$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft File: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft (raw, json) Hash identifier: 2jwnsKz59sUEiVvIIbLgfcGCPZGLUPQiVCumXB3K5kw= Subject key identifier: 66:E5:67:0E:15:75:13:24:5E:40:8B:1B:DF:B3:18:6B:80:4F:1E:7F Authority key identifier: 9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E Certificate issuer: /CN=A91B6D28/serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Certificate serial: 34B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft Manifest number: 34A6 Signing time: Wed 02 Jul 2025 14:46:46 +0000 Manifest this update: Wed 02 Jul 2025 14:46:45 +0000 Manifest next update: Wed 09 Jul 2025 14:46:45 +0000 Files and hashes: 1: mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl (hash: fwgBgj8r9l9bzRTfHUeynXtvzJfzSk9IfHaeRvFm35c=) 2: AA6965E4CD8D11EF8DF2E66DC4F9AE02.roa (hash: joFpQbUhhuICq9lMSQUwGZiftmapGwfxicrZ76+a/Wg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13491 (0x34b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6D28, serialNumber=9A4DAF8FCA85E193D34EA49597996DED17CBDF1E Validity Not Before: Jul 2 14:46:45 2025 GMT Not After : Jul 9 14:46:45 2025 GMT Subject: CN=68654655-0e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:0e:a4:d2:01:a3:0b:86:12:ce:86:3f:57: 28:d3:43:cb:47:a1:57:89:79:5d:cb:56:71:fc:c6: c5:2f:f2:2f:a2:74:9e:ea:6a:1a:bd:26:3c:a3:f0: 28:b6:e9:92:83:23:28:24:e1:25:ee:d1:42:6f:97: 25:d5:86:b0:45:bf:95:fb:34:83:8a:8d:c2:8d:9f: cf:7b:25:61:9e:0c:07:a1:2f:f6:29:08:39:d5:53: 55:8d:8b:56:c1:3d:68:a7:ef:13:a2:17:ae:5e:4c: de:6e:26:b3:b5:67:0f:a5:aa:a2:8d:b5:64:d8:fa: 86:1a:45:bd:77:e8:4e:69:31:8a:e7:15:f6:5b:5f: f1:91:0e:9a:a6:0e:36:75:98:32:5a:0b:75:ec:a9: 8b:04:98:00:9c:19:e5:f7:31:a4:19:df:88:0f:cf: 64:09:62:25:b6:43:e3:29:cc:1d:64:96:f4:d6:98: cc:48:76:57:88:87:74:d2:c3:67:38:01:1b:c9:e4: 93:df:4a:00:4a:0f:dc:63:da:44:32:9e:9e:ee:96: 26:2f:de:cd:d6:c9:f1:04:a2:a3:4a:6c:6f:06:fa: 57:55:b8:ab:dc:c7:0b:eb:8f:83:e5:73:8f:b8:00: 83:18:e8:6e:75:56:a3:95:ba:1e:11:27:9e:19:65: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E5:67:0E:15:75:13:24:5E:40:8B:1B:DF:B3:18:6B:80:4F:1E:7F X509v3 Authority Key Identifier: keyid:9A:4D:AF:8F:CA:85:E1:93:D3:4E:A4:95:97:99:6D:ED:17:CB:DF:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6D28/61D453101D9211E29C5F3AF508B02CD2/mk2vj8qF4ZPTTqSVl5lt7RfL3x4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:19:fa:95:8f:19:87:66:74:37:a2:28:f4:15:81:1a:d6:43: c5:4d:f0:e9:8c:9e:ec:b2:12:57:7a:00:22:34:68:0f:e8:28: aa:e2:61:6e:8b:e7:0e:c1:d8:a3:aa:cf:99:bd:c5:35:e3:3a: 19:3a:61:b1:a1:bb:32:e8:df:57:26:c3:71:f1:a8:ec:3e:4c: 4b:69:cb:58:f9:42:82:a2:54:13:37:c5:c4:ab:49:1b:b6:3e: ef:b9:74:57:1a:6e:80:8a:c9:aa:5f:af:fc:54:e6:b6:26:66: a3:52:58:98:f4:37:e3:b1:ec:4e:fa:e4:aa:32:2b:e0:2d:64: 5e:34:cc:f0:45:4b:e3:da:e8:bc:10:d4:38:15:1b:53:1c:5f: c9:1c:e1:49:20:0c:99:f3:ae:b9:28:fb:60:15:1f:0e:69:92: d4:de:07:7e:91:d2:6b:68:79:21:57:69:49:98:13:af:48:3b: f4:7b:e7:2a:85:fc:04:27:32:94:17:c2:19:c5:03:7b:60:21: 47:85:44:ef:da:5f:dc:62:f5:49:22:98:eb:d3:dc:e7:b3:ea: c8:64:38:58:dc:69:93:46:86:10:1b:96:ba:ff:87:32:df:9c: 53:83:29:31:cd:ec:f1:c6:7f:4d:f2:16:8e:08:35:8c:f1:7a: 6d:56:2c:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZEMjgxMTAvBgNVBAUTKDlBNERBRjhGQ0E4NUUxOTNEMzRFQTQ5NTk3OTk2REVE MTdDQkRGMUUwHhcNMjUwNzAyMTQ0NjQ1WhcNMjUwNzA5MTQ0NjQ1WjAYMRYwFAYD VQQDEw02ODY1NDY1NS0wZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5kOpNIBowuGEs6GP1co00PLR6FXiXldy1Zx/MbFL/IvonSe6moavSY8o/Ao tumSgyMoJOEl7tFCb5cl1YawRb+V+zSDio3CjZ/PeyVhngwHoS/2KQg51VNVjYtW wT1op+8ToheuXkzebiaztWcPpaqijbVk2PqGGkW9d+hOaTGK5xX2W1/xkQ6apg42 dZgyWgt17KmLBJgAnBnl9zGkGd+ID89kCWIltkPjKcwdZJb01pjMSHZXiId00sNn OAEbyeST30oASg/cY9pEMp6e7pYmL97N1snxBKKjSmxvBvpXVbir3McL64+D5XOP uACDGOhudVajlboeESeeGWWP2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGblZw4V dRMkXkCLG9+zGGuATx5/MB8GA1UdIwQYMBaAFJpNr4/KheGT006klZeZbe0Xy98e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkQyOC82MUQ0NTMxMDFE OTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRaUFRUcVNWbDVsdDdSZkwz eDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21rMnZqOHFGNFpQVFRxU1ZsNWx0N1JmTDN4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkQyOC82MUQ0NTMxMDFEOTIxMUUyOUM1RjNBRjUwOEIwMkNEMi9tazJ2ajhxRjRa UFRUcVNWbDVsdDdSZkwzeDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDGfqVjxmHZnQ3oij0FYEa1kPFTfDpjJ7sshJXegAiNGgP6Ciq4mFu i+cOwdijqs+ZvcU14zoZOmGxobsy6N9XJsNx8ajsPkxLactY+UKColQTN8XEq0kb tj7vuXRXGm6AismqX6/8VOa2JmajUliY9DfjsexO+uSqMivgLWReNMzwRUvj2ui8 ENQ4FRtTHF/JHOFJIAyZ8665KPtgFR8OaZLU3gd+kdJraHkhV2lJmBOvSDv0e+cq hfwEJzKUF8IZxQN7YCFHhUTv2l/cYvVJIpjr09zns+rIZDhY3GmTRoYQG5a6/4cy 35xTgykxzezxxn9N8haOCDWM8XptViy/ -----END CERTIFICATE-----Generated at Fri Jul 4 12:01:10 2025 by rpki-client