$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: EwUQHUnGQGC2Z9X4cc4TzXIYJO/MgmspKMmmsuXr+xk= Subject key identifier: EA:6B:24:4C:9F:D4:18:48:27:1C:A7:44:C7:5F:49:36:0A:71:C3:9D Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 3494 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 3491 Signing time: Sat 14 Jun 2025 14:49:15 +0000 Manifest this update: Sat 14 Jun 2025 14:49:15 +0000 Manifest next update: Sat 21 Jun 2025 14:49:15 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: oMuEaBXqc3Inqjpb2Sdy5ZFnTNKB+GA9+P4VbljL9Gc=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13460 (0x3494) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Jun 14 14:49:15 2025 GMT Not After : Jun 21 14:49:15 2025 GMT Subject: CN=684d8beb-8b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:eb:39:cf:a6:40:04:3b:e5:9e:54:8a:d3: cf:6d:f7:6c:23:08:e5:ad:72:f2:17:4d:9d:84:83: 20:d1:30:e4:28:a6:2f:bc:42:c4:f6:63:92:7e:dd: 2a:08:7b:aa:f1:bc:71:26:61:33:6c:df:49:d8:b6: 08:14:70:69:48:e7:1a:df:c7:9c:4b:00:40:68:f0: a8:77:c2:96:28:4b:e0:9a:7f:2b:13:4c:d4:99:c4: bb:07:8b:2f:da:2a:48:6d:2e:2d:c8:57:ae:a0:c4: 33:47:13:8e:12:5b:24:d5:39:84:00:6e:46:50:6b: ce:b0:65:7d:a8:c7:98:f8:08:79:a5:75:2f:29:9a: 94:72:89:09:a5:92:c9:6b:38:d8:08:c1:aa:ae:e0: 0c:87:62:be:15:69:8b:3f:6b:e2:40:05:ea:d5:13: 69:3a:d9:fe:de:7d:d5:18:e2:7f:00:37:e5:b6:06: c1:d2:0d:ba:ed:f2:b7:82:92:de:b4:ca:bc:18:22: 14:07:25:af:b8:4a:d7:51:04:36:91:e9:e6:9b:42: 19:ae:9c:33:7e:9b:21:f8:05:9e:d4:be:30:85:69: a8:8c:a5:19:ae:ca:5e:3d:44:f5:81:67:ae:8d:89: 11:6e:7f:cb:b3:4e:27:20:b5:da:0d:7c:19:97:52: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6B:24:4C:9F:D4:18:48:27:1C:A7:44:C7:5F:49:36:0A:71:C3:9D X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:48:57:99:0f:8f:12:d3:7a:c9:b7:11:71:9e:df:80:c5:a3: ba:5a:cb:28:cb:48:88:08:c5:3d:ad:a0:2a:d8:02:64:4c:56: 46:f7:7e:37:1c:75:f1:02:2b:31:0b:5f:ab:9a:2a:93:d5:91: b4:97:a9:f3:4a:b7:93:01:44:68:f8:a2:7d:a4:20:31:50:1d: 93:b9:d4:62:b3:1f:6a:fe:40:de:04:37:bd:71:aa:7d:07:f1: 97:f6:10:a8:af:2f:c8:a1:15:f6:ee:26:3c:f6:0d:46:0b:5e: ca:ed:02:9a:06:be:f1:71:95:4e:39:a9:85:cc:c5:66:94:27: f3:c7:90:ef:55:0e:2a:48:73:d5:ee:51:0e:05:6e:23:c2:c7: 07:98:28:c4:a0:82:3f:6e:6a:5a:e1:27:70:7b:6b:5d:14:b5: b0:23:7f:21:10:d1:3b:d3:cd:90:45:39:b9:fd:6d:b1:48:15: 67:c4:08:0c:f7:5a:49:9b:84:42:3f:c9:c8:bf:5c:2e:96:94: 94:fd:de:54:eb:c4:17:5c:f6:5d:41:e6:09:5a:6e:57:84:68: 3f:a7:db:a5:3a:aa:4e:10:90:c6:98:c3:a2:e6:28:2d:20:5e: c6:81:bb:23:b1:40:4f:2b:ce:f0:34:ac:88:88:4a:47:6a:50: b0:98:e5:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUwNjE0MTQ0OTE1WhcNMjUwNjIxMTQ0OTE1WjAYMRYwFAYD VQQDEw02ODRkOGJlYi04YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwYHrOc+mQAQ75Z5UitPPbfdsIwjlrXLyF02dhIMg0TDkKKYvvELE9mOSft0q CHuq8bxxJmEzbN9J2LYIFHBpSOca38ecSwBAaPCod8KWKEvgmn8rE0zUmcS7B4sv 2ipIbS4tyFeuoMQzRxOOElsk1TmEAG5GUGvOsGV9qMeY+Ah5pXUvKZqUcokJpZLJ azjYCMGqruAMh2K+FWmLP2viQAXq1RNpOtn+3n3VGOJ/ADfltgbB0g267fK3gpLe tMq8GCIUByWvuErXUQQ2kenmm0IZrpwzfpsh+AWe1L4whWmojKUZrspePUT1gWeu jYkRbn/Ls04nILXaDXwZl1I3zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOprJEyf 1BhIJxynRMdfSTYKccOdMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoSFeZD48S03rJtxFxnt+AxaO6Wssoy0iICMU9raAq2AJkTFZG9343 HHXxAisxC1+rmiqT1ZG0l6nzSreTAURo+KJ9pCAxUB2TudRisx9q/kDeBDe9cap9 B/GX9hCory/IoRX27iY89g1GC17K7QKaBr7xcZVOOamFzMVmlCfzx5DvVQ4qSHPV 7lEOBW4jwscHmCjEoII/bmpa4Sdwe2tdFLWwI38hENE7082QRTm5/W2xSBVnxAgM 91pJm4RCP8nIv1wulpSU/d5U68QXXPZdQeYJWm5XhGg/p9ulOqpOEJDGmMOi5igt IF7GgbsjsUBPK87wNKyIiEpHalCwmOVg -----END CERTIFICATE-----Generated at Sun Jun 15 08:46:21 2025 by rpki-client