$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: akBsn8wvBlf069ql52RJBlyXRaXo6EMx8GqOxSmC9tM= Subject key identifier: F3:04:F1:E1:0F:D4:6A:5B:DF:46:46:E1:02:76:B3:08:3C:60:F3:50 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 01B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 01AF Signing time: Sun 15 Jun 2025 02:25:37 +0000 Manifest this update: Sun 15 Jun 2025 02:25:36 +0000 Manifest next update: Sun 22 Jun 2025 02:25:36 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: OqCR9E0TbxvcKoZIZc1DzF1HGwAVEHBOO/3v3fBDoKs=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:25:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 436 (0x1b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: Jun 15 02:25:36 2025 GMT Not After : Jun 22 02:25:36 2025 GMT Subject: CN=684e2f20-ce88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:1d:85:70:67:3c:cc:52:8e:c7:df:f7:d5: 28:97:27:6d:6b:32:26:71:2e:dd:a1:f9:1a:9a:75: 49:da:02:f7:cb:f3:d1:60:7e:20:ea:b5:19:04:77: 6f:25:78:51:e0:06:1c:35:37:d9:63:e4:d4:6c:91: c9:f0:ef:79:bd:59:07:f0:82:0e:53:e5:23:cd:26: 77:81:21:a1:2d:5a:63:b9:36:2a:6f:c5:36:65:ed: be:11:23:8f:af:c4:1a:9c:81:3e:a6:cd:8a:bf:34: c5:24:a5:75:60:ef:8f:ab:e1:a9:d3:1d:1c:8e:52: 30:5a:24:dc:f4:69:b8:a2:a4:23:6a:1d:c9:2e:07: 4d:f0:bb:68:b3:5e:9b:0f:07:45:e8:bb:97:50:c5: 39:8b:d7:d0:ec:bb:1b:10:9a:9e:40:83:9e:3b:38: 4d:e8:a2:18:1d:8b:db:73:ac:5f:6d:7f:3c:49:c5: 20:6b:a3:d7:48:8e:1a:c8:fe:ea:36:6e:92:30:ec: e4:47:89:93:6b:0f:fd:ca:61:70:2a:d4:3e:08:cb: 7d:a2:2e:fe:d0:fe:da:36:ae:fa:b1:2b:00:91:70: 93:63:06:44:9d:e4:30:f8:78:08:09:d7:8c:20:43: d2:ea:fe:ec:1b:5f:35:f2:e9:a8:b2:91:61:15:1f: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:04:F1:E1:0F:D4:6A:5B:DF:46:46:E1:02:76:B3:08:3C:60:F3:50 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c4:f1:99:8f:db:03:68:a9:1b:ed:bf:45:4e:51:45:71:23: 35:c6:39:05:98:79:c9:49:d2:cf:c2:7a:a0:b7:db:25:b2:2d: eb:81:1a:aa:36:35:b7:8a:f4:4f:7f:dc:d8:33:fd:4e:99:39: d1:3f:8e:5e:3c:49:c2:a2:2f:49:b7:ac:f9:00:79:69:06:cc: c9:30:81:1c:2f:fe:3c:04:4b:06:52:89:29:7c:46:c0:42:dd: 7c:ac:bc:10:fc:7d:73:49:fd:07:45:b6:08:cc:31:46:81:95: 2a:db:8c:ff:0e:0f:37:ec:ac:9b:d3:5b:76:f5:40:e0:82:b3: 14:4d:f3:ea:54:d1:60:8d:b6:01:7d:68:69:0a:b5:0b:ae:8f: c0:ac:23:c6:ca:f4:84:9c:bb:38:df:71:f2:13:0c:cb:9a:08: 9c:7c:56:62:08:7c:34:bf:45:1b:19:37:27:c3:b2:f7:74:5c: 69:d7:d1:7d:a2:32:b4:17:4a:b3:89:9e:5a:31:22:7c:70:d1: 1e:77:91:e9:25:ea:e4:3e:97:b1:1b:a4:d1:0c:50:89:5a:a1: 1d:94:49:0e:f9:8d:6f:e1:68:25:c1:ca:b1:6a:07:4b:30:7a: f7:3c:99:67:61:75:75:8d:15:e2:a7:e5:04:64:3c:8c:0f:05: 4d:95:6a:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwNjE1MDIyNTM2WhcNMjUwNjIyMDIyNTM2WjAYMRYwFAYD VQQDEw02ODRlMmYyMC1jZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iwdhXBnPMxSjsff99UolydtazImcS7dofkamnVJ2gL3y/PRYH4g6rUZBHdv JXhR4AYcNTfZY+TUbJHJ8O95vVkH8IIOU+UjzSZ3gSGhLVpjuTYqb8U2Ze2+ESOP r8QanIE+ps2KvzTFJKV1YO+Pq+Gp0x0cjlIwWiTc9Gm4oqQjah3JLgdN8Ltos16b DwdF6LuXUMU5i9fQ7LsbEJqeQIOeOzhN6KIYHYvbc6xfbX88ScUga6PXSI4ayP7q Nm6SMOzkR4mTaw/9ymFwKtQ+CMt9oi7+0P7aNq76sSsAkXCTYwZEneQw+HgICdeM IEPS6v7sG1818umospFhFR8gzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPME8eEP 1Gpb30ZG4QJ2swg8YPNQMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2xPGZj9sDaKkb7b9FTlFFcSM1xjkFmHnJSdLPwnqgt9slsi3rgRqq NjW3ivRPf9zYM/1OmTnRP45ePEnCoi9Jt6z5AHlpBszJMIEcL/48BEsGUokpfEbA Qt18rLwQ/H1zSf0HRbYIzDFGgZUq24z/Dg837Kyb01t29UDggrMUTfPqVNFgjbYB fWhpCrULro/ArCPGyvSEnLs433HyEwzLmgicfFZiCHw0v0UbGTcnw7L3dFxp19F9 ojK0F0qziZ5aMSJ8cNEed5HpJerkPpexG6TRDFCJWqEdlEkO+Y1v4WglwcqxagdL MHr3PJlnYXV1jRXip+UEZDyMDwVNlWp7 -----END CERTIFICATE-----Generated at Mon Jun 16 22:10:30 2025 by rpki-client