$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: lqtt8KN6y6CjjKgt+fCuWHEpHkFkiybwdgHASv3iDKM= Subject key identifier: 18:BB:50:74:7D:51:C0:39:F0:35:77:E8:75:71:40:47:20:32:7C:48 Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 0688 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 067C Signing time: Wed 02 Jul 2025 22:40:04 +0000 Manifest this update: Wed 02 Jul 2025 22:40:04 +0000 Manifest next update: Wed 09 Jul 2025 22:40:04 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: flxGs1sudLtTuPlbmavT4LdXhETMaW9Yv7VshlJw1wo=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: 6WUJgqskzShx2CRmJsEzW4Lp5E25NIFa3cIFrPQTpQE=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: bchSnNZ1JAHUbuS+ZuP7bZtOW8CbMzZJlPlo9vXpT60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1672 (0x688) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Jul 2 22:40:04 2025 GMT Not After : Jul 9 22:40:04 2025 GMT Subject: CN=6865b544-b49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:84:ba:15:66:9d:88:82:82:53:33:be:3d: 20:f7:8c:c3:45:ec:05:74:3b:c1:9e:30:50:2c:95: 6f:3d:bb:04:14:22:7f:4c:cc:aa:1a:ca:37:37:46: 51:4e:64:7d:19:22:c7:25:50:48:94:70:63:e2:af: e2:7c:e0:ea:11:53:e0:48:0f:a9:19:41:c6:ab:f2: 3f:40:9e:9c:07:9d:03:ad:73:f9:24:05:f0:fc:4c: f7:cd:3c:8c:97:eb:4a:3d:7b:7f:05:dd:f3:6e:4b: 9d:a5:41:31:28:e4:76:79:6a:09:79:54:40:6e:e6: 8c:91:06:e8:91:a2:1e:3b:45:c9:20:de:95:c0:88: 40:98:7f:db:f2:1a:d4:ce:51:e2:fe:ce:74:50:2d: 9e:c6:81:de:89:61:be:d2:62:41:5e:4f:22:66:1c: a2:28:8f:18:6d:5d:40:c5:1b:db:be:34:7e:14:25: 60:93:3c:05:b4:66:77:e6:ea:3b:82:44:e6:31:03: 9f:a5:e6:00:2d:bb:70:02:c0:d9:e4:63:74:fe:44: 83:80:fe:44:45:3f:b7:2b:79:4e:bb:29:13:17:22: e2:fa:d9:3f:1b:33:22:09:b2:14:1b:0f:c4:e2:b3: 70:ae:ed:f7:24:5c:17:6c:03:5d:80:b6:f3:dc:0c: e8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:BB:50:74:7D:51:C0:39:F0:35:77:E8:75:71:40:47:20:32:7C:48 X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8f:e6:e4:83:79:fc:cf:0d:5e:35:60:bf:e7:aa:1c:1c:9c: 30:22:aa:af:dc:08:ad:58:2a:75:d5:85:ac:eb:0f:b5:f4:09: 26:ce:92:18:f4:bc:ab:4d:02:e7:71:cb:0d:fa:07:c3:cf:43: 62:24:9c:83:d0:89:4b:26:d4:be:85:94:79:70:35:60:9c:cc: d6:bb:3e:9c:06:55:ab:a6:4a:cb:d2:70:5e:29:fc:77:99:f3: af:33:3f:68:47:c5:bf:e9:48:50:5b:c3:d4:6d:ac:83:06:f6: bd:90:75:0f:9d:0d:c4:b6:39:fd:4e:b9:a1:ae:06:9d:91:e0: 6e:21:3d:02:8d:3c:08:40:7d:33:89:4e:04:85:78:1d:16:36: 45:06:90:a9:51:db:f3:af:e3:cd:f8:4b:ec:01:68:29:24:cf: 7b:76:e5:86:00:33:85:8c:95:8e:31:91:d2:6d:98:00:34:f0: 9f:e0:2f:c7:82:7b:a2:ee:30:1a:ba:02:43:a1:13:1d:d8:3e: 46:17:f2:99:07:f4:fc:a6:44:9c:86:78:3f:38:7b:a3:52:64: 39:fc:0e:3e:14:68:ef:81:20:10:10:b0:90:24:00:bb:8c:2c: 0e:57:86:55:4b:a3:02:cd:1c:3d:1d:31:35:1b:4c:74:51:fd: ef:f9:96:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwNzAyMjI0MDA0WhcNMjUwNzA5MjI0MDA0WjAYMRYwFAYD VQQDEw02ODY1YjU0NC1iNDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRqEuhVmnYiCglMzvj0g94zDRewFdDvBnjBQLJVvPbsEFCJ/TMyqGso3N0ZR TmR9GSLHJVBIlHBj4q/ifODqEVPgSA+pGUHGq/I/QJ6cB50DrXP5JAXw/Ez3zTyM l+tKPXt/Bd3zbkudpUExKOR2eWoJeVRAbuaMkQbokaIeO0XJIN6VwIhAmH/b8hrU zlHi/s50UC2exoHeiWG+0mJBXk8iZhyiKI8YbV1AxRvbvjR+FCVgkzwFtGZ35uo7 gkTmMQOfpeYALbtwAsDZ5GN0/kSDgP5ERT+3K3lOuykTFyLi+tk/GzMiCbIUGw/E 4rNwru33JFwXbANdgLbz3AzoZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBi7UHR9 UcA58DV36HVxQEcgMnxIMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAej+bkg3n8zw1eNWC/56ocHJwwIqqv3AitWCp11YWs6w+19AkmzpIY 9LyrTQLnccsN+gfDz0NiJJyD0IlLJtS+hZR5cDVgnMzWuz6cBlWrpkrL0nBeKfx3 mfOvMz9oR8W/6UhQW8PUbayDBva9kHUPnQ3Etjn9TrmhrgadkeBuIT0CjTwIQH0z iU4EhXgdFjZFBpCpUdvzr+PN+EvsAWgpJM97duWGADOFjJWOMZHSbZgANPCf4C/H gnui7jAaugJDoRMd2D5GF/KZB/T8pkSchng/OHujUmQ5/A4+FGjvgSAQELCQJAC7 jCwOV4ZVS6MCzRw9HTE1G0x0Uf3v+ZYy -----END CERTIFICATE-----Generated at Fri Jul 4 08:40:34 2025 by rpki-client