$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: Vi0bYFetOHwWatVXl5seZ3BgzapGzQSYX77FxfR4VQg= Subject key identifier: 65:E2:0B:E5:BF:D7:69:04:AD:1F:69:A7:F5:4A:17:00:E7:EA:C5:10 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06C9 Signing time: Sat 10 May 2025 21:42:28 +0000 Manifest this update: Sat 10 May 2025 21:42:28 +0000 Manifest next update: Sat 17 May 2025 21:42:28 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: P/ZU8PvLn0uOZ6udsgiEcP17usDxXMsxRxA1D0J6IBw=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: MAjBjHq25tUzReWQ1rF0NI56VYERQs/LZrZBQC23acU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: May 10 21:42:28 2025 GMT Not After : May 17 21:42:28 2025 GMT Subject: CN=681fc844-edb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:7b:89:fe:d0:84:81:06:a4:af:bd:b0:45:b1: ce:b6:a7:00:e2:fc:4a:43:8d:e4:60:85:c3:e6:8a: a3:ac:a7:fd:21:1a:ea:ab:e7:34:e5:7a:06:9e:4c: 8d:f1:ff:1f:8f:8c:42:a5:2a:cf:bc:2c:37:92:9a: 92:af:3f:cb:9a:f0:40:43:0d:56:08:8d:59:8b:c8: 59:ce:fb:33:2f:0e:9c:d8:84:df:c6:bc:b3:ec:67: 84:82:77:7f:8f:68:c4:2e:19:1f:ea:89:89:e5:f8: d3:c9:0f:d8:77:c3:19:bd:c9:25:ef:58:a2:0b:86: 06:a3:ab:fe:78:96:40:1b:64:0a:9b:77:cf:81:48: 6b:00:73:bf:55:2b:50:30:48:26:10:d9:3e:26:76: 45:35:cb:fc:f1:c9:1f:31:71:12:1c:fa:b4:af:e5: 58:0f:2a:08:fc:67:89:86:55:4d:df:4e:06:00:8e: 66:59:b9:1c:64:45:dd:a4:ec:82:c4:11:af:f9:cd: 93:83:ef:4c:48:c1:60:4b:be:03:0f:1f:d8:66:1b: 18:c7:1c:df:b8:0f:3d:0e:32:7a:6a:e4:43:39:a9: 85:96:fe:31:57:43:77:45:ed:33:fd:29:13:f3:b7: ed:9b:47:33:26:c5:7c:87:e1:ea:f3:bf:88:40:5f: 06:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E2:0B:E5:BF:D7:69:04:AD:1F:69:A7:F5:4A:17:00:E7:EA:C5:10 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ca:58:c5:78:6a:c2:6b:e8:73:3c:c8:6f:ad:8f:43:e9:78: 0c:ff:14:d7:e6:e2:dd:55:e4:db:b5:b1:80:b8:2b:87:33:55: 64:19:a3:ae:bb:e2:38:3c:a7:0e:65:fd:a7:e4:1c:c8:5f:50: ae:b1:b4:f7:3a:df:6e:b8:69:0a:ea:52:f4:c6:5f:9a:56:8a: 76:59:58:73:8c:86:23:10:9a:95:08:5f:4f:e5:bd:99:98:f2: 88:98:a3:f5:a4:2b:89:ef:c8:14:a3:54:a9:24:9a:f8:01:37: c3:5a:6e:27:7c:8b:09:93:b1:e0:57:e3:bb:7a:b5:a8:b5:bd: 96:c4:57:a4:5e:5c:3e:05:bc:61:2d:9a:07:7d:27:b3:ce:b5: 31:33:19:ec:6b:24:d9:35:24:c6:0d:33:7a:75:f4:09:cf:56: 42:2f:3f:6f:d5:14:db:9d:62:e0:38:e2:32:29:ea:9d:03:e0: 4e:74:4d:30:ae:31:08:c8:3a:34:92:6c:c6:c2:b0:f6:3b:5d: ac:0a:64:b4:a6:6b:d3:e9:52:09:53:93:2f:d0:26:ba:52:a4: 11:0d:9f:d2:89:64:52:bd:d0:90:76:ed:60:12:5f:e3:c9:1b: 4d:0e:26:e0:3a:bf:72:93:27:9b:76:f1:2a:3d:0b:06:56:9d: 16:7e:d5:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwNTEwMjE0MjI4WhcNMjUwNTE3MjE0MjI4WjAYMRYwFAYD VQQDEw02ODFmYzg0NC1lZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83uJ/tCEgQakr72wRbHOtqcA4vxKQ43kYIXD5oqjrKf9IRrqq+c05XoGnkyN 8f8fj4xCpSrPvCw3kpqSrz/LmvBAQw1WCI1Zi8hZzvszLw6c2ITfxryz7GeEgnd/ j2jELhkf6omJ5fjTyQ/Yd8MZvckl71iiC4YGo6v+eJZAG2QKm3fPgUhrAHO/VStQ MEgmENk+JnZFNcv88ckfMXESHPq0r+VYDyoI/GeJhlVN304GAI5mWbkcZEXdpOyC xBGv+c2Tg+9MSMFgS74DDx/YZhsYxxzfuA89DjJ6auRDOamFlv4xV0N3Re0z/SkT 87ftm0czJsV8h+Hq87+IQF8GUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXiC+W/ 12kErR9pp/VKFwDn6sUQMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvyljFeGrCa+hzPMhvrY9D6XgM/xTX5uLdVeTbtbGAuCuHM1VkGaOu u+I4PKcOZf2n5BzIX1CusbT3Ot9uuGkK6lL0xl+aVop2WVhzjIYjEJqVCF9P5b2Z mPKImKP1pCuJ78gUo1SpJJr4ATfDWm4nfIsJk7HgV+O7erWotb2WxFekXlw+Bbxh LZoHfSezzrUxMxnsayTZNSTGDTN6dfQJz1ZCLz9v1RTbnWLgOOIyKeqdA+BOdE0w rjEIyDo0kmzGwrD2O12sCmS0pmvT6VIJU5Mv0Ca6UqQRDZ/SiWRSvdCQdu1gEl/j yRtNDibgOr9ykyebdvEqPQsGVp0WftXh -----END CERTIFICATE-----Generated at Mon May 12 00:22:14 2025 by rpki-client