$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: 0Yi7DbfoXDhPtrbb88fWI8eCz28iZ+5H899eNCBzSX8= Subject key identifier: DF:D8:D6:F6:9C:94:B7:C5:7F:2F:79:7F:95:31:9B:C3:8B:99:D5:13 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01B0 Signing time: Sat 21 Jun 2025 02:24:43 +0000 Manifest this update: Sat 21 Jun 2025 02:24:42 +0000 Manifest next update: Sat 28 Jun 2025 02:24:42 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: nAKnneHjHytlDXqqS3hFUGBfX+qE7zfybJ93Y3S8pvs=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 02:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Jun 21 02:24:42 2025 GMT Not After : Jun 28 02:24:42 2025 GMT Subject: CN=685617eb-b736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:06:b2:04:fd:73:ae:8a:5f:81:88:70:67: bd:86:76:8a:e7:e4:f8:d9:64:e3:96:5e:cc:38:3f: 87:d3:89:fb:5a:ff:cb:2f:9d:7e:ad:c2:5f:c9:2e: 4e:d2:39:9b:10:64:26:9e:02:76:0d:12:7c:04:fc: dc:32:df:ec:f1:ce:36:f9:16:1e:6b:ae:ca:29:08: 3c:a8:e4:da:80:23:f8:9b:54:0c:86:7d:ca:3e:05: 84:e1:c1:62:f9:ea:24:7d:79:9f:0b:20:54:6a:9a: 2d:b0:b8:76:4a:a3:c3:25:2c:c5:f6:89:01:f8:0f: c3:62:4d:e5:c4:d2:9a:0f:df:04:a3:c4:70:5d:ad: 29:8c:93:e5:5a:c8:3a:71:62:27:8e:02:a6:35:a6: 93:ad:b8:fe:ac:e5:6d:6c:72:1d:9a:b2:58:fd:c4: 1f:c2:7d:f6:ec:12:5b:a7:62:9c:c3:10:51:9b:d5: b0:57:e0:3d:3e:3c:e3:c2:c7:59:56:d7:d6:8f:6a: 35:1c:b0:9f:1f:c3:ba:d3:79:f7:b7:2f:b7:bb:ff: 3b:e7:50:e0:d0:ab:a7:67:1f:c2:15:4d:3b:72:a2: c6:cd:55:a8:91:92:c0:0d:df:65:f4:04:3d:5d:51: a6:de:b3:c8:32:cf:a4:30:be:76:6e:f7:b5:2a:23: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D8:D6:F6:9C:94:B7:C5:7F:2F:79:7F:95:31:9B:C3:8B:99:D5:13 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d8:a0:a8:b4:52:e8:c7:80:26:dc:6c:9b:ed:ed:07:4d:ca: b1:32:82:45:5a:3f:e3:8a:2d:75:bc:b8:0f:75:8d:8e:e8:a3: 31:1a:16:5c:e9:ae:50:7e:14:19:11:9d:f7:64:74:66:60:03: 9e:be:98:41:f0:10:9c:72:2f:ad:fc:b5:0f:50:8a:0b:f9:df: 82:54:97:9a:b5:85:ed:42:4c:54:5e:d5:f2:33:22:fc:b4:cd: 8b:9d:ba:b0:73:b8:db:44:39:0c:7d:02:14:77:1f:ab:8b:89: 5d:17:2c:4d:ba:c5:11:90:6c:b5:cc:e3:3d:05:24:d6:b7:8e: c1:33:1c:f4:78:96:5c:08:cc:b8:98:e5:63:ed:0b:ae:71:2c: 26:73:c7:bb:6f:ed:24:fc:2e:29:5c:18:f1:b4:1e:4a:c9:3f: 04:4f:d2:d9:77:f7:a1:7c:8e:92:3f:fa:7f:3e:dd:5f:c2:0c: f4:47:1d:bf:d6:da:27:21:c6:f8:76:e0:76:71:ff:52:f3:7e: 05:93:37:b0:70:23:6e:b8:96:86:1f:dd:48:95:c3:ed:7a:c6: 8a:c7:f5:f0:ca:b1:bf:26:14:3a:20:2b:65:75:df:bf:12:46: e9:ab:eb:24:9d:a1:56:3c:13:57:eb:6b:04:88:64:a8:54:c7: 50:69:fb:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUwNjIxMDIyNDQyWhcNMjUwNjI4MDIyNDQyWjAYMRYwFAYD VQQDEw02ODU2MTdlYi1iNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu04GsgT9c66KX4GIcGe9hnaK5+T42WTjll7MOD+H04n7Wv/LL51+rcJfyS5O 0jmbEGQmngJ2DRJ8BPzcMt/s8c42+RYea67KKQg8qOTagCP4m1QMhn3KPgWE4cFi +eokfXmfCyBUapotsLh2SqPDJSzF9okB+A/DYk3lxNKaD98Eo8RwXa0pjJPlWsg6 cWInjgKmNaaTrbj+rOVtbHIdmrJY/cQfwn327BJbp2KcwxBRm9WwV+A9PjzjwsdZ VtfWj2o1HLCfH8O603n3ty+3u/8751Dg0KunZx/CFU07cqLGzVWokZLADd9l9AQ9 XVGm3rPIMs+kML52bve1KiMzuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/Y1vac lLfFfy95f5Uxm8OLmdUTMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBa2KCotFLox4Am3Gyb7e0HTcqxMoJFWj/jii11vLgPdY2O6KMxGhZc 6a5QfhQZEZ33ZHRmYAOevphB8BCcci+t/LUPUIoL+d+CVJeatYXtQkxUXtXyMyL8 tM2Lnbqwc7jbRDkMfQIUdx+ri4ldFyxNusURkGy1zOM9BSTWt47BMxz0eJZcCMy4 mOVj7QuucSwmc8e7b+0k/C4pXBjxtB5KyT8ET9LZd/ehfI6SP/p/Pt1fwgz0Rx2/ 1tonIcb4duB2cf9S834FkzewcCNuuJaGH91IlcPtesaKx/XwyrG/JhQ6ICtldd+/ Ekbpq+sknaFWPBNX62sEiGSoVMdQafun -----END CERTIFICATE-----Generated at Sun Jun 22 12:57:36 2025 by rpki-client