$ rpki-client -vvf rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft File: MEsColZqFjrazh-lIaMKfmJqwR4.mft (raw, json) Hash identifier: epGsjZy4bfpmWORL0wTqIKEERo4YcwGGlH5BHVAecEU= Subject key identifier: CC:31:8B:BC:64:55:40:FE:87:91:C0:DE:88:11:D2:78:48:80:7E:57 Authority key identifier: 30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E Certificate issuer: /CN=A91CAECE/serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft Manifest number: 2A Signing time: Sun 29 Jun 2025 06:45:07 +0000 Manifest this update: Sun 29 Jun 2025 06:45:06 +0000 Manifest next update: Sun 06 Jul 2025 06:45:06 +0000 Files and hashes: 1: MEsColZqFjrazh-lIaMKfmJqwR4.crl (hash: AfgnJiY6I+tuM0MT6kobeL6+9ZsbkNDxT7AGRKhH5hI=) 2: 07063FA4134B11F0B48EFA0AC4F9AE02.roa (hash: WNVrInNAUMIDrW85MacHTXC8HeXu1LqrkLU97EbnyxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CAECE, serialNumber=304B02A2566A163ADACE1FA521A30A7E626AC11E Validity Not Before: Jun 29 06:45:06 2025 GMT Not After : Jul 6 06:45:06 2025 GMT Subject: CN=6860e0f3-6287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:2b:0a:c2:53:03:42:97:eb:70:91:77:07: fc:e6:81:e4:8e:97:d6:00:ca:c3:93:29:5d:ee:2b: f0:92:06:80:55:9a:71:0f:e9:49:9f:f7:b6:5f:e9: 35:25:ad:2f:d1:f2:b0:d9:52:e0:50:61:e3:36:9e: e0:a9:1c:26:98:82:c0:a2:fd:6c:eb:ed:07:03:bf: 73:fc:86:55:12:a2:bb:99:06:ba:33:56:41:a9:a5: 51:73:d3:3c:85:8b:e7:15:ca:7c:c0:89:ae:f5:54: 06:96:72:e0:94:1b:0d:43:e5:3c:7a:c2:a6:f7:c4: c1:c4:4b:30:86:6e:6b:8d:3a:c0:04:e5:d3:f6:22: af:cb:6c:87:79:02:c4:05:d3:62:06:58:5b:17:74: ba:02:6a:81:98:d7:66:92:81:2f:85:1c:56:40:47: d6:64:1c:24:22:0f:a0:5a:79:d5:9e:86:03:d5:10: 7b:ce:dc:f4:7e:bb:d0:c8:2b:b4:6a:6f:38:a8:1b: db:9d:b9:ad:d5:97:d4:ce:6a:d2:2b:0b:70:17:49: 11:19:df:ec:80:91:67:ae:16:30:9f:9e:a8:94:7e: aa:64:a3:89:9b:76:a9:d2:63:9c:70:da:04:3c:0e: 6b:db:8c:d3:3d:0e:60:58:28:44:ff:ec:4d:d3:de: ac:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:31:8B:BC:64:55:40:FE:87:91:C0:DE:88:11:D2:78:48:80:7E:57 X509v3 Authority Key Identifier: keyid:30:4B:02:A2:56:6A:16:3A:DA:CE:1F:A5:21:A3:0A:7E:62:6A:C1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MEsColZqFjrazh-lIaMKfmJqwR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CAECE/3DF4DC92134A11F0A6968487C4F9AE02/MEsColZqFjrazh-lIaMKfmJqwR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:78:f1:f2:72:46:06:43:71:43:8b:c3:ca:a3:b3:6a:e2:66: 8d:4a:d7:64:4e:e3:39:c5:b5:08:f4:1e:2b:00:76:22:35:86: 1f:f5:e1:6a:aa:21:aa:19:96:c0:44:00:9d:f7:33:8e:90:ab: 8d:3a:a6:e1:c7:49:7a:06:c1:46:2c:30:fd:00:de:9f:18:69: fb:98:4f:ac:be:2c:36:c4:d6:26:72:d2:0c:11:bf:3c:73:cd: d9:92:8e:d7:46:f5:8d:ca:ba:6b:a8:36:f6:54:c6:e6:c3:19: d8:8e:22:3d:c7:01:bc:85:ba:fe:ed:d0:d5:cf:2c:01:47:08: 46:2d:ec:5e:30:a3:a2:34:a3:13:be:3e:95:1c:de:90:5f:56: 29:f7:09:09:07:6e:b9:46:1e:ce:3d:87:54:3b:45:09:5c:70: 4a:4a:83:02:b4:13:e3:bd:ea:7e:76:80:d5:e6:f9:57:b3:58: 86:87:45:a2:a8:1a:86:b7:a3:fd:0f:a1:93:16:3a:e2:b9:22: 89:ae:ca:da:d2:97:16:f0:07:08:b3:f3:40:c9:76:07:36:a5: 87:4c:78:aa:99:8b:f0:73:8b:b3:7a:62:98:31:a4:83:26:ee: d2:42:22:67:7f:ae:ad:c2:ca:a9:78:57:ca:fd:35:48:6b:1f: 45:ed:62:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QUVDRTExMC8GA1UEBRMoMzA0QjAyQTI1NjZBMTYzQURBQ0UxRkE1MjFBMzBBN0U2 MjZBQzExRTAeFw0yNTA2MjkwNjQ1MDZaFw0yNTA3MDYwNjQ1MDZaMBgxFjAUBgNV BAMTDTY4NjBlMGYzLTYyODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkJysKwlMDQpfrcJF3B/zmgeSOl9YAysOTKV3uK/CSBoBVmnEP6Umf97Zf6TUl rS/R8rDZUuBQYeM2nuCpHCaYgsCi/Wzr7QcDv3P8hlUSoruZBrozVkGppVFz0zyF i+cVynzAia71VAaWcuCUGw1D5Tx6wqb3xMHESzCGbmuNOsAE5dP2Iq/LbId5AsQF 02IGWFsXdLoCaoGY12aSgS+FHFZAR9ZkHCQiD6BaedWehgPVEHvO3PR+u9DIK7Rq bzioG9udua3Vl9TOatIrC3AXSREZ3+yAkWeuFjCfnqiUfqpko4mbdqnSY5xw2gQ8 DmvbjNM9DmBYKET/7E3T3qxVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzDGLvGRV QP6HkcDeiBHSeEiAflcwHwYDVR0jBBgwFoAUMEsColZqFjrazh+lIaMKfmJqwR4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBRUNFLzNERjREQzkyMTM0 QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpyYXpoLWxJYU1LZm1KcXdS NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTUVzQ29sWnFGanJhemgtbElhTUtmbUpxd1I0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB RUNFLzNERjREQzkyMTM0QTExRjBBNjk2ODQ4N0M0RjlBRTAyL01Fc0NvbFpxRmpy YXpoLWxJYU1LZm1KcXdSNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE948fJyRgZDcUOLw8qjs2riZo1K12RO4znFtQj0HisAdiI1hh/14Wqq IaoZlsBEAJ33M46Qq406puHHSXoGwUYsMP0A3p8YafuYT6y+LDbE1iZy0gwRvzxz zdmSjtdG9Y3KumuoNvZUxubDGdiOIj3HAbyFuv7t0NXPLAFHCEYt7F4wo6I0oxO+ PpUc3pBfVin3CQkHbrlGHs49h1Q7RQlccEpKgwK0E+O96n52gNXm+VezWIaHRaKo Goa3o/0PoZMWOuK5IomuytrSlxbwBwiz80DJdgc2pYdMeKqZi/Bzi7N6YpgxpIMm 7tJCImd/rq3Cyql4V8r9NUhrH0XtYrI= -----END CERTIFICATE-----Generated at Sun Jun 29 12:39:11 2025 by rpki-client