$ rpki-client -vvf rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft File: 2QhMrcO-yMIAxalrcu2v1KAOrug.mft (raw, json) Hash identifier: ZYdSM1Jtcj1x+ryRf4VSpXG9lwFfory4WY3JnJ+rkY4= Subject key identifier: 8E:C5:BC:30:7D:8F:90:33:0C:D2:45:BB:76:C4:AF:19:F2:6C:B4:F0 Authority key identifier: D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 Certificate issuer: /CN=A91719F1/serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft Manifest number: 0250 Signing time: Thu 19 Jun 2025 01:39:32 +0000 Manifest this update: Thu 19 Jun 2025 01:39:32 +0000 Manifest next update: Thu 26 Jun 2025 01:39:32 +0000 Files and hashes: 1: 2QhMrcO-yMIAxalrcu2v1KAOrug.crl (hash: M9or9Sr1g8uVbve6ydpIhoHNgTvHnNsD81vhaPThE7c=) 2: 00724F9621F111ED93774B6EC4F9AE02.roa (hash: 1MS8BgQSeLxFZfjzI2XVs+BA1y3N2nYBN3Uvkoalvq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 01:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91719F1, serialNumber=D9084CADC3BEC8C200C5A96B72EDAFD4A00EAEE8 Validity Not Before: Jun 19 01:39:32 2025 GMT Not After : Jun 26 01:39:32 2025 GMT Subject: CN=68536a54-87f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:90:5c:f1:5c:36:01:93:09:7d:67:3c:69: 0b:dd:7b:65:43:92:7b:da:69:00:b4:2e:b8:4f:db: 70:b4:86:88:03:b1:13:82:7c:93:cf:cc:72:5c:da: da:f1:52:53:b5:54:1b:fa:67:82:8c:6f:03:c6:5a: 2f:06:f7:6b:3a:43:e4:61:bc:6f:b3:8c:d7:cb:9d: 90:05:c2:cf:e5:5e:e8:2c:f6:04:6d:60:4a:50:83: fa:c9:a5:9a:c8:5c:e6:bd:f9:6c:30:c0:d7:cb:bb: 08:91:ee:df:ea:98:92:6f:9a:a1:44:3b:29:57:20: 7d:5a:d8:b2:bc:d6:f0:52:08:7e:97:28:7b:ad:50: 7f:f0:66:59:70:c3:3d:f2:ab:f0:9c:02:ea:d8:3b: 1a:9b:98:d9:a8:76:e0:c1:ba:7c:92:f4:17:ad:9d: 16:be:90:0e:cc:97:fc:0c:9f:6d:c0:99:a9:17:71: e6:28:98:72:3d:dd:b5:6b:a6:d7:3c:fe:46:e6:0e: 57:8c:33:8b:7a:ba:8f:69:0a:36:d8:6a:ce:b4:51: 41:e3:bb:84:88:cd:43:66:5a:8d:93:3c:25:ec:a0: d8:f5:ca:e0:16:79:c0:f0:97:11:3d:4f:99:aa:0c: 98:c1:9d:04:5e:fd:9c:73:6c:73:71:08:3a:a3:58: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C5:BC:30:7D:8F:90:33:0C:D2:45:BB:76:C4:AF:19:F2:6C:B4:F0 X509v3 Authority Key Identifier: keyid:D9:08:4C:AD:C3:BE:C8:C2:00:C5:A9:6B:72:ED:AF:D4:A0:0E:AE:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QhMrcO-yMIAxalrcu2v1KAOrug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91719F1/695F93FE21EE11EDB4C8BD6CC4F9AE02/2QhMrcO-yMIAxalrcu2v1KAOrug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a9:5e:39:55:33:1e:4b:c3:c6:0d:9e:30:cb:34:33:94:ca: 1f:91:46:e0:80:06:c1:ae:ab:98:ef:21:79:2c:8e:22:97:a5: 0c:35:cf:ef:d8:f8:f4:5d:67:1f:40:94:20:4c:93:bb:8d:7e: c2:94:8e:d2:6c:ec:2a:39:da:3d:b9:fa:a3:60:ad:dc:73:fe: c0:01:24:a5:aa:09:b7:7c:f6:cd:7d:be:39:65:79:80:97:1c: 7b:9f:f8:f1:fe:ad:6e:8c:8f:78:8e:b5:f9:b2:fc:ba:bb:77: 9f:67:76:61:7e:23:b0:42:08:c3:d3:c4:3b:ab:69:c0:72:87: 4d:dc:dc:8a:b9:44:d9:5f:94:0c:a9:c5:52:3c:c5:4b:a9:ba: e5:19:46:25:ea:4d:c9:a8:14:65:fd:9f:23:09:20:67:77:a7: 5b:82:41:14:7a:9d:06:e1:aa:b2:97:00:ef:d0:49:ee:0f:11: 31:a5:ce:da:a4:46:93:ab:db:e6:e4:1c:3c:12:d9:02:55:4d: 0c:56:3a:5e:75:e9:25:50:fa:f0:68:35:54:f4:2b:53:15:35: ef:6b:38:9a:bd:78:1c:6c:38:46:90:ff:66:9f:65:38:cf:4c: 48:7a:87:2c:ef:e3:14:33:f4:0f:e5:88:fd:1a:fd:3c:3f:94: f6:22:2a:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE5RjExMTAvBgNVBAUTKEQ5MDg0Q0FEQzNCRUM4QzIwMEM1QTk2QjcyRURBRkQ0 QTAwRUFFRTgwHhcNMjUwNjE5MDEzOTMyWhcNMjUwNjI2MDEzOTMyWjAYMRYwFAYD VQQDEw02ODUzNmE1NC04N2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyB+QXPFcNgGTCX1nPGkL3XtlQ5J72mkAtC64T9twtIaIA7ETgnyTz8xyXNra 8VJTtVQb+meCjG8DxlovBvdrOkPkYbxvs4zXy52QBcLP5V7oLPYEbWBKUIP6yaWa yFzmvflsMMDXy7sIke7f6piSb5qhRDspVyB9WtiyvNbwUgh+lyh7rVB/8GZZcMM9 8qvwnALq2Dsam5jZqHbgwbp8kvQXrZ0WvpAOzJf8DJ9twJmpF3HmKJhyPd21a6bX PP5G5g5XjDOLerqPaQo22GrOtFFB47uEiM1DZlqNkzwl7KDY9crgFnnA8JcRPU+Z qgyYwZ0EXv2cc2xzcQg6o1i9rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7FvDB9 j5AzDNJFu3bErxnybLTwMB8GA1UdIwQYMBaAFNkITK3DvsjCAMWpa3Ltr9SgDq7o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTlGMS82OTVGOTNGRTIx RUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlNSUF4YWxyY3UydjFLQU9y dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRaE1yY08teU1JQXhhbHJjdTJ2MUtBT3J1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTlGMS82OTVGOTNGRTIxRUUxMUVEQjRDOEJENkNDNEY5QUUwMi8yUWhNcmNPLXlN SUF4YWxyY3UydjFLQU9ydWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlqV45VTMeS8PGDZ4wyzQzlMofkUbggAbBrquY7yF5LI4il6UMNc/v 2Pj0XWcfQJQgTJO7jX7ClI7SbOwqOdo9ufqjYK3cc/7AASSlqgm3fPbNfb45ZXmA lxx7n/jx/q1ujI94jrX5svy6u3efZ3ZhfiOwQgjD08Q7q2nAcodN3NyKuUTZX5QM qcVSPMVLqbrlGUYl6k3JqBRl/Z8jCSBnd6dbgkEUep0G4aqylwDv0EnuDxExpc7a pEaTq9vm5Bw8EtkCVU0MVjpedeklUPrwaDVU9CtTFTXvaziavXgcbDhGkP9mn2U4 z0xIeocs7+MUM/QP5Yj9Gv08P5T2Iira -----END CERTIFICATE-----Generated at Thu Jun 19 12:11:58 2025 by rpki-client