$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: Uym1FL70izoi1MJYWU7qSbp+gzE/TWKSuUmkupLjKMY= Subject key identifier: 49:DB:85:77:C5:1C:F5:BD:63:39:F0:66:A1:75:14:08:4E:6C:B7:E7 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 15F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 15E8 Signing time: Mon 30 Jun 2025 16:55:14 +0000 Manifest this update: Mon 30 Jun 2025 16:55:14 +0000 Manifest next update: Mon 07 Jul 2025 16:55:14 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: zxzUeSY7yT3uW5e0J0Ea34oyMZP4kOitFDoUfjr6/UE=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5625 (0x15f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Jun 30 16:55:14 2025 GMT Not After : Jul 7 16:55:14 2025 GMT Subject: CN=6862c172-c3b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:ad:b0:87:13:15:ac:db:cb:bf:09:5b:e0: ca:71:39:f6:47:0d:a3:09:cc:53:b6:21:59:9c:60: 54:d4:b8:d4:90:a0:22:ee:f5:31:93:44:3e:60:47: 31:0e:4c:a4:ff:40:20:5b:2a:80:59:a3:8a:4f:77: 44:b1:1b:33:59:15:4d:82:86:80:1f:0f:f5:1a:8f: 61:42:30:71:d6:c8:c4:53:ae:af:6c:35:15:c8:7f: cf:bc:09:44:5a:d9:64:25:e7:7f:e1:60:ad:14:f6: 2a:04:59:5f:b4:9f:38:a2:12:ba:68:60:a0:8b:4a: 61:27:97:48:43:27:0e:e0:e9:3f:2b:a4:2d:35:98: dc:2e:89:e3:c2:33:3e:e1:65:19:20:2c:7b:e8:82: 01:c6:e4:ea:2c:61:48:34:be:30:51:92:b6:28:18: 93:e2:6b:90:c5:50:21:f9:be:11:09:71:b5:d8:ec: b2:25:1e:d4:3b:bc:3c:be:04:b7:12:f6:4f:f0:69: 9f:8d:7f:da:30:da:86:e6:e0:75:45:7d:fe:90:63: 33:a2:5f:1e:b2:c1:bc:86:89:99:0d:77:0c:58:14: 34:3a:77:88:27:06:68:6e:c6:1d:f4:3f:cb:b5:41: 9d:89:75:f7:f9:e0:1c:ab:44:90:51:10:e5:c5:35: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DB:85:77:C5:1C:F5:BD:63:39:F0:66:A1:75:14:08:4E:6C:B7:E7 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:a1:3f:91:65:90:26:3a:0c:79:bd:2d:4e:ac:3b:e9:d2:7b: 98:f3:97:6f:a5:83:6e:cc:4f:1a:83:0c:a1:c1:25:b3:64:41: a9:63:de:2f:0e:45:6e:09:a6:a2:b6:7f:4e:16:1f:20:11:2d: 19:2f:89:71:83:9a:43:e3:bd:62:c2:3d:85:01:54:34:47:15: e7:6c:02:36:81:0d:8c:77:3e:26:84:f7:01:01:59:48:c9:f5: bb:fa:75:05:13:7f:81:69:af:f2:a2:5f:56:03:6f:5f:86:14: e0:d6:3c:b2:10:c2:9d:a5:64:3e:48:17:44:d6:4f:ee:ce:71: b2:cb:b7:f5:c2:8a:59:d8:1b:a9:9a:74:b7:49:a0:52:9f:35: 44:67:c7:25:de:c1:10:e1:61:fa:0a:7b:83:1f:47:c8:6a:1c: 8a:00:ad:4a:6d:99:0e:00:97:91:39:b9:d1:67:31:65:8f:6c: ce:ce:69:ff:c3:b0:95:58:29:72:c6:f0:69:b6:72:c6:aa:ec: 5a:73:99:e9:97:84:3c:f6:d1:21:f6:32:6e:ee:9f:9b:dd:1f: ee:12:17:46:06:55:f7:75:8b:7b:23:26:73:d3:9c:69:b4:58: 7b:66:55:af:b4:3d:9b:3a:0d:37:62:cb:5d:14:d5:bc:e4:e2: 24:61:b7:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUwNjMwMTY1NTE0WhcNMjUwNzA3MTY1NTE0WjAYMRYwFAYD VQQDEw02ODYyYzE3Mi1jM2IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VutsIcTFazby78JW+DKcTn2Rw2jCcxTtiFZnGBU1LjUkKAi7vUxk0Q+YEcx Dkyk/0AgWyqAWaOKT3dEsRszWRVNgoaAHw/1Go9hQjBx1sjEU66vbDUVyH/PvAlE WtlkJed/4WCtFPYqBFlftJ84ohK6aGCgi0phJ5dIQycO4Ok/K6QtNZjcLonjwjM+ 4WUZICx76IIBxuTqLGFINL4wUZK2KBiT4muQxVAh+b4RCXG12OyyJR7UO7w8vgS3 EvZP8GmfjX/aMNqG5uB1RX3+kGMzol8essG8homZDXcMWBQ0OneIJwZobsYd9D/L tUGdiXX3+eAcq0SQURDlxTUlVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnbhXfF HPW9YznwZqF1FAhObLfnMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDoT+RZZAmOgx5vS1OrDvp0nuY85dvpYNuzE8agwyhwSWzZEGpY94v DkVuCaaitn9OFh8gES0ZL4lxg5pD471iwj2FAVQ0RxXnbAI2gQ2Mdz4mhPcBAVlI yfW7+nUFE3+Baa/yol9WA29fhhTg1jyyEMKdpWQ+SBdE1k/uznGyy7f1wopZ2Bup mnS3SaBSnzVEZ8cl3sEQ4WH6CnuDH0fIahyKAK1KbZkOAJeRObnRZzFlj2zOzmn/ w7CVWClyxvBptnLGquxac5npl4Q89tEh9jJu7p+b3R/uEhdGBlX3dYt7IyZz05xp tFh7ZlWvtD2bOg03YstdFNW85OIkYbe9 -----END CERTIFICATE-----Generated at Wed Jul 2 15:54:50 2025 by rpki-client