$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: e5uH1xaQCJlN6iRtjLbE0W7l+1sGcAwcjBWGk0xIZvA= Subject key identifier: AA:5B:90:67:78:E9:A6:C1:1E:A5:27:2D:FC:18:21:AE:9A:64:02:01 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 63 Signing time: Fri 13 Jun 2025 05:59:37 +0000 Manifest this update: Fri 13 Jun 2025 05:59:37 +0000 Manifest next update: Fri 20 Jun 2025 05:59:37 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: jWzbwvXUilEA34Oejx1od9EEizXSQJDrTEFrZJnWNEA=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: 7AoMz8H6zHHdV8IPpxWlOn2xVFqVFr83q+XexoYNuOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Jun 13 05:59:37 2025 GMT Not After : Jun 20 05:59:37 2025 GMT Subject: CN=684bbe49-54ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:24:5b:83:15:e8:02:3f:12:66:6a:d5:5f: aa:7c:76:13:88:01:9a:75:6c:3e:c3:e1:d3:64:fb: d3:34:2f:fb:0c:ef:2e:76:2a:2b:d6:c0:30:00:78: 0e:31:18:4a:2e:5d:bf:ba:b7:a9:a9:fb:ee:89:79: e2:34:1d:74:4d:3f:6b:b7:61:15:87:fc:71:56:49: 81:27:a9:8d:a6:53:9a:fc:44:c5:d2:68:33:93:11: 63:94:c4:cc:da:61:48:af:2b:e8:bd:f4:9a:d1:3c: b7:51:c5:98:75:5a:54:09:3e:04:a1:e9:d6:f7:a8: 6b:6b:4b:eb:3a:8b:d1:b6:b2:50:ac:24:92:9b:1c: 18:7d:1d:43:db:6d:54:bd:72:20:6d:52:14:cf:6b: 0b:d1:51:87:5e:a6:19:21:6f:bc:3d:bf:e0:f1:48: 56:66:7a:c0:1b:7a:b7:02:33:6d:1a:0c:55:d6:54: 74:52:b2:ec:3b:5c:82:bd:5f:0d:e7:3c:fa:fe:5c: ab:97:96:23:56:23:17:68:ff:4a:3b:b3:51:39:25: f8:2c:22:1e:e2:3b:94:fa:ac:d4:8f:37:14:0a:f9: ed:be:fe:e3:41:6f:d1:62:c1:dd:50:81:32:4b:21: 3e:ab:59:6f:8d:17:10:59:92:39:cf:75:b0:e6:e1: 22:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5B:90:67:78:E9:A6:C1:1E:A5:27:2D:FC:18:21:AE:9A:64:02:01 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:8a:2c:4b:9a:da:13:2f:05:ab:32:71:63:ff:9e:e6:3e:64: 07:00:db:5f:de:d4:ac:00:29:e0:a1:cb:7c:c4:8e:19:99:c7: 79:ed:23:3b:5e:19:06:20:54:97:29:1f:d2:5a:37:86:6e:8b: 52:41:46:24:8a:9e:da:f2:85:c0:8e:60:83:db:ff:d3:4b:3b: 73:c7:8e:7e:8e:63:69:3d:53:f3:51:ee:7d:fd:31:9b:12:30: 32:31:03:c1:7a:9c:66:db:1a:12:55:f4:54:9d:ea:45:5b:67: 4f:b9:53:d4:07:fd:a2:d7:8e:82:11:7f:af:d3:96:b8:c0:24: c8:e8:a1:9f:2d:97:c3:e9:fa:45:95:5a:31:e0:58:0d:19:00: d8:c4:cd:a9:1c:ef:06:a5:b8:24:82:df:bd:72:43:7b:4c:1e: b7:cc:a8:dc:17:5b:c1:cf:04:45:61:a2:5b:ea:40:ff:69:2b: 91:17:8c:2d:fc:31:6a:c2:6e:35:dc:ca:f4:ec:07:78:f3:cd: ce:cf:d8:c6:18:81:19:09:06:d8:57:3e:34:10:b0:9c:22:b3: 88:88:4b:70:e3:a1:e5:9b:7d:23:64:d3:4e:f5:55:6d:c7:4d: 6d:38:b0:ab:65:7a:30:76:ea:84:73:e3:12:6e:2b:0f:e5:73: a7:f6:1a:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkE5NjExMC8GA1UEBRMoREFFRkE1NDM1OEY0QkNDMEQ4NDdDQzZEQzlDQUY3OEJD NUUwOTk2RTAeFw0yNTA2MTMwNTU5MzdaFw0yNTA2MjAwNTU5MzdaMBgxFjAUBgNV BAMTDTY4NGJiZTQ5LTU0YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBrCRbgxXoAj8SZmrVX6p8dhOIAZp1bD7D4dNk+9M0L/sM7y52KivWwDAAeA4x GEouXb+6t6mp++6JeeI0HXRNP2u3YRWH/HFWSYEnqY2mU5r8RMXSaDOTEWOUxMza YUivK+i99JrRPLdRxZh1WlQJPgSh6db3qGtrS+s6i9G2slCsJJKbHBh9HUPbbVS9 ciBtUhTPawvRUYdephkhb7w9v+DxSFZmesAbercCM20aDFXWVHRSsuw7XIK9Xw3n PPr+XKuXliNWIxdo/0o7s1E5JfgsIh7iO5T6rNSPNxQK+e2+/uNBb9Fiwd1QgTJL IT6rWW+NFxBZkjnPdbDm4SInAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqluQZ3jp psEepSct/BghrppkAgEwHwYDVR0jBBgwFoAU2u+lQ1j0vMDYR8xtycr3i8XgmW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQTk2LzhBMzUwOTBDQjVF RDExRUY5RDIwNjkwRUM0RjlBRTAyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21X NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnUtbFExajB2TURZUjh4dHljcjNpOFhnbVc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QTk2LzhBMzUwOTBDQjVFRDExRUY5RDIwNjkwRUM0RjlBRTAyLzJ1LWxRMWowdk1E WVI4eHR5Y3IzaThYZ21XNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHSKLEua2hMvBasycWP/nuY+ZAcA21/e1KwAKeChy3zEjhmZx3ntIzte GQYgVJcpH9JaN4Zui1JBRiSKntryhcCOYIPb/9NLO3PHjn6OY2k9U/NR7n39MZsS MDIxA8F6nGbbGhJV9FSd6kVbZ0+5U9QH/aLXjoIRf6/TlrjAJMjooZ8tl8Pp+kWV WjHgWA0ZANjEzakc7waluCSC371yQ3tMHrfMqNwXW8HPBEVholvqQP9pK5EXjC38 MWrCbjXcyvTsB3jzzc7P2MYYgRkJBthXPjQQsJwis4iIS3DjoeWbfSNk0071VW3H TW04sKtlejB26oRz4xJuKw/lc6f2GuY= -----END CERTIFICATE-----Generated at Sat Jun 14 19:32:27 2025 by rpki-client