$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: ENpNBKprTysviUY9uop7FLvCrAjMsxwwk6+MiY7C7xU= Subject key identifier: AA:04:71:00:1C:0C:31:5A:6D:F4:9B:9B:C0:F3:85:89:DE:CE:E2:C8 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 022B Signing time: Sun 15 Jun 2025 01:38:57 +0000 Manifest this update: Sun 15 Jun 2025 01:38:56 +0000 Manifest next update: Sun 22 Jun 2025 01:38:56 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: /veZ11gqLgg2NQgVaH0nJpp+J7CNxcisnJP5/0sbEt8=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Jun 15 01:38:56 2025 GMT Not After : Jun 22 01:38:56 2025 GMT Subject: CN=684e2431-fbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:4a:4a:29:0a:67:b2:e6:5b:22:43:38:75: 1a:27:90:16:1a:14:70:45:f7:5b:a3:41:bf:b5:48: df:42:f5:df:75:e2:56:c7:1b:fa:32:dd:11:86:14: ac:aa:69:7f:df:49:d9:58:d1:8a:e6:41:07:ac:fe: 13:df:d0:d4:be:64:01:1a:a0:d8:37:a9:95:e2:63: 32:d2:16:b6:df:62:dd:b0:3e:8a:95:26:10:60:ba: 4c:5d:11:b7:13:4a:3a:aa:9b:01:05:ca:28:cf:f5: 72:f6:6e:16:a1:2d:05:8f:0a:37:c6:97:39:63:ed: 60:45:dd:2f:0b:19:59:4d:12:e3:b8:c8:23:0d:10: db:ae:89:68:ee:da:94:15:0c:33:79:9c:58:63:a6: 84:8a:69:d1:c0:b3:43:9f:9d:6d:16:1f:b5:9a:05: e4:19:8a:66:66:0c:ee:08:4e:94:3f:1f:8f:31:08: f8:91:12:e5:e5:56:3c:ec:16:41:90:79:19:dd:b1: c4:c9:92:7e:52:b5:d8:49:0f:ab:f0:1e:10:ea:03: 47:1a:ec:17:db:cb:77:08:8b:ed:ad:41:c5:9c:14: c7:0c:ce:0e:0d:c7:60:4b:73:21:91:8c:74:ef:b2: 9b:e6:6a:3a:2a:f0:ad:85:16:d4:08:71:c7:53:d3: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:04:71:00:1C:0C:31:5A:6D:F4:9B:9B:C0:F3:85:89:DE:CE:E2:C8 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:fb:4d:1e:a3:63:8b:e1:fb:14:92:19:00:1c:fd:79:a5:99: 18:29:60:32:24:04:80:02:9c:fa:03:08:83:36:43:c5:d0:01: a0:8c:12:59:00:a8:89:d8:fe:95:48:c1:97:03:b8:77:c2:6e: 5d:15:6f:39:c7:cc:ba:ba:78:ce:6f:f0:66:28:37:52:67:42: b6:12:9b:fd:1a:91:2e:c7:98:20:e3:0c:eb:e4:fd:ff:0d:ba: 15:a4:14:08:fc:51:0c:7c:d7:f9:07:a7:e3:3b:5b:0f:91:94: 71:ce:83:5f:69:93:b2:26:af:80:84:5d:78:59:35:bc:ce:f7: cf:89:b4:25:13:49:f5:33:47:93:5e:86:34:8e:61:c6:c3:91: 09:f0:7d:28:40:f8:47:a6:91:56:88:7a:95:be:5c:2c:93:4c: c4:48:45:84:22:b3:44:02:bf:6b:63:8d:0f:91:8e:48:94:e7: d5:ad:36:b0:b5:12:d0:cb:7d:52:cc:80:db:eb:25:27:dc:91: e4:64:3d:50:eb:06:be:f2:f8:bb:51:19:7f:f8:ff:a3:0d:76: e9:ae:8a:1a:61:a4:bf:5c:93:eb:39:75:25:02:1c:bc:4a:98: 7f:bd:6e:c9:aa:83:34:0c:74:7d:40:79:62:17:fc:85:fe:b2: e4:49:14:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwNjE1MDEzODU2WhcNMjUwNjIyMDEzODU2WjAYMRYwFAYD VQQDEw02ODRlMjQzMS1mYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDdKSikKZ7LmWyJDOHUaJ5AWGhRwRfdbo0G/tUjfQvXfdeJWxxv6Mt0RhhSs qml/30nZWNGK5kEHrP4T39DUvmQBGqDYN6mV4mMy0ha232LdsD6KlSYQYLpMXRG3 E0o6qpsBBcooz/Vy9m4WoS0Fjwo3xpc5Y+1gRd0vCxlZTRLjuMgjDRDbrolo7tqU FQwzeZxYY6aEimnRwLNDn51tFh+1mgXkGYpmZgzuCE6UPx+PMQj4kRLl5VY87BZB kHkZ3bHEyZJ+UrXYSQ+r8B4Q6gNHGuwX28t3CIvtrUHFnBTHDM4ODcdgS3MhkYx0 77Kb5mo6KvCthRbUCHHHU9PtIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoEcQAc DDFabfSbm8DzhYnezuLIMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ+00eo2OL4fsUkhkAHP15pZkYKWAyJASAApz6AwiDNkPF0AGgjBJZ AKiJ2P6VSMGXA7h3wm5dFW85x8y6unjOb/BmKDdSZ0K2Epv9GpEux5gg4wzr5P3/ DboVpBQI/FEMfNf5B6fjO1sPkZRxzoNfaZOyJq+AhF14WTW8zvfPibQlE0n1M0eT XoY0jmHGw5EJ8H0oQPhHppFWiHqVvlwsk0zESEWEIrNEAr9rY40PkY5IlOfVrTaw tRLQy31SzIDb6yUn3JHkZD1Q6wa+8vi7URl/+P+jDXbprooaYaS/XJPrOXUlAhy8 Sph/vW7JqoM0DHR9QHliF/yF/rLkSRRN -----END CERTIFICATE-----Generated at Sun Jun 15 09:47:24 2025 by rpki-client