$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft File: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft (raw, json) Hash identifier: fsn0Qg2u1dHQgn5dFs0JqJ61WISxNhvqtbrDoOQH+oo= Subject key identifier: 41:0D:85:F8:8D:6D:CF:AB:B0:6C:CB:EC:A9:9C:D3:1A:A4:E8:AB:B0 Authority key identifier: DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 Certificate issuer: /CN=A91CD00C/serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Certificate serial: 0344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft Manifest number: 033E Signing time: Sun 29 Jun 2025 00:36:28 +0000 Manifest this update: Sun 29 Jun 2025 00:36:27 +0000 Manifest next update: Sun 06 Jul 2025 00:36:27 +0000 Files and hashes: 1: 2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl (hash: 9WeEdl5vl3aSd2aWJ6QtFzqKBbnhl7ymePmw83kTGpE=) 2: 46654408C6CB11ECB185E43EC4F9AE02.roa (hash: YDV59vkDGMUjv69JwCXS0TevAXxNgXIE57WFOFZhJBo=) 3: 15D68F5ED55011EFA0564D54C4F9AE02.roa (hash: bm0eX3arzl/Vd2cVSRTEVj0uPXCCRL3I0GcsJSw9xWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 00:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 836 (0x344) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD00C, serialNumber=DB2CCCA83D853288C500CDFC3AE1E2FEA049F514 Validity Not Before: Jun 29 00:36:27 2025 GMT Not After : Jul 6 00:36:27 2025 GMT Subject: CN=68608a8b-db6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:20:c8:3a:45:79:79:7b:07:11:8b:ec:b3:e6: 96:93:57:72:5e:ef:3a:65:e5:69:44:5a:a7:51:ac: 9c:7b:54:95:f6:51:9d:25:c6:fe:a2:4b:da:f8:82: 62:2f:c6:8c:f9:51:65:e2:c9:ad:76:10:35:50:1f: af:8d:a8:59:ae:09:8a:66:ab:1b:1f:8e:58:80:bc: bb:31:96:55:d2:f5:0e:eb:d9:f8:fe:e8:8f:41:89: ad:80:6e:84:5d:3b:7b:37:85:72:4b:77:a7:52:bb: 2e:2a:b9:5a:fd:15:30:1b:11:1a:db:78:5d:e7:26: a6:99:88:87:02:c9:e3:2c:30:0d:96:d4:35:14:ff: 2d:f6:0a:6f:a5:f1:53:cb:59:c7:04:83:c6:56:83: 4c:b9:ec:86:ab:16:b8:36:c2:ce:06:75:8a:8d:be: 1b:50:15:92:68:fe:05:bc:43:6f:87:0b:cb:2d:0c: 34:b6:00:14:6a:2b:6f:19:2d:4b:b2:d7:e6:58:83: cc:26:f8:c1:a0:9a:80:68:37:68:77:1a:91:0c:19: 1d:18:fb:a3:4c:b3:b4:6a:32:fd:82:ef:7b:9a:1d: 8d:3d:c4:30:b7:a0:63:02:0f:5b:47:65:6d:9b:04: c8:d5:78:2b:dc:6c:d7:9a:3d:d3:3e:39:8d:56:a9: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0D:85:F8:8D:6D:CF:AB:B0:6C:CB:EC:A9:9C:D3:1A:A4:E8:AB:B0 X509v3 Authority Key Identifier: keyid:DB:2C:CC:A8:3D:85:32:88:C5:00:CD:FC:3A:E1:E2:FE:A0:49:F5:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2yzMqD2FMojFAM38OuHi_qBJ9RQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD00C/CAA8861EC60111EC95FF1E11C4F9AE02/2yzMqD2FMojFAM38OuHi_qBJ9RQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:03:a3:44:df:09:d6:ae:fe:d7:a6:d5:1e:d7:2d:a2:1b:b5: bd:d8:c9:03:8b:3a:1d:1f:f4:fc:78:96:e6:c2:27:89:1c:22: a3:ef:84:c2:be:d0:5a:6b:a5:38:71:e8:0c:ae:7c:86:4b:41: d9:9b:a1:fe:c6:88:d4:db:01:0a:af:6f:58:3b:96:d3:3a:9c: 24:56:3c:d4:ff:09:5d:62:ae:ea:3d:78:da:a2:34:a7:ee:4e: 06:63:c3:3e:40:cd:f4:09:e9:7f:59:b3:f0:d6:98:28:00:d5: f3:fb:fa:f5:75:23:e3:b9:63:0a:69:51:13:75:3c:f8:97:11: 41:33:13:d4:6b:41:a8:71:77:fa:93:d4:bb:bf:b4:24:72:50: 0c:04:f7:fc:28:f8:df:f1:00:de:91:a9:80:30:b7:3c:9e:8e: 13:ba:2d:f5:1c:18:dd:85:b2:fb:1c:a2:e1:24:18:67:0a:1d: 0e:82:f4:5d:ea:4b:38:6a:85:ff:c0:b5:e0:56:96:a3:cc:4a: 5d:27:ab:d9:e5:b2:5f:03:d2:ba:a1:2c:51:ad:3c:22:00:13: a1:d2:52:61:50:f3:3a:c4:29:7d:1c:c3:09:dc:c2:2b:76:bc: 6f:2f:38:84:12:3a:13:f2:38:fb:56:a8:7c:03:65:c0:86:2b: e5:d4:f9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0QwMEMxMTAvBgNVBAUTKERCMkNDQ0E4M0Q4NTMyODhDNTAwQ0RGQzNBRTFFMkZF QTA0OUY1MTQwHhcNMjUwNjI5MDAzNjI3WhcNMjUwNzA2MDAzNjI3WjAYMRYwFAYD VQQDEw02ODYwOGE4Yi1kYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7CDIOkV5eXsHEYvss+aWk1dyXu86ZeVpRFqnUayce1SV9lGdJcb+okva+IJi L8aM+VFl4smtdhA1UB+vjahZrgmKZqsbH45YgLy7MZZV0vUO69n4/uiPQYmtgG6E XTt7N4VyS3enUrsuKrla/RUwGxEa23hd5yammYiHAsnjLDANltQ1FP8t9gpvpfFT y1nHBIPGVoNMueyGqxa4NsLOBnWKjb4bUBWSaP4FvENvhwvLLQw0tgAUaitvGS1L stfmWIPMJvjBoJqAaDdodxqRDBkdGPujTLO0ajL9gu97mh2NPcQwt6BjAg9bR2Vt mwTI1Xgr3GzXmj3TPjmNVqkQlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEENhfiN bc+rsGzL7Kmc0xqk6KuwMB8GA1UdIwQYMBaAFNsszKg9hTKIxQDN/Drh4v6gSfUU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDAwQy9DQUE4ODYxRUM2 MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1vakZBTTM4T3VIaV9xQko5 UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ5ek1xRDJGTW9qRkFNMzhPdUhpX3FCSjlSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDAwQy9DQUE4ODYxRUM2MDExMUVDOTVGRjFFMTFDNEY5QUUwMi8yeXpNcUQyRk1v akZBTTM4T3VIaV9xQko5UlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuA6NE3wnWrv7XptUe1y2iG7W92MkDizodH/T8eJbmwieJHCKj74TC vtBaa6U4cegMrnyGS0HZm6H+xojU2wEKr29YO5bTOpwkVjzU/wldYq7qPXjaojSn 7k4GY8M+QM30Cel/WbPw1pgoANXz+/r1dSPjuWMKaVETdTz4lxFBMxPUa0GocXf6 k9S7v7QkclAMBPf8KPjf8QDekamAMLc8no4Tui31HBjdhbL7HKLhJBhnCh0OgvRd 6ks4aoX/wLXgVpajzEpdJ6vZ5bJfA9K6oSxRrTwiABOh0lJhUPM6xCl9HMMJ3MIr drxvLziEEjoT8jj7Vqh8A2XAhivl1PlE -----END CERTIFICATE-----Generated at Sun Jun 29 13:57:13 2025 by rpki-client