$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: pCjB7DTSCqZ9mgXRlVUmRDjGVa2pgWzS7hjzM9/8Mbw= Subject key identifier: 30:29:D5:A0:53:36:0A:82:16:7E:BA:1D:8C:96:48:12:54:6C:AA:EF Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0B64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0B0D Signing time: Mon 16 Jun 2025 19:21:29 +0000 Manifest this update: Mon 16 Jun 2025 19:21:29 +0000 Manifest next update: Mon 23 Jun 2025 19:21:29 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: NBhnv5PJMOZyTWfxqXUVNSdZfw19INXVqkT2hYkO+n0=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: NDMWr6ROve032HDCvpKDnE+3M7NstRNL4WiBRR7Uc9w=) 3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: /I1TFcJCz5aMzQNmIqNgkjKowqxPj9xlaCCXIBXOcD0=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: Z21inXGgFSeaHgz7iITM/kziF7zP/P4QOKxWDnYdlJ8=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: 1gtmRzqYdhmA8CchuwScykbthJY4rmebTYSAnt6uzqg=) 6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: lkpsOB7nfXsffwnZ1aU9Jr6eTZNpX/TpTJZNQqUrOs8=) 7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: dhvSYCoAete6HzssYv/JSdKEV/Z2KYxpkGxKw9YFSAY=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: dGWItSoIfDWTw5ONmMmmwGOtu0hUpDaFw6KptrVVUfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 19:21:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2916 (0xb64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Jun 16 19:21:29 2025 GMT Not After : Jun 23 19:21:29 2025 GMT Subject: CN=68506eb9-bca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:32:a7:57:32:56:8b:f2:39:f1:49:30:3a:f1: 59:ff:a1:b8:39:d8:c7:b0:16:96:7f:c6:4f:aa:b4: 58:6d:18:ee:c4:86:27:ec:b8:c7:08:a0:12:41:f8: 6e:2b:25:37:b7:85:2a:71:8f:2c:8d:d3:e7:8e:91: af:ca:0f:bb:ae:aa:57:3f:e0:10:bb:ef:7a:2c:c2: 15:32:5d:ab:58:e8:b2:ba:e2:71:2f:41:51:7d:6d: 28:00:8b:22:a6:01:09:c1:7e:bb:f2:14:07:60:c9: 58:83:87:d7:39:cd:2c:d5:47:74:b6:3c:c2:23:c1: da:34:9c:97:4c:45:b1:05:d9:15:ff:14:1a:80:71: fd:a5:fa:50:c9:f0:cf:74:95:7a:44:d0:db:07:e4: 5c:ca:bb:7a:8e:c8:bc:41:ac:e5:38:36:1c:77:15: 77:23:e3:9c:35:87:66:82:04:79:d1:2b:bb:dd:38: 81:85:08:54:bb:f6:24:71:d5:6c:a9:70:69:ee:72: df:b5:a4:a5:2f:c4:02:01:5b:5c:66:83:ea:84:41: e6:9a:22:c2:7d:06:fc:8a:bc:3a:67:5f:40:99:63: a3:1c:49:b7:76:1c:83:c3:62:0a:72:94:2d:e4:49: 4c:7a:16:7c:c8:97:41:cc:66:aa:c0:b0:ab:56:be: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:29:D5:A0:53:36:0A:82:16:7E:BA:1D:8C:96:48:12:54:6C:AA:EF X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:82:ab:f7:2a:fb:df:0a:1a:8a:0f:19:f8:93:ef:ac:e1:f1: c3:e1:27:b8:62:d8:e2:8a:7e:e5:22:9f:79:04:6c:ed:f2:ba: 04:d1:85:c9:b4:d2:51:f1:62:49:51:20:05:04:bc:b6:dc:0c: cc:eb:6d:ae:67:d0:f3:df:0c:ba:af:4a:83:4d:a7:51:cb:08: 22:0e:03:9c:84:25:19:18:12:01:0a:1e:bf:11:a9:82:b5:80: 0b:9f:f0:36:46:b5:e8:a6:fd:b8:6b:6d:46:14:06:c2:d0:4b: 65:3c:02:66:e4:37:3c:9b:b1:20:68:39:eb:56:83:fa:d7:03: 7d:f8:75:ca:46:7a:82:66:fc:59:82:0c:6e:09:c5:3c:ab:26: 02:4d:40:7d:c3:9a:b3:1c:05:7e:73:47:1b:05:b4:83:9d:a0: 47:ff:ed:d1:56:59:36:30:1d:6e:9b:ab:a7:5f:aa:83:21:f5: 46:08:3d:cc:93:f1:b7:88:e4:92:5c:10:55:51:c1:ff:ff:30: 3d:1f:8f:7a:60:ef:4f:be:36:ff:30:93:64:38:16:31:ef:06: b4:76:06:cf:b4:74:74:cd:80:51:84:0d:8d:da:4c:46:d2:49: 7c:9e:82:63:c4:1d:d0:be:4c:7c:5f:5d:98:a1:33:ef:31:33: 51:a9:4e:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjUwNjE2MTkyMTI5WhcNMjUwNjIzMTkyMTI5WjAYMRYwFAYD VQQDEw02ODUwNmViOS1iY2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTKnVzJWi/I58UkwOvFZ/6G4OdjHsBaWf8ZPqrRYbRjuxIYn7LjHCKASQfhu KyU3t4UqcY8sjdPnjpGvyg+7rqpXP+AQu+96LMIVMl2rWOiyuuJxL0FRfW0oAIsi pgEJwX678hQHYMlYg4fXOc0s1Ud0tjzCI8HaNJyXTEWxBdkV/xQagHH9pfpQyfDP dJV6RNDbB+Rcyrt6jsi8QazlODYcdxV3I+OcNYdmggR50Su73TiBhQhUu/YkcdVs qXBp7nLftaSlL8QCAVtcZoPqhEHmmiLCfQb8irw6Z19AmWOjHEm3dhyDw2IKcpQt 5ElMehZ8yJdBzGaqwLCrVr6oDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAp1aBT NgqCFn66HYyWSBJUbKrvMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvgqv3KvvfChqKDxn4k++s4fHD4Se4Ytjiin7lIp95BGzt8roE0YXJ tNJR8WJJUSAFBLy23AzM622uZ9Dz3wy6r0qDTadRywgiDgOchCUZGBIBCh6/EamC tYALn/A2RrXopv24a21GFAbC0EtlPAJm5Dc8m7EgaDnrVoP61wN9+HXKRnqCZvxZ ggxuCcU8qyYCTUB9w5qzHAV+c0cbBbSDnaBH/+3RVlk2MB1um6unX6qDIfVGCD3M k/G3iOSSXBBVUcH//zA9H496YO9Pvjb/MJNkOBYx7wa0dgbPtHR0zYBRhA2N2kxG 0kl8noJjxB3Qvkx8X12YoTPvMTNRqU4f -----END CERTIFICATE-----Generated at Mon Jun 16 23:42:29 2025 by rpki-client