$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: E5k7CPObL4vsR8g7mhvx/VI6aqHBakPacczEweaXt4s= Subject key identifier: 24:65:20:ED:5F:FF:D0:9E:8B:26:2D:45:9F:9E:47:7F:CE:A3:EA:D6 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 01BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 01B7 Signing time: Tue 01 Jul 2025 03:29:15 +0000 Manifest this update: Tue 01 Jul 2025 03:29:15 +0000 Manifest next update: Tue 08 Jul 2025 03:29:15 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: DAazXsrP6rqNSSMCec+SQtSdTziRkIvmXBKg8TfVgho=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: Jul 1 03:29:15 2025 GMT Not After : Jul 8 03:29:15 2025 GMT Subject: CN=6863560b-bec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d2:d2:26:ca:d1:e1:b5:af:7c:6e:2f:d9:07: 97:06:86:69:13:b9:bb:09:cd:ed:af:0d:66:b8:69: 65:ba:39:4e:89:82:d7:78:ef:d3:46:a2:f0:0c:33: 2c:2c:81:02:89:07:ff:19:9b:e1:b5:03:65:7d:99: 68:13:38:63:4d:df:08:ba:8c:56:24:80:ec:73:18: 8c:0d:7b:25:46:96:4e:4f:dc:61:04:aa:12:15:85: b1:e4:ca:0a:74:79:d9:b1:be:1e:c8:28:a3:62:15: 72:f9:e9:e7:d2:e5:3d:45:0b:2d:15:4a:63:9e:f9: 0a:62:bf:1a:a8:b5:40:43:e3:83:2f:36:6f:b0:b3: 61:84:bb:4b:c7:f0:06:c1:1e:a1:55:d2:a4:5a:0c: df:13:88:41:01:2c:fb:a7:58:61:b1:b2:3d:7f:ec: 12:8b:84:fc:17:a4:be:f0:fd:35:06:a9:e7:b2:15: 0e:d0:4f:ad:2f:9e:5f:61:87:a4:bf:d2:67:24:ff: 26:6c:58:40:49:ab:4a:88:c3:45:82:45:b4:e1:71: d4:a4:7a:dc:20:04:1a:bf:9f:c8:3e:2c:50:8d:f2: a5:64:9d:dd:9b:86:8f:9d:0c:c5:34:c5:23:fa:34: 99:ce:fe:e3:07:ec:e5:f1:09:f0:9c:2d:69:e5:1a: 23:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:65:20:ED:5F:FF:D0:9E:8B:26:2D:45:9F:9E:47:7F:CE:A3:EA:D6 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:0b:36:27:6e:af:7c:4f:cb:89:64:ae:d8:65:32:b1:ec:b3: a0:fc:7f:8d:0c:af:90:db:19:b6:61:7a:2c:fa:e5:4b:7a:45: 12:60:cd:e5:96:28:f6:c9:1c:22:5d:58:19:f1:df:83:08:d0: 1f:61:a7:f5:9f:3a:7a:25:b6:63:d0:71:fd:9e:7e:de:9c:fd: 0f:97:bf:e2:fd:2c:d9:b4:9e:84:04:02:ac:aa:16:dd:3e:61: 41:90:4b:e3:b1:7b:9e:81:e0:b3:b9:47:e7:23:98:9c:19:7e: ee:77:10:9b:d7:f1:e8:d0:a6:42:4e:1e:e9:3c:24:9d:e7:02: f9:33:fd:64:64:6d:f4:71:90:4f:0a:59:bc:d4:ee:a8:2d:31: 0e:ec:48:b1:d9:6e:90:34:a9:d9:11:7c:92:23:30:aa:ea:70: d5:4d:f2:fb:ab:5d:97:6c:96:90:b2:3d:2e:90:8f:f5:a4:7c: fa:a9:53:11:c6:95:08:32:de:be:40:72:32:c6:9e:43:f6:b1: 43:e6:91:79:58:52:72:21:54:68:d0:c8:b7:89:94:f6:e6:eb: 01:cd:90:46:2f:ab:46:4c:a2:46:ef:f5:1c:64:76:81:9e:71: 4b:89:af:a4:89:09:9f:44:95:35:f8:c7:c4:ea:e5:1f:96:15: 6a:6c:05:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwNzAxMDMyOTE1WhcNMjUwNzA4MDMyOTE1WjAYMRYwFAYD VQQDEw02ODYzNTYwYi1iZWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4dLSJsrR4bWvfG4v2QeXBoZpE7m7Cc3trw1muGllujlOiYLXeO/TRqLwDDMs LIECiQf/GZvhtQNlfZloEzhjTd8IuoxWJIDscxiMDXslRpZOT9xhBKoSFYWx5MoK dHnZsb4eyCijYhVy+enn0uU9RQstFUpjnvkKYr8aqLVAQ+ODLzZvsLNhhLtLx/AG wR6hVdKkWgzfE4hBASz7p1hhsbI9f+wSi4T8F6S+8P01BqnnshUO0E+tL55fYYek v9JnJP8mbFhASatKiMNFgkW04XHUpHrcIAQav5/IPixQjfKlZJ3dm4aPnQzFNMUj +jSZzv7jB+zl8QnwnC1p5Roj8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRlIO1f /9CeiyYtRZ+eR3/Oo+rWMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHCzYnbq98T8uJZK7YZTKx7LOg/H+NDK+Q2xm2YXos+uVLekUSYM3l lij2yRwiXVgZ8d+DCNAfYaf1nzp6JbZj0HH9nn7enP0Pl7/i/SzZtJ6EBAKsqhbd PmFBkEvjsXuegeCzuUfnI5icGX7udxCb1/Ho0KZCTh7pPCSd5wL5M/1kZG30cZBP Clm81O6oLTEO7Eix2W6QNKnZEXySIzCq6nDVTfL7q12XbJaQsj0ukI/1pHz6qVMR xpUIMt6+QHIyxp5D9rFD5pF5WFJyIVRo0Mi3iZT25usBzZBGL6tGTKJG7/UcZHaB nnFLia+kiQmfRJU1+MfE6uUflhVqbAV+ -----END CERTIFICATE-----Generated at Tue Jul 1 07:43:20 2025 by rpki-client