$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: NCoA9b5cxbCg8RnEj98aE7k007HZhtf+d/AB7gCOwXk= Subject key identifier: 20:19:42:A9:43:DF:80:41:6C:69:E8:E1:ED:69:02:7A:80:C7:7C:52 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 043D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 043C Signing time: Sat 14 Jun 2025 23:59:57 +0000 Manifest this update: Sat 14 Jun 2025 23:59:57 +0000 Manifest next update: Sat 21 Jun 2025 23:59:57 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: 8kg4B1iTzpb9/tlrJoqPKtFNBGV2bUbT7nb8bhUQvXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 23:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1085 (0x43d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Jun 14 23:59:57 2025 GMT Not After : Jun 21 23:59:57 2025 GMT Subject: CN=684e0cfd-b53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:2a:7d:b2:b4:26:e7:f3:3f:85:cc:f5:91: e0:3c:37:16:be:1e:73:f7:ab:86:6a:e3:be:1f:4c: af:71:8f:a7:0e:2e:ea:c4:1c:fb:a1:ba:d1:a0:8e: 7c:9a:d0:a3:1b:8a:b9:ea:3a:09:77:b4:85:a6:76: db:29:20:57:1f:fb:8a:f6:29:59:21:95:4b:e1:bc: 37:9a:e4:7c:0b:ea:2b:7b:c5:97:06:9a:47:44:bd: 2b:a5:b8:5b:79:80:bb:18:84:cb:c5:66:74:6c:b5: 5b:5c:7a:c3:10:fd:c8:ad:86:22:f5:bc:d7:ab:c9: 3f:9a:30:fa:ce:7c:79:30:53:1a:69:2c:9d:47:33: cf:1f:21:12:10:40:1a:3d:4f:a0:a7:d8:f2:be:3b: 2b:09:51:43:9f:b9:37:f7:bf:42:44:79:cf:14:95: 29:61:cc:00:0e:84:b9:79:31:38:ee:f7:aa:80:ce: 11:b4:6a:e3:ad:71:1b:10:42:52:0c:42:51:cd:5f: 37:f0:de:4a:16:be:69:77:f2:63:65:e2:b9:8f:5d: 23:25:31:6b:01:a7:54:e8:3b:a5:04:02:84:0f:99: 70:1f:77:45:b8:78:eb:dc:3d:00:11:d1:6c:1b:d3: 9f:c4:6d:3b:5e:7f:4d:14:23:f4:dd:bc:2d:7c:ac: 03:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:19:42:A9:43:DF:80:41:6C:69:E8:E1:ED:69:02:7A:80:C7:7C:52 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:02:12:8c:3b:41:d6:e9:bc:95:67:1c:9d:a4:c9:89:97:c4: 3b:18:d0:60:e2:22:b0:ad:ee:b0:b5:24:ca:c0:cb:07:b9:aa: a9:17:0b:ab:76:01:16:4d:fa:97:f2:50:86:f0:22:ca:94:32: 86:2d:68:df:0f:70:16:07:91:e4:95:f9:77:c9:e8:3b:06:de: 2b:4c:a2:43:3b:ba:50:b6:06:df:c3:4c:02:76:b0:d6:95:5c: 88:fa:65:7a:f4:da:b3:84:81:42:02:9b:42:8a:65:45:19:90: 7c:6a:45:82:b9:ec:87:87:43:27:6a:16:0c:23:bc:fc:f4:43: c6:90:a6:6d:c6:c9:49:cc:c6:67:a1:2e:9e:d3:df:52:4c:37: 92:4e:0f:32:66:af:ee:30:80:b5:17:30:63:f8:a4:97:b7:25: 41:eb:8a:66:69:c4:df:59:69:03:97:f9:29:56:15:cc:1f:c4: 0d:57:db:8a:11:19:74:0e:ca:31:0d:06:f3:58:1c:9b:29:cf: 6c:a6:e2:c7:a8:ee:b2:ec:e5:ee:98:eb:de:8d:07:9b:01:7b: 0e:bb:ff:c5:9b:71:59:af:f5:c0:ce:c3:63:13:35:46:8e:69: b1:43:3f:89:90:63:6b:65:04:70:29:0e:2c:03:89:77:3a:72: 91:27:3b:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUwNjE0MjM1OTU3WhcNMjUwNjIxMjM1OTU3WjAYMRYwFAYD VQQDEw02ODRlMGNmZC1iNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPwqfbK0JufzP4XM9ZHgPDcWvh5z96uGauO+H0yvcY+nDi7qxBz7obrRoI58 mtCjG4q56joJd7SFpnbbKSBXH/uK9ilZIZVL4bw3muR8C+ore8WXBppHRL0rpbhb eYC7GITLxWZ0bLVbXHrDEP3IrYYi9bzXq8k/mjD6znx5MFMaaSydRzPPHyESEEAa PU+gp9jyvjsrCVFDn7k3979CRHnPFJUpYcwADoS5eTE47veqgM4RtGrjrXEbEEJS DEJRzV838N5KFr5pd/JjZeK5j10jJTFrAadU6DulBAKED5lwH3dFuHjr3D0AEdFs G9OfxG07Xn9NFCP03bwtfKwD+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAZQqlD 34BBbGno4e1pAnqAx3xSMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWAhKMO0HW6byVZxydpMmJl8Q7GNBg4iKwre6wtSTKwMsHuaqpFwur dgEWTfqX8lCG8CLKlDKGLWjfD3AWB5Hklfl3yeg7Bt4rTKJDO7pQtgbfw0wCdrDW lVyI+mV69NqzhIFCAptCimVFGZB8akWCueyHh0MnahYMI7z89EPGkKZtxslJzMZn oS6e099STDeSTg8yZq/uMIC1FzBj+KSXtyVB64pmacTfWWkDl/kpVhXMH8QNV9uK ERl0DsoxDQbzWBybKc9spuLHqO6y7OXumOvejQebAXsOu//Fm3FZr/XAzsNjEzVG jmmxQz+JkGNrZQRwKQ4sA4l3OnKRJzse -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:07 2025 by rpki-client