$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: xXNsgN6BQ4ZddxeKkQfSuPlq9bb6lPLgqFC0k/paucw= Subject key identifier: 39:5C:B0:92:35:9E:E2:04:FE:7B:BF:5B:78:EE:B3:F7:C3:6C:05:CC Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 0644 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 063C Signing time: Wed 18 Jun 2025 22:32:28 +0000 Manifest this update: Wed 18 Jun 2025 22:32:27 +0000 Manifest next update: Wed 25 Jun 2025 22:32:27 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: loMl1JEcabLJq4wQVmJ1O0ZADwHVt8lTmV8r3H6KGXQ=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: KMuh5ult9LiAce0tih+7IUcHZQamzlPDZPCJthZ1JAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88, serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Validity Not Before: Jun 18 22:32:27 2025 GMT Not After : Jun 25 22:32:27 2025 GMT Subject: CN=68533e7c-948f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:43:fe:32:d4:0b:05:01:bc:72:86:cc:9a: 85:08:34:9e:42:0d:1a:49:b9:2b:25:5d:b1:1a:52: ec:35:87:7f:48:20:63:fe:c2:26:50:cf:8f:4e:95: 31:bd:1d:48:8c:68:78:fa:d2:73:e7:8b:49:17:bb: d7:f4:8b:c4:81:2e:24:d5:af:0c:d2:c7:96:2e:ad: b9:c6:fc:a1:97:35:81:ac:65:33:ab:20:8b:cf:75: 48:43:44:3e:9f:15:0e:5f:5a:2c:ae:c3:35:f4:e4: dd:d2:7b:87:42:4a:e8:eb:88:cc:78:9e:bb:85:ae: 18:37:1d:73:92:e7:f7:0b:6e:25:c1:9e:49:ce:bb: ee:9b:a7:86:47:16:65:4f:16:a8:f0:95:a4:64:a7: a7:84:42:b8:77:24:ed:39:41:c9:08:32:b4:18:c7: f5:c9:63:bb:03:37:87:40:39:a3:87:8a:14:6b:ec: cd:6d:bb:83:e8:42:8e:9f:01:63:3d:45:ee:67:0d: 5e:24:55:b5:e7:dd:10:26:1f:3a:fa:a4:07:dc:60: 7b:09:b1:4e:3f:8c:3a:22:94:6c:ce:13:83:20:90: 1d:c8:44:42:13:91:d8:70:8e:7b:08:04:5b:dd:d3: f1:dd:35:14:13:4a:db:da:c1:ff:f0:7b:a8:ae:60: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5C:B0:92:35:9E:E2:04:FE:7B:BF:5B:78:EE:B3:F7:C3:6C:05:CC X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7c:0b:4c:e0:6d:aa:03:1a:cf:ec:1b:88:bc:9e:33:e3:8c: c5:1e:e4:39:8f:2c:ec:49:44:e2:a8:99:0e:27:98:ad:89:2a: 0d:13:c2:e2:f2:a2:bd:b7:73:34:8c:b9:08:2a:06:a9:88:94: cc:9d:45:a0:9e:37:39:84:21:2b:a5:55:b0:f8:35:f3:0c:35: 75:66:bf:8c:7f:6f:54:78:32:ec:9e:c0:55:ff:21:8e:ba:27: d8:24:46:5a:9d:65:02:3e:24:eb:94:85:e2:56:c6:f1:09:45: 80:db:37:ae:00:9c:58:03:cf:9f:53:be:f0:e1:e3:5a:db:bd: 47:86:be:19:b5:91:8f:a0:54:6c:84:22:81:f2:ef:e7:2b:49: 2d:e5:be:a8:bb:90:55:7f:e6:3e:3d:ac:72:c8:b1:e0:f9:5b: 9c:63:88:2c:33:3d:a7:97:d0:05:30:16:eb:fb:1f:9a:82:5a: 95:7e:4b:4f:df:3e:37:d6:3e:4e:37:9a:4b:78:f3:44:17:81: f3:47:9d:30:83:49:14:b5:05:44:9e:5a:d1:ca:23:ca:4e:f6: 63:e7:17:55:54:7d:39:51:6d:86:36:9f:78:fc:93:fa:b0:08: 63:9d:50:5b:34:4f:82:ae:f7:5f:08:54:5f:d5:e8:81:f5:1e: fc:60:dc:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjUwNjE4MjIzMjI3WhcNMjUwNjI1MjIzMjI3WjAYMRYwFAYD VQQDEw02ODUzM2U3Yy05NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JtD/jLUCwUBvHKGzJqFCDSeQg0aSbkrJV2xGlLsNYd/SCBj/sImUM+PTpUx vR1IjGh4+tJz54tJF7vX9IvEgS4k1a8M0seWLq25xvyhlzWBrGUzqyCLz3VIQ0Q+ nxUOX1osrsM19OTd0nuHQkro64jMeJ67ha4YNx1zkuf3C24lwZ5Jzrvum6eGRxZl Txao8JWkZKenhEK4dyTtOUHJCDK0GMf1yWO7AzeHQDmjh4oUa+zNbbuD6EKOnwFj PUXuZw1eJFW1590QJh86+qQH3GB7CbFOP4w6IpRszhODIJAdyERCE5HYcI57CARb 3dPx3TUUE0rb2sH/8HuormApcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlcsJI1 nuIE/nu/W3jus/fDbAXMMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOfAtM4G2qAxrP7BuIvJ4z44zFHuQ5jyzsSUTiqJkOJ5itiSoNE8Li 8qK9t3M0jLkIKgapiJTMnUWgnjc5hCErpVWw+DXzDDV1Zr+Mf29UeDLsnsBV/yGO uifYJEZanWUCPiTrlIXiVsbxCUWA2zeuAJxYA8+fU77w4eNa271Hhr4ZtZGPoFRs hCKB8u/nK0kt5b6ou5BVf+Y+PaxyyLHg+VucY4gsMz2nl9AFMBbr+x+aglqVfktP 3z431j5ON5pLePNEF4HzR50wg0kUtQVEnlrRyiPKTvZj5xdVVH05UW2GNp94/JP6 sAhjnVBbNE+CrvdfCFRf1eiB9R78YNzr -----END CERTIFICATE-----Generated at Sat Jun 21 00:14:36 2025 by rpki-client