$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: 2gpnfL510DLtxYcj4SSgZoZDFwmU8i2jGxF61atv81Q= Subject key identifier: 39:C1:BE:B8:29:42:DE:49:17:21:AE:95:48:5A:72:21:A9:86:7D:A4 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 15F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 15E2 Signing time: Wed 18 Jun 2025 16:45:52 +0000 Manifest this update: Wed 18 Jun 2025 16:45:52 +0000 Manifest next update: Wed 25 Jun 2025 16:45:52 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: ieUydzIEZYg+kP8P2tJe6vYQgCNKuIURyusCQxnHl6c=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:45:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5619 (0x15f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Jun 18 16:45:52 2025 GMT Not After : Jun 25 16:45:52 2025 GMT Subject: CN=6852ed40-3678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:73:e3:67:d9:fa:d8:32:e5:6e:fe:f5:18:47: 70:d5:ae:26:e4:c1:ca:53:78:6f:25:d6:85:d9:3f: 86:ee:0e:e1:0f:de:06:5e:13:52:8d:cc:f5:55:f4: f0:ab:46:47:73:41:c5:6f:ef:df:1b:a0:83:42:64: ab:01:44:6b:09:64:10:0a:61:bb:58:83:9f:59:7f: bc:9a:3b:e7:23:e1:77:b8:47:5a:dc:bf:d6:03:41: f1:84:d1:71:86:13:c6:cb:d2:7e:54:d7:d3:80:2d: 37:62:09:b5:3e:85:0f:09:a6:36:5c:8c:87:32:f7: 20:fb:84:ac:4c:75:d2:c7:b2:3d:49:fa:1a:6e:ef: a2:22:6a:cf:41:bc:6b:0d:0f:13:4a:67:fa:92:b4: 09:9f:a7:61:36:f0:0b:23:ee:fb:d1:83:b6:d8:0e: ef:2f:78:dc:00:ba:0b:8e:43:5b:c3:1d:38:0e:6f: 28:b9:42:7d:5d:86:36:8b:67:e9:ed:ee:fe:1b:93: d3:7f:c4:bf:63:76:a4:93:4b:47:2b:60:ff:8b:f1: 94:7c:b3:83:6a:4c:22:3c:fb:e6:5d:74:bb:fb:98: 28:f7:cd:37:6f:53:89:1a:cb:2c:ce:66:d9:ef:08: d8:99:99:0d:57:d8:ee:f2:39:a0:f2:ad:48:7e:47: 07:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C1:BE:B8:29:42:DE:49:17:21:AE:95:48:5A:72:21:A9:86:7D:A4 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f2:76:e1:9d:29:f7:62:af:e9:f6:8e:69:8a:a2:a8:61:80: 42:f2:25:cb:6b:ec:4e:df:9a:15:e6:bf:f0:3e:b5:2d:8d:c1: 80:7b:11:3d:89:11:1e:ce:d3:ff:fc:18:13:9f:4a:6b:1c:ef: 6d:a3:48:46:76:68:3f:de:2b:4d:06:65:19:90:37:68:fd:0c: 79:b4:66:10:d5:63:17:2d:e6:33:fa:36:a7:82:1c:ea:1c:b2: d0:b1:09:19:60:f0:cd:3b:aa:ac:f9:1c:40:a8:63:ff:bb:a3: a2:17:47:c4:be:7e:48:f7:2b:ed:a4:8f:25:b4:7a:f5:0f:12: d6:ed:a3:0c:89:4b:e3:34:f1:1c:3a:19:86:8e:1a:79:ef:2e: 71:19:b1:c8:b3:4a:85:1b:b8:f5:50:4d:86:bf:70:9d:59:af: a3:59:61:4b:69:25:6e:43:59:d1:4f:2b:8b:f9:18:43:46:3d: da:e7:11:1a:c1:9c:00:f9:29:a4:2a:16:ca:4d:f1:bf:70:27: b7:d3:f0:a8:ca:a4:6e:bc:f1:5a:e6:d3:67:9d:ee:c8:00:00: 87:76:e9:e9:02:3c:be:fd:de:37:76:8d:9e:e7:a5:44:9d:b9: 02:7d:61:ff:ae:03:71:d6:46:44:e2:44:4e:09:12:26:27:ba: 20:1c:d4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUwNjE4MTY0NTUyWhcNMjUwNjI1MTY0NTUyWjAYMRYwFAYD VQQDEw02ODUyZWQ0MC0zNjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynPjZ9n62DLlbv71GEdw1a4m5MHKU3hvJdaF2T+G7g7hD94GXhNSjcz1VfTw q0ZHc0HFb+/fG6CDQmSrAURrCWQQCmG7WIOfWX+8mjvnI+F3uEda3L/WA0HxhNFx hhPGy9J+VNfTgC03Ygm1PoUPCaY2XIyHMvcg+4SsTHXSx7I9Sfoabu+iImrPQbxr DQ8TSmf6krQJn6dhNvALI+770YO22A7vL3jcALoLjkNbwx04Dm8ouUJ9XYY2i2fp 7e7+G5PTf8S/Y3akk0tHK2D/i/GUfLODakwiPPvmXXS7+5go9803b1OJGssszmbZ 7wjYmZkNV9ju8jmg8q1IfkcHYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnBvrgp Qt5JFyGulUhaciGphn2kMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY8nbhnSn3Yq/p9o5piqKoYYBC8iXLa+xO35oV5r/wPrUtjcGAexE9 iREeztP//BgTn0prHO9to0hGdmg/3itNBmUZkDdo/Qx5tGYQ1WMXLeYz+janghzq HLLQsQkZYPDNO6qs+RxAqGP/u6OiF0fEvn5I9yvtpI8ltHr1DxLW7aMMiUvjNPEc OhmGjhp57y5xGbHIs0qFG7j1UE2Gv3CdWa+jWWFLaSVuQ1nRTyuL+RhDRj3a5xEa wZwA+SmkKhbKTfG/cCe30/CoyqRuvPFa5tNnne7IAACHdunpAjy+/d43do2e56VE nbkCfWH/rgNx1kZE4kROCRImJ7ogHNTI -----END CERTIFICATE-----Generated at Thu Jun 19 11:04:21 2025 by rpki-client