$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: 4Uf/Ip3DFR1GOSBKnrczklzlHX91o0IHFBI1kOt4bio= Subject key identifier: 3B:2C:65:27:27:04:3A:2C:2E:55:79:41:AA:9A:3E:65:7B:E0:B1:D0 Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 0662 Signing time: Mon 30 Jun 2025 22:51:41 +0000 Manifest this update: Mon 30 Jun 2025 22:51:40 +0000 Manifest next update: Mon 07 Jul 2025 22:51:40 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: 7IBJ7P7JwHHIc+V+TBCJv0QMgzMFXYpaHCrB5vhqAZ0=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: fSfAPi/bUi9k15IOKds7b6yXEktxoZjFwfG44RAp5IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: Jun 30 22:51:40 2025 GMT Not After : Jul 7 22:51:40 2025 GMT Subject: CN=686314fc-572e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:b5:40:f3:6e:71:64:90:21:94:f4:b7:b6: dc:44:c8:de:65:39:d6:5e:30:14:ba:32:46:40:18: 9e:0f:7e:d9:1e:3c:9e:97:61:a1:9a:62:34:64:68: be:ac:00:2e:94:1a:1f:f7:6f:c6:09:c6:b7:c8:76: eb:cb:ca:e8:85:05:64:c5:87:80:58:f2:a2:0d:94: 15:d1:3f:bb:2b:6a:52:67:8f:dd:1d:17:c6:a8:01: 08:59:9d:1e:76:f1:a4:fd:ef:d4:9d:3a:9a:84:76: ca:30:03:2e:f3:e6:19:13:c6:76:b2:dc:f7:53:8f: 8e:b5:69:dc:dc:c6:94:f2:84:97:69:99:21:4a:25: 37:34:01:1d:8b:a6:e7:7a:cd:60:20:82:7e:b8:c0: 84:23:9e:24:56:36:7d:7e:89:0e:39:99:ef:ba:54: 92:22:ea:29:c7:5a:57:96:71:a4:80:e6:38:18:9e: a4:fa:e1:d3:48:93:5f:f6:34:b1:c4:0d:f3:93:5f: c6:b4:e4:df:c9:b5:be:fe:9f:d1:db:8d:59:2d:5e: 09:09:6d:61:dc:5f:79:64:d6:ec:44:9b:5c:29:6d: 8b:25:59:82:5c:99:fb:86:65:25:dc:76:0b:2c:7d: 10:9f:2b:81:69:73:c5:ea:a6:17:50:4d:e0:16:6a: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2C:65:27:27:04:3A:2C:2E:55:79:41:AA:9A:3E:65:7B:E0:B1:D0 X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e3:dc:b8:f8:b8:74:4d:4d:74:1b:bb:b8:bd:5b:99:7c:a6: 11:1b:1c:3e:f8:83:90:0c:42:81:c1:8d:d5:04:1c:f8:64:34: 06:85:ee:0b:33:4d:5c:92:fb:68:b7:33:8f:3e:9a:4f:46:d5: c9:49:4e:3e:1b:93:15:14:27:00:4b:4e:7c:1a:89:3e:93:6f: b7:d3:2a:2c:99:65:50:03:71:7d:2f:5f:29:14:c1:29:5b:4e: 68:96:f0:b0:eb:f0:0b:74:d4:c7:fd:69:33:9d:1a:7c:0b:1c: 47:75:ec:f2:29:46:b6:20:27:2e:62:b2:82:e0:67:9a:3e:bb: 67:0a:5b:7b:64:34:82:c5:39:cd:83:f5:65:01:21:b7:7e:3c: cb:8e:77:e0:7e:37:ef:f8:58:0d:d1:35:23:b1:f2:15:f5:9c: 32:07:ab:6e:bf:8c:58:0c:54:cc:e7:03:90:87:f5:a6:74:f6: 1e:45:f0:63:f2:f7:be:9c:b9:0a:33:6f:aa:3e:62:38:04:d1: 00:d2:db:16:87:1c:8b:c2:ce:1a:b5:0f:78:78:1d:4e:18:67: 30:7b:9c:5d:f9:20:8b:78:48:57:89:e3:3f:4d:da:c4:59:a3: 9d:9e:e3:a4:4d:14:d8:fb:9d:d8:0e:01:b7:6c:f9:27:39:8a: 99:2c:11:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjUwNjMwMjI1MTQwWhcNMjUwNzA3MjI1MTQwWjAYMRYwFAYD VQQDEw02ODYzMTRmYy01NzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWi1QPNucWSQIZT0t7bcRMjeZTnWXjAUujJGQBieD37ZHjyel2GhmmI0ZGi+ rAAulBof92/GCca3yHbry8rohQVkxYeAWPKiDZQV0T+7K2pSZ4/dHRfGqAEIWZ0e dvGk/e/UnTqahHbKMAMu8+YZE8Z2stz3U4+OtWnc3MaU8oSXaZkhSiU3NAEdi6bn es1gIIJ+uMCEI54kVjZ9fokOOZnvulSSIuopx1pXlnGkgOY4GJ6k+uHTSJNf9jSx xA3zk1/GtOTfybW+/p/R241ZLV4JCW1h3F95ZNbsRJtcKW2LJVmCXJn7hmUl3HYL LH0QnyuBaXPF6qYXUE3gFmqP3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDssZScn BDosLlV5QaqaPmV74LHQMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi49y4+Lh0TU10G7u4vVuZfKYRGxw++IOQDEKBwY3VBBz4ZDQGhe4L M01ckvtotzOPPppPRtXJSU4+G5MVFCcAS058Gok+k2+30yosmWVQA3F9L18pFMEp W05olvCw6/ALdNTH/WkznRp8CxxHdezyKUa2ICcuYrKC4GeaPrtnClt7ZDSCxTnN g/VlASG3fjzLjnfgfjfv+FgN0TUjsfIV9ZwyB6tuv4xYDFTM5wOQh/WmdPYeRfBj 8ve+nLkKM2+qPmI4BNEA0tsWhxyLws4atQ94eB1OGGcwe5xd+SCLeEhXieM/TdrE WaOdnuOkTRTY+53YDgG3bPknOYqZLBHN -----END CERTIFICATE-----Generated at Wed Jul 2 19:47:23 2025 by rpki-client