$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: b2wbR9rudUzUKn6Kue18CTp3HVwWKpeAJZ47UJXmQJE= Subject key identifier: AA:7E:21:EC:8B:8D:88:89:D6:5C:3F:BF:7E:49:6B:AF:DB:48:6F:4F Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: B3 Signing time: Sat 07 Jun 2025 05:33:10 +0000 Manifest this update: Sat 07 Jun 2025 05:33:09 +0000 Manifest next update: Sat 14 Jun 2025 05:33:09 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: uPUYhoGyLT7WyczSXKZNAilG80PyRFEcrchJHnwTepI=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 05:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Jun 7 05:33:09 2025 GMT Not After : Jun 14 05:33:09 2025 GMT Subject: CN=6843cf16-01fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:3a:ad:f9:19:71:06:2f:88:98:44:95:69: 85:ba:9b:d2:c0:b7:5e:2b:5c:8b:96:e2:f5:05:86: a7:a3:c9:e5:74:42:8e:bc:2a:a4:7b:68:f1:8d:ad: ab:0e:cc:9a:87:65:ef:2c:4c:5f:8a:27:09:c0:d4: c4:3b:2a:36:5d:5d:43:0c:96:80:93:24:ce:19:0e: fd:36:59:2e:26:1c:b3:a3:b1:75:77:f2:2d:a7:8c: aa:2c:68:4e:f9:a5:3f:fa:5f:e1:37:6d:f9:e7:dd: 40:a2:70:ff:2b:d1:cc:5c:9f:79:7f:0a:29:2e:7f: bc:82:af:56:2e:72:11:7c:d0:16:af:d1:2d:2d:3a: 59:e2:cf:96:fd:93:50:60:1c:60:fd:11:70:9d:8c: 94:29:05:24:04:b4:94:05:5e:cc:52:65:25:f9:3a: fc:eb:81:45:ed:51:a9:bf:41:9f:5e:64:f5:e3:1f: 81:9d:76:9a:15:ee:eb:d2:d2:3c:b7:59:37:30:48: 88:51:2c:22:56:63:50:c6:f0:fc:2f:89:27:75:68: d3:a3:c4:d9:a2:aa:c9:41:2d:30:b1:22:f3:5d:83: 62:b2:b4:2d:6a:d5:78:f1:90:99:0e:a5:c5:84:d0: cd:56:ce:04:a0:20:de:71:bc:41:fd:24:49:47:40: a7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7E:21:EC:8B:8D:88:89:D6:5C:3F:BF:7E:49:6B:AF:DB:48:6F:4F X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:cc:cb:f3:3d:ad:67:2d:b6:6b:40:dd:cc:84:10:d6:d0:9c: d7:5f:09:61:1f:ea:0b:0c:31:82:81:c8:31:09:32:eb:07:d7: b6:ef:00:de:4f:10:06:5c:f6:eb:c4:c9:cf:8a:56:bf:84:81: 13:6b:eb:a8:8d:48:69:15:23:69:c1:57:aa:22:5b:20:ec:2d: 16:54:18:19:10:ab:c2:6d:1a:90:58:9d:64:1a:d1:3d:88:bc: 40:6d:e3:72:34:0e:d3:42:eb:e7:39:fd:3f:8e:aa:d2:87:ac: c0:b9:61:68:ea:7a:c7:62:48:ba:6f:a3:60:48:a7:86:14:b8: 70:18:d0:c6:b3:9d:85:ce:0e:51:c2:59:16:fa:7d:f3:d0:66: 87:9a:2d:52:8b:ee:e0:bb:8c:50:5d:50:96:85:c8:7b:07:13: fe:c7:26:f6:c2:30:49:b4:88:9f:13:46:2d:8a:03:2c:8b:15: 63:b3:b3:4f:1f:6d:03:e0:41:29:91:7a:a6:c4:91:10:42:57: c8:8a:e0:5a:17:32:b9:1f:3c:63:cf:1d:3f:fa:76:ef:08:e8: 81:82:bd:b7:73:9f:a1:4e:ba:2c:36:ab:a5:5c:62:ef:9a:74: 2e:23:01:65:d8:14:32:bd:be:db:1f:80:5f:f0:90:01:f5:d7: 7e:73:16:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwNjA3MDUzMzA5WhcNMjUwNjE0MDUzMzA5WjAYMRYwFAYD VQQDEw02ODQzY2YxNi0wMWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8U6rfkZcQYviJhElWmFupvSwLdeK1yLluL1BYano8nldEKOvCqke2jxja2r Dsyah2XvLExfiicJwNTEOyo2XV1DDJaAkyTOGQ79NlkuJhyzo7F1d/Itp4yqLGhO +aU/+l/hN235591AonD/K9HMXJ95fwopLn+8gq9WLnIRfNAWr9EtLTpZ4s+W/ZNQ YBxg/RFwnYyUKQUkBLSUBV7MUmUl+Tr864FF7VGpv0GfXmT14x+BnXaaFe7r0tI8 t1k3MEiIUSwiVmNQxvD8L4kndWjTo8TZoqrJQS0wsSLzXYNisrQtatV48ZCZDqXF hNDNVs4EoCDecbxB/SRJR0CnyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKp+IeyL jYiJ1lw/v35Ja6/bSG9PMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAzMvzPa1nLbZrQN3MhBDW0JzXXwlhH+oLDDGCgcgxCTLrB9e27wDe TxAGXPbrxMnPila/hIETa+uojUhpFSNpwVeqIlsg7C0WVBgZEKvCbRqQWJ1kGtE9 iLxAbeNyNA7TQuvnOf0/jqrSh6zAuWFo6nrHYki6b6NgSKeGFLhwGNDGs52Fzg5R wlkW+n3z0GaHmi1Si+7gu4xQXVCWhch7BxP+xyb2wjBJtIifE0YtigMsixVjs7NP H20D4EEpkXqmxJEQQlfIiuBaFzK5Hzxjzx0/+nbvCOiBgr23c5+hTrosNqulXGLv mnQuIwFl2BQyvb7bH4Bf8JAB9dd+cxaJ -----END CERTIFICATE-----Generated at Sun Jun 8 23:50:33 2025 by rpki-client