$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft File: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft (raw, json) Hash identifier: 9gS6dezT87rK7lRae9+SutgVa/NiGlvOQrDXyVf0GNE= Subject key identifier: AF:85:74:DF:B2:C3:42:49:46:66:AD:1A:8E:1F:4C:89:0D:2F:AE:0D Authority key identifier: DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B Certificate issuer: /CN=A91D1C7F/serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Certificate serial: 0378 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft Manifest number: 0374 Signing time: Thu 03 Jul 2025 01:15:29 +0000 Manifest this update: Thu 03 Jul 2025 01:15:28 +0000 Manifest next update: Thu 10 Jul 2025 01:15:28 +0000 Files and hashes: 1: 2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl (hash: igKJDeAbQmeRai0MpdBQJFx88GFng13JhYF2KMLD2NI=) 2: E5B25D84B0D211ECB7B1BA7DC4F9AE02.roa (hash: KMYbMfLRKgCDX7CbZCwrDOvnhVpSxFbhQooHcCajhmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C7F, serialNumber=DAB4A52A8EC1AAD6C9252EEA4D5D1569D27AF46B Validity Not Before: Jul 3 01:15:28 2025 GMT Not After : Jul 10 01:15:28 2025 GMT Subject: CN=6865d9b1-beea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:48:37:9f:c7:ea:0c:e7:dc:35:a1:57:4c:eb: f4:12:09:f3:94:37:ff:e2:26:df:92:6b:ef:15:e2: 1a:9d:4c:08:24:3a:28:60:f9:38:07:bd:1a:01:30: 4c:2c:a7:52:db:e3:2d:6a:6f:c4:33:88:ee:80:95: 78:c0:df:08:66:30:42:92:c8:63:13:a3:a1:64:dc: 33:d4:79:c2:87:c5:b2:41:5a:01:23:9c:a2:aa:be: 9c:43:9f:d5:d5:3f:87:8b:f8:39:49:ad:d8:37:61: 0d:69:c1:f8:a2:12:e3:a4:f2:c4:31:f7:a3:cf:03: 0f:d2:4f:5c:b3:e5:0d:80:96:90:00:17:5e:11:82: 7c:c6:3f:4b:c2:50:63:67:bb:c9:29:29:42:09:24: 35:08:fd:1e:87:9d:a9:ee:15:a1:08:eb:b5:62:67: cf:be:ac:5d:80:7c:73:64:9b:cc:72:03:f9:5e:5c: e6:09:2a:12:14:d4:df:3a:bf:1e:0d:df:48:a5:bf: 34:eb:21:f3:6d:82:7b:ce:a8:5b:55:8e:61:e1:54: 15:d0:b8:d9:f1:fe:2d:bd:3e:ae:c8:71:e0:d0:9d: 5c:4d:2a:d7:e5:01:3f:cd:9c:ff:d7:62:d0:45:38: e5:09:d4:18:d4:0f:c2:88:5a:65:dd:8f:3b:08:26: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:85:74:DF:B2:C3:42:49:46:66:AD:1A:8E:1F:4C:89:0D:2F:AE:0D X509v3 Authority Key Identifier: keyid:DA:B4:A5:2A:8E:C1:AA:D6:C9:25:2E:EA:4D:5D:15:69:D2:7A:F4:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rSlKo7BqtbJJS7qTV0VadJ69Gs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C7F/091E1EAAB0D011ECBB04A378C4F9AE02/2rSlKo7BqtbJJS7qTV0VadJ69Gs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:d7:2d:8e:3f:af:a9:83:c8:2e:88:3c:07:08:6e:d0:b5:28: 1b:bd:d2:55:3d:39:e4:1c:a1:bc:e0:fe:f2:50:36:48:3c:a3: b4:75:b4:e0:25:69:04:42:c8:78:ec:d8:c8:86:63:ce:b6:7a: 5e:09:cd:10:da:21:7d:92:08:95:5f:15:12:4f:fe:5e:5f:81: e1:c6:82:05:bc:ec:dd:8c:20:b0:03:c7:78:f7:be:93:cf:cf: f6:91:4b:f8:8d:1d:9d:56:00:db:d0:00:35:e6:bc:35:f5:59: dd:e6:9c:2d:d1:b6:2a:7c:a4:06:8f:71:ab:8f:09:84:14:c9: 23:a8:2b:32:09:ff:e3:fd:d2:ce:c5:ae:f1:51:99:b0:cf:41: 36:34:ba:ef:44:c0:17:a8:ff:ad:81:d2:01:5f:a5:c5:54:b8: 93:64:fa:5e:e6:5c:20:61:36:b6:36:09:ae:cf:56:6c:c6:1f: 2a:58:c7:74:cc:29:e5:7d:32:73:ec:e8:66:cd:5a:b0:61:f4: c7:2e:b0:0c:d7:40:af:a6:17:88:69:4c:ee:98:e3:d1:ff:ee: 6a:0d:e4:96:a2:8d:84:f3:de:1e:2f:29:f9:cd:0c:d1:f3:0f: f5:28:a5:4d:31:ed:1d:b0:b2:ab:4d:b6:38:25:64:97:ed:8a: 34:5a:be:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDN0YxMTAvBgNVBAUTKERBQjRBNTJBOEVDMUFBRDZDOTI1MkVFQTRENUQxNTY5 RDI3QUY0NkIwHhcNMjUwNzAzMDExNTI4WhcNMjUwNzEwMDExNTI4WjAYMRYwFAYD VQQDEw02ODY1ZDliMS1iZWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEg3n8fqDOfcNaFXTOv0EgnzlDf/4ibfkmvvFeIanUwIJDooYPk4B70aATBM LKdS2+Mtam/EM4jugJV4wN8IZjBCkshjE6OhZNwz1HnCh8WyQVoBI5yiqr6cQ5/V 1T+Hi/g5Sa3YN2ENacH4ohLjpPLEMfejzwMP0k9cs+UNgJaQABdeEYJ8xj9LwlBj Z7vJKSlCCSQ1CP0eh52p7hWhCOu1YmfPvqxdgHxzZJvMcgP5XlzmCSoSFNTfOr8e Dd9Ipb806yHzbYJ7zqhbVY5h4VQV0LjZ8f4tvT6uyHHg0J1cTSrX5QE/zZz/12LQ RTjlCdQY1A/CiFpl3Y87CCaCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+FdN+y w0JJRmatGo4fTIkNL64NMB8GA1UdIwQYMBaAFNq0pSqOwarWySUu6k1dFWnSevRr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUM3Ri8wOTFFMUVBQUIw RDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0YkpKUzdxVFYwVmFkSjY5 R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyU2xLbzdCcXRiSkpTN3FUVjBWYWRKNjlHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUM3Ri8wOTFFMUVBQUIwRDAxMUVDQkIwNEEzNzhDNEY5QUUwMi8yclNsS283QnF0 YkpKUzdxVFYwVmFkSjY5R3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq1y2OP6+pg8guiDwHCG7QtSgbvdJVPTnkHKG84P7yUDZIPKO0dbTg JWkEQsh47NjIhmPOtnpeCc0Q2iF9kgiVXxUST/5eX4HhxoIFvOzdjCCwA8d4976T z8/2kUv4jR2dVgDb0AA15rw19Vnd5pwt0bYqfKQGj3GrjwmEFMkjqCsyCf/j/dLO xa7xUZmwz0E2NLrvRMAXqP+tgdIBX6XFVLiTZPpe5lwgYTa2Ngmuz1Zsxh8qWMd0 zCnlfTJz7OhmzVqwYfTHLrAM10CvpheIaUzumOPR/+5qDeSWoo2E894eLyn5zQzR 8w/1KKVNMe0dsLKrTbY4JWSX7Yo0Wr4O -----END CERTIFICATE-----Generated at Thu Jul 3 04:29:10 2025 by rpki-client