$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: M1VRzZg2foNUHPbfL5zEAk3QvtZ75hTOEwH6DyW8pAk= Subject key identifier: D6:B2:A7:89:99:72:B9:BB:36:C6:FD:83:A8:80:28:04:31:90:B4:CB Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 0754 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2C60 Signing time: Sat 14 Jun 2025 16:24:25 +0000 Manifest this update: Sat 14 Jun 2025 16:24:24 +0000 Manifest next update: Sat 21 Jun 2025 16:24:24 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: Qe1ipm4cUgn87dcJajkgcq6nMawc3Xrsvys+Ue01DaE=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: K0pMn3ybPgYAvgYIHKptYZvODgeJgnqA7J5JHWlu6c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Jun 14 16:24:24 2025 GMT Not After : Jun 21 16:24:24 2025 GMT Subject: CN=684da238-0886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:28:d7:a1:22:4f:f7:c8:cf:e8:b1:cb:8f: e2:c6:4f:d2:35:6c:d2:db:ad:9b:71:73:59:5a:0d: 7c:5e:f4:07:8e:4c:2d:33:38:72:36:ae:5d:4e:aa: a9:1a:43:e4:5d:95:59:09:e2:33:7a:0a:d8:0d:c0: b9:b1:66:9a:3e:06:0e:b4:33:28:8b:60:95:eb:aa: f9:f8:18:9f:61:0f:ec:86:78:d8:9a:f0:d1:71:c7: 8b:47:04:e8:51:f4:a3:02:a3:5a:b6:93:3c:bd:5b: db:e7:76:5e:11:95:ad:46:30:02:c0:74:84:d5:0a: bb:36:a2:c3:aa:57:86:35:8a:68:a5:57:50:59:3e: 92:79:72:b4:17:b2:89:b2:f4:0c:a1:78:b2:29:19: 2e:50:eb:ca:63:b1:55:5c:0f:7d:39:4f:75:7c:2d: 87:c6:bc:51:19:c6:bc:0c:a6:72:df:8a:0f:03:b1: 23:f5:b9:cc:07:8d:2b:f6:71:25:5b:99:34:1a:df: c8:39:cd:f8:ba:2b:8a:8e:a2:b9:1a:f9:b9:a6:ab: f6:9f:bb:ee:ee:34:6e:2d:66:6f:f4:db:d4:04:33: c9:71:b3:21:de:07:fa:54:59:f7:51:90:3c:4f:ff: 01:5f:82:2c:1b:44:28:02:f2:8e:26:41:88:01:0e: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B2:A7:89:99:72:B9:BB:36:C6:FD:83:A8:80:28:04:31:90:B4:CB X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:95:c1:e3:d4:0c:f0:47:a7:76:7c:03:aa:bb:f4:be:21:36: 80:ef:41:96:0a:cf:ff:ac:73:f4:a5:b6:b8:1c:05:9f:34:0a: 2f:dd:57:54:b6:cf:c4:5a:51:74:ee:b8:37:be:4f:c0:bf:e5: e7:65:88:a9:ba:2e:20:d0:29:89:7b:62:db:e5:ff:50:9e:6f: 27:bb:62:33:fe:57:62:39:76:d6:e0:9d:25:76:51:91:7c:8c: 55:81:6d:99:36:f9:2f:9b:28:71:b5:38:5e:13:6b:c4:3b:f7: 7c:39:a0:5a:c9:fc:c0:da:2d:a6:10:e3:a6:9b:23:54:cb:00: ae:7b:fb:bf:63:85:3c:9c:1a:77:9a:61:22:a7:e6:c1:92:8e: 1e:90:4f:2d:aa:ce:31:e1:07:8b:84:7b:30:21:2b:d4:cb:a5: 86:09:11:d5:0c:2f:f5:da:af:75:31:d4:e3:6c:d2:c0:d4:f4: ec:2e:f2:f1:f0:9b:d5:7e:a7:33:33:eb:b2:17:5b:e4:02:dd: bf:b1:4d:54:1c:e7:59:68:73:8d:7a:bc:b6:7c:d1:6c:ba:2e: bf:05:49:cc:dd:23:3b:fe:6b:34:41:99:93:90:82:e0:47:54: 9f:6d:2b:45:cc:58:90:65:4f:7d:22:b1:3c:88:7e:77:99:ab: 59:e6:0e:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUwNjE0MTYyNDI0WhcNMjUwNjIxMTYyNDI0WjAYMRYwFAYD VQQDEw02ODRkYTIzOC0wODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoKUo16EiT/fIz+ixy4/ixk/SNWzS262bcXNZWg18XvQHjkwtMzhyNq5dTqqp GkPkXZVZCeIzegrYDcC5sWaaPgYOtDMoi2CV66r5+BifYQ/shnjYmvDRcceLRwTo UfSjAqNatpM8vVvb53ZeEZWtRjACwHSE1Qq7NqLDqleGNYpopVdQWT6SeXK0F7KJ svQMoXiyKRkuUOvKY7FVXA99OU91fC2HxrxRGca8DKZy34oPA7Ej9bnMB40r9nEl W5k0Gt/IOc34uiuKjqK5Gvm5pqv2n7vu7jRuLWZv9NvUBDPJcbMh3gf6VFn3UZA8 T/8BX4IsG0QoAvKOJkGIAQ5yXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNayp4mZ crm7Nsb9g6iAKAQxkLTLMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBllcHj1AzwR6d2fAOqu/S+ITaA70GWCs//rHP0pba4HAWfNAov3VdU ts/EWlF07rg3vk/Av+XnZYipui4g0CmJe2Lb5f9Qnm8nu2Iz/ldiOXbW4J0ldlGR fIxVgW2ZNvkvmyhxtTheE2vEO/d8OaBayfzA2i2mEOOmmyNUywCue/u/Y4U8nBp3 mmEip+bBko4ekE8tqs4x4QeLhHswISvUy6WGCRHVDC/12q91MdTjbNLA1PTsLvLx 8JvVfqczM+uyF1vkAt2/sU1UHOdZaHONery2fNFsui6/BUnM3SM7/ms0QZmTkILg R1SfbStFzFiQZU99IrE8iH53matZ5g5B -----END CERTIFICATE-----Generated at Sun Jun 15 09:30:48 2025 by rpki-client