$ rpki-client -vvf rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft File: PS2TrIsQhlgX2adMyBoDDX010HQ.mft (raw, json) Hash identifier: Pr9mGTSM89RPhYPw6p77Gl9paGHlua671Qx/SdfaoN8= Subject key identifier: B7:35:F7:37:25:4A:F9:97:36:17:C3:BC:09:41:16:33:39:C9:A6:39 Authority key identifier: 3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 Certificate issuer: /CN=A9196D9E/serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft Manifest number: 0126 Signing time: Thu 05 Jun 2025 04:02:48 +0000 Manifest this update: Thu 05 Jun 2025 04:02:48 +0000 Manifest next update: Thu 12 Jun 2025 04:02:48 +0000 Files and hashes: 1: PS2TrIsQhlgX2adMyBoDDX010HQ.crl (hash: Do5hgGjFi3TajjAHjSDjANd+0PUIpnV1yieMEmezbrc=) 2: C8BDA37CF68A11EFB7F91E24C4F9AE02.roa (hash: aRDWwCB81f6X4Sbu5aqqdwftigSG3lRUiRjjd/98tJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 04:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196D9E, serialNumber=3D2D93AC8B10865817D9A74CC81A030D7D35D074 Validity Not Before: Jun 5 04:02:48 2025 GMT Not After : Jun 12 04:02:48 2025 GMT Subject: CN=684116e8-99f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:2d:5f:2a:b8:7a:8e:ca:eb:c5:c0:14:9e: d4:82:b2:be:2a:0f:12:9d:4f:50:be:b7:10:7a:4a: b6:f2:b4:95:a8:5f:9d:19:99:bb:2b:82:e9:c8:56: 37:73:e4:b9:3a:22:5f:b2:d3:5d:40:2f:4e:6d:b6: ef:e4:27:0f:72:db:91:73:3f:2d:cf:46:9a:ac:c1: 8b:4d:a3:31:3e:8f:3b:7a:ef:3d:a5:35:9f:80:e2: 20:92:ae:f7:eb:c5:78:cf:56:37:75:06:f2:a9:1f: 41:17:cf:89:57:e7:9d:d0:d3:8f:13:69:65:5d:89: 86:c4:39:c1:0b:a2:71:7d:21:1f:40:6d:94:41:a9: bc:59:a9:01:7a:fa:9c:8b:ea:b4:fc:69:b5:93:bf: cd:08:52:b1:16:bc:72:0a:04:d3:d1:40:8d:64:8d: d4:9b:7c:2f:91:4b:8c:ae:ad:4d:73:39:c9:7f:dd: 92:8c:e4:91:0e:5f:0a:42:04:f4:22:32:03:1c:ed: a0:ed:6f:cc:17:dc:76:88:e8:b4:ea:ac:d7:e8:6c: 33:55:e1:2b:4e:08:32:45:04:13:5b:92:98:57:cb: c8:c6:2f:e2:f9:5d:9d:27:d9:17:ed:db:ee:4b:3f: 3d:b1:6a:88:d8:84:3b:ba:38:07:9d:82:d6:52:54: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:F7:37:25:4A:F9:97:36:17:C3:BC:09:41:16:33:39:C9:A6:39 X509v3 Authority Key Identifier: keyid:3D:2D:93:AC:8B:10:86:58:17:D9:A7:4C:C8:1A:03:0D:7D:35:D0:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PS2TrIsQhlgX2adMyBoDDX010HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196D9E/77BB984C7D6111EEB463C85AC4F9AE02/PS2TrIsQhlgX2adMyBoDDX010HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ba:15:07:2f:e9:d8:c1:8f:77:47:da:69:06:b3:64:86:4e: 22:9c:43:c5:81:92:ef:6b:14:92:97:6c:70:48:cf:23:c8:8a: d9:cc:54:83:c3:2a:b4:86:3b:62:d8:b9:e8:52:4b:b0:96:33: ee:4b:9d:5f:ac:22:fa:2c:34:d3:ef:7e:51:2d:2e:40:89:18: 91:55:46:87:0c:bd:84:42:e6:85:47:66:3a:69:8e:6c:db:0f: 24:88:5e:39:d5:1b:f0:4d:ca:fb:36:f4:0e:03:39:5c:45:80: 55:fb:3e:b0:94:87:1c:02:bd:a7:f2:17:af:75:b5:f0:20:99: 74:33:64:6d:1b:c1:e8:c5:2f:b4:42:44:ee:60:57:c7:63:41: c7:b2:ea:c3:7e:d3:4f:a1:2e:d2:2c:1f:bf:a3:c1:5c:94:fb: 9d:29:0c:04:ae:a7:d2:8a:e7:ee:76:5b:36:fb:31:c5:e4:57: 6a:4c:55:eb:be:fb:61:18:96:6f:3b:5e:9f:b8:7f:1c:ae:fc: b8:0d:34:c1:71:2d:dd:b4:ee:9d:d1:70:73:74:5b:7a:92:59: e9:0e:95:b8:6a:37:1f:06:e3:3d:d9:dd:ef:5a:17:1c:32:cd: f6:3a:47:0c:f7:04:87:a3:ab:67:cd:22:e9:66:89:a9:8d:ba: c0:40:bc:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZEOUUxMTAvBgNVBAUTKDNEMkQ5M0FDOEIxMDg2NTgxN0Q5QTc0Q0M4MUEwMzBE N0QzNUQwNzQwHhcNMjUwNjA1MDQwMjQ4WhcNMjUwNjEyMDQwMjQ4WjAYMRYwFAYD VQQDEw02ODQxMTZlOC05OWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroYtXyq4eo7K68XAFJ7UgrK+Kg8SnU9QvrcQekq28rSVqF+dGZm7K4LpyFY3 c+S5OiJfstNdQC9Obbbv5CcPctuRcz8tz0aarMGLTaMxPo87eu89pTWfgOIgkq73 68V4z1Y3dQbyqR9BF8+JV+ed0NOPE2llXYmGxDnBC6JxfSEfQG2UQam8WakBevqc i+q0/Gm1k7/NCFKxFrxyCgTT0UCNZI3Um3wvkUuMrq1NcznJf92SjOSRDl8KQgT0 IjIDHO2g7W/MF9x2iOi06qzX6GwzVeErTggyRQQTW5KYV8vIxi/i+V2dJ9kX7dvu Sz89sWqI2IQ7ujgHnYLWUlSiTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLc19zcl SvmXNhfDvAlBFjM5yaY5MB8GA1UdIwQYMBaAFD0tk6yLEIZYF9mnTMgaAw19NdB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkQ5RS83N0JCOTg0QzdE NjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhsZ1gyYWRNeUJvRERYMDEw SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BTMlRySXNRaGxnWDJhZE15Qm9ERFgwMTBIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkQ5RS83N0JCOTg0QzdENjExMUVFQjQ2M0M4NUFDNEY5QUUwMi9QUzJUcklzUWhs Z1gyYWRNeUJvRERYMDEwSFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGuhUHL+nYwY93R9ppBrNkhk4inEPFgZLvaxSSl2xwSM8jyIrZzFSD wyq0hjti2LnoUkuwljPuS51frCL6LDTT735RLS5AiRiRVUaHDL2EQuaFR2Y6aY5s 2w8kiF451RvwTcr7NvQOAzlcRYBV+z6wlIccAr2n8hevdbXwIJl0M2RtG8HoxS+0 QkTuYFfHY0HHsurDftNPoS7SLB+/o8FclPudKQwErqfSiufudls2+zHF5FdqTFXr vvthGJZvO16fuH8crvy4DTTBcS3dtO6d0XBzdFt6klnpDpW4ajcfBuM92d3vWhcc Ms32OkcM9wSHo6tnzSLpZompjbrAQLz4 -----END CERTIFICATE-----Generated at Sat Jun 7 05:20:21 2025 by rpki-client