$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: qHZ6XTU1KK/m9bS2GJYiKbaP2qweY3rLExNa6JcCW/A= Subject key identifier: 96:65:02:2C:59:4F:02:FA:98:E1:D4:50:DD:D0:C5:E2:33:91:FC:96 Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: A1 Signing time: Thu 19 Jun 2025 05:31:41 +0000 Manifest this update: Thu 19 Jun 2025 05:31:41 +0000 Manifest next update: Thu 26 Jun 2025 05:31:41 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: bF4EY/l1iuWoi39HJBL4Z8IUOkT7LyZlgjTcKGwkwlk=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:31:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Jun 19 05:31:41 2025 GMT Not After : Jun 26 05:31:41 2025 GMT Subject: CN=6853a0bd-ef01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bc:8d:b9:4e:43:1d:c7:2e:c9:a0:71:be:5d: cc:14:ea:5b:cc:8f:dd:b6:3e:f1:92:8e:04:5f:37: 4a:a9:9e:57:08:0c:ca:72:45:a3:28:e8:c0:79:c3: f0:d4:16:74:58:b2:58:d1:53:4d:4d:80:45:47:2c: 41:dc:b8:91:dc:3e:e1:95:ad:56:88:e1:85:24:bb: 76:c0:6f:93:19:00:21:39:f6:9b:13:99:68:95:9a: 66:87:08:3a:5c:bd:bf:8e:7f:c8:c4:e3:82:a8:57: 9f:3e:37:2b:09:79:38:1f:50:b2:bb:7d:f5:70:b6: 3c:28:93:1b:76:86:48:49:87:ac:2a:43:67:1d:6c: 20:4f:8c:90:b5:20:3e:aa:ed:51:52:c5:a8:11:25: 5a:b1:ec:24:9a:f4:94:54:ae:12:8d:21:ff:4e:b4: 9c:b6:d0:d3:d5:df:2a:c0:84:9f:08:2c:c0:4a:54: 18:ac:66:94:a8:95:22:42:4f:dd:0b:de:98:19:a2: 10:0d:c1:2d:52:a1:9a:68:11:cd:37:3a:a8:8f:bf: 46:e8:f2:ad:b3:60:51:eb:94:63:34:50:82:16:63: 93:64:7d:e1:44:f8:68:6a:b6:85:d7:b5:cd:66:48: 61:8c:c0:e5:c9:d2:96:22:d6:ef:36:a5:83:05:6f: b6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:65:02:2C:59:4F:02:FA:98:E1:D4:50:DD:D0:C5:E2:33:91:FC:96 X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:94:26:99:73:a3:f3:ab:84:f9:95:c1:04:23:37:dd:93:61: 07:12:d4:17:f9:4f:cc:34:bc:52:94:b9:87:d6:81:ca:b0:22: 8f:b5:50:38:09:0d:a7:61:ec:af:fb:83:a0:0f:e4:52:db:f8: b3:d6:57:cc:62:76:8a:a9:35:b5:61:d0:89:cf:d2:68:39:e5: c0:cb:66:dd:a0:6f:54:12:71:15:55:56:9f:ac:41:c7:6d:ed: 47:6b:bb:cc:d7:f3:bd:6e:79:c1:80:07:be:3c:43:c4:56:12: 86:a6:2b:c5:f4:0d:34:e0:61:60:5b:41:37:ea:4a:40:64:07: 4c:a3:88:80:ea:5b:5e:c6:fe:7d:bc:39:a0:d7:05:66:1a:d0: 3a:51:ef:f2:03:3f:c3:a0:aa:83:60:ee:bc:d8:7a:ee:e6:bf: 08:f8:1f:f0:a2:17:2e:74:6f:d7:f7:7d:87:2d:d2:9e:ab:c2: df:69:cd:17:11:ed:5a:cc:67:51:8d:27:9b:ba:f1:f3:05:e9: 8a:2b:69:f5:5a:a5:af:74:ce:78:17:f9:e2:f2:f5:c7:62:7f: 93:dc:6f:12:88:73:74:9c:11:e0:c8:42:50:a1:ad:87:b9:02: 27:3e:0e:fa:72:20:9d:40:11:8b:fc:2c:a6:a6:48:0e:b8:e8: b7:e5:a5:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUwNjE5MDUzMTQxWhcNMjUwNjI2MDUzMTQxWjAYMRYwFAYD VQQDEw02ODUzYTBiZC1lZjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsryNuU5DHccuyaBxvl3MFOpbzI/dtj7xko4EXzdKqZ5XCAzKckWjKOjAecPw 1BZ0WLJY0VNNTYBFRyxB3LiR3D7hla1WiOGFJLt2wG+TGQAhOfabE5lolZpmhwg6 XL2/jn/IxOOCqFefPjcrCXk4H1Cyu331cLY8KJMbdoZISYesKkNnHWwgT4yQtSA+ qu1RUsWoESVasewkmvSUVK4SjSH/TrScttDT1d8qwISfCCzASlQYrGaUqJUiQk/d C96YGaIQDcEtUqGaaBHNNzqoj79G6PKts2BR65RjNFCCFmOTZH3hRPhoaraF17XN ZkhhjMDlydKWItbvNqWDBW+2uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZlAixZ TwL6mOHUUN3QxeIzkfyWMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChlCaZc6Pzq4T5lcEEIzfdk2EHEtQX+U/MNLxSlLmH1oHKsCKPtVA4 CQ2nYeyv+4OgD+RS2/iz1lfMYnaKqTW1YdCJz9JoOeXAy2bdoG9UEnEVVVafrEHH be1Ha7vM1/O9bnnBgAe+PEPEVhKGpivF9A004GFgW0E36kpAZAdMo4iA6ltexv59 vDmg1wVmGtA6Ue/yAz/DoKqDYO682Hru5r8I+B/wohcudG/X932HLdKeq8Lfac0X Ee1azGdRjSebuvHzBemKK2n1WqWvdM54F/ni8vXHYn+T3G8SiHN0nBHgyEJQoa2H uQInPg76ciCdQBGL/CympkgOuOi35aX5 -----END CERTIFICATE-----Generated at Fri Jun 20 06:47:40 2025 by rpki-client