$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft File: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft (raw, json) Hash identifier: Y870+Dq9JatJDtuvVEAOQHizguiezwS2nDqw+1KoZ8o= Subject key identifier: E4:D4:C9:38:E5:CC:FA:44:F7:DB:1F:E9:22:F1:1B:48:D0:81:99:E5 Authority key identifier: D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 Certificate issuer: /CN=A91A5ED2/serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft Manifest number: 19 Signing time: Tue 01 Jul 2025 08:44:27 +0000 Manifest this update: Tue 01 Jul 2025 08:44:26 +0000 Manifest next update: Tue 08 Jul 2025 08:44:26 +0000 Files and hashes: 1: 2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl (hash: Oq5B/oHhzep4w2yI4mYHfqdZN29goYhB2Biqm7PuUto=) 2: D474730E311C11F08B197B65C4F9AE02.roa (hash: Pu/QPbX6etZqKvOsEtAWX426lG3kK44YjXzpJvX5ecs=) 3: 5A9C0D58311C11F0B91A2E64C4F9AE02.roa (hash: OuYK59uWIga3ZAzcT5ocu0lcjNK1alPA7Ti+SUQJrh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5ED2, serialNumber=D904D552C0EF32F249ABA4597BD84A15EE5555C1 Validity Not Before: Jul 1 08:44:26 2025 GMT Not After : Jul 8 08:44:26 2025 GMT Subject: CN=68639feb-803d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:a4:aa:5b:65:33:c4:59:6d:2e:5e:0c:2b: 99:19:c4:b0:9c:ca:b6:24:75:d6:8a:e2:b9:2e:d6: d1:a8:5f:52:40:83:17:19:5e:dc:08:dc:9d:a8:32: 9f:b7:8a:b8:5d:20:00:ac:a1:ae:30:8d:55:c2:5b: ae:4e:2a:8f:52:fe:d1:51:f0:21:08:2b:75:61:c6: fb:f0:ae:ee:c6:4d:6d:b6:f1:97:e9:9d:6a:cb:a1: 37:c5:7c:a1:05:30:4e:14:bd:6f:d3:c8:3f:2d:28: 23:31:4a:88:11:2d:2b:9e:99:a9:a9:d7:a2:bc:17: 00:b8:8a:d0:fc:45:d9:8d:49:ce:f5:45:25:9f:56: c6:a9:8b:1d:a8:69:73:31:39:db:8f:90:59:11:dc: 87:17:0f:93:30:72:6b:17:42:cf:36:e6:5f:08:53: 55:f8:05:70:36:fc:09:89:d4:95:dd:ac:ac:84:1a: 98:7f:ce:5f:51:6f:98:c2:ef:ad:6b:78:39:ef:e3: 50:4f:56:2e:73:89:f5:97:50:6e:37:2c:bd:9a:44: 71:30:a4:d4:96:9b:85:64:2e:de:09:07:67:9f:ba: 37:f2:6b:2a:df:26:86:9a:ef:45:e8:50:0b:49:9a: d2:9a:dc:e2:c9:40:f8:12:fd:cf:8c:94:2c:2e:36: 6d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D4:C9:38:E5:CC:FA:44:F7:DB:1F:E9:22:F1:1B:48:D0:81:99:E5 X509v3 Authority Key Identifier: keyid:D9:04:D5:52:C0:EF:32:F2:49:AB:A4:59:7B:D8:4A:15:EE:55:55:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2QTVUsDvMvJJq6RZe9hKFe5VVcE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5ED2/F245B2D6311B11F0A2F51160C4F9AE02/2QTVUsDvMvJJq6RZe9hKFe5VVcE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:61:55:d7:14:2f:e7:db:aa:b8:58:48:7f:4e:05:3c:46:22: e5:f8:59:39:40:5c:18:54:71:dc:9b:4f:ab:e8:c0:33:70:55: 63:d7:2d:c8:6e:32:47:37:87:6f:3e:25:4a:2c:3b:ce:a5:e0: 34:05:9f:45:7e:3b:ff:d3:3d:b2:a6:84:8f:65:b6:4d:69:94: 27:35:6e:e4:0f:6e:e9:48:85:2a:3a:4d:3c:2f:10:e4:2c:40: 4e:20:58:de:fb:d4:06:63:8e:9f:58:5f:8a:d3:db:92:0f:5a: ed:f3:37:16:37:a7:c7:a7:96:35:2f:97:8c:06:d7:f4:71:89: b0:0c:eb:2d:8b:f6:90:f1:9e:da:f2:12:53:b0:29:8e:bd:5f: 4e:2f:ed:41:eb:4e:db:39:10:8f:82:52:71:9e:47:37:94:9f: 4b:96:0f:df:d6:52:7b:b9:8e:b4:e7:52:4c:ad:78:65:20:4f: f6:ef:ec:85:94:99:a5:f4:43:5a:58:a8:2e:13:78:f6:cd:ae: 1c:74:fc:88:ec:21:7a:e1:68:4f:31:5f:7a:88:77:55:ec:94: ff:95:86:50:68:01:27:99:d1:b4:f8:73:13:64:ed:c7:4d:7b: 5a:bf:db:44:76:28:47:85:80:89:60:3f:3f:da:d8:df:f6:6a: b8:a2:44:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUVEMjExMC8GA1UEBRMoRDkwNEQ1NTJDMEVGMzJGMjQ5QUJBNDU5N0JEODRBMTVF RTU1NTVDMTAeFw0yNTA3MDEwODQ0MjZaFw0yNTA3MDgwODQ0MjZaMBgxFjAUBgNV BAMTDTY4NjM5ZmViLTgwM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD46SqW2UzxFltLl4MK5kZxLCcyrYkddaK4rku1tGoX1JAgxcZXtwI3J2oMp+3 irhdIACsoa4wjVXCW65OKo9S/tFR8CEIK3Vhxvvwru7GTW228ZfpnWrLoTfFfKEF ME4UvW/TyD8tKCMxSogRLSuemamp16K8FwC4itD8RdmNSc71RSWfVsapix2oaXMx OduPkFkR3IcXD5MwcmsXQs825l8IU1X4BXA2/AmJ1JXdrKyEGph/zl9Rb5jC761r eDnv41BPVi5zifWXUG43LL2aRHEwpNSWm4VkLt4JB2efujfyayrfJoaa70XoUAtJ mtKa3OLJQPgS/c+MlCwuNm25AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5NTJOOXM +kT32x/pIvEbSNCBmeUwHwYDVR0jBBgwFoAU2QTVUsDvMvJJq6RZe9hKFe5VVcEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RUQyL0YyNDVCMkQ2MzEx QjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZKSnE2UlplOWhLRmU1VlZj RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFUVlVzRHZNdkpKcTZSWmU5aEtGZTVWVmNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RUQyL0YyNDVCMkQ2MzExQjExRjBBMkY1MTE2MEM0RjlBRTAyLzJRVFZVc0R2TXZK SnE2UlplOWhLRmU1VlZjRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF9hVdcUL+fbqrhYSH9OBTxGIuX4WTlAXBhUcdybT6vowDNwVWPXLchu Mkc3h28+JUosO86l4DQFn0V+O//TPbKmhI9ltk1plCc1buQPbulIhSo6TTwvEOQs QE4gWN771AZjjp9YX4rT25IPWu3zNxY3p8enljUvl4wG1/RxibAM6y2L9pDxntry ElOwKY69X04v7UHrTts5EI+CUnGeRzeUn0uWD9/WUnu5jrTnUkyteGUgT/bv7IWU maX0Q1pYqC4TePbNrhx0/IjsIXrhaE8xX3qId1XslP+VhlBoASeZ0bT4cxNk7cdN e1q/20R2KEeFgIlgPz/a2N/2ariiREo= -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:14 2025 by rpki-client