$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: f/Y9lz+XvJ0cIHC7ta0EEXu/QI47+21kAr5kOCZxVM0= Subject key identifier: 71:2C:BA:C4:6C:96:9E:4B:F1:28:13:05:47:64:EE:E6:FA:2C:F5:E8 Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 2A11 Signing time: Sat 31 May 2025 15:34:01 +0000 Manifest this update: Sat 31 May 2025 15:34:01 +0000 Manifest next update: Sat 07 Jun 2025 15:34:01 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: VJCE0eKspgJNYLWHR31e+JkJ86GYrnIUTVa7MyfAjEQ=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10812 (0x2a3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED, serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Validity Not Before: May 31 15:34:01 2025 GMT Not After : Jun 7 15:34:01 2025 GMT Subject: CN=683b2169-218c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:a9:ea:bb:cf:a3:c6:10:84:e7:dd:42:76: 4a:17:d4:29:b0:d1:0f:22:9e:52:a9:2b:ef:98:c1: 1e:a8:5b:6a:18:7f:1e:98:6d:e9:67:51:63:17:8d: 42:6f:c9:15:f8:58:c3:67:4f:03:5e:ad:8f:33:03: 7f:ed:6a:34:e3:0b:d1:e3:05:30:e8:95:a3:3d:69: 58:fd:1b:b6:ab:d2:44:1c:a3:cf:c4:0f:4f:c9:92: f2:d8:ca:de:6b:de:41:e5:a9:bf:cd:3e:a5:a4:71: d5:a2:04:1a:0a:89:78:ff:98:f1:de:e3:59:6e:4f: 2e:42:62:e2:78:b1:66:0a:ee:ca:11:5e:3e:e5:dd: de:3c:d6:7b:be:1f:a9:68:c6:39:4e:50:dd:63:af: f4:27:29:7b:83:c7:bc:67:58:39:07:b3:89:d1:95: af:98:45:69:6b:f9:b1:7e:df:92:55:a8:13:d6:d0: f2:78:9c:c6:1a:19:3a:25:9d:96:95:b6:35:5a:a3: b0:71:1c:c2:16:58:41:50:8e:aa:12:87:24:82:78: 62:d2:a8:f0:82:5c:2e:06:0e:db:f5:ce:51:24:4c: 52:71:79:e1:34:4d:37:52:0d:28:7b:67:c9:4b:ad: 0a:1b:44:eb:21:26:e2:ef:0e:56:46:ed:3e:69:8e: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2C:BA:C4:6C:96:9E:4B:F1:28:13:05:47:64:EE:E6:FA:2C:F5:E8 X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:56:a3:05:7d:3e:a8:e1:5e:08:53:6e:86:db:eb:a1:67:c8: 25:7a:cb:11:31:ce:32:fc:dc:f5:58:e1:e7:4d:12:07:9b:d5: 92:cd:ab:4b:be:06:0b:1f:f3:f6:10:a6:8a:6d:ba:2b:c9:3a: 0a:77:cb:de:d4:c6:ff:16:68:79:10:a4:cc:d3:c1:c2:f2:11: 81:8b:a4:ad:8f:25:81:a6:13:76:3a:37:51:2d:1b:1a:49:c8: 49:4c:76:ad:ef:67:bf:b3:d2:5f:99:11:27:a4:2f:a3:be:02: 7c:ad:61:4d:6f:2c:06:b6:0b:75:39:60:45:e5:db:94:8a:cc: 82:33:07:7d:95:f5:fb:27:53:8b:6e:41:46:1d:7a:05:8f:84: 33:40:0a:a0:6f:99:24:d7:61:d6:b5:91:15:59:59:3a:4b:64: b6:09:64:57:ec:b8:b8:a5:34:a8:1f:72:fd:76:80:3d:af:89: fd:fd:94:c7:58:1d:75:73:53:fc:7e:9e:8b:79:78:c8:e9:80: 4c:a4:7f:96:73:1f:1d:21:0a:66:b9:60:18:b7:7a:61:e5:20: 2b:1c:2b:3a:c7:3c:e6:0b:4d:6e:1d:60:f1:4b:db:ce:5c:a1: 3b:4b:97:68:0d:9b:6c:d3:f7:15:51:0c:2b:67:82:e9:e0:a3: 41:77:6f:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUwNTMxMTUzNDAxWhcNMjUwNjA3MTUzNDAxWjAYMRYwFAYD VQQDEw02ODNiMjE2OS0yMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TSp6rvPo8YQhOfdQnZKF9QpsNEPIp5SqSvvmMEeqFtqGH8emG3pZ1FjF41C b8kV+FjDZ08DXq2PMwN/7Wo04wvR4wUw6JWjPWlY/Ru2q9JEHKPPxA9PyZLy2Mre a95B5am/zT6lpHHVogQaCol4/5jx3uNZbk8uQmLieLFmCu7KEV4+5d3ePNZ7vh+p aMY5TlDdY6/0Jyl7g8e8Z1g5B7OJ0ZWvmEVpa/mxft+SVagT1tDyeJzGGhk6JZ2W lbY1WqOwcRzCFlhBUI6qEockgnhi0qjwglwuBg7b9c5RJExScXnhNE03Ug0oe2fJ S60KG0TrISbi7w5WRu0+aY5phwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEsusRs lp5L8SgTBUdk7ub6LPXoMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8VqMFfT6o4V4IU26G2+uhZ8glessRMc4y/Nz1WOHnTRIHm9WSzatL vgYLH/P2EKaKbboryToKd8ve1Mb/Fmh5EKTM08HC8hGBi6StjyWBphN2OjdRLRsa SchJTHat72e/s9JfmREnpC+jvgJ8rWFNbywGtgt1OWBF5duUisyCMwd9lfX7J1OL bkFGHXoFj4QzQAqgb5kk12HWtZEVWVk6S2S2CWRX7Li4pTSoH3L9doA9r4n9/ZTH WB11c1P8fp6LeXjI6YBMpH+Wcx8dIQpmuWAYt3ph5SArHCs6xzzmC01uHWDxS9vO XKE7S5doDZts0/cVUQwrZ4Lp4KNBd2/+ -----END CERTIFICATE-----Generated at Mon Jun 2 07:15:15 2025 by rpki-client