$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: VmHe4dj7NNWf4YiHc2svLTrlPLY2o+oI3VLw05vMSGo= Subject key identifier: 26:3C:99:0D:78:66:B7:DE:07:F0:1D:C9:B5:8D:D6:2C:03:70:AE:A7 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 06DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06D4 Signing time: Fri 30 May 2025 22:41:48 +0000 Manifest this update: Fri 30 May 2025 22:41:48 +0000 Manifest next update: Fri 06 Jun 2025 22:41:48 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: Ny0OCN4ljxW3HSpRhqIirJ0i7CV+HnnjA8PvzjzQ420=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: nS8BBJyH5MUGObSYJ3dgBqWPEE+Ak2G7WYEplUOFwrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1755 (0x6db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: May 30 22:41:48 2025 GMT Not After : Jun 6 22:41:48 2025 GMT Subject: CN=683a342c-25f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:f5:2e:07:1b:d8:db:c6:43:23:3c:55:c2: 9a:b8:53:ea:c3:ff:a0:17:95:c4:89:1f:f9:3f:24: f3:e8:af:89:51:fd:52:0c:96:a7:5e:65:46:4e:19: 16:b4:23:84:00:6d:bd:c5:06:4f:79:c5:0f:05:70: 96:92:22:91:b8:4e:47:21:24:60:05:07:c4:7b:1e: 2e:5e:8a:1f:4b:0f:2b:f9:ae:d1:13:fb:9b:1b:09: 00:87:78:b9:3a:09:c7:da:c5:ea:5c:37:28:c0:d2: 92:cc:41:b9:68:39:41:36:23:05:e0:e8:2d:2b:99: c1:c3:2c:46:3a:40:c3:12:b1:11:70:09:ef:92:4c: 38:46:97:c2:67:7a:b3:e5:02:e7:ce:52:8d:2f:ed: c3:4e:9d:97:9e:2e:78:57:07:4d:ff:37:7f:a5:48: 3b:69:08:ae:58:ae:88:e0:37:d5:6b:ae:d8:25:08: 5e:70:15:89:1b:25:25:ec:ae:9e:7e:4c:73:7b:3d: 05:c3:ec:13:cc:26:01:e3:3f:c0:07:2a:1b:b9:59: ee:d8:77:0e:60:80:40:14:e8:cf:b6:fc:8c:76:26: a5:3d:80:3b:37:a8:6a:e6:3e:86:0f:51:51:77:88: e6:bf:6f:21:27:d4:e3:82:9e:4c:a8:f7:86:e8:c7: 14:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3C:99:0D:78:66:B7:DE:07:F0:1D:C9:B5:8D:D6:2C:03:70:AE:A7 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:72:ba:fc:e5:9a:b7:5e:ff:d0:ae:5b:f3:da:1b:28:c5:cd: a5:af:f4:bf:d1:09:2b:64:6f:04:ff:3d:c8:13:e6:5b:0d:69: 2c:f8:fc:99:de:0a:3e:d6:ef:5d:10:51:ab:56:ee:e9:53:ec: 6f:7c:46:6d:03:e2:00:b8:d7:86:1d:cb:ef:f9:fa:4a:26:15: 65:c7:2f:ee:10:ef:77:cb:05:5d:08:8d:25:9b:e4:52:ee:e7: d3:0f:cf:86:69:f6:c1:de:2d:aa:4d:5d:5e:ba:cb:aa:b8:7f: 4a:0c:95:ff:16:ae:3b:2f:ae:42:fb:bb:e7:2e:24:35:42:d6: fd:2f:64:02:90:53:89:cf:de:46:8c:c5:73:bf:5b:93:5a:f1: da:0c:95:8f:40:16:55:16:5d:e1:b3:46:f5:29:3e:ae:13:31: b1:a9:2e:f5:44:fd:15:e8:f6:02:30:84:98:8b:2f:ba:39:1a: 2d:94:de:0a:cf:d9:51:db:ea:45:f3:12:1e:4f:a7:ab:e4:41: f4:2e:f0:36:3e:45:1a:3a:b3:5c:72:26:49:6f:98:00:f2:27: 78:22:bd:20:27:15:5d:b2:7d:8f:4d:a9:db:9f:34:83:60:08: ad:e2:3f:63:ba:27:6b:68:7f:ac:7b:9f:25:47:65:63:c8:02: e3:66:e5:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwNTMwMjI0MTQ4WhcNMjUwNjA2MjI0MTQ4WjAYMRYwFAYD VQQDEw02ODNhMzQyYy0yNWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbn1Lgcb2NvGQyM8VcKauFPqw/+gF5XEiR/5PyTz6K+JUf1SDJanXmVGThkW tCOEAG29xQZPecUPBXCWkiKRuE5HISRgBQfEex4uXoofSw8r+a7RE/ubGwkAh3i5 OgnH2sXqXDcowNKSzEG5aDlBNiMF4OgtK5nBwyxGOkDDErERcAnvkkw4RpfCZ3qz 5QLnzlKNL+3DTp2Xni54VwdN/zd/pUg7aQiuWK6I4DfVa67YJQhecBWJGyUl7K6e fkxzez0Fw+wTzCYB4z/AByobuVnu2HcOYIBAFOjPtvyMdialPYA7N6hq5j6GD1FR d4jmv28hJ9Tjgp5MqPeG6McUQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCY8mQ14 ZrfeB/AdybWN1iwDcK6nMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLcrr85Zq3Xv/Qrlvz2hsoxc2lr/S/0QkrZG8E/z3IE+ZbDWks+PyZ 3go+1u9dEFGrVu7pU+xvfEZtA+IAuNeGHcvv+fpKJhVlxy/uEO93ywVdCI0lm+RS 7ufTD8+GafbB3i2qTV1eusuquH9KDJX/Fq47L65C+7vnLiQ1Qtb9L2QCkFOJz95G jMVzv1uTWvHaDJWPQBZVFl3hs0b1KT6uEzGxqS71RP0V6PYCMISYiy+6ORotlN4K z9lR2+pF8xIeT6er5EH0LvA2PkUaOrNcciZJb5gA8id4Ir0gJxVdsn2PTanbnzSD YAit4j9juidraH+se58lR2VjyALjZuV8 -----END CERTIFICATE-----Generated at Sat May 31 14:55:07 2025 by rpki-client