$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: DnItJ19oVjFQTiaIloLJfYNT1ArpOQDuyIqgwv1CLA0= Subject key identifier: 3D:03:FD:D6:71:FA:93:CF:77:43:BC:A1:AF:32:E9:4F:E2:50:BA:97 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 06EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06E4 Signing time: Mon 30 Jun 2025 22:18:35 +0000 Manifest this update: Mon 30 Jun 2025 22:18:35 +0000 Manifest next update: Mon 07 Jul 2025 22:18:35 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: p0oqmsYghZvFF2VliH+rWthaavXX6zpqKXt9BPHl0F0=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:18:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1771 (0x6eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Jun 30 22:18:35 2025 GMT Not After : Jul 7 22:18:35 2025 GMT Subject: CN=68630d3b-fb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:cd:d7:8b:6a:31:8f:f2:2c:92:ed:ae:18: b2:55:29:6e:8f:63:a9:db:e7:f3:8a:c6:ae:9b:75: 79:fe:3b:8c:fd:d4:e1:ff:ee:b6:30:ca:79:24:df: 07:a6:5c:e1:97:5b:e6:df:53:d5:b8:ad:3f:67:6d: 0c:66:58:1d:c6:02:90:7f:0c:09:91:78:84:16:d7: 1b:4e:15:fd:18:1b:60:98:76:e6:97:a1:06:05:65: 7e:ee:41:6e:5c:b8:c4:d8:10:21:ef:9a:db:c0:58: 70:6d:c9:7e:75:34:77:db:d0:ef:15:0c:7c:49:0a: 0c:ad:c8:5e:70:5f:17:79:5a:79:52:a2:84:2e:55: 5e:c0:45:02:3c:6d:a4:2c:97:0a:45:89:2d:4f:4b: 47:bf:46:7f:72:63:1e:8e:e5:2c:5e:4d:53:c2:bc: ac:f1:10:0e:f3:33:4e:39:b9:70:07:18:b1:b6:8b: 29:7d:0b:45:c6:16:b7:07:53:33:e0:aa:53:98:b4: 31:e5:ba:db:cb:c2:d2:90:d5:8e:dd:52:9b:86:c9: 44:00:3e:84:d8:8a:87:08:43:33:16:31:f0:34:e9: 42:e8:6d:9d:eb:5b:c3:8f:83:32:ec:4d:71:11:5b: 85:17:1e:e6:63:3c:5f:9e:6f:4d:43:23:42:2e:49: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:03:FD:D6:71:FA:93:CF:77:43:BC:A1:AF:32:E9:4F:E2:50:BA:97 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:38:9f:bd:ef:c6:ce:09:f3:e4:03:0f:59:f4:99:ef:ee:6f: 8b:8b:0c:0c:08:39:a0:4c:f5:44:f2:45:a4:45:8e:a8:bf:ac: b0:57:f2:6d:69:29:cc:9c:1d:e7:74:df:84:8a:b4:a8:ff:25: b9:b6:f6:f0:b9:cf:46:61:6f:7a:4b:78:24:d5:ac:78:d9:35: d2:b0:20:6f:f6:b8:0c:38:b3:05:a4:e8:79:53:1a:54:8e:bf: c3:36:0f:b7:27:cb:e9:30:82:2f:73:86:e2:0a:56:61:92:f2: 55:00:56:74:2b:34:56:bc:01:cf:50:6b:5e:9f:d3:8b:8e:03: 85:15:c0:1b:aa:4e:73:cc:80:c9:e6:82:f9:6d:e3:b8:ed:ee: 91:0d:8b:66:bd:13:16:77:9b:f3:9f:5f:61:fd:d3:48:e2:77: c2:9c:ff:19:63:29:54:ec:f7:32:73:66:db:2e:1e:87:b5:2f: 29:31:65:a4:5d:39:a7:59:ae:b9:d2:2c:f6:3c:19:22:f1:bf: bc:55:2f:b8:3c:2d:3d:9b:ea:71:d7:96:ea:a7:ce:b8:69:c2: 2a:56:b4:8d:82:13:7b:88:42:31:e9:1d:69:19:a2:fb:5c:20: bd:a9:ac:da:de:73:cb:9f:db:e4:2d:bc:83:f4:bd:ad:21:92: 92:fb:a9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwNjMwMjIxODM1WhcNMjUwNzA3MjIxODM1WjAYMRYwFAYD VQQDEw02ODYzMGQzYi1mYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8B7N14tqMY/yLJLtrhiyVSluj2Op2+fzisaum3V5/juM/dTh/+62MMp5JN8H plzhl1vm31PVuK0/Z20MZlgdxgKQfwwJkXiEFtcbThX9GBtgmHbml6EGBWV+7kFu XLjE2BAh75rbwFhwbcl+dTR329DvFQx8SQoMrchecF8XeVp5UqKELlVewEUCPG2k LJcKRYktT0tHv0Z/cmMejuUsXk1Twrys8RAO8zNOOblwBxixtospfQtFxha3B1Mz 4KpTmLQx5brby8LSkNWO3VKbhslEAD6E2IqHCEMzFjHwNOlC6G2d61vDj4My7E1x EVuFFx7mYzxfnm9NQyNCLkkSPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0D/dZx +pPPd0O8oa8y6U/iULqXMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7OJ+978bOCfPkAw9Z9Jnv7m+LiwwMCDmgTPVE8kWkRY6ov6ywV/Jt aSnMnB3ndN+EirSo/yW5tvbwuc9GYW96S3gk1ax42TXSsCBv9rgMOLMFpOh5UxpU jr/DNg+3J8vpMIIvc4biClZhkvJVAFZ0KzRWvAHPUGten9OLjgOFFcAbqk5zzIDJ 5oL5beO47e6RDYtmvRMWd5vzn19h/dNI4nfCnP8ZYylU7Pcyc2bbLh6HtS8pMWWk XTmnWa650iz2PBki8b+8VS+4PC09m+px15bqp864acIqVrSNghN7iEIx6R1pGaL7 XCC9qaza3nPLn9vkLbyD9L2tIZKS+6lb -----END CERTIFICATE-----Generated at Tue Jul 1 02:40:17 2025 by rpki-client