$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: +7AkGDPIGqL+PN+culxa9TPkJCmo0VuMKoTNElqDLKc= Subject key identifier: 6A:A3:D2:7F:1B:D1:6D:EA:92:36:5A:E3:9D:5C:D2:96:E6:BC:52:C8 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2C7B Signing time: Wed 02 Jul 2025 16:34:05 +0000 Manifest this update: Wed 02 Jul 2025 16:34:05 +0000 Manifest next update: Wed 09 Jul 2025 16:34:05 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: ueOp+KLnlYbqYjZmftIUxASq9Wq+9TQ/KbOCPT19dMo=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: K0pMn3ybPgYAvgYIHKptYZvODgeJgnqA7J5JHWlu6c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Jul 2 16:34:05 2025 GMT Not After : Jul 9 16:34:05 2025 GMT Subject: CN=68655f7d-8161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:66:8f:0a:8a:74:7e:e2:06:dc:b1:04:c9: 21:ff:47:86:ea:1e:6d:85:e5:18:ed:58:4e:cf:28: ad:52:9e:4f:76:89:b3:2c:c1:93:15:2a:64:bf:aa: ad:45:5c:d4:09:28:e8:03:37:95:69:75:63:79:c2: f4:55:23:9f:c3:e3:68:fd:1b:b9:7e:17:18:f8:dc: 5a:b5:4d:32:62:86:55:3a:7e:8a:c3:c3:62:c9:13: 2b:1a:0c:30:89:b3:32:af:4d:22:ec:4c:b6:87:cb: 11:71:4e:a9:09:05:14:78:53:7e:0d:42:69:95:25: 49:54:a6:1a:e8:87:db:6b:d9:de:5b:23:bc:40:c9: b6:17:2a:88:92:6e:d2:b1:43:8a:7f:32:a3:76:4e: 6f:e3:0a:2e:98:ef:2e:20:a1:87:53:ed:b6:c5:48: 3f:65:87:75:30:dd:68:a7:d7:69:07:65:c1:34:4f: 6c:0a:7f:1d:a1:5a:44:f1:61:f4:e0:96:ab:a5:79: f1:d7:11:cd:0a:92:57:db:d8:5d:c2:38:9b:cd:b9: 81:ce:8c:0b:cb:8d:fa:f6:d2:42:3b:53:69:34:b8: 53:dc:a1:30:88:d5:f3:01:8e:1c:c8:f3:dc:e4:5a: b9:38:27:de:ed:11:23:6c:dd:4d:85:78:18:59:c5: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A3:D2:7F:1B:D1:6D:EA:92:36:5A:E3:9D:5C:D2:96:E6:BC:52:C8 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:38:05:e4:e2:b8:ad:b1:98:fe:78:8c:ad:a9:04:d1:b5:62: 82:81:d7:3b:cc:91:41:35:c5:b0:4a:d2:4f:e4:69:bc:9d:ea: bf:2d:85:3d:57:88:0a:ea:9b:11:72:fc:32:d4:b0:b6:61:b5: 02:f2:5e:09:d7:42:2f:38:30:1b:67:e0:bd:96:73:c2:eb:87: fe:68:e9:b8:61:c8:84:72:58:3e:78:b7:f5:15:f2:e4:ac:a5: ea:3d:c1:7a:91:27:33:f7:f1:a0:1f:f8:60:e3:27:1d:27:50: 07:ac:55:ec:8c:31:62:b4:d5:20:07:ed:50:50:f3:8b:14:6b: d8:b9:82:de:8b:e6:d3:a1:b5:f1:b6:07:e4:9c:fc:37:0a:fc: 67:14:41:80:b6:3b:dc:66:9a:76:ee:b4:92:d6:c8:1c:25:45: b3:9a:95:c6:3f:b3:81:9a:3a:b0:b2:29:9b:42:69:75:1c:7d: 66:a0:54:d4:21:2b:d3:00:32:8a:44:56:11:39:18:f5:e3:66: 2a:79:35:63:ad:0a:0e:ac:09:09:54:cf:46:7f:28:25:b7:99: ce:e1:60:0c:76:00:f1:39:94:5a:3f:88:21:51:b1:b4:a1:49: b4:c1:73:45:71:9b:44:45:53:44:83:25:5c:88:b2:f5:af:d3: e2:e8:98:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUwNzAyMTYzNDA1WhcNMjUwNzA5MTYzNDA1WjAYMRYwFAYD VQQDEw02ODY1NWY3ZC04MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu71mjwqKdH7iBtyxBMkh/0eG6h5theUY7VhOzyitUp5PdomzLMGTFSpkv6qt RVzUCSjoAzeVaXVjecL0VSOfw+No/Ru5fhcY+NxatU0yYoZVOn6Kw8NiyRMrGgww ibMyr00i7Ey2h8sRcU6pCQUUeFN+DUJplSVJVKYa6Ifba9neWyO8QMm2FyqIkm7S sUOKfzKjdk5v4woumO8uIKGHU+22xUg/ZYd1MN1op9dpB2XBNE9sCn8doVpE8WH0 4JarpXnx1xHNCpJX29hdwjibzbmBzowLy4369tJCO1NpNLhT3KEwiNXzAY4cyPPc 5Fq5OCfe7REjbN1NhXgYWcUcKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqj0n8b 0W3qkjZa451c0pbmvFLIMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7OAXk4ritsZj+eIytqQTRtWKCgdc7zJFBNcWwStJP5Gm8neq/LYU9 V4gK6psRcvwy1LC2YbUC8l4J10IvODAbZ+C9lnPC64f+aOm4YciEclg+eLf1FfLk rKXqPcF6kScz9/GgH/hg4ycdJ1AHrFXsjDFitNUgB+1QUPOLFGvYuYLei+bTobXx tgfknPw3CvxnFEGAtjvcZpp27rSS1sgcJUWzmpXGP7OBmjqwsimbQml1HH1moFTU ISvTADKKRFYRORj142YqeTVjrQoOrAkJVM9Gfyglt5nO4WAMdgDxOZRaP4ghUbG0 oUm0wXNFcZtERVNEgyVciLL1r9Pi6JgJ -----END CERTIFICATE-----Generated at Thu Jul 3 05:11:27 2025 by rpki-client