$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft File: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft (raw, json) Hash identifier: Cro+oUx53Hkoksaf+mhd2gQwoBzfJxhsNEmEmOIR32o= Subject key identifier: 94:47:BB:C0:3C:9B:9E:C2:01:EB:94:D5:9C:AB:E7:4A:19:40:2D:98 Authority key identifier: DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA Certificate issuer: /CN=A91AEAE7/serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Certificate serial: 0672 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft Manifest number: 0656 Signing time: Wed 02 Jul 2025 22:53:15 +0000 Manifest this update: Wed 02 Jul 2025 22:53:15 +0000 Manifest next update: Wed 09 Jul 2025 22:53:15 +0000 Files and hashes: 1: 2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl (hash: 1odp9g9TnDq9r8zJ3fbC5uU+wtJzp1ke9tKhDhhbsQw=) 2: 0A7BC528913611EBBD9B811AC4F9AE02.roa (hash: NzOCnKqg2qahRXEOik1xyZlxFZ3lrtlDe5hks5SrPJA=) 3: 09A1853E913611EBBD9B811AC4F9AE02.roa (hash: IqmyGbo6lE5IdQOfP9xw6QgI0Xcsu+xkWZJJhr6ZiRQ=) 4: 8A345D2891A111EB87E23C38C4F9AE02.roa (hash: lgtMLH6i/g97QEVVbiDk03F8pSWOlpowm/3LEp7TGhw=) 5: 08DCE5BC913611EBBD9B811AC4F9AE02.roa (hash: xoqWpk6kq9UDnJpAtKinOiTxbgS2kwe2RRE2npE/Mm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1650 (0x672) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AEAE7, serialNumber=DABFB3B59F7D716FD52D45A741AF159AF7EAF7BA Validity Not Before: Jul 2 22:53:15 2025 GMT Not After : Jul 9 22:53:15 2025 GMT Subject: CN=6865b85b-6ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:32:4d:c7:38:e7:62:35:d9:54:be:3e:aa: 3e:78:47:9f:93:49:6c:9b:8a:ca:7a:ab:5e:87:32: 48:bb:b4:b0:9c:3a:61:bc:be:46:f8:df:8e:8d:8c: 1f:b9:3b:7a:74:8c:3f:16:89:cc:a6:e4:fc:92:8a: 92:ec:69:f1:fa:dc:ed:8f:06:98:46:bb:a2:f0:af: 17:f9:d1:af:e5:75:fe:18:b6:5c:47:f2:d0:c7:ad: 23:0e:d8:1c:4e:72:43:70:f6:6b:43:29:25:c7:7a: d8:30:3d:f5:6c:d4:f0:c0:60:a7:fb:94:54:31:f9: b5:8c:54:b5:ef:46:1c:84:73:55:28:91:6a:8a:4b: ad:eb:8a:ee:ec:4d:70:84:ec:23:47:6a:22:bf:31: 3f:86:f3:d3:ab:82:b3:44:a6:4f:43:66:1c:39:93: 02:d3:cb:f5:57:aa:fb:29:a3:c8:3b:18:22:3b:d6: dd:61:29:10:59:ac:ee:b1:dd:d7:48:86:2d:14:0c: dd:98:9d:17:37:60:68:01:cf:0a:b3:8a:ef:68:67: 0a:f0:c2:8a:55:cb:b6:f6:a4:ac:05:0c:f7:7e:70: 6d:02:95:cf:6e:12:22:44:4f:cc:4b:7b:30:b9:c3: 78:d9:b4:0a:c5:6e:a5:85:c1:b5:d5:82:e2:0e:77: 5b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:47:BB:C0:3C:9B:9E:C2:01:EB:94:D5:9C:AB:E7:4A:19:40:2D:98 X509v3 Authority Key Identifier: keyid:DA:BF:B3:B5:9F:7D:71:6F:D5:2D:45:A7:41:AF:15:9A:F7:EA:F7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2r-ztZ99cW_VLUWnQa8Vmvfq97o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEAE7/E182579690F311EB9D2E0E4FC4F9AE02/2r-ztZ99cW_VLUWnQa8Vmvfq97o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ff:27:7d:9c:0f:fb:27:5e:01:5c:58:f8:f1:59:b6:68:fc: 33:af:0b:6f:32:a5:b2:a7:65:43:79:c4:76:70:a3:d2:f0:d7: b1:a6:ca:e8:b4:b0:09:85:fc:09:2c:bf:dc:27:75:45:3a:13: d4:31:07:a7:03:bd:25:1b:8d:5d:21:35:ea:f1:30:98:cc:b9: 4b:7f:06:c7:67:2f:74:b5:1d:a9:9f:f5:c4:57:a0:86:2c:8c: 69:1f:0b:30:c1:c0:55:10:06:c0:3d:2e:90:bf:b8:9e:05:9b: a3:b2:79:77:30:36:ee:a8:3f:db:c6:e4:e3:b6:64:33:08:2c: 8f:38:dc:a7:5f:50:33:2a:71:0c:ad:c2:83:8b:80:c3:46:97: 5e:9d:14:57:fe:7d:66:65:7e:e8:8a:af:83:46:ab:bb:e8:a2: ef:5c:2b:8f:a2:7a:ad:c9:69:14:6e:a9:a4:a3:3f:d5:3a:cb: 3e:18:10:26:87:c9:81:bd:ed:3a:93:2e:d5:6f:67:28:a2:19: 8c:c9:bd:2c:85:8c:46:4c:27:14:0b:d9:73:b6:3b:4b:71:37: 4b:41:a8:b9:5f:c1:04:26:48:1f:c2:d5:f4:9f:c5:35:4c:82: 15:9a:0b:cb:04:dd:4a:d5:5e:cb:4e:46:27:ca:a6:94:5c:c5: 15:b0:4b:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUVBRTcxMTAvBgNVBAUTKERBQkZCM0I1OUY3RDcxNkZENTJENDVBNzQxQUYxNTlB RjdFQUY3QkEwHhcNMjUwNzAyMjI1MzE1WhcNMjUwNzA5MjI1MzE1WjAYMRYwFAYD VQQDEw02ODY1Yjg1Yi02YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2D0yTcc452I12VS+Pqo+eEefk0lsm4rKeqtehzJIu7SwnDphvL5G+N+OjYwf uTt6dIw/FonMpuT8koqS7Gnx+tztjwaYRrui8K8X+dGv5XX+GLZcR/LQx60jDtgc TnJDcPZrQyklx3rYMD31bNTwwGCn+5RUMfm1jFS170YchHNVKJFqikut64ru7E1w hOwjR2oivzE/hvPTq4KzRKZPQ2YcOZMC08v1V6r7KaPIOxgiO9bdYSkQWazusd3X SIYtFAzdmJ0XN2BoAc8Ks4rvaGcK8MKKVcu29qSsBQz3fnBtApXPbhIiRE/MS3sw ucN42bQKxW6lhcG11YLiDndbjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJRHu8A8 m57CAeuU1Zyr50oZQC2YMB8GA1UdIwQYMBaAFNq/s7WffXFv1S1Fp0GvFZr36ve6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUFFNy9FMTgyNTc5Njkw RjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNXX1ZMVVduUWE4Vm12ZnE5 N28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyLXp0Wjk5Y1dfVkxVV25RYThWbXZmcTk3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RUFFNy9FMTgyNTc5NjkwRjMxMUVCOUQyRTBFNEZDNEY5QUUwMi8yci16dFo5OWNX X1ZMVVduUWE4Vm12ZnE5N28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/yd9nA/7J14BXFj48Vm2aPwzrwtvMqWyp2VDecR2cKPS8Nexpsro tLAJhfwJLL/cJ3VFOhPUMQenA70lG41dITXq8TCYzLlLfwbHZy90tR2pn/XEV6CG LIxpHwswwcBVEAbAPS6Qv7ieBZujsnl3MDbuqD/bxuTjtmQzCCyPONynX1AzKnEM rcKDi4DDRpdenRRX/n1mZX7oiq+DRqu76KLvXCuPonqtyWkUbqmkoz/VOss+GBAm h8mBve06ky7Vb2coohmMyb0shYxGTCcUC9lztjtLcTdLQai5X8EEJkgfwtX0n8U1 TIIVmgvLBN1K1V7LTkYnyqaUXMUVsEsS -----END CERTIFICATE-----Generated at Fri Jul 4 00:33:25 2025 by rpki-client