$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: 2t3mWTqGfLE1CdyYfMgcR3t+pGRcwTgY+OqxG42pcd0= Subject key identifier: 44:56:D8:EF:58:31:C9:B9:3D:FB:C9:4E:A5:09:BB:27:CA:B9:4F:75 Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 349E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 349B Signing time: Fri 04 Jul 2025 14:57:20 +0000 Manifest this update: Fri 04 Jul 2025 14:57:19 +0000 Manifest next update: Fri 11 Jul 2025 14:57:19 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: bPUI2b4mP1U+kNUo68dImi9DjFhMHanjrv3IECI8DFI=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13470 (0x349e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Jul 4 14:57:19 2025 GMT Not After : Jul 11 14:57:19 2025 GMT Subject: CN=6867ebd0-1d12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:40:66:ed:0c:0a:84:49:7d:b7:4f:44:88:ce: 6b:0f:3c:20:c5:f5:e0:9f:99:36:89:57:7c:99:ab: 24:60:e8:aa:5b:97:cb:cd:a1:26:93:5a:ef:56:85: 94:cb:29:31:c3:8b:79:9a:bd:68:12:24:be:2b:58: 91:23:c6:97:76:eb:0d:27:f0:18:13:2f:a7:d6:92: af:4c:40:50:93:f3:77:24:f6:f1:cc:7f:55:f9:61: b8:59:99:e8:0d:c5:d5:35:3c:7b:f3:03:e1:bf:18: da:e5:b0:d4:bb:42:48:49:3e:8f:64:6d:a1:55:41: f4:dc:d2:b6:5a:0c:5a:33:09:e9:c8:26:e7:2c:35: ee:bd:e6:8c:b0:ca:67:3c:24:d1:fa:5a:66:99:ad: 57:59:40:7f:15:82:36:c1:55:8e:5b:50:a3:d1:35: 9c:b8:cf:a9:9e:62:bb:27:e2:04:4b:91:59:dd:73: bf:67:fd:7d:53:a9:07:12:4b:00:38:67:50:42:9c: 46:e9:86:33:6e:51:41:7a:46:de:ee:62:62:fd:d6: a2:5c:ac:c2:89:97:f6:ae:3d:ec:ab:14:db:fc:20: b1:a1:ef:36:bc:bc:0a:3f:01:ea:c4:c6:15:6b:ed: be:12:21:c0:61:dd:c0:31:7f:cb:f6:ee:35:bc:b8: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:56:D8:EF:58:31:C9:B9:3D:FB:C9:4E:A5:09:BB:27:CA:B9:4F:75 X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4b:7e:a7:5b:a8:5f:e1:47:b3:6e:84:de:aa:1f:5f:5b:36: 3a:a1:b4:8a:dc:c8:a5:3f:fd:30:00:26:6e:7f:31:a9:c1:52: a9:61:08:6c:26:2b:f2:46:af:13:77:06:99:cc:4e:07:6b:ad: 93:de:8a:0c:90:8a:c5:b3:dc:2c:20:97:6e:91:d7:fc:4c:d7: 57:73:51:1b:0f:7c:c1:b1:05:f0:90:3b:78:e8:81:c9:22:fa: 57:e5:b3:27:01:94:85:09:6b:fe:30:05:31:0e:5f:84:79:33: 25:aa:cf:54:57:d4:ac:31:24:8c:b2:cf:bf:47:16:6f:9b:de: 23:1b:5a:76:6a:0e:70:5b:f8:e7:c1:8e:59:2d:6e:bc:0f:f7: d5:df:5a:cf:26:03:73:a6:2b:2d:5b:e6:eb:67:73:d0:24:0c: 5f:17:b3:f1:ba:8c:f8:d3:69:e8:0d:e3:dc:a4:d5:d1:69:47: bf:e4:3b:a7:4f:56:63:85:a1:93:a2:ad:bc:5f:2b:06:2d:14: 59:69:23:ac:c8:ff:f8:45:8e:2b:06:a0:85:81:f8:4b:6e:30: 8f:1b:7c:52:2e:e9:43:d2:75:45:0a:03:33:8b:2f:61:97:82: 57:cb:68:5f:4c:1b:ed:c5:54:31:20:f0:ab:5d:c5:d8:30:a3: 70:95:61:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUwNzA0MTQ1NzE5WhcNMjUwNzExMTQ1NzE5WjAYMRYwFAYD VQQDEw02ODY3ZWJkMC0xZDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9kBm7QwKhEl9t09EiM5rDzwgxfXgn5k2iVd8maskYOiqW5fLzaEmk1rvVoWU yykxw4t5mr1oEiS+K1iRI8aXdusNJ/AYEy+n1pKvTEBQk/N3JPbxzH9V+WG4WZno DcXVNTx78wPhvxja5bDUu0JIST6PZG2hVUH03NK2WgxaMwnpyCbnLDXuveaMsMpn PCTR+lpmma1XWUB/FYI2wVWOW1Cj0TWcuM+pnmK7J+IES5FZ3XO/Z/19U6kHEksA OGdQQpxG6YYzblFBekbe7mJi/daiXKzCiZf2rj3sqxTb/CCxoe82vLwKPwHqxMYV a+2+EiHAYd3AMX/L9u41vLg6BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERW2O9Y Mcm5PfvJTqUJuyfKuU91MB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/S36nW6hf4UezboTeqh9fWzY6obSK3MilP/0wACZufzGpwVKpYQhs JivyRq8TdwaZzE4Ha62T3ooMkIrFs9wsIJdukdf8TNdXc1EbD3zBsQXwkDt46IHJ IvpX5bMnAZSFCWv+MAUxDl+EeTMlqs9UV9SsMSSMss+/RxZvm94jG1p2ag5wW/jn wY5ZLW68D/fV31rPJgNzpistW+brZ3PQJAxfF7Pxuoz402noDePcpNXRaUe/5Dun T1ZjhaGToq28XysGLRRZaSOsyP/4RY4rBqCFgfhLbjCPG3xSLulD0nVFCgMziy9h l4JXy2hfTBvtxVQxIPCrXcXYMKNwlWHs -----END CERTIFICATE-----Generated at Fri Jul 4 22:07:12 2025 by rpki-client