$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: MN9rAvOqXuWdcgk6aAzh7XiujNikvQv4C+/nxEt5EEM= Subject key identifier: 7E:71:80:07:36:F7:69:53:CF:13:7D:6A:90:B1:F2:A6:FD:00:96:EC Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0232 Signing time: Sun 29 Jun 2025 01:25:30 +0000 Manifest this update: Sun 29 Jun 2025 01:25:29 +0000 Manifest next update: Sun 06 Jul 2025 01:25:29 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: bbQGAMSDHDtNB6LfbDZh7643XvK6sYe5fCnsF56jXZc=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Jun 29 01:25:29 2025 GMT Not After : Jul 6 01:25:29 2025 GMT Subject: CN=6860960a-7b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:12:f8:79:5d:35:0c:8a:f7:a8:df:e8:22:6f: 7e:5a:54:e7:74:5e:bd:0b:6e:9b:76:d5:7d:69:21: 08:d9:f4:8e:e0:8b:95:c8:5b:77:42:e1:11:4c:47: 7a:e4:96:85:08:a5:9b:d3:51:6e:3b:58:92:35:89: d4:ee:4b:3d:ef:57:52:c8:5a:da:19:4c:cb:28:a3: b9:fb:66:18:f1:66:4d:35:8e:dc:dc:83:02:e8:aa: ca:89:00:83:7f:09:43:1e:86:0e:2a:d4:ed:b5:65: f7:33:92:0a:fe:e5:cb:24:3c:a0:f1:82:3d:f5:6d: d2:6a:b4:4c:fd:6d:23:12:65:8f:f0:72:c4:a5:96: b1:27:d5:16:f9:62:56:d3:b9:ed:20:ba:d3:db:d4: e3:84:c3:ec:9f:70:c6:9e:b4:f5:13:6b:75:dc:d0: 7b:ee:04:ed:78:18:b7:da:95:82:8b:89:1e:e3:aa: de:fd:1d:fa:c1:81:05:a2:e1:c9:7e:35:e2:68:af: c1:2d:15:f5:c7:43:f7:92:dc:03:20:93:70:4d:2d: 46:44:21:47:25:f9:20:6e:5f:d2:41:23:e4:96:47: 4d:23:8a:cd:f0:66:b2:86:64:3d:c6:e1:95:01:fc: 94:c5:28:f2:cb:21:c1:88:24:93:c7:c1:01:12:9b: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:71:80:07:36:F7:69:53:CF:13:7D:6A:90:B1:F2:A6:FD:00:96:EC X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:1d:69:07:b7:51:0a:1c:06:a8:c3:de:aa:81:39:10:c4:c1: ab:f4:d7:3c:01:07:28:02:84:ea:ae:98:16:ae:69:e0:8a:14: d8:4e:11:1d:95:d9:85:32:fd:14:1e:d9:3a:58:07:70:80:59: 0e:28:f9:85:3a:ac:99:af:2e:23:09:db:02:6a:6a:51:d2:5f: c1:dd:0c:87:f2:f3:df:d4:be:fe:37:0d:d6:1b:a3:66:63:2d: 08:ed:b8:8f:55:f5:c9:d7:d6:f6:2e:d9:73:20:10:0f:8b:88: e9:c4:85:d2:fd:95:66:a6:54:6b:4f:77:cb:52:17:9e:b1:9a: bb:82:b8:51:dd:42:89:dd:4f:e6:1b:b1:ee:8f:3b:1f:b0:67: 7f:83:14:da:94:c2:90:cf:e0:5b:28:f5:40:6e:cf:b4:c7:dd: e0:bb:98:c2:a7:2c:bb:6b:7d:4d:ce:f2:2f:6f:21:b5:4f:88: 2e:5e:9a:65:46:21:5f:30:a9:c7:f2:e0:16:24:2a:73:4d:ec: c3:94:cb:30:e6:71:7f:fb:b5:16:1a:b5:0e:b2:c3:11:ca:41: 1a:2d:9d:e0:84:25:27:2c:80:45:dc:cb:72:9d:68:39:1a:7b: 83:39:fd:d0:45:7e:e2:20:76:f2:f7:af:c3:6f:c0:c0:97:c1: fe:83:5f:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwNjI5MDEyNTI5WhcNMjUwNzA2MDEyNTI5WjAYMRYwFAYD VQQDEw02ODYwOTYwYS03YjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuxL4eV01DIr3qN/oIm9+WlTndF69C26bdtV9aSEI2fSO4IuVyFt3QuERTEd6 5JaFCKWb01FuO1iSNYnU7ks971dSyFraGUzLKKO5+2YY8WZNNY7c3IMC6KrKiQCD fwlDHoYOKtTttWX3M5IK/uXLJDyg8YI99W3SarRM/W0jEmWP8HLEpZaxJ9UW+WJW 07ntILrT29TjhMPsn3DGnrT1E2t13NB77gTteBi32pWCi4ke46re/R36wYEFouHJ fjXiaK/BLRX1x0P3ktwDIJNwTS1GRCFHJfkgbl/SQSPklkdNI4rN8GayhmQ9xuGV AfyUxSjyyyHBiCSTx8EBEpuYsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5xgAc2 92lTzxN9apCx8qb9AJbsMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgHWkHt1EKHAaow96qgTkQxMGr9Nc8AQcoAoTqrpgWrmngihTYThEd ldmFMv0UHtk6WAdwgFkOKPmFOqyZry4jCdsCampR0l/B3QyH8vPf1L7+Nw3WG6Nm Yy0I7biPVfXJ19b2LtlzIBAPi4jpxIXS/ZVmplRrT3fLUheesZq7grhR3UKJ3U/m G7HujzsfsGd/gxTalMKQz+BbKPVAbs+0x93gu5jCpyy7a31NzvIvbyG1T4guXppl RiFfMKnH8uAWJCpzTezDlMsw5nF/+7UWGrUOssMRykEaLZ3ghCUnLIBF3MtynWg5 GnuDOf3QRX7iIHby96/Db8DAl8H+g18y -----END CERTIFICATE-----Generated at Sun Jun 29 09:42:51 2025 by rpki-client