$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: tbUFjNRKWG+Zrn1A+QCu+fJHTm+OX54kcTkqwNUeADM= Subject key identifier: 97:43:00:DF:76:99:E1:D2:58:DB:26:A1:38:14:55:76:F1:34:65:5C Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 01B4 Signing time: Sun 29 Jun 2025 02:15:16 +0000 Manifest this update: Sun 29 Jun 2025 02:15:16 +0000 Manifest next update: Sun 06 Jul 2025 02:15:15 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: TxeGwvqDFM/9BUUDPa/sbYACCMx1R35cAcFmOLIg9k4=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Jun 29 02:15:16 2025 GMT Not After : Jul 6 02:15:15 2025 GMT Subject: CN=6860a1b4-afa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4a:4d:13:06:eb:78:12:c3:78:e7:7a:4a:f7: e0:a5:a6:60:31:a0:6a:7c:02:4c:93:a4:26:c7:65: 82:74:d4:6c:29:9c:c2:8e:bf:8d:40:e5:50:07:c0: 50:a6:3e:a7:e9:2e:44:1a:d5:0e:bb:f9:97:99:d7: 0a:46:8e:96:33:ee:30:87:fc:13:78:8a:83:99:06: 79:3f:1c:37:1e:1d:41:39:f9:1b:b8:d1:7e:d6:60: 21:58:37:03:30:2a:12:ad:5a:d6:d2:37:33:78:89: 8f:e8:c5:65:8f:7a:49:dc:53:4a:8e:44:d8:62:e5: 37:1d:ca:02:54:65:32:14:ce:d9:a1:e5:01:fb:41: 40:73:12:f2:2d:c7:9d:2e:24:33:4d:55:b8:92:82: 42:bb:94:ae:8e:ac:8b:c4:6d:68:68:69:ae:6a:c6: b7:7c:11:34:a4:c3:36:6c:59:99:50:30:07:43:de: 00:68:9e:43:18:4c:ff:f9:b2:3a:01:cd:a9:bf:78: 32:d4:7d:47:f8:20:bb:29:75:91:f3:06:95:17:63: 9e:db:42:4e:3a:81:ec:9d:aa:59:a7:94:6e:cb:50: cd:00:42:89:01:04:b5:1e:b1:a6:3e:eb:56:2b:42: 07:65:f7:86:e5:89:cb:ad:c1:80:14:e3:0f:75:2f: 5c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:00:DF:76:99:E1:D2:58:DB:26:A1:38:14:55:76:F1:34:65:5C X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ac:32:fe:92:e5:0e:8e:ca:5f:8d:ba:f7:e3:b6:11:7e:c1: 93:ea:f9:80:d7:d5:55:ec:b5:73:e2:2e:bc:2c:50:61:65:be: ad:69:dc:e2:27:31:f5:d2:d7:19:34:e8:c9:e2:ec:42:2e:cd: 10:79:56:06:17:90:97:ba:a8:30:1d:30:6d:18:59:6a:fe:d0: b0:fb:24:da:af:85:8a:9c:de:eb:2e:2b:6c:0e:60:56:52:9f: 79:b3:7e:46:65:37:57:09:8d:d6:c1:64:07:92:ea:41:77:e5: 50:d8:b0:10:b7:b8:b0:bd:78:2c:12:03:fe:28:cd:cc:ec:7e: 22:83:a2:10:29:9d:32:73:d1:32:19:3e:87:e2:ee:95:6f:51: d1:7a:b4:1c:f0:3e:b7:62:2e:b6:05:65:f3:fd:92:53:8f:e6: fe:ca:3b:64:1c:50:ea:f4:d1:82:77:b5:ce:ae:5d:e4:b3:79: 27:85:7f:0a:20:cd:ab:ad:cc:5b:44:2c:79:12:9a:f3:6a:e2: 15:af:48:db:9d:6f:fb:45:38:a8:b0:bc:2e:ad:58:9c:b7:56: 0f:0f:2e:6b:ea:9a:90:5f:eb:e2:8a:ce:e7:97:d6:a5:53:ad: ca:4e:92:b7:a0:12:98:9b:b6:47:38:a3:d3:2e:d1:a8:08:1e: 8e:bc:af:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUwNjI5MDIxNTE2WhcNMjUwNzA2MDIxNTE1WjAYMRYwFAYD VQQDEw02ODYwYTFiNC1hZmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7kpNEwbreBLDeOd6SvfgpaZgMaBqfAJMk6Qmx2WCdNRsKZzCjr+NQOVQB8BQ pj6n6S5EGtUOu/mXmdcKRo6WM+4wh/wTeIqDmQZ5Pxw3Hh1BOfkbuNF+1mAhWDcD MCoSrVrW0jczeImP6MVlj3pJ3FNKjkTYYuU3HcoCVGUyFM7ZoeUB+0FAcxLyLced LiQzTVW4koJCu5SujqyLxG1oaGmuasa3fBE0pMM2bFmZUDAHQ94AaJ5DGEz/+bI6 Ac2pv3gy1H1H+CC7KXWR8waVF2Oe20JOOoHsnapZp5Ruy1DNAEKJAQS1HrGmPutW K0IHZfeG5YnLrcGAFOMPdS9cgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdDAN92 meHSWNsmoTgUVXbxNGVcMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcrDL+kuUOjspfjbr347YRfsGT6vmA19VV7LVz4i68LFBhZb6tadzi JzH10tcZNOjJ4uxCLs0QeVYGF5CXuqgwHTBtGFlq/tCw+yTar4WKnN7rLitsDmBW Up95s35GZTdXCY3WwWQHkupBd+VQ2LAQt7iwvXgsEgP+KM3M7H4ig6IQKZ0yc9Ey GT6H4u6Vb1HRerQc8D63Yi62BWXz/ZJTj+b+yjtkHFDq9NGCd7XOrl3ks3knhX8K IM2rrcxbRCx5EprzauIVr0jbnW/7RTiosLwurVict1YPDy5r6pqQX+viis7nl9al U63KTpK3oBKYm7ZHOKPTLtGoCB6OvK+8 -----END CERTIFICATE-----Generated at Tue Jul 1 01:15:43 2025 by rpki-client