$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: emfRMVXOY3laPtefNAVwD3Cd87elStwJXn3a7D3DPt0= Subject key identifier: A8:16:B9:88:79:B7:D5:63:DF:81:B3:E6:E2:F1:82:58:14:3C:14:6A Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03CE Signing time: Thu 03 Jul 2025 00:57:43 +0000 Manifest this update: Thu 03 Jul 2025 00:57:43 +0000 Manifest next update: Thu 10 Jul 2025 00:57:43 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: dghF9EjXG0IF3Y9WeWZLhSOrwwK+9ntfKZJB2Z7npiU=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 984 (0x3d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Jul 3 00:57:43 2025 GMT Not After : Jul 10 00:57:43 2025 GMT Subject: CN=6865d587-fb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f9:b7:07:dc:b2:2e:98:43:ee:b8:e1:8a:8e: 4a:33:79:a2:97:83:ee:10:a1:9e:2b:d8:05:24:09: ce:af:6a:08:08:f9:5c:f0:a6:f2:c2:05:b5:33:b5: 89:43:87:6d:6d:99:82:66:24:57:66:d7:26:66:96: b7:4d:51:28:6f:c1:c9:b4:5c:97:55:87:ed:de:a6: d6:a0:95:d4:8a:aa:01:b0:44:39:63:04:90:b8:3b: 82:ce:6e:4f:e9:50:74:0c:93:9a:6c:73:40:c7:34: 5d:0c:0a:7e:57:76:24:31:8c:ea:82:92:d7:21:f8: d8:4e:7d:3b:5b:b2:1a:ce:92:06:cc:4d:0f:89:a2: b3:d8:f7:80:46:fe:3e:83:37:77:e3:57:c3:3a:6f: 15:df:a5:57:90:9c:89:c2:65:59:36:c1:98:b7:bc: 6a:2f:e1:d7:b4:f7:61:0e:ce:11:7f:f2:6e:9a:5a: f4:97:69:be:78:0e:53:29:15:e6:18:5d:80:d4:35: de:0c:fd:ef:b3:32:89:35:4d:be:1e:4a:60:c3:3d: 8b:f5:c4:68:af:cb:ae:05:93:b4:00:fb:9c:22:09: c2:84:cf:c8:0e:57:3b:85:79:92:66:42:04:9b:40: 6c:77:bc:d7:23:38:e8:9d:ee:a7:53:bb:18:2d:46: 6f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:B9:88:79:B7:D5:63:DF:81:B3:E6:E2:F1:82:58:14:3C:14:6A X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:d6:ab:ff:ae:a4:7a:3d:a8:39:27:78:7b:f3:c5:66:78:a9: bc:61:74:05:db:f7:cb:17:e1:37:38:cb:ca:55:7c:12:19:c0: 6f:11:8f:63:8c:e4:27:1d:77:5b:f9:60:ae:c7:98:42:40:e2: e1:eb:1f:5b:9b:ff:10:e8:57:b9:58:af:f4:72:e9:a1:91:1a: 39:2b:70:f8:27:b1:f0:9d:9c:ef:fe:58:17:30:fb:25:0c:d1: 75:28:f3:16:be:ac:5b:68:3d:ba:3f:96:ae:d1:3c:fd:89:8e: fe:93:8c:55:87:a0:56:12:81:88:e7:c8:b5:88:3a:5c:ce:d8: 84:e8:01:2b:56:00:11:c6:87:ce:67:7a:4b:62:46:c3:99:21: 4a:6f:9e:a3:7a:e1:db:c5:ab:b5:c8:46:72:64:54:b1:63:e4: 38:36:82:5d:ef:08:b5:c5:59:6e:dd:05:1c:86:53:1f:5e:28: ea:d1:db:52:fd:24:b0:6c:50:d7:4b:df:c8:67:d2:9b:aa:8d: 23:71:60:fd:f3:cb:a4:ab:5e:87:41:47:cd:47:2d:c9:57:5d: 00:b5:41:dc:90:43:82:15:cf:b4:32:9a:2d:ea:ad:04:df:1d: 0c:76:44:df:e4:9d:58:b6:b1:17:70:12:38:82:49:b5:8e:14: 04:20:92:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwNzAzMDA1NzQzWhcNMjUwNzEwMDA1NzQzWjAYMRYwFAYD VQQDEw02ODY1ZDU4Ny1mYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPm3B9yyLphD7rjhio5KM3mil4PuEKGeK9gFJAnOr2oICPlc8KbywgW1M7WJ Q4dtbZmCZiRXZtcmZpa3TVEob8HJtFyXVYft3qbWoJXUiqoBsEQ5YwSQuDuCzm5P 6VB0DJOabHNAxzRdDAp+V3YkMYzqgpLXIfjYTn07W7IazpIGzE0PiaKz2PeARv4+ gzd341fDOm8V36VXkJyJwmVZNsGYt7xqL+HXtPdhDs4Rf/Jumlr0l2m+eA5TKRXm GF2A1DXeDP3vszKJNU2+Hkpgwz2L9cRor8uuBZO0APucIgnChM/IDlc7hXmSZkIE m0Bsd7zXIzjone6nU7sYLUZviwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgWuYh5 t9Vj34Gz5uLxglgUPBRqMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR1qv/rqR6Pag5J3h788VmeKm8YXQF2/fLF+E3OMvKVXwSGcBvEY9j jOQnHXdb+WCux5hCQOLh6x9bm/8Q6Fe5WK/0cumhkRo5K3D4J7HwnZzv/lgXMPsl DNF1KPMWvqxbaD26P5au0Tz9iY7+k4xVh6BWEoGI58i1iDpcztiE6AErVgARxofO Z3pLYkbDmSFKb56jeuHbxau1yEZyZFSxY+Q4NoJd7wi1xVlu3QUchlMfXijq0dtS /SSwbFDXS9/IZ9Kbqo0jcWD988ukq16HQUfNRy3JV10AtUHckEOCFc+0Mpot6q0E 3x0MdkTf5J1YtrEXcBI4gkm1jhQEIJJE -----END CERTIFICATE-----Generated at Thu Jul 3 18:07:17 2025 by rpki-client