f6:0e:9b: ab:c5:7d:62:8b:ad:b4:26:88:ac:3f:de:72:10:98: 7f:af:ee:3b:71:c0:3e:9b:72:6e:12:07:42:e2:93: 13:11:b7:1b:be:c0:68:6c:69:44:58:23:aa:53:1e: ac:59:91:2e:34:e2:df:7e:a8:ec:07:7b:46:57:52: fa:b9:58:1a:19:ca:2c:7f:87:37:eb:4f:01:6a:13: f4:18:9a:84:84:f7:58:99:ca:d7:c7:66:0f:51:ac: 9a:11:7e:4e:1e:58:1b:c0:dc:9e:8e:1b:b2:9e:4f: c8:24:dc:e0:a6:bc:95:23:33:d2:40:b6:7c:ec:60: 31:c2:c3:67:53:09:af:db:64:93:bf:cd:e2:8d:a9: 2a:a2:15:42:fe:fe:bc:ee:54:99:bd:cc:85:94:58: 89:c8:23:19:03:b9:9e:87:4e:0b:0b:75:5d:b0:ae: 7e:3c:93:bd:e5:ee:52:74:49:39:0c:ef:cf:d5:4b: a1:84:cf:e7:e3:5f:1d:fc:32:48:c5:61:13:5b:e7: a1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:5B:30:17:E3:2D:ED:6A:65:D0:5D:77:E5:70:B4:80:92:93:B9:34 X509v3 Authority Key Identifier: keyid:DA:CC:DB:80:F8:75:F5:52:89:31:A8:82:5D:1A:AF:A1:80:A9:B1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2szbgPh19VKJMaiCXRqvoYCpsXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D701/D1878EF6C88711EDBBE6A32BC4F9AE02/2szbgPh19VKJMaiCXRqvoYCpsXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:0b:d6:25:be:46:89:a4:98:d1:a8:fd:6c:81:d8:eb:72:4d: b1:f9:a4:cc:f9:6a:c5:3e:9f:93:aa:8c:b3:53:dd:a4:48:7e: 02:64:1a:86:f2:04:90:4b:7e:fd:07:44:f4:78:01:6a:30:26: a7:85:9a:b1:c2:89:ad:74:84:ce:91:45:02:30:29:e1:6b:bd: 86:d7:82:09:f6:10:48:f6:fc:6d:15:b4:94:8d:3b:19:d6:d4: 69:8a:af:73:68:cd:1e:75:93:4e:6f:62:f2:b3:45:ed:24:a3: 78:38:6b:dd:99:44:83:34:50:0d:20:a8:9f:4b:03:56:fa:96: b7:44:10:d2:c1:84:d4:fe:b7:25:00:b5:51:41:de:a5:5f:fc: c5:fa:5c:da:5f:ee:b9:05:1e:f6:ff:8b:6e:d7:57:09:4c:7d: 64:68:8f:9f:7e:a6:d0:a1:ad:8a:d3:4e:36:5a:75:e8:8e:4e: 04:7b:d1:02:32:2b:fd:45:cb:f7:5a:04:c3:72:c0:62:2e:f0: 9c:74:d5:7e:76:52:a7:22:aa:00:29:92:b8:07:03:3e:73:ed: f1:74:42:65:7a:42:77:30:2d:70:10:c1:b1:91:42:ed:5f:d8: 6a:65:07:4a:d6:f3:b2:7e:42:82:b0:8b:c2:ff:33:1c:0d:2d: 0f:dd:06:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3MDExMTAvBgNVBAUTKERBQ0NEQjgwRjg3NUY1NTI4OTMxQTg4MjVEMUFBRkEx ODBBOUIxNzkwHhcNMjUwNjA3MDI1NjE5WhcNMjUwNjE0MDI1NjE5WjAYMRYwFAYD VQQDEw02ODQzYWE1My1jOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBsHW30LOPuajEEQ7R5ecdf9gMGKqYOJ2aMlwBkFl1OFleY1m6oD1KiXpoGj O6lEJOCn1dCOLTT2DpurxX1ii620JoisP95yEJh/r+47ccA+m3JuEgdC4pMTEbcb vsBobGlEWCOqUx6sWZEuNOLffqjsB3tGV1L6uVgaGcosf4c3608BahP0GJqEhPdY mcrXx2YPUayaEX5OHlgbwNyejhuynk/IJNzgpryVIzPSQLZ87GAxwsNnUwmv22ST v83ijakqohVC/v687lSZvcyFlFiJyCMZA7meh04LC3VdsK5+PJO95e5SdEk5DO/P 1UuhhM/n418d/DJIxWETW+eh4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVbMBfj Le1qZdBdd+VwtICSk7k0MB8GA1UdIwQYMBaAFNrM24D4dfVSiTGogl0ar6GAqbF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDcwMS9EMTg3OEVGNkM4 ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlWS0pNYWlDWFJxdm9ZQ3Bz WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzemJnUGgxOVZLSk1haUNYUnF2b1lDcHNYay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDcwMS9EMTg3OEVGNkM4ODcxMUVEQkJFNkEzMkJDNEY5QUUwMi8yc3piZ1BoMTlW S0pNYWlDWFJxdm9ZQ3BzWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQC9YlvkaJpJjRqP1sgdjrck2x+aTM+WrFPp+TqoyzU92kSH4CZBqG 8gSQS379B0T0eAFqMCanhZqxwomtdITOkUUCMCnha72G14IJ9hBI9vxtFbSUjTsZ 1tRpiq9zaM0edZNOb2Lys0XtJKN4OGvdmUSDNFANIKifSwNW+pa3RBDSwYTU/rcl ALVRQd6lX/zF+lzaX+65BR72/4tu11cJTH1kaI+ffqbQoa2K0042WnXojk4Ee9EC Miv9Rcv3WgTDcsBiLvCcdNV+dlKnIqoAKZK4BwM+c+3xdEJlekJ3MC1wEMGxkULt X9hqZQdK1vOyfkKCsIvC/zMcDS0P3Qac -----END CERTIFICATE-----Generated at Sun Jun 8 18:00:10 2025 by rpki-client