$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: saj04nJ0jbTWnM8TmdbxxHtzSO3qIJ2FOiYTsPzf+P0= Subject key identifier: 2F:46:00:81:D5:40:02:56:C0:DC:C3:9B:89:39:53:80:27:C9:64:2F Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 01AD Signing time: Sat 31 May 2025 02:53:15 +0000 Manifest this update: Sat 31 May 2025 02:53:15 +0000 Manifest next update: Sat 07 Jun 2025 02:53:15 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: WOErxn4IMwEyj+Dg4H69S3tPT0jKk77v5Bt/J82eOd0=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: 1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: May 31 02:53:15 2025 GMT Not After : Jun 7 02:53:15 2025 GMT Subject: CN=683a6f1b-510f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:62:9c:d6:7b:d6:85:88:e0:de:4e:de:f2:99: 62:53:77:d1:7b:5b:61:e3:15:54:08:f3:02:48:61: 4e:ae:41:21:30:ec:c4:c3:19:1c:7f:60:d1:c1:fb: 6f:9d:76:de:3b:f9:6c:0f:b6:32:fb:b4:41:27:ff: 4d:8a:07:3a:ea:15:77:fc:9b:e5:56:05:44:f5:8d: 59:32:56:d9:c1:3d:69:6d:d9:8f:f0:4d:08:9d:bb: e5:54:fb:5b:a7:ab:43:32:19:14:00:dd:3f:39:1b: 61:ec:69:f0:32:d8:fc:de:9e:98:f4:cd:3a:08:4f: e1:a9:f8:45:e2:67:33:b9:2f:a0:ef:14:41:30:14: f9:d4:cd:7b:50:7d:ce:8f:35:72:63:fe:e4:4f:0e: 0c:af:74:9c:97:d9:da:36:53:48:eb:9a:46:54:cd: 4d:23:e9:9b:de:41:48:7c:b6:d9:41:86:5d:a7:fe: 18:23:cb:a7:75:e7:01:d1:31:61:df:ee:e5:58:15: d4:68:63:f1:c9:58:a9:05:61:79:a9:46:be:e3:e0: a5:cb:25:1e:1b:a2:4d:f5:9f:63:77:ab:1c:60:bc: ca:08:ec:57:2c:c3:17:e5:50:b7:95:30:b3:85:ba: 9e:ab:05:fe:3e:e9:22:94:34:cd:45:ae:c1:8c:6f: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:00:81:D5:40:02:56:C0:DC:C3:9B:89:39:53:80:27:C9:64:2F X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:da:bc:f0:8e:6b:c1:79:a0:da:fb:a3:f6:5f:80:6c:a1:19: 73:8c:dd:7d:ef:09:1b:ec:d4:75:28:12:d9:c9:11:d4:e0:9c: 50:94:5a:c6:d5:35:11:eb:c1:67:a6:d2:d2:14:ed:d1:f1:3e: 5d:5e:e0:25:a5:a8:fe:d9:55:47:38:34:d5:16:4e:48:0a:3a: ec:97:e6:7c:c4:92:c2:ab:d0:d6:65:a1:04:a8:67:8b:75:04: 14:3d:b0:03:60:da:44:eb:dd:eb:ba:92:2d:ec:db:35:a8:e1: a4:27:27:92:d4:31:aa:e3:7b:3a:87:f7:b1:7b:ec:cc:8a:41: 78:6b:9f:c9:b5:e3:83:3e:8d:39:f3:d3:f0:41:5b:32:25:e2: 3e:37:ff:db:9f:c7:52:8b:28:96:c3:42:c2:a9:85:6a:69:fe: ec:e2:c0:bf:60:e5:98:45:f3:59:13:58:03:a8:51:66:a3:5e: 86:72:0c:c3:b6:94:e4:06:9e:8b:88:b4:53:ec:b9:c1:69:28: 3c:b6:ec:98:b0:fc:b7:cf:d9:64:a7:73:45:7b:8b:f9:b6:45: 0a:4a:00:9f:1e:eb:4b:65:22:b7:4a:a2:56:d7:97:7c:bf:78: 5f:dc:30:7c:9c:b4:60:6b:a2:db:08:c3:9e:85:86:53:f3:03: b4:8a:c3:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUwNTMxMDI1MzE1WhcNMjUwNjA3MDI1MzE1WjAYMRYwFAYD VQQDEw02ODNhNmYxYi01MTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2Kc1nvWhYjg3k7e8pliU3fRe1th4xVUCPMCSGFOrkEhMOzEwxkcf2DRwftv nXbeO/lsD7Yy+7RBJ/9Nigc66hV3/JvlVgVE9Y1ZMlbZwT1pbdmP8E0InbvlVPtb p6tDMhkUAN0/ORth7GnwMtj83p6Y9M06CE/hqfhF4mczuS+g7xRBMBT51M17UH3O jzVyY/7kTw4Mr3Scl9naNlNI65pGVM1NI+mb3kFIfLbZQYZdp/4YI8undecB0TFh 3+7lWBXUaGPxyVipBWF5qUa+4+ClyyUeG6JN9Z9jd6scYLzKCOxXLMMX5VC3lTCz hbqeqwX+PukilDTNRa7BjG8aQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9GAIHV QAJWwNzDm4k5U4AnyWQvMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK2rzwjmvBeaDa+6P2X4BsoRlzjN197wkb7NR1KBLZyRHU4JxQlFrG 1TUR68FnptLSFO3R8T5dXuAlpaj+2VVHODTVFk5ICjrsl+Z8xJLCq9DWZaEEqGeL dQQUPbADYNpE693rupIt7Ns1qOGkJyeS1DGq43s6h/exe+zMikF4a5/JteODPo05 89PwQVsyJeI+N//bn8dSiyiWw0LCqYVqaf7s4sC/YOWYRfNZE1gDqFFmo16GcgzD tpTkBp6LiLRT7LnBaSg8tuyYsPy3z9lkp3NFe4v5tkUKSgCfHutLZSK3SqJW15d8 v3hf3DB8nLRga6LbCMOehYZT8wO0isPz -----END CERTIFICATE-----Generated at Sat May 31 17:44:11 2025 by rpki-client