$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: f6+6uCQoAy8tTxZxzCBuLfQKpziOHKqLGxn6QZEWvzA= Subject key identifier: F1:ED:7A:D5:04:86:9E:30:2D:84:E7:D1:4E:29:58:44:7A:97:80:F1 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A1B Signing time: Fri 20 Jun 2025 15:38:28 +0000 Manifest this update: Fri 20 Jun 2025 15:38:27 +0000 Manifest next update: Fri 27 Jun 2025 15:38:27 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: Z4mXnzWQhLjUSavBApVFV26FXb2B/GW664yzYlU1XwI=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10822 (0x2a46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: Jun 20 15:38:27 2025 GMT Not After : Jun 27 15:38:27 2025 GMT Subject: CN=68558073-7577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:5d:21:87:dd:26:20:2f:e4:de:cc:5e:9e: 38:fa:df:67:ef:28:f8:7f:ac:b8:32:af:a2:83:d5: 1b:29:13:20:2c:f9:52:19:ad:45:77:c1:40:fe:0c: e7:56:58:24:42:40:39:61:92:3a:b0:8d:e2:a2:f1: 02:be:fe:f5:2a:c5:8c:71:f0:66:5a:26:0c:9a:eb: e7:95:df:a2:6e:9a:28:80:cc:cf:84:cb:d0:11:ab: ff:80:90:bd:0c:e4:00:14:f6:20:f0:31:c9:71:e4: 1d:4b:86:ba:bb:3d:ac:84:56:4a:c3:00:55:04:0b: 25:7f:f3:8f:9d:bb:45:cf:93:be:40:41:84:8b:ae: 83:f4:11:57:3d:8d:f9:96:e3:66:df:e8:ef:0a:3b: 47:4c:6c:2d:30:82:7a:27:69:27:13:b6:10:72:a8: cf:7f:f8:0a:19:4b:98:b2:f8:94:22:c5:f6:b5:5e: 44:26:ed:9a:a6:aa:fc:2d:2f:92:eb:d4:dd:71:bd: 25:b4:6f:b5:49:24:f1:3f:cd:f4:f7:d4:69:fd:58: fe:53:f2:d3:17:20:79:a0:0c:6e:85:44:b2:22:d3: 90:dc:17:37:ea:26:c6:be:6f:53:86:e1:d3:d1:2c: 94:8b:45:70:81:1c:6e:5a:34:71:c3:7b:ee:06:7e: 70:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:ED:7A:D5:04:86:9E:30:2D:84:E7:D1:4E:29:58:44:7A:97:80:F1 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:25:25:74:42:11:34:32:57:9a:1d:35:03:40:4d:2c:45:74: 85:8f:10:89:18:00:d5:dd:7e:a6:16:6e:20:f2:8a:fe:37:0c: a3:8a:47:0b:94:6b:36:43:4d:86:7d:49:db:f2:7d:d5:aa:99: bc:46:94:2f:9b:88:44:8b:0a:89:27:51:ce:5a:b5:a5:3f:de: d8:3b:08:38:6d:b9:3f:4a:12:56:75:90:a3:2f:e4:1c:33:aa: b6:d8:85:4b:44:d6:24:c2:ba:67:14:f7:26:40:4d:74:05:7f: 1b:f5:d6:7e:aa:71:5f:35:a8:ec:07:4c:4f:fe:0a:c8:f7:b2: 2f:19:bc:d2:ec:95:55:45:ff:1f:25:79:2d:ab:d1:86:6d:b7: c5:82:bb:48:11:69:7d:2a:fd:4f:2a:7e:dc:8a:17:b4:90:ba: bb:c7:c5:18:35:60:9c:f8:09:7f:91:c2:06:4a:81:83:4f:ee: a0:fb:38:c6:cf:d5:85:88:f0:65:0f:d1:af:02:15:6a:dd:0d: 84:b8:33:bf:aa:8a:f0:06:e2:e5:97:5d:5b:75:08:c9:03:cb: 69:49:0e:8c:31:19:09:f1:88:76:5a:8d:80:e0:91:fc:68:77: 33:f3:3d:5e:d1:f0:c7:74:c3:d6:9d:82:1f:46:65:e4:4a:74: 4b:96:ba:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUwNjIwMTUzODI3WhcNMjUwNjI3MTUzODI3WjAYMRYwFAYD VQQDEw02ODU1ODA3My03NTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv8tdIYfdJiAv5N7MXp44+t9n7yj4f6y4Mq+ig9UbKRMgLPlSGa1Fd8FA/gzn VlgkQkA5YZI6sI3iovECvv71KsWMcfBmWiYMmuvnld+ibpoogMzPhMvQEav/gJC9 DOQAFPYg8DHJceQdS4a6uz2shFZKwwBVBAslf/OPnbtFz5O+QEGEi66D9BFXPY35 luNm3+jvCjtHTGwtMIJ6J2knE7YQcqjPf/gKGUuYsviUIsX2tV5EJu2apqr8LS+S 69Tdcb0ltG+1SSTxP83099Rp/Vj+U/LTFyB5oAxuhUSyItOQ3Bc36ibGvm9ThuHT 0SyUi0VwgRxuWjRxw3vuBn5wCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHtetUE hp4wLYTn0U4pWER6l4DxMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3JSV0QhE0MleaHTUDQE0sRXSFjxCJGADV3X6mFm4g8or+NwyjikcL lGs2Q02GfUnb8n3Vqpm8RpQvm4hEiwqJJ1HOWrWlP97YOwg4bbk/ShJWdZCjL+Qc M6q22IVLRNYkwrpnFPcmQE10BX8b9dZ+qnFfNajsB0xP/grI97IvGbzS7JVVRf8f JXktq9GGbbfFgrtIEWl9Kv1PKn7cihe0kLq7x8UYNWCc+Al/kcIGSoGDT+6g+zjG z9WFiPBlD9GvAhVq3Q2EuDO/qorwBuLll11bdQjJA8tpSQ6MMRkJ8Yh2Wo2A4JH8 aHcz8z1e0fDHdMPWnYIfRmXkSnRLlrrz -----END CERTIFICATE-----Generated at Sat Jun 21 12:49:14 2025 by rpki-client