$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: cWuhbT3F34HAHd8fIaZX+TLafa2FGa35YAwSaCKx/ME= Subject key identifier: 59:10:CB:60:2C:94:23:21:E1:63:12:99:EF:A3:CA:4A:DB:F5:7C:F2 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 4C Signing time: Fri 13 Jun 2025 06:13:16 +0000 Manifest this update: Fri 13 Jun 2025 06:13:16 +0000 Manifest next update: Fri 20 Jun 2025 06:13:16 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: h0mu4/IlSTnQVeyGFNMjDvZRHU9BNC1D4LCRMN+JFzI=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:13:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Jun 13 06:13:16 2025 GMT Not After : Jun 20 06:13:16 2025 GMT Subject: CN=684bc17c-cae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:69:fc:de:c6:2d:64:6f:b3:6b:1d:3f:d5: c2:32:4a:9b:66:58:48:77:cb:56:26:73:d0:d3:45: a3:d9:ec:9b:14:45:03:42:2c:23:b4:f9:91:c3:aa: 5c:17:99:e3:6c:11:9a:09:28:18:7d:a0:54:89:cd: 5f:11:15:97:e8:2d:d5:23:17:ea:d2:b2:8b:8e:6b: 43:c7:4c:59:24:fe:0d:9e:c0:ce:38:20:cf:4f:a9: 53:5a:e9:99:bf:72:5b:cd:47:d2:63:70:fc:ff:50: db:19:57:88:9a:f7:c0:63:fe:8f:85:97:ad:ef:7d: 8c:18:07:d0:e5:cb:de:91:1f:1c:ed:5f:22:a2:02: 9c:8f:1e:4d:33:94:a5:4e:83:be:65:e9:b7:f9:fc: 8d:f8:32:d2:f9:f4:5b:e9:f7:a3:5f:9a:13:ad:10: a7:08:83:70:09:67:6a:80:cd:fe:9e:b6:d5:22:d9: 29:f4:9e:6c:34:7a:e9:b0:b4:8c:3f:38:30:5b:24: 24:19:ca:4b:25:96:08:2e:32:17:dd:11:f6:fd:65: 5a:f6:a1:b5:fc:b1:53:2c:fd:0b:1c:fc:88:80:78: 63:74:09:29:d7:a4:ed:ba:ad:58:97:55:a6:31:d9: 83:d8:1d:25:f2:70:37:0a:11:bb:1e:5e:ad:3c:bf: 81:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:10:CB:60:2C:94:23:21:E1:63:12:99:EF:A3:CA:4A:DB:F5:7C:F2 X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b1:bd:0f:27:a7:bf:07:34:38:b8:57:b9:e5:dc:82:e9:2d: 0c:7e:35:b4:6d:3d:9f:da:0e:7e:2d:6f:72:9f:40:ce:52:6a: 5b:34:f7:04:f6:53:ce:ba:b1:49:5a:a7:fb:e5:2e:e7:97:8b: d7:0e:3f:62:1c:be:56:ca:32:aa:37:80:c0:ab:c2:1c:ef:ce: 9b:62:9e:05:54:91:3d:2c:56:95:d0:cc:bb:a2:91:c9:67:7c: 5a:92:2a:71:5c:63:75:58:09:1d:c7:de:06:b2:f5:e2:f5:93: 18:c5:e7:1e:3a:2f:74:41:0f:90:9e:b0:2a:e5:e7:63:23:54: 28:cb:8f:7f:27:94:40:61:e6:ea:da:77:97:0b:a6:73:00:65: 18:57:a8:5b:38:b9:bd:d7:80:1f:d5:e6:f1:97:29:68:c6:f7: 48:63:a5:fa:dd:1b:f6:db:3f:3a:79:79:d1:2f:3e:f5:9d:ce: 71:b1:10:8d:f5:77:0e:22:88:74:d5:11:3a:d8:5e:fa:66:df: 62:16:f4:6d:0b:fe:4c:00:c3:c4:25:54:fe:34:c2:88:47:7d: 88:b4:16:b8:48:36:d4:8e:76:85:0a:98:20:76:48:fd:2d:2a: 0d:91:df:66:e5:db:bb:2d:c9:c1:fb:0f:05:0a:ce:64:6b:6d: 33:6a:5d:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTA2MTMwNjEzMTZaFw0yNTA2MjAwNjEzMTZaMBgxFjAUBgNV BAMTDTY4NGJjMTdjLWNhZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5gWn83sYtZG+zax0/1cIySptmWEh3y1Ymc9DTRaPZ7JsURQNCLCO0+ZHDqlwX meNsEZoJKBh9oFSJzV8RFZfoLdUjF+rSsouOa0PHTFkk/g2ewM44IM9PqVNa6Zm/ clvNR9JjcPz/UNsZV4ia98Bj/o+Fl63vfYwYB9Dly96RHxztXyKiApyPHk0zlKVO g75l6bf5/I34MtL59Fvp96NfmhOtEKcIg3AJZ2qAzf6ettUi2Sn0nmw0eumwtIw/ ODBbJCQZyksllgguMhfdEfb9ZVr2obX8sVMs/Qsc/IiAeGN0CSnXpO26rViXVaYx 2YPYHSXycDcKEbseXq08v4EVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWRDLYCyU IyHhYxKZ76PKStv1fPIwHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6xvQ8np78HNDi4V7nl3ILpLQx+NbRtPZ/aDn4tb3KfQM5Sals09wT2 U866sUlap/vlLueXi9cOP2IcvlbKMqo3gMCrwhzvzptingVUkT0sVpXQzLuikcln fFqSKnFcY3VYCR3H3gay9eL1kxjF5x46L3RBD5CesCrl52MjVCjLj38nlEBh5ura d5cLpnMAZRhXqFs4ub3XgB/V5vGXKWjG90hjpfrdG/bbPzp5edEvPvWdznGxEI31 dw4iiHTVETrYXvpm32IW9G0L/kwAw8QlVP40wohHfYi0FrhINtSOdoUKmCB2SP0t Kg2R32bl27stycH7DwUKzmRrbTNqXX8= -----END CERTIFICATE-----Generated at Sat Jun 14 19:21:37 2025 by rpki-client