$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: oF8H+R/CNVZ/t2VZdSa9442Vb2cp2onx+n3AGGENctw= Subject key identifier: 98:03:11:EB:B0:DB:34:A5:3B:F5:14:39:B3:A1:74:EA:92:60:37:4E Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: D7 Signing time: Fri 13 Jun 2025 04:33:46 +0000 Manifest this update: Fri 13 Jun 2025 04:33:45 +0000 Manifest next update: Fri 20 Jun 2025 04:33:45 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: g+b7nRqhTZ5rD34P88Qko1N5NZ556OVcqhtZ0Vsl3bU=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=) 3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=) 4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Jun 13 04:33:45 2025 GMT Not After : Jun 20 04:33:45 2025 GMT Subject: CN=684baa29-3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:5d:e2:90:54:d4:fc:e9:80:9e:cd:4a:6a: c5:d2:a4:6e:6c:92:6a:ad:b5:8f:d4:b1:b6:e7:ba: a7:88:2d:35:4b:62:24:a6:d0:99:0a:98:1f:5e:82: c1:b4:8a:85:97:60:a1:2c:0e:69:c5:1f:5d:2f:60: 3f:1a:e0:75:75:78:d7:74:f6:b4:7f:84:91:fe:b8: e7:7d:d5:1a:ac:7d:32:ef:51:4e:3d:46:6f:f1:69: 21:22:b9:52:02:11:fa:da:62:bc:1f:13:a0:62:46: 07:83:f7:ed:4b:ac:72:c8:be:aa:a3:70:be:c9:c0: 63:f5:73:7f:34:f0:ab:78:02:b2:da:d5:86:d9:e3: 25:0f:1f:63:64:ff:0f:80:41:a5:19:ed:32:53:4a: 0e:fb:96:f7:b0:ed:54:f0:f0:4e:19:ba:f4:4e:dc: e3:71:49:18:46:4d:d0:ef:97:51:b9:e3:24:be:e1: 25:76:9f:a2:ff:23:2e:28:bd:ab:93:6e:d8:e4:94: f6:c9:9c:b2:0a:48:ab:fe:20:ae:9e:f4:0d:e5:6e: 69:99:8b:2c:7b:e5:04:33:9e:63:e6:27:0b:fa:69: 80:23:bc:a5:fd:85:98:0d:32:48:52:25:2c:1d:d5: db:da:c2:7c:41:98:16:b1:2b:20:47:2d:a7:5f:1e: 01:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:11:EB:B0:DB:34:A5:3B:F5:14:39:B3:A1:74:EA:92:60:37:4E X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:38:0e:e6:54:65:bb:54:41:43:ab:fa:48:23:8a:0d:3c:15: 7a:a2:30:11:da:8e:4b:61:0c:0e:95:1c:cf:81:90:2a:01:38: 0f:50:c6:82:a6:88:c9:10:af:42:a6:42:6d:aa:f6:72:f9:d3: 69:00:44:99:7c:f9:76:85:0b:c6:36:41:b1:7c:97:75:1d:b4: 33:8b:44:61:b6:16:d7:81:a5:ea:7b:c0:f9:9f:ad:fa:a7:02: 11:3d:24:9d:ee:4f:bb:af:5f:c8:67:f9:4e:d5:89:9a:d5:d7: 69:25:98:8d:41:cb:2f:d2:ac:21:a4:18:79:70:7f:5f:79:39: dc:36:cc:77:47:fa:d6:65:1f:83:2c:44:cc:8a:bc:ef:22:39: 12:31:4f:08:c3:16:0d:3a:8a:ec:df:01:54:2c:9f:71:c0:b6: b5:1d:78:32:b0:8d:66:c8:13:51:6c:b1:0e:3e:2b:2a:45:ff: a1:cd:ca:32:2d:6a:90:bb:a7:77:d9:9c:e1:a3:96:c4:44:9b: ce:cf:15:ad:9e:c6:b7:1c:ed:65:7c:eb:ad:59:30:0c:be:7a: 40:bb:db:53:7f:07:83:67:5f:5c:7f:69:3c:b4:f7:11:c6:8a: b2:3c:83:fb:da:8f:62:1d:47:6b:78:ca:4f:b5:7c:51:c8:07: 74:4e:97:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjUwNjEzMDQzMzQ1WhcNMjUwNjIwMDQzMzQ1WjAYMRYwFAYD VQQDEw02ODRiYWEyOS0zYzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzchd4pBU1PzpgJ7NSmrF0qRubJJqrbWP1LG257qniC01S2IkptCZCpgfXoLB tIqFl2ChLA5pxR9dL2A/GuB1dXjXdPa0f4SR/rjnfdUarH0y71FOPUZv8WkhIrlS AhH62mK8HxOgYkYHg/ftS6xyyL6qo3C+ycBj9XN/NPCreAKy2tWG2eMlDx9jZP8P gEGlGe0yU0oO+5b3sO1U8PBOGbr0TtzjcUkYRk3Q75dRueMkvuEldp+i/yMuKL2r k27Y5JT2yZyyCkir/iCunvQN5W5pmYsse+UEM55j5icL+mmAI7yl/YWYDTJIUiUs HdXb2sJ8QZgWsSsgRy2nXx4BewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgDEeuw 2zSlO/UUObOhdOqSYDdOMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKOA7mVGW7VEFDq/pII4oNPBV6ojAR2o5LYQwOlRzPgZAqATgPUMaC pojJEK9CpkJtqvZy+dNpAESZfPl2hQvGNkGxfJd1HbQzi0RhthbXgaXqe8D5n636 pwIRPSSd7k+7r1/IZ/lO1Yma1ddpJZiNQcsv0qwhpBh5cH9feTncNsx3R/rWZR+D LETMirzvIjkSMU8IwxYNOors3wFULJ9xwLa1HXgysI1myBNRbLEOPisqRf+hzcoy LWqQu6d32Zzho5bERJvOzxWtnsa3HO1lfOutWTAMvnpAu9tTfweDZ19cf2k8tPcR xoqyPIP72o9iHUdreMpPtXxRyAd0Tpfo -----END CERTIFICATE-----Generated at Sat Jun 14 17:13:55 2025 by rpki-client