$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: 5nGbDNjAgBLEPEIBEBelWDEqtRSOLd0Sua1PvbOoqUU= Subject key identifier: 86:1A:19:23:38:19:C6:29:98:A3:6D:40:2F:BF:A8:93:32:2A:31:F3 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: E6 Signing time: Sun 29 Jun 2025 04:30:34 +0000 Manifest this update: Sun 29 Jun 2025 04:30:33 +0000 Manifest next update: Sun 06 Jul 2025 04:30:33 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: tEeM1WglPq2AbEfONQI0vgneb9FgO3v4rjvTRT5VAdE=) 2: F220949E1C3411EFAF8F6A5BC4F9AE02.roa (hash: JIXgdhiXTjZ6ev4WQoNqMVmd92t9GAOhewZo29LoRAM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Jun 29 04:30:33 2025 GMT Not After : Jul 6 04:30:33 2025 GMT Subject: CN=6860c169-5af8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:51:2f:31:3b:bb:76:56:62:60:50:d4:ea: 30:92:07:1e:9a:24:21:1b:d1:56:be:18:fd:51:6d: 77:cc:d8:04:1b:10:59:56:3f:d8:b2:e0:c6:25:94: 53:10:d0:3d:ad:73:28:a8:94:17:ef:b7:f8:84:36: 9c:4d:a3:62:a6:20:e5:98:16:4c:1e:cf:8b:09:37: 06:5b:a5:24:d3:ad:7f:1e:e0:75:f1:e7:cd:27:c5: b3:47:49:36:93:e9:4d:0a:cb:9b:c8:9b:47:10:02: 7f:2a:32:33:2a:32:0f:3b:45:10:63:ae:73:7e:8e: df:e2:ea:ad:02:de:2b:ed:82:8d:98:58:63:a2:07: 04:dc:3b:28:ff:74:68:f4:45:04:93:14:32:db:e8: c8:8f:a2:9f:ee:2b:7d:a0:ab:f3:2d:e2:69:38:b9: 78:a9:2c:87:8e:3a:d7:09:27:9b:79:ea:dc:0c:5e: af:bc:bf:aa:f7:72:d7:04:3f:3c:28:7a:e3:be:31: 61:6b:e5:fe:32:d4:d6:c6:4b:f5:33:54:7a:a4:a9: 17:f6:fb:1f:45:34:ec:fa:66:cc:81:a3:e5:aa:e3: 1f:a3:e3:09:19:88:97:8d:91:78:7f:45:01:a0:c8: d2:11:8e:7a:43:89:63:1f:fe:14:3b:db:05:21:51: a4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1A:19:23:38:19:C6:29:98:A3:6D:40:2F:BF:A8:93:32:2A:31:F3 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:f7:2f:53:4a:48:3e:67:71:14:ea:ca:da:38:9d:5d:c7: 74:59:d2:d4:d7:9b:b7:68:8b:89:c1:31:46:17:b6:4c:62:98: 0e:4e:73:4c:6d:b3:e2:ec:f4:8d:22:52:60:3b:4c:77:12:7b: d4:dd:0e:bf:30:d3:7e:95:66:3d:08:a3:e0:07:0d:51:e3:ce: 34:ef:32:45:f1:67:dc:f2:30:24:2b:51:da:7d:8b:08:ab:e5: e9:53:be:61:e0:fc:61:45:75:68:eb:58:35:75:88:39:98:8a: b2:29:3a:20:7c:84:6e:74:ff:20:be:9f:0f:d3:b4:af:b0:0f: 6d:c2:b6:82:78:14:8f:ed:33:aa:2d:fa:b8:f5:8d:85:6e:05: 24:6b:f3:2f:46:bc:97:76:c4:c2:ad:13:57:e3:34:76:f0:4f: de:06:46:44:7d:df:f2:b7:44:4d:d9:94:f0:54:1b:6a:91:3e: 72:68:9d:ae:ad:72:05:89:f7:95:58:74:cd:7c:44:0e:37:03: 19:d5:bb:b1:eb:ea:56:90:42:65:49:ac:7c:31:9b:5d:76:8a: 0d:2f:e7:5c:4f:1e:df:6f:5e:4c:84:ff:62:f4:3c:aa:89:cb: e0:87:f2:57:d9:27:6c:66:5a:31:cc:0c:1a:04:bc:5b:a2:1f: ca:25:a9:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUwNjI5MDQzMDMzWhcNMjUwNzA2MDQzMDMzWjAYMRYwFAYD VQQDEw02ODYwYzE2OS01YWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD1RLzE7u3ZWYmBQ1OowkgcemiQhG9FWvhj9UW13zNgEGxBZVj/YsuDGJZRT ENA9rXMoqJQX77f4hDacTaNipiDlmBZMHs+LCTcGW6Uk061/HuB18efNJ8WzR0k2 k+lNCsubyJtHEAJ/KjIzKjIPO0UQY65zfo7f4uqtAt4r7YKNmFhjogcE3Dso/3Ro 9EUEkxQy2+jIj6Kf7it9oKvzLeJpOLl4qSyHjjrXCSebeercDF6vvL+q93LXBD88 KHrjvjFha+X+MtTWxkv1M1R6pKkX9vsfRTTs+mbMgaPlquMfo+MJGYiXjZF4f0UB oMjSEY56Q4ljH/4UO9sFIVGknQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYaGSM4 GcYpmKNtQC+/qJMyKjHzMB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhxPcvU0pIPmdxFOrK2jidXcd0WdLU15u3aIuJwTFGF7ZMYpgOTnNM bbPi7PSNIlJgO0x3EnvU3Q6/MNN+lWY9CKPgBw1R48407zJF8Wfc8jAkK1HafYsI q+XpU75h4PxhRXVo61g1dYg5mIqyKTogfIRudP8gvp8P07SvsA9twraCeBSP7TOq Lfq49Y2FbgUka/MvRryXdsTCrRNX4zR28E/eBkZEfd/yt0RN2ZTwVBtqkT5yaJ2u rXIFifeVWHTNfEQONwMZ1bux6+pWkEJlSax8MZtddooNL+dcTx7fb15MhP9i9Dyq icvgh/JX2SdsZloxzAwaBLxboh/KJakf -----END CERTIFICATE-----Generated at Sun Jun 29 12:16:22 2025 by rpki-client