$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft File: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft (raw, json) Hash identifier: pKlPxF8BEaEirPE387/K2ShvSqR2njgX3RyXoa64SZk= Subject key identifier: 3B:35:AF:74:1B:BD:31:75:CB:FA:63:B9:49:F7:01:27:BA:04:C6:06 Authority key identifier: A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 Certificate issuer: /CN=A91EFD20/serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft Manifest number: AC Signing time: Tue 17 Jun 2025 05:00:32 +0000 Manifest this update: Tue 17 Jun 2025 05:00:31 +0000 Manifest next update: Tue 24 Jun 2025 05:00:31 +0000 Files and hashes: 1: p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl (hash: 38pv5z1Dox7ls9y9dQvdgVQ6f27xnM8KZBeqQhGNIGQ=) 2: 80A57534433311EF94E79D23C4F9AE02.roa (hash: /DX7dbxTLTAh+dFwT5n2PZNSYyr7e+Nh1d2b2XOmU5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFD20, serialNumber=A76B710CD2360A2E2682FD2B80718A1988396604 Validity Not Before: Jun 17 05:00:31 2025 GMT Not After : Jun 24 05:00:31 2025 GMT Subject: CN=6850f670-0a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:58:e2:4e:c3:d5:c9:36:89:06:e3:97:ea:04: 8a:d5:d9:2e:3a:e7:28:48:f3:98:52:31:25:8d:d1: e6:1f:31:8f:77:35:ce:ea:53:72:97:1d:29:a4:62: b5:19:6f:1f:f8:5e:87:86:82:3f:c9:07:56:1b:f5: 17:c1:1e:46:ba:f7:ab:fd:5d:8d:90:5d:12:c0:0e: 22:12:ab:c7:e8:f0:85:00:5c:3f:73:76:90:14:7a: 1f:22:0b:8e:56:50:27:86:5b:61:56:62:63:82:17: bb:0a:d7:fd:d6:fe:60:80:2f:1a:d8:98:95:c1:72: 72:0e:7b:eb:96:89:83:c8:d0:10:b3:1d:8b:7a:30: d7:21:46:c7:15:98:3a:15:b1:67:75:20:44:3d:b3: e9:84:64:b3:d9:b5:03:80:91:db:34:0e:35:bc:8f: f4:7a:01:53:21:ce:09:2b:af:13:40:d8:66:ca:1c: 6b:bf:0d:82:61:12:7f:ed:a8:93:64:b6:b7:c8:82: ca:ca:89:f7:68:aa:fc:30:c6:18:72:9c:03:7d:4d: bd:d0:ed:d1:81:3c:80:ef:b1:e2:fd:71:de:6c:f9: 57:8a:f2:f8:74:5e:c5:d7:83:19:bf:40:f7:68:7f: 32:fb:a9:bc:f1:00:0d:71:f7:a4:f8:a1:54:53:e3: d8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:35:AF:74:1B:BD:31:75:CB:FA:63:B9:49:F7:01:27:BA:04:C6:06 X509v3 Authority Key Identifier: keyid:A7:6B:71:0C:D2:36:0A:2E:26:82:FD:2B:80:71:8A:19:88:39:66:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFD20/A8253B9C433011EF9EDBCD6CC4F9AE02/p2txDNI2Ci4mgv0rgHGKGYg5ZgQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:ec:87:00:8b:c2:82:53:63:ad:28:2a:a2:ab:ec:2d:9a:44: b5:50:ee:97:19:c6:a9:e8:f1:81:1f:d3:dd:c8:5c:97:45:6a: 07:bc:97:de:a8:5a:dc:1a:75:1d:06:7d:c4:cd:7b:18:f9:62: c3:e8:5b:fb:05:0a:67:0e:be:f9:48:3c:91:e9:cb:4e:bc:1a: 8f:40:7a:30:c5:0b:6a:d0:b3:0c:ff:22:55:60:92:8a:39:3c: 30:d7:02:57:70:79:95:a3:80:d5:54:6d:3e:98:26:fb:de:b6: 8e:df:8e:08:32:66:37:6b:75:a0:44:70:97:42:a5:9d:a7:e1: c6:77:d8:1d:6c:fc:b8:6b:17:f6:52:ad:25:d8:05:48:67:48: 17:1c:49:c8:f9:9c:88:90:aa:97:ee:49:11:7f:1f:42:a1:fa: 28:f0:eb:bb:40:96:f9:c1:05:41:65:bc:f0:c7:25:28:df:85: da:3a:18:41:91:3e:ca:b2:ed:58:7b:71:e5:fa:cd:5d:d7:4d: c5:b3:46:7d:46:96:0b:ef:f9:2d:9b:35:f7:e5:ff:be:cd:87: 83:56:86:34:70:ce:ad:10:c8:b7:3d:45:cb:ca:91:84:0b:0a: 33:ac:07:0b:b3:d9:92:1d:5b:4f:78:05:61:f9:d5:c1:38:22: 97:76:cb:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZEMjAxMTAvBgNVBAUTKEE3NkI3MTBDRDIzNjBBMkUyNjgyRkQyQjgwNzE4QTE5 ODgzOTY2MDQwHhcNMjUwNjE3MDUwMDMxWhcNMjUwNjI0MDUwMDMxWjAYMRYwFAYD VQQDEw02ODUwZjY3MC0wYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7ljiTsPVyTaJBuOX6gSK1dkuOucoSPOYUjEljdHmHzGPdzXO6lNylx0ppGK1 GW8f+F6HhoI/yQdWG/UXwR5Guver/V2NkF0SwA4iEqvH6PCFAFw/c3aQFHofIguO VlAnhlthVmJjghe7Ctf91v5ggC8a2JiVwXJyDnvrlomDyNAQsx2LejDXIUbHFZg6 FbFndSBEPbPphGSz2bUDgJHbNA41vI/0egFTIc4JK68TQNhmyhxrvw2CYRJ/7aiT ZLa3yILKyon3aKr8MMYYcpwDfU290O3RgTyA77Hi/XHebPlXivL4dF7F14MZv0D3 aH8y+6m88QANcfek+KFUU+PY0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDs1r3Qb vTF1y/pjuUn3ASe6BMYGMB8GA1UdIwQYMBaAFKdrcQzSNgouJoL9K4BxihmIOWYE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkQyMC9BODI1M0I5QzQz MzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNpNG1ndjByZ0hHS0dZZzVa Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3AydHhETkkyQ2k0bWd2MHJnSEdLR1lnNVpnUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkQyMC9BODI1M0I5QzQzMzAxMUVGOUVEQkNENkNDNEY5QUUwMi9wMnR4RE5JMkNp NG1ndjByZ0hHS0dZZzVaZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc7IcAi8KCU2OtKCqiq+wtmkS1UO6XGcap6PGBH9PdyFyXRWoHvJfe qFrcGnUdBn3EzXsY+WLD6Fv7BQpnDr75SDyR6ctOvBqPQHowxQtq0LMM/yJVYJKK OTww1wJXcHmVo4DVVG0+mCb73raO344IMmY3a3WgRHCXQqWdp+HGd9gdbPy4axf2 Uq0l2AVIZ0gXHEnI+ZyIkKqX7kkRfx9Cofoo8Ou7QJb5wQVBZbzwxyUo34XaOhhB kT7Ksu1Ye3Hl+s1d103Fs0Z9RpYL7/ktmzX35f++zYeDVoY0cM6tEMi3PUXLypGE CwozrAcLs9mSHVtPeAVh+dXBOCKXdsvF -----END CERTIFICATE-----Generated at Thu Jun 19 01:31:43 2025 by rpki-client