$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: gVwarc+hnGCjccZTnDIdYF8asdE860yJ7neLKcyEXAA= Subject key identifier: 68:0F:56:D2:5D:9A:BE:E5:B1:DD:11:89:63:65:A7:95:58:72:26:AE Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: B8 Signing time: Tue 17 Jun 2025 04:55:56 +0000 Manifest this update: Tue 17 Jun 2025 04:55:56 +0000 Manifest next update: Tue 24 Jun 2025 04:55:56 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: nyOHQt4UEIzdj9fCLHx9Uq3W9QNqCUTzsCBA/9ACofY=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Jun 17 04:55:56 2025 GMT Not After : Jun 24 04:55:56 2025 GMT Subject: CN=6850f55c-b7f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1f:5e:12:73:9c:37:6d:42:19:87:56:ac:dc: f6:e9:ac:10:f2:57:b6:19:22:36:19:d6:33:07:fc: a4:e5:b9:2f:fb:cf:81:c9:3a:25:69:e1:89:3f:fc: 7c:90:a2:99:80:63:d9:12:dd:32:15:3f:26:91:56: 09:1e:4d:bf:c8:0d:9e:81:69:85:b0:7a:19:81:1d: b7:2f:d3:78:c6:e9:86:cc:d7:76:3b:d2:17:d9:f8: 28:35:51:60:9c:0b:14:52:30:fd:4a:35:29:20:ea: 14:b6:de:78:55:5d:40:cc:b3:e5:7d:59:f8:31:cb: da:1e:0f:a9:56:55:d1:37:63:77:84:e7:2b:e4:9f: 51:bf:29:cb:0a:62:d8:9a:98:f2:39:f8:d4:8d:1b: d6:49:f0:de:92:e7:99:eb:8e:79:ca:51:f3:43:2b: e2:44:63:bd:75:d8:5f:4d:33:2e:21:a6:79:84:52: 6d:12:13:b6:a8:36:66:12:ac:aa:ed:f6:6e:53:67: 3b:c0:e1:a4:87:90:aa:f5:ae:80:ef:58:50:33:fd: b7:c0:29:35:ea:58:6a:98:e3:3e:ae:15:d2:da:44: eb:4c:1a:e0:5d:fe:3b:6e:c4:4a:76:d5:43:a0:cd: 10:50:7c:a2:2b:a0:1c:63:80:1c:48:36:1c:e0:6f: a4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0F:56:D2:5D:9A:BE:E5:B1:DD:11:89:63:65:A7:95:58:72:26:AE X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:34:ba:51:b5:ca:a8:4a:43:60:0c:97:88:c7:d6:34:be:e6: 94:1c:9a:90:93:d1:2e:2f:fc:3f:38:2a:51:95:a1:70:fb:9f: 02:48:b8:fd:56:c2:95:8a:07:14:9b:3f:77:2a:aa:2e:4e:78: 05:0f:14:d6:24:13:0e:f2:c4:69:cb:ec:c2:22:57:d3:ef:7b: 4f:48:2b:37:33:a3:93:34:5e:d5:94:d3:51:ef:02:04:f0:91: 73:ff:ac:10:ec:09:92:d8:0f:67:e0:6f:73:73:ad:ce:0b:5d: 79:2a:3d:5e:45:7d:01:a0:73:45:99:49:56:03:93:5f:9a:37: 20:91:c6:37:3f:d0:07:1e:58:56:be:a4:f0:3f:67:e0:2b:aa: 24:43:09:36:67:2c:d6:6d:23:b5:f4:27:dc:0d:09:6a:00:73: 49:ff:d1:36:03:56:2e:98:55:f5:85:bf:c0:75:4c:c1:f3:40: 3e:88:57:37:ce:3e:9f:04:ed:ef:d4:ac:b5:b4:3f:a9:a8:e2: fc:1a:29:52:d3:a1:a1:0e:c1:ca:90:bb:d9:2a:70:2f:01:f2: 5a:c7:05:94:3c:c0:d9:10:cf:00:59:ef:1c:57:d0:43:75:ef: ff:c4:9f:bd:5c:1f:c1:96:d3:c2:d9:66:e0:a6:2b:e7:59:09: 00:f4:00:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwNjE3MDQ1NTU2WhcNMjUwNjI0MDQ1NTU2WjAYMRYwFAYD VQQDEw02ODUwZjU1Yy1iN2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoB9eEnOcN21CGYdWrNz26awQ8le2GSI2GdYzB/yk5bkv+8+ByTolaeGJP/x8 kKKZgGPZEt0yFT8mkVYJHk2/yA2egWmFsHoZgR23L9N4xumGzNd2O9IX2fgoNVFg nAsUUjD9SjUpIOoUtt54VV1AzLPlfVn4McvaHg+pVlXRN2N3hOcr5J9RvynLCmLY mpjyOfjUjRvWSfDekueZ6455ylHzQyviRGO9ddhfTTMuIaZ5hFJtEhO2qDZmEqyq 7fZuU2c7wOGkh5Cq9a6A71hQM/23wCk16lhqmOM+rhXS2kTrTBrgXf47bsRKdtVD oM0QUHyiK6AcY4AcSDYc4G+kXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgPVtJd mr7lsd0RiWNlp5VYciauMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArNLpRtcqoSkNgDJeIx9Y0vuaUHJqQk9EuL/w/OCpRlaFw+58CSLj9 VsKVigcUmz93KqouTngFDxTWJBMO8sRpy+zCIlfT73tPSCs3M6OTNF7VlNNR7wIE 8JFz/6wQ7AmS2A9n4G9zc63OC115Kj1eRX0BoHNFmUlWA5NfmjcgkcY3P9AHHlhW vqTwP2fgK6okQwk2ZyzWbSO19CfcDQlqAHNJ/9E2A1YumFX1hb/AdUzB80A+iFc3 zj6fBO3v1Ky1tD+pqOL8GilS06GhDsHKkLvZKnAvAfJaxwWUPMDZEM8AWe8cV9BD de//xJ+9XB/BltPC2WbgpivnWQkA9ABb -----END CERTIFICATE-----Generated at Wed Jun 18 01:47:17 2025 by rpki-client