$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: Xxb3jeDktZzKXNzzAXhVVHpTmiSD+uNGMO7O4Ys3BSg= Subject key identifier: 7F:BF:FD:19:D4:15:00:6B:63:DF:71:47:0E:44:76:08:0E:91:92:80 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0612 Signing time: Sat 28 Jun 2025 22:37:47 +0000 Manifest this update: Sat 28 Jun 2025 22:37:46 +0000 Manifest next update: Sat 05 Jul 2025 22:37:46 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: fKpyeuAKtU5aANTN+m9wHgnWlgRgSN11maWqe8T+raI=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: aiFrMbTQ8pa6qGrU9w8Y+h6k5VVyo8+mDWmigq+L7zE=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 22:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Jun 28 22:37:46 2025 GMT Not After : Jul 5 22:37:46 2025 GMT Subject: CN=68606ebb-de4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:55:2a:c7:62:9c:80:86:43:63:ef:1a:3c: 20:89:f0:ae:92:af:25:5b:5b:6c:40:7a:00:97:6f: 4a:35:98:8f:e0:c0:d8:83:d1:b4:86:65:85:4e:bd: 2c:99:56:16:a0:50:d6:ba:85:3b:fb:06:10:11:4b: 39:35:97:72:cf:72:64:81:5e:8a:0a:20:04:fa:1d: 7a:3c:13:09:a9:1a:50:1d:6a:af:5f:a9:5e:66:30: 1e:3f:f8:81:a0:e2:09:8b:2a:cf:b4:e1:3f:72:7b: 3c:8e:74:af:dd:fc:d6:83:a0:6d:af:12:e9:46:99: 07:1e:94:84:d8:8e:c9:61:8d:26:73:86:b0:39:62: fe:04:f8:29:41:4c:43:4b:21:59:c4:27:d2:b5:22: 2b:3d:b6:de:7f:89:47:ec:a8:30:f1:a4:0f:6c:70: 58:0a:fe:bd:2d:0b:3b:2f:e1:03:56:ba:46:9e:65: 4c:b7:8b:3f:56:04:59:ab:9b:85:7b:ed:ac:53:87: 86:ab:1d:9a:3d:12:46:a8:ee:a4:56:3c:4a:8a:dd: fb:94:e0:69:37:37:89:4c:d2:3a:02:f2:d4:e9:90: 0a:62:72:4f:7c:6e:35:f8:37:73:e0:17:0e:c1:64: 4a:d4:be:88:78:c8:fa:02:04:bc:68:87:94:c9:93: e2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BF:FD:19:D4:15:00:6B:63:DF:71:47:0E:44:76:08:0E:91:92:80 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:4c:75:91:2b:cf:58:83:90:2f:54:b4:c2:51:e2:f2:0d:f9: 2c:db:4c:fd:b5:1e:bb:b1:03:fe:6f:eb:fd:74:78:01:11:db: d9:a7:7f:ce:11:c8:7b:f0:a7:15:9b:33:db:b1:07:a6:fb:48: 1a:d4:d8:e1:44:09:ca:2d:bb:0c:57:b2:90:39:74:e2:5b:4c: 82:e9:10:8b:28:34:2c:3e:a8:c7:f3:c7:e2:38:05:45:d8:56: ab:3f:45:66:e2:85:58:b2:c0:f6:78:42:c4:62:32:6e:0c:bb: 7f:a6:2a:08:d1:71:b5:65:a5:c4:b8:03:22:ca:5c:de:f0:e8: fc:ee:05:19:af:bd:a7:b4:e7:07:d7:7b:16:02:a4:1b:bd:bf: c7:dd:18:99:b6:10:3e:43:40:43:93:75:ad:3e:2b:3f:77:6f: 84:6c:2e:c1:9a:ee:55:9c:bf:41:1f:44:a4:ca:be:30:dd:f6: c7:8f:ad:1e:60:08:0e:85:f7:3c:8c:48:11:a4:ab:07:2f:cf: a4:d4:62:aa:05:11:0f:1c:83:2a:ca:66:fb:27:a5:e6:d8:be: ad:8a:ed:6a:64:cf:18:d8:d4:5f:26:dc:a0:a2:13:27:9f:a5: 8f:c2:d0:40:9c:b4:0a:d7:c9:a7:9b:ba:ab:65:4a:2a:e8:e2: d9:da:5d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwNjI4MjIzNzQ2WhcNMjUwNzA1MjIzNzQ2WjAYMRYwFAYD VQQDEw02ODYwNmViYi1kZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7NVKsdinICGQ2PvGjwgifCukq8lW1tsQHoAl29KNZiP4MDYg9G0hmWFTr0s mVYWoFDWuoU7+wYQEUs5NZdyz3JkgV6KCiAE+h16PBMJqRpQHWqvX6leZjAeP/iB oOIJiyrPtOE/cns8jnSv3fzWg6BtrxLpRpkHHpSE2I7JYY0mc4awOWL+BPgpQUxD SyFZxCfStSIrPbbef4lH7Kgw8aQPbHBYCv69LQs7L+EDVrpGnmVMt4s/VgRZq5uF e+2sU4eGqx2aPRJGqO6kVjxKit37lOBpNzeJTNI6AvLU6ZAKYnJPfG41+Ddz4BcO wWRK1L6IeMj6AgS8aIeUyZPi1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+//RnU FQBrY99xRw5EdggOkZKAMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZTHWRK89Yg5AvVLTCUeLyDfks20z9tR67sQP+b+v9dHgBEdvZp3/O Ech78KcVmzPbsQem+0ga1NjhRAnKLbsMV7KQOXTiW0yC6RCLKDQsPqjH88fiOAVF 2FarP0Vm4oVYssD2eELEYjJuDLt/pioI0XG1ZaXEuAMiylze8Oj87gUZr72ntOcH 13sWAqQbvb/H3RiZthA+Q0BDk3WtPis/d2+EbC7Bmu5VnL9BH0Skyr4w3fbHj60e YAgOhfc8jEgRpKsHL8+k1GKqBREPHIMqymb7J6Xm2L6tiu1qZM8Y2NRfJtygohMn n6WPwtBAnLQK18mnm7qrZUoq6OLZ2l0H -----END CERTIFICATE-----Generated at Sun Jun 29 16:24:02 2025 by rpki-client