$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: vxNzZPp/rsnRtSjUBls3eKGtH4Vy2kjbG62JaDFaXlU= Subject key identifier: B3:63:7D:01:59:DC:BF:9F:53:05:9E:F6:01:C5:F9:04:3C:EB:57:31 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0247 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0234 Signing time: Thu 03 Jul 2025 02:20:22 +0000 Manifest this update: Thu 03 Jul 2025 02:20:21 +0000 Manifest next update: Thu 10 Jul 2025 02:20:21 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: EDcMpaI+4he68b2zJlnncudeAoDqZjhSBHUlvE4OOmM=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 583 (0x247) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Jul 3 02:20:21 2025 GMT Not After : Jul 10 02:20:21 2025 GMT Subject: CN=6865e8e5-912e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:bc:41:14:a6:47:8c:fe:93:1e:b6:79:65: 2d:a5:52:69:56:44:8c:af:4d:9a:2c:b9:91:23:e5: 62:46:10:d8:b4:77:b5:76:08:dd:8b:7f:64:68:1e: a3:b3:ca:57:1d:32:ac:bb:e4:32:05:2d:f7:d1:16: 6d:43:96:f8:6e:52:55:fe:ad:a8:a1:d1:41:d1:10: 0e:f6:1d:82:dc:30:f5:0f:75:5a:01:f3:92:e4:dd: 36:8a:d0:81:04:da:d7:ab:09:bd:18:be:56:ac:74: 95:bf:d8:1c:86:33:7a:1f:ca:7f:2a:c4:b4:2f:76: 4e:f3:57:94:be:e7:92:f0:9b:5c:26:3a:50:e6:db: 87:a6:72:a3:bd:8d:fc:18:0d:7c:43:07:26:22:27: d0:1b:a2:fa:c4:c0:1b:cb:a9:d0:7c:e3:42:5b:1b: 48:ee:da:a7:e6:cf:9d:1c:62:66:cf:b6:56:e4:6b: 3b:5a:e6:f9:2f:32:f5:59:a8:33:c4:c3:6f:14:a6: 84:39:05:e2:17:23:72:72:d7:93:45:9a:c4:44:4e: e2:36:ac:19:af:b5:60:d9:ad:6e:11:5d:48:99:cd: 76:e0:76:d9:49:34:7a:d1:11:90:db:1e:6c:50:3c: ca:90:2c:3c:59:c0:1c:c2:6b:1e:8c:b3:6b:c9:35: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:63:7D:01:59:DC:BF:9F:53:05:9E:F6:01:C5:F9:04:3C:EB:57:31 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c3:30:95:89:c9:59:3d:9c:9a:13:24:1a:f3:b8:aa:3a:f2: c1:ff:14:42:51:9e:75:e2:a5:09:8a:a0:c9:de:1b:b2:99:59: ed:6c:dc:22:3e:77:9d:87:02:f4:07:aa:2c:a9:93:01:51:a3: 65:7e:ca:1b:13:e1:76:bf:02:e3:4d:ee:39:8b:bf:fa:a5:c2: be:35:c2:cd:c4:c2:9d:3a:30:c3:4e:9c:25:b7:38:6d:80:2d: 5c:37:fb:da:10:14:28:6e:21:97:1c:4f:f9:67:10:b1:78:7c: a7:f6:ee:09:0f:aa:b3:41:ca:90:fc:d5:f3:61:c5:f5:08:f2: fc:fd:b3:5b:aa:12:25:29:63:24:ce:1e:16:4f:2f:06:ac:83: 51:2d:3c:92:40:1b:3e:63:90:58:d5:9b:b3:6a:92:c0:5c:08: d6:3a:a8:40:2f:7e:86:36:80:4e:c5:4c:5c:5d:2a:e3:36:c0: 73:8b:c5:a3:57:7a:10:2c:b0:11:bd:09:e2:c2:e0:18:fe:b6: ba:a2:c3:3b:1e:38:1c:a4:1a:e2:32:80:19:1d:07:fe:a6:99: 8e:ab:80:10:9d:82:d0:5f:e7:23:9e:53:8e:65:ad:28:91:f2: 71:ce:9b:42:b9:e1:84:74:42:3a:fb:df:99:8f:d5:d3:ae:cf: e0:91:28:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwNzAzMDIyMDIxWhcNMjUwNzEwMDIyMDIxWjAYMRYwFAYD VQQDEw02ODY1ZThlNS05MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiW8QRSmR4z+kx62eWUtpVJpVkSMr02aLLmRI+ViRhDYtHe1dgjdi39kaB6j s8pXHTKsu+QyBS330RZtQ5b4blJV/q2oodFB0RAO9h2C3DD1D3VaAfOS5N02itCB BNrXqwm9GL5WrHSVv9gchjN6H8p/KsS0L3ZO81eUvueS8JtcJjpQ5tuHpnKjvY38 GA18QwcmIifQG6L6xMAby6nQfONCWxtI7tqn5s+dHGJmz7ZW5Gs7Wub5LzL1Wagz xMNvFKaEOQXiFyNycteTRZrERE7iNqwZr7Vg2a1uEV1Imc124HbZSTR60RGQ2x5s UDzKkCw8WcAcwmsejLNryTVgawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNjfQFZ 3L+fUwWe9gHF+QQ861cxMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVwzCViclZPZyaEyQa87iqOvLB/xRCUZ514qUJiqDJ3huymVntbNwi PnedhwL0B6osqZMBUaNlfsobE+F2vwLjTe45i7/6pcK+NcLNxMKdOjDDTpwltzht gC1cN/vaEBQobiGXHE/5ZxCxeHyn9u4JD6qzQcqQ/NXzYcX1CPL8/bNbqhIlKWMk zh4WTy8GrINRLTySQBs+Y5BY1ZuzapLAXAjWOqhAL36GNoBOxUxcXSrjNsBzi8Wj V3oQLLARvQniwuAY/ra6osM7HjgcpBriMoAZHQf+ppmOq4AQnYLQX+cjnlOOZa0o kfJxzptCueGEdEI6+9+Zj9XTrs/gkSiA -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:25 2025 by rpki-client