$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft File: i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft (raw, json) Hash identifier: 1cCWRu0teWpGCHXlNidTc2NgUt8I1fdjtloLXb9Gaxs= Subject key identifier: B2:D9:93:A1:5A:1A:07:EB:0A:B8:0C:31:11:28:47:37:5B:72:17:18 Authority key identifier: 8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C Certificate issuer: /CN=A91C0EDF/serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft Manifest number: FF Signing time: Sun 29 Jun 2025 04:13:18 +0000 Manifest this update: Sun 29 Jun 2025 04:13:18 +0000 Manifest next update: Sun 06 Jul 2025 04:13:18 +0000 Files and hashes: 1: i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl (hash: Qp+gQr8XGuv/XNubhBsGCUhBAzeeJ9cKgUkam+zbwL8=) 2: 52333EB4CFAE11EEB928CD25C4F9AE02.roa (hash: Ed+WGj4YoSK8RoZY5/E6txkQiwmhNLhgRfvyu7U8cGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:13:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0EDF, serialNumber=8B64196869117B99B879B4DCBAF04290BC16810C Validity Not Before: Jun 29 04:13:18 2025 GMT Not After : Jul 6 04:13:18 2025 GMT Subject: CN=6860bd5e-efb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b6:68:b4:ba:41:15:a6:58:48:48:ff:c9:9c: 47:40:f6:8f:2d:70:74:cc:f0:3e:76:cc:86:4f:06: ee:64:8d:ee:0e:2f:4e:06:6d:9a:14:55:fb:7d:b4: 5d:23:01:61:23:aa:07:f0:8a:06:e2:39:e5:11:4e: ab:b4:00:ae:aa:03:af:d4:ac:2f:81:5b:9c:f2:43: 57:9c:e6:90:f0:0a:80:a4:4e:df:9f:78:ae:81:71: b2:af:3f:4b:4c:eb:7c:f7:f2:d5:72:ec:96:fa:dc: 63:7a:bb:ef:1f:b2:f6:60:82:d2:0a:c9:ac:fc:64: 3a:f3:05:9f:58:c6:a1:1f:2a:b0:08:b8:b8:a8:80: 0e:a9:b2:a1:dd:af:b6:d3:90:ec:a2:a1:74:00:36: 55:1b:97:bf:8f:aa:ab:64:b3:6f:9c:18:b2:7c:06: 76:52:0e:e8:db:95:3d:b5:98:89:d3:e7:42:49:9d: da:0a:2c:f6:3d:75:7d:93:a5:3e:6f:c4:fa:cc:50: ec:0d:db:aa:ff:a3:e7:c7:00:fa:ca:a8:8b:68:5d: db:5c:75:23:2f:cd:af:cc:26:ab:fa:16:c0:0d:c9: 43:96:a8:63:73:a5:2a:33:2f:47:3a:43:b3:b7:aa: a8:59:00:2c:c1:74:e9:ba:1b:32:3d:ab:3c:f5:92: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D9:93:A1:5A:1A:07:EB:0A:B8:0C:31:11:28:47:37:5B:72:17:18 X509v3 Authority Key Identifier: keyid:8B:64:19:68:69:11:7B:99:B8:79:B4:DC:BA:F0:42:90:BC:16:81:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i2QZaGkRe5m4ebTcuvBCkLwWgQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0EDF/3DE39E82CFAD11EEACFA4268C4F9AE02/i2QZaGkRe5m4ebTcuvBCkLwWgQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:40:73:bb:96:5c:74:25:f0:8a:c4:ba:24:4a:83:bf:6e:f6: c1:67:54:1e:6a:4d:ff:9f:48:0b:cd:98:60:6c:c3:a4:52:47: ad:12:99:7c:2a:24:a5:db:7c:ef:89:1f:22:35:b9:fe:e3:3d: bb:0e:9b:3e:e2:42:c2:85:7b:c8:b7:50:a3:27:73:ae:26:b0: 5d:1e:e1:27:af:3c:a1:15:19:51:ce:50:70:17:a7:47:46:41: 40:e5:dd:1e:71:45:c2:bc:35:7d:b8:37:1f:4b:93:2b:0d:9f: d3:f7:0a:86:36:92:97:98:9f:a2:d0:6d:31:da:3b:0e:df:32: 69:c8:88:2e:37:51:79:85:ed:86:12:19:6a:be:9b:39:24:1b: 05:6e:56:cb:d0:2d:42:71:3e:33:de:b7:74:5c:7a:3d:56:18: ad:a4:f4:17:5c:37:73:a5:32:16:bd:67:5b:27:ca:83:1c:5f: 99:19:2f:28:f7:07:10:ae:ab:65:c5:62:f4:50:62:98:cb:64: 31:92:d6:77:41:38:36:ea:78:0d:50:94:3f:e4:19:b1:4e:d2: 23:c5:3f:f5:5f:2b:a4:27:35:10:29:bd:50:63:ea:72:ed:84: 28:46:82:f6:05:18:b9:3c:69:18:4e:40:62:bf:46:71:45:46: 21:1f:07:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFREYxMTAvBgNVBAUTKDhCNjQxOTY4NjkxMTdCOTlCODc5QjREQ0JBRjA0Mjkw QkMxNjgxMEMwHhcNMjUwNjI5MDQxMzE4WhcNMjUwNzA2MDQxMzE4WjAYMRYwFAYD VQQDEw02ODYwYmQ1ZS1lZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLZotLpBFaZYSEj/yZxHQPaPLXB0zPA+dsyGTwbuZI3uDi9OBm2aFFX7fbRd IwFhI6oH8IoG4jnlEU6rtACuqgOv1KwvgVuc8kNXnOaQ8AqApE7fn3iugXGyrz9L TOt89/LVcuyW+txjervvH7L2YILSCsms/GQ68wWfWMahHyqwCLi4qIAOqbKh3a+2 05DsoqF0ADZVG5e/j6qrZLNvnBiyfAZ2Ug7o25U9tZiJ0+dCSZ3aCiz2PXV9k6U+ b8T6zFDsDduq/6PnxwD6yqiLaF3bXHUjL82vzCar+hbADclDlqhjc6UqMy9HOkOz t6qoWQAswXTpuhsyPas89ZLfPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLZk6Fa GgfrCrgMMREoRzdbchcYMB8GA1UdIwQYMBaAFItkGWhpEXuZuHm03LrwQpC8FoEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEVERi8zREUzOUU4MkNG QUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1bTRlYlRjdXZCQ2tMd1dn UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyUVphR2tSZTVtNGViVGN1dkJDa0x3V2dRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEVERi8zREUzOUU4MkNGQUQxMUVFQUNGQTQyNjhDNEY5QUUwMi9pMlFaYUdrUmU1 bTRlYlRjdXZCQ2tMd1dnUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATQHO7llx0JfCKxLokSoO/bvbBZ1Qeak3/n0gLzZhgbMOkUketEpl8 KiSl23zviR8iNbn+4z27Dps+4kLChXvIt1CjJ3OuJrBdHuEnrzyhFRlRzlBwF6dH RkFA5d0ecUXCvDV9uDcfS5MrDZ/T9wqGNpKXmJ+i0G0x2jsO3zJpyIguN1F5he2G Ehlqvps5JBsFblbL0C1CcT4z3rd0XHo9VhitpPQXXDdzpTIWvWdbJ8qDHF+ZGS8o 9wcQrqtlxWL0UGKYy2QxktZ3QTg26ngNUJQ/5BmxTtIjxT/1XyukJzUQKb1QY+py 7YQoRoL2BRi5PGkYTkBiv0ZxRUYhHweX -----END CERTIFICATE-----Generated at Mon Jun 30 17:04:32 2025 by rpki-client