$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: eVG1SNo9/88t2+f+MwZakaX+zUNLmVKkECFC3JcMDAg= Subject key identifier: 30:22:F3:28:21:89:7E:8D:84:3D:40:3C:B2:61:FB:F7:50:6D:13:EE Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0624 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 0601 Signing time: Fri 30 May 2025 23:17:13 +0000 Manifest this update: Fri 30 May 2025 23:17:12 +0000 Manifest next update: Fri 06 Jun 2025 23:17:12 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: cxGlNznyLOXm/9ETpVwQLfXJAywmmkCKiQES+XyjXLQ=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: aiFrMbTQ8pa6qGrU9w8Y+h6k5VVyo8+mDWmigq+L7zE=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1572 (0x624) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: May 30 23:17:12 2025 GMT Not After : Jun 6 23:17:12 2025 GMT Subject: CN=683a3c78-c07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5a:b2:cd:0c:c4:4b:26:fc:46:44:aa:2d:96: d4:38:9d:16:2c:2a:02:d2:17:08:ff:be:fe:a2:af: e1:51:d7:64:20:1a:02:99:71:df:c1:b7:ae:db:e0: 12:93:81:92:68:56:47:94:e1:27:98:de:0a:39:86: a1:ed:97:ea:cf:32:5b:bc:87:9f:bb:82:d8:54:d8: 08:01:bb:20:41:43:a0:e7:a7:0c:12:82:16:2b:7f: 5d:6a:09:97:66:bb:ba:ae:93:0c:70:08:e6:7e:ea: 5a:54:31:fb:33:41:eb:5a:23:df:63:c6:65:e3:ad: ad:a1:f0:57:67:46:59:66:4c:54:f8:d0:4c:d3:63: 82:11:ce:ea:82:59:13:41:3a:39:fa:2d:d2:53:6e: 3c:27:f6:78:10:ba:c1:60:cb:3c:c6:4f:2f:60:7e: 68:af:65:0c:7f:e2:08:70:45:88:f9:38:ae:55:01: 36:5b:9e:53:2b:f5:f2:e2:a4:d2:07:29:b9:84:29: 25:a3:d2:a3:cf:38:5c:3c:d8:c6:b8:c5:48:2b:0c: ee:70:33:64:28:36:a8:9d:49:fd:8a:25:1e:eb:d0: e8:52:f8:a2:ac:22:94:12:e4:05:9a:79:1f:e8:2f: a1:67:42:bc:6f:db:d1:78:1e:36:46:e2:d8:41:48: 45:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:F3:28:21:89:7E:8D:84:3D:40:3C:B2:61:FB:F7:50:6D:13:EE X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:86:65:f2:8b:4b:0a:81:a8:b7:d9:ba:0b:48:cb:fc:d7:1d: 93:1a:08:e2:9b:5d:79:3c:4a:9f:04:2c:39:4a:e8:f0:00:fd: ba:62:b9:f6:8c:7e:47:1b:e1:0f:a5:9b:1a:31:da:80:b9:58: 11:c8:bb:e0:0d:37:eb:01:37:11:73:8c:7d:42:0d:ee:d8:a3: e2:ff:de:05:1c:43:72:36:36:c9:20:24:28:95:53:d0:4d:45: bc:aa:71:ac:19:a0:83:e8:76:23:4b:e0:bb:7c:e5:a9:57:58: 3b:9a:47:9a:bb:16:7c:3b:c8:0c:9b:e4:99:34:f7:fb:ae:dc: 0a:de:42:a0:06:96:36:b8:76:fb:f3:f3:65:e5:39:62:83:b6: 15:8e:f1:22:74:51:05:92:35:4c:9d:35:3e:76:2f:22:cf:31: 25:89:3a:17:00:66:2c:c5:8a:aa:b7:6f:d4:11:00:6c:e6:2c: 5f:e7:cf:f4:e0:0f:66:3e:aa:09:c7:c5:33:59:7b:cb:3f:5c: 93:4b:cf:11:b5:21:dd:e9:95:43:3b:96:e0:b6:bf:42:ae:b1: 63:05:dc:7b:cc:f4:51:88:97:c0:14:1a:8a:46:d7:ae:fe:7a: 5d:b7:e0:14:57:6a:85:04:25:08:2d:9d:eb:46:6c:c4:d6:a9: 74:1a:ed:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwNTMwMjMxNzEyWhcNMjUwNjA2MjMxNzEyWjAYMRYwFAYD VQQDEw02ODNhM2M3OC1jMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8VqyzQzESyb8RkSqLZbUOJ0WLCoC0hcI/77+oq/hUddkIBoCmXHfwbeu2+AS k4GSaFZHlOEnmN4KOYah7ZfqzzJbvIefu4LYVNgIAbsgQUOg56cMEoIWK39dagmX Zru6rpMMcAjmfupaVDH7M0HrWiPfY8Zl462tofBXZ0ZZZkxU+NBM02OCEc7qglkT QTo5+i3SU248J/Z4ELrBYMs8xk8vYH5or2UMf+IIcEWI+TiuVQE2W55TK/Xy4qTS Bym5hCklo9KjzzhcPNjGuMVIKwzucDNkKDaonUn9iiUe69DoUviirCKUEuQFmnkf 6C+hZ0K8b9vReB42RuLYQUhF+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAi8ygh iX6NhD1APLJh+/dQbRPuMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKhmXyi0sKgai32boLSMv81x2TGgjim115PEqfBCw5SujwAP26Yrn2 jH5HG+EPpZsaMdqAuVgRyLvgDTfrATcRc4x9Qg3u2KPi/94FHENyNjbJICQolVPQ TUW8qnGsGaCD6HYjS+C7fOWpV1g7mkeauxZ8O8gMm+SZNPf7rtwK3kKgBpY2uHb7 8/Nl5Tlig7YVjvEidFEFkjVMnTU+di8izzEliToXAGYsxYqqt2/UEQBs5ixf58/0 4A9mPqoJx8UzWXvLP1yTS88RtSHd6ZVDO5bgtr9CrrFjBdx7zPRRiJfAFBqKRteu /npdt+AUV2qFBCUILZ3rRmzE1ql0Gu0h -----END CERTIFICATE-----Generated at Sat May 31 16:27:54 2025 by rpki-client