$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: ZuwQRSgrNztX14fxmXCSTsp2P6o6swn2p/nXPhqK8hk= Subject key identifier: 28:51:98:A8:D4:35:3A:60:EE:22:EB:5E:76:91:E0:F7:44:1F:5A:6A Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 018E Signing time: Tue 01 Jul 2025 03:59:26 +0000 Manifest this update: Tue 01 Jul 2025 03:59:25 +0000 Manifest next update: Tue 08 Jul 2025 03:59:25 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: 5O1WJDvrlOKqyXHeg5VL+3NxC8cUGJ6trE11jZM5934=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: VF+Qy3jNNDjRyR500naqK22zDcvwaaWbguSS+FWiTSk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: Jul 1 03:59:25 2025 GMT Not After : Jul 8 03:59:25 2025 GMT Subject: CN=68635d1d-ba26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d4:c0:f5:5c:c6:ca:33:e6:df:15:fb:d8:ca: 23:0f:05:c0:ea:c3:57:05:73:a1:39:58:ba:09:83: 1b:b5:f0:c7:9e:e7:5c:91:4c:cf:9b:b9:a2:21:2c: ac:e7:35:fd:f9:56:da:02:13:df:c8:8f:75:69:54: fe:76:1b:b7:e0:c9:9c:09:be:2c:d7:a8:b7:d8:58: 23:82:bd:34:0f:5c:54:3b:ff:6a:e9:fb:d7:62:8b: 0e:e6:20:70:88:82:89:ef:3b:8d:d8:37:7d:61:71: 56:7b:65:86:a8:eb:94:b3:2f:50:72:ac:52:f0:ac: 5b:c5:d9:75:0a:e2:45:e3:e6:d9:ff:58:19:36:c2: b1:c8:82:56:8b:bf:d3:50:1a:c8:e4:49:33:cc:ab: 6b:a5:0f:de:91:f3:b1:77:88:52:6e:63:e5:b8:e8: 8d:0f:47:22:68:bd:35:26:c7:d2:9e:84:0f:18:67: f3:b3:20:7a:27:a2:14:6e:65:5f:85:40:ba:54:2e: 30:90:0a:ef:39:e7:e4:d9:e7:69:10:b8:f3:0e:5c: 2b:3e:9e:5c:db:3e:9d:6c:7a:49:58:49:d7:a5:c0: 30:30:cb:5b:f4:27:51:eb:20:e6:9c:1c:c7:c8:ea: 07:a8:85:70:6d:2a:f6:36:d5:f5:7c:3b:0a:bb:17: 73:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:98:A8:D4:35:3A:60:EE:22:EB:5E:76:91:E0:F7:44:1F:5A:6A X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:93:81:f9:dc:96:92:62:cd:ec:9d:61:91:0b:2f:71:e9:a2: 6c:7a:e8:5d:10:f0:d2:39:fc:63:07:fd:0a:d9:37:14:3e:fc: b7:50:75:bb:88:4e:34:6c:d3:e5:5e:41:2b:36:34:0f:6d:f6: 3a:42:57:cc:24:64:5c:9e:3f:74:53:1c:72:d6:27:ed:27:79: b0:e0:dd:7f:1c:78:b1:e1:5e:d1:5f:72:17:f3:6d:3f:9d:5b: 4b:36:18:d5:bb:25:fc:a6:54:60:ec:e2:65:e1:16:27:ee:ac: ba:5b:ad:23:0a:cd:b9:53:4f:24:6f:cd:32:1c:22:dd:4f:c6: ff:8b:5a:f8:bf:38:3f:68:85:3b:03:cd:47:e0:ad:0e:03:80: 2b:b7:c0:47:6c:a5:be:6e:ae:0c:39:77:40:41:1c:9e:32:e5: 86:2b:fa:74:ca:3a:71:bc:96:e3:87:d8:3d:9c:0f:70:f7:19: 53:aa:d1:9c:1f:56:5d:e1:d9:89:d0:49:c0:81:be:bb:bf:08: c3:a4:ed:36:30:b8:42:b3:f4:cc:77:1a:86:1f:c6:b4:82:58: 1d:6d:99:59:a8:a5:2f:bc:89:35:4e:1a:db:1f:ce:a5:2f:c0: e9:1b:8d:ac:e3:5f:d3:42:16:30:8e:6c:2f:27:13:ee:8b:d8: 51:de:66:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUwNzAxMDM1OTI1WhcNMjUwNzA4MDM1OTI1WjAYMRYwFAYD VQQDEw02ODYzNWQxZC1iYTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9TA9VzGyjPm3xX72MojDwXA6sNXBXOhOVi6CYMbtfDHnudckUzPm7miISys 5zX9+VbaAhPfyI91aVT+dhu34MmcCb4s16i32Fgjgr00D1xUO/9q6fvXYosO5iBw iIKJ7zuN2Dd9YXFWe2WGqOuUsy9QcqxS8Kxbxdl1CuJF4+bZ/1gZNsKxyIJWi7/T UBrI5EkzzKtrpQ/ekfOxd4hSbmPluOiND0ciaL01JsfSnoQPGGfzsyB6J6IUbmVf hUC6VC4wkArvOefk2edpELjzDlwrPp5c2z6dbHpJWEnXpcAwMMtb9CdR6yDmnBzH yOoHqIVwbSr2NtX1fDsKuxdzMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChRmKjU NTpg7iLrXnaR4PdEH1pqMB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfk4H53JaSYs3snWGRCy9x6aJseuhdEPDSOfxjB/0K2TcUPvy3UHW7 iE40bNPlXkErNjQPbfY6QlfMJGRcnj90Uxxy1iftJ3mw4N1/HHix4V7RX3IX820/ nVtLNhjVuyX8plRg7OJl4RYn7qy6W60jCs25U08kb80yHCLdT8b/i1r4vzg/aIU7 A81H4K0OA4Art8BHbKW+bq4MOXdAQRyeMuWGK/p0yjpxvJbjh9g9nA9w9xlTqtGc H1Zd4dmJ0EnAgb67vwjDpO02MLhCs/TMdxqGH8a0glgdbZlZqKUvvIk1ThrbH86l L8DpG42s41/TQhYwjmwvJxPui9hR3mae -----END CERTIFICATE-----Generated at Tue Jul 1 19:12:44 2025 by rpki-client