$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft File: 2fwVW2_aEGxpmlabEgOEkJWKoy8.mft (raw, json) Hash identifier: o0qQ+eX8kyPAerxl3EwkVm0GxipZz3gSeeunWEM0Jtc= Subject key identifier: A8:53:BC:91:D9:8F:54:41:2A:B8:82:5E:34:05:2D:E7:2E:CD:A2:C6 Authority key identifier: D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F Certificate issuer: /CN=A91B53A5/serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Certificate serial: 1A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft Manifest number: 1A43 Signing time: Wed 02 Jul 2025 16:28:34 +0000 Manifest this update: Wed 02 Jul 2025 16:28:33 +0000 Manifest next update: Wed 09 Jul 2025 16:28:33 +0000 Files and hashes: 1: 2fwVW2_aEGxpmlabEgOEkJWKoy8.crl (hash: BCyqx6Q0DkW7AjoXY4/wTlQerV8mKq6OD0UpiIddhFA=) 2: C443D86A55A311E7896BED09C4F9AE02.roa (hash: RAjaQS5QbqXtrUMbAxpVJSZQfE94i9hS979yM5B3+jI=) 3: A9286C0E6D4411E7AF539270C4F9AE02.roa (hash: CvwZ78Bx6JW2ZSeXfa9JVVvETeg0+qlUbSWAQnUGr1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6748 (0x1a5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53A5, serialNumber=D9FC155B6FDA106C699A569B12038490958AA32F Validity Not Before: Jul 2 16:28:33 2025 GMT Not After : Jul 9 16:28:33 2025 GMT Subject: CN=68655e31-d792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:0a:02:ee:06:a3:b6:41:ba:42:76:2d:00: 52:54:46:21:e5:68:be:5c:03:9f:bc:9b:a5:da:bc: d3:55:6e:4e:2c:fe:27:c7:b1:91:90:b3:12:63:3d: c4:8b:14:9a:54:8d:26:c8:b7:e7:1b:7b:db:70:22: 36:ac:b3:5b:d4:37:80:a1:06:9e:4e:e4:3d:12:1e: cb:28:a4:e8:f5:e7:78:5c:c5:31:58:79:a5:f2:6f: cd:76:8a:bf:38:eb:35:7f:e9:ae:d5:18:27:6a:4e: 90:92:46:b7:62:09:0e:23:78:f9:b0:13:71:64:02: a9:b8:9d:29:dd:a0:62:6c:1a:cb:75:72:db:d5:4d: 55:e5:e2:56:57:69:2f:e3:4d:9f:a0:ef:f8:d1:1f: 09:bb:61:91:93:15:d8:a7:1b:20:0b:c0:61:68:91: f3:a3:2e:5a:95:2d:f3:e6:5d:86:0a:63:ed:97:ab: 58:66:01:da:2b:9a:f7:9f:c4:2f:50:02:96:4e:a1: b6:fc:b3:0c:21:ff:f7:d8:db:58:a2:3c:42:66:c5: 8a:e4:df:8f:90:b3:0e:a7:bd:a4:8f:ff:0e:d7:cd: 08:91:41:90:54:71:89:a4:b7:19:fb:0d:1c:b8:7f: 5f:02:f8:7e:a8:77:d9:7c:c9:55:b1:68:a7:61:5a: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:53:BC:91:D9:8F:54:41:2A:B8:82:5E:34:05:2D:E7:2E:CD:A2:C6 X509v3 Authority Key Identifier: keyid:D9:FC:15:5B:6F:DA:10:6C:69:9A:56:9B:12:03:84:90:95:8A:A3:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fwVW2_aEGxpmlabEgOEkJWKoy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53A5/2580A8D64B6511E7B469C07AC4F9AE02/2fwVW2_aEGxpmlabEgOEkJWKoy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d6:b9:fc:77:a1:c3:2f:28:c2:22:e4:1f:42:95:d3:3a:e7: 8f:5f:bc:26:51:9c:0a:1d:2d:13:2c:e8:85:3a:ce:3d:75:19: ee:71:c2:c1:c5:de:e4:8c:6b:c5:4f:9f:01:c8:af:33:b5:03: dd:00:0e:8e:d1:3b:7b:6f:ce:81:34:0d:7a:7a:2a:aa:08:03: 65:68:13:cf:4c:1e:29:38:e2:40:7b:33:5d:5a:e9:c0:9d:1c: f0:73:53:bf:2a:06:bd:93:ce:bc:bc:02:13:88:01:00:ca:ee: 8b:7e:d8:cd:72:5b:5a:bd:dc:0b:8e:cb:f4:9d:62:8d:5c:4b: aa:22:b3:59:b0:3e:2b:fe:88:e2:eb:bf:8f:35:fb:fc:9f:88: c0:d6:bd:87:59:76:a9:19:04:7d:0e:94:e6:fa:98:d9:0d:74: c5:ae:71:fe:24:13:5b:42:cd:fe:48:a4:92:b5:5a:9c:e6:62: f8:52:fd:6f:a6:0e:14:0c:79:a3:70:6e:26:49:c9:e2:69:8c: fa:92:8a:e8:6b:cd:d0:b3:9a:52:4d:d7:d6:2a:e7:d8:7c:57: f7:40:ed:03:c7:a7:80:53:65:16:03:04:27:82:c9:ff:b3:e9: 5d:61:1b:72:d0:af:9e:96:d1:6b:1d:1b:d8:6c:8f:ad:c8:c0: f2:2d:88:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQTUxMTAvBgNVBAUTKEQ5RkMxNTVCNkZEQTEwNkM2OTlBNTY5QjEyMDM4NDkw OTU4QUEzMkYwHhcNMjUwNzAyMTYyODMzWhcNMjUwNzA5MTYyODMzWjAYMRYwFAYD VQQDEw02ODY1NWUzMS1kNzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArMgKAu4Go7ZBukJ2LQBSVEYh5Wi+XAOfvJul2rzTVW5OLP4nx7GRkLMSYz3E ixSaVI0myLfnG3vbcCI2rLNb1DeAoQaeTuQ9Eh7LKKTo9ed4XMUxWHml8m/Ndoq/ OOs1f+mu1Rgnak6Qkka3YgkOI3j5sBNxZAKpuJ0p3aBibBrLdXLb1U1V5eJWV2kv 402foO/40R8Ju2GRkxXYpxsgC8BhaJHzoy5alS3z5l2GCmPtl6tYZgHaK5r3n8Qv UAKWTqG2/LMMIf/32NtYojxCZsWK5N+PkLMOp72kj/8O180IkUGQVHGJpLcZ+w0c uH9fAvh+qHfZfMlVsWinYVrueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhTvJHZ j1RBKriCXjQFLecuzaLGMB8GA1UdIwQYMBaAFNn8FVtv2hBsaZpWmxIDhJCViqMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBNS8yNTgwQThENjRC NjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVHeHBtbGFiRWdPRWtKV0tv eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmd1ZXMl9hRUd4cG1sYWJFZ09Fa0pXS295OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBNS8yNTgwQThENjRCNjUxMUU3QjQ2OUMwN0FDNEY5QUUwMi8yZndWVzJfYUVH eHBtbGFiRWdPRWtKV0tveTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi1rn8d6HDLyjCIuQfQpXTOuePX7wmUZwKHS0TLOiFOs49dRnuccLB xd7kjGvFT58ByK8ztQPdAA6O0Tt7b86BNA16eiqqCANlaBPPTB4pOOJAezNdWunA nRzwc1O/Kga9k868vAITiAEAyu6LftjNcltavdwLjsv0nWKNXEuqIrNZsD4r/oji 67+PNfv8n4jA1r2HWXapGQR9DpTm+pjZDXTFrnH+JBNbQs3+SKSStVqc5mL4Uv1v pg4UDHmjcG4mScniaYz6koroa83Qs5pSTdfWKufYfFf3QO0Dx6eAU2UWAwQngsn/ s+ldYRty0K+eltFrHRvYbI+tyMDyLYj3 -----END CERTIFICATE-----Generated at Thu Jul 3 01:10:20 2025 by rpki-client