$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: dM31IPRF9wa9AoN+H/UIa+9PuLDD+M/y5GUlzM4T3T0= Subject key identifier: 51:BC:51:7A:B2:F9:97:00:E9:EE:DC:67:C0:91:35:9A:94:AD:5F:31 Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: 2E Signing time: Tue 01 Jul 2025 08:28:24 +0000 Manifest this update: Tue 01 Jul 2025 08:28:24 +0000 Manifest next update: Tue 08 Jul 2025 08:28:24 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: Xf9fCP3Ns0whF29XOdzLdS8Gd98oEJc5Z5c++NE8s78=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: 0kwUuP5urHGVd8jLbBCR4DTFP/4KfdSRWVGXFWx70hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: Jul 1 08:28:24 2025 GMT Not After : Jul 8 08:28:24 2025 GMT Subject: CN=68639c28-2e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:e8:38:75:4f:b7:00:2d:85:7d:ed:f4:ac: 5e:ce:bd:e5:e3:1e:1e:28:ec:72:a8:af:85:f7:9b: c7:8e:0b:de:1a:fb:3f:92:7d:e3:cd:d9:30:43:2d: 42:5c:d5:ab:c7:b7:89:9d:03:ea:b9:51:1c:c4:63: d0:1d:ca:29:34:71:c8:22:c0:9a:7d:c2:aa:ce:fe: 36:35:51:c2:3a:4c:fa:f5:ad:ea:54:68:53:75:cc: 53:26:cb:ed:56:c1:fd:b6:cb:74:52:df:7d:ee:76: d5:34:08:71:d0:d0:57:bf:6f:e7:f0:84:e1:c5:3a: 02:a6:a5:dc:ce:a9:97:42:71:39:0d:9a:c8:53:3d: d7:7a:8a:75:c4:ed:dc:6b:4b:cd:7b:cc:e7:7e:b5: eb:d0:1d:53:fd:28:62:ec:37:61:7c:50:1d:19:4a: ed:a7:c1:cf:35:8b:10:b7:6a:6c:4e:fa:b1:35:13: b3:03:78:d4:c4:fb:24:6d:d7:65:ed:eb:42:30:75: 24:90:e0:73:49:ea:f9:64:ac:9b:69:e0:1b:22:25: cf:68:d3:ab:c9:94:be:1d:15:d4:32:4b:ab:ca:49: b6:c4:f1:c2:a1:40:32:08:c9:71:75:ed:15:81:4d: 57:3c:c5:d9:42:c7:7e:e8:0d:4a:fa:8f:ae:cd:92: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BC:51:7A:B2:F9:97:00:E9:EE:DC:67:C0:91:35:9A:94:AD:5F:31 X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:7a:fb:3e:be:2c:25:02:70:5e:98:4a:5f:e9:a8:39:49:d9: 14:3d:11:6b:36:e6:6c:b9:e0:4f:4c:1a:76:b2:ce:38:bf:12: 3d:01:4c:86:63:68:39:ab:16:d2:00:ec:67:66:55:0f:5a:22: 3d:c4:ff:7f:ac:31:8d:38:a2:4b:8f:bd:49:2a:1b:4c:1b:89: 47:c1:43:98:96:0f:89:b3:b3:d0:d4:c6:5d:4d:71:4f:d4:f1: b6:cb:ee:c5:c9:b7:5f:19:b4:16:d1:21:54:e1:bf:25:0d:b7: 66:a5:52:f8:5e:6e:e7:dd:ed:08:b7:c2:26:a6:59:06:99:b6: 43:73:ee:e6:c3:9e:32:4f:4f:cb:bd:57:e2:88:16:e1:6c:79: 3d:e6:5c:4e:77:0d:1c:8a:b6:38:f9:ce:d2:65:4b:65:24:80: 1c:09:e9:d5:76:ed:e7:7e:d9:02:f2:02:48:0d:69:ac:ff:39: 1f:21:4b:05:77:e5:cf:36:45:3a:10:e3:3f:87:a2:4a:cd:97: 85:77:f2:db:8e:4a:48:ce:ca:7c:78:b8:5b:7a:ab:ef:3d:d6: f7:85:82:4e:b0:99:6e:aa:97:ec:8a:b9:b9:ef:2b:a0:78:34: 88:c1:a1:f5:11:82:5d:07:f3:94:1f:9e:c5:e8:b1:33:19:a8: 06:93:69:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoREIxM0ZCQUY3QjNCMzhEQjc2MzBEQjBCOTczNzREQUFE MDMxNUFERTAeFw0yNTA3MDEwODI4MjRaFw0yNTA3MDgwODI4MjRaMBgxFjAUBgNV BAMTDTY4NjM5YzI4LTJlNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCt/+g4dU+3AC2Ffe30rF7OveXjHh4o7HKor4X3m8eOC94a+z+SfePN2TBDLUJc 1avHt4mdA+q5URzEY9Adyik0ccgiwJp9wqrO/jY1UcI6TPr1repUaFN1zFMmy+1W wf22y3RS333udtU0CHHQ0Fe/b+fwhOHFOgKmpdzOqZdCcTkNmshTPdd6inXE7dxr S817zOd+tevQHVP9KGLsN2F8UB0ZSu2nwc81ixC3amxO+rE1E7MDeNTE+yRt12Xt 60IwdSSQ4HNJ6vlkrJtp4BsiJc9o06vJlL4dFdQyS6vKSbbE8cKhQDIIyXF17RWB TVc8xdlCx37oDUr6j67NkgpDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUbxRerL5 lwDp7txnwJE1mpStXzEwHwYDVR0jBBgwFoAU2xP7r3s7ONt2MNsLlzdNqtAxWt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzI0MDEwRDUyMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhQN3IzczdPTnQyTU5zTGx6ZE5xdEF4V3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzI0MDEwRDUyMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050 Mk1Oc0xsemROcXRBeFd0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZ6+z6+LCUCcF6YSl/pqDlJ2RQ9EWs25my54E9MGnayzji/Ej0BTIZj aDmrFtIA7GdmVQ9aIj3E/3+sMY04okuPvUkqG0wbiUfBQ5iWD4mzs9DUxl1NcU/U 8bbL7sXJt18ZtBbRIVThvyUNt2alUvhebufd7Qi3wiamWQaZtkNz7ubDnjJPT8u9 V+KIFuFseT3mXE53DRyKtjj5ztJlS2UkgBwJ6dV27ed+2QLyAkgNaaz/OR8hSwV3 5c82RToQ4z+HokrNl4V38tuOSkjOynx4uFt6q+891veFgk6wmW6ql+yKubnvK6B4 NIjBofURgl0H85QfnsXosTMZqAaTaVo= -----END CERTIFICATE-----Generated at Wed Jul 2 00:57:04 2025 by rpki-client