$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: CidGxu/244X5kcGoUehq87+9nkfkG3zisIgxS44bod0= Subject key identifier: 18:15:E8:39:84:A7:65:A3:73:A3:A5:72:C0:C6:E8:98:37:C4:B6:2E Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 24B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 24A1 Signing time: Sat 14 Jun 2025 15:44:57 +0000 Manifest this update: Sat 14 Jun 2025 15:44:57 +0000 Manifest next update: Sat 21 Jun 2025 15:44:57 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: fj5bgEeTuO7PYdMJKXcIrdC1bgrIdQBoVzxX7pdZbis=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: CE+jGBv1hmvPpnjcj/lZMkYxYBXBElFQLbmvrCZoU3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9398 (0x24b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Jun 14 15:44:57 2025 GMT Not After : Jun 21 15:44:57 2025 GMT Subject: CN=684d98f9-642a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:4d:77:cf:99:5d:3a:0b:b7:85:9c:08:37: 30:d6:4c:28:90:f0:b3:25:6b:9c:54:0d:77:e6:ae: dd:2e:b3:f8:84:03:39:71:5e:41:c6:88:3f:7f:22: 61:7b:60:6f:06:73:91:a8:22:48:4a:3a:cb:1d:5e: f9:a1:a6:74:03:a4:d1:48:7c:c5:e9:9f:53:0d:55: e3:ef:d9:2d:3c:7b:08:35:7f:b9:69:b3:74:8f:7e: 41:6b:d0:a8:ae:cb:6b:ca:fb:c2:1c:36:3f:50:b5: 44:f5:56:07:20:6b:fe:0d:91:bd:52:93:d4:35:2e: d4:c4:5f:c4:1e:3c:47:45:c1:f5:37:51:09:b1:aa: 18:8d:5b:bc:bd:55:7c:12:d2:c8:32:48:0d:ae:2d: 0e:87:31:9e:70:df:bb:27:b3:b8:fc:fa:c7:72:a5: 84:a0:9b:70:34:1b:5f:e9:8c:21:6b:d3:c6:eb:55: 24:20:5a:5b:13:b5:bb:b5:47:48:18:6b:19:c1:b8: f1:cf:0e:ef:e2:51:f5:0c:96:12:07:21:dc:ad:0e: 12:60:f9:7b:b7:8d:ad:7d:cd:bf:e4:85:df:bc:92: 02:e7:57:e2:b7:01:38:4f:4a:e7:0f:62:c2:b8:45: f3:1a:10:9e:33:b3:96:7b:4a:44:46:6c:d7:82:4a: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:15:E8:39:84:A7:65:A3:73:A3:A5:72:C0:C6:E8:98:37:C4:B6:2E X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:9a:05:59:b3:a1:51:49:25:91:65:c4:f6:ce:8f:a2:82:a1: 9f:4b:41:72:ee:15:a2:9d:5a:c4:78:a5:fb:12:67:a0:10:d3: cd:62:1c:0e:7f:23:90:f0:9e:86:3c:88:71:5f:89:b1:97:75: 39:07:b9:39:c2:6f:12:96:cf:73:c6:02:2a:83:5e:fc:89:9b: 2d:6d:73:31:37:1d:06:56:a1:5f:d3:2d:9e:33:07:c5:df:70: 3b:83:9e:89:df:8b:5f:35:83:48:fd:1c:4e:87:d0:1b:20:55: 7d:cc:e9:5a:78:13:19:e4:c0:27:d1:86:fa:eb:c8:53:52:42: ab:a6:1a:0a:47:2f:7a:28:aa:b5:05:7d:fa:29:7e:de:1e:e7: 2d:b9:c9:78:b0:d3:8a:d6:ff:c6:b6:04:f4:12:00:72:b2:ba: 83:3a:c7:c5:8b:ab:bd:70:c7:5f:eb:ed:b0:ed:3d:f8:ea:85: 82:25:13:b0:fb:64:13:f1:6e:9b:cd:1d:08:d8:31:bf:09:da: 50:e9:ee:86:fd:2b:dc:89:8b:86:f4:ae:10:f2:26:0a:24:70: 78:0a:ab:ee:12:ee:e0:d4:3d:8e:fc:53:0f:99:61:0a:d9:f3: 59:5b:fe:74:78:9c:af:1b:2d:be:ed:b9:e5:dc:8c:e5:cf:41: 07:52:d8:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUwNjE0MTU0NDU3WhcNMjUwNjIxMTU0NDU3WjAYMRYwFAYD VQQDEw02ODRkOThmOS02NDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwolNd8+ZXToLt4WcCDcw1kwokPCzJWucVA135q7dLrP4hAM5cV5Bxog/fyJh e2BvBnORqCJISjrLHV75oaZ0A6TRSHzF6Z9TDVXj79ktPHsINX+5abN0j35Ba9Co rstryvvCHDY/ULVE9VYHIGv+DZG9UpPUNS7UxF/EHjxHRcH1N1EJsaoYjVu8vVV8 EtLIMkgNri0OhzGecN+7J7O4/PrHcqWEoJtwNBtf6Ywha9PG61UkIFpbE7W7tUdI GGsZwbjxzw7v4lH1DJYSByHcrQ4SYPl7t42tfc2/5IXfvJIC51fitwE4T0rnD2LC uEXzGhCeM7OWe0pERmzXgkpEawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBgV6DmE p2Wjc6OlcsDG6Jg3xLYuMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBimgVZs6FRSSWRZcT2zo+igqGfS0Fy7hWinVrEeKX7EmegENPNYhwO fyOQ8J6GPIhxX4mxl3U5B7k5wm8Sls9zxgIqg178iZstbXMxNx0GVqFf0y2eMwfF 33A7g56J34tfNYNI/RxOh9AbIFV9zOlaeBMZ5MAn0Yb668hTUkKrphoKRy96KKq1 BX36KX7eHuctucl4sNOK1v/GtgT0EgBysrqDOsfFi6u9cMdf6+2w7T346oWCJROw +2QT8W6bzR0I2DG/CdpQ6e6G/SvciYuG9K4Q8iYKJHB4CqvuEu7g1D2O/FMPmWEK 2fNZW/50eJyvGy2+7bnl3Izlz0EHUtho -----END CERTIFICATE-----Generated at Sun Jun 15 03:14:40 2025 by rpki-client