$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: yquLfOKZ34u6wS5nDZ+0NtBZYALPSHUmKBcKjHqaPl8= Subject key identifier: 2B:42:E9:55:E8:93:0D:95:E9:F9:F8:63:EA:3B:32:1D:9C:19:39:03 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 02AE Signing time: Sat 07 Jun 2025 01:30:27 +0000 Manifest this update: Sat 07 Jun 2025 01:30:27 +0000 Manifest next update: Sat 14 Jun 2025 01:30:27 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: zSdvo0xynM0SxSUQvkiyVjqV0OHYBZnVZEMHff4NyJY=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 01:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Jun 7 01:30:27 2025 GMT Not After : Jun 14 01:30:27 2025 GMT Subject: CN=68439633-a8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:68:5d:3d:2b:40:bc:e3:74:dd:ef:c2:44:b1: 94:4f:5f:90:ec:8b:23:00:5f:36:eb:8e:07:df:69: 67:28:c8:8a:b8:57:87:e3:a0:ef:24:64:7f:f1:cb: 19:35:b5:a9:69:d6:2c:f0:b9:55:ed:f1:26:09:31: 15:ac:b9:ad:9e:52:c3:02:b9:bb:86:d4:60:9a:fd: bf:5a:26:5b:d3:e4:5e:26:04:3a:36:60:d6:ef:32: 61:1d:66:3c:a5:9c:e3:75:d9:74:e0:8c:0a:df:c1: 7b:53:e9:0d:5b:b9:3b:10:4b:76:40:87:8f:71:c1: a1:39:a7:05:90:80:7b:7a:b2:25:f5:74:81:00:6b: 42:32:a5:a8:0a:e8:88:ab:db:3c:0c:53:a8:fd:99: 91:df:a3:d1:bc:7a:5e:f5:89:6b:f2:b3:93:cb:48: 5d:6a:24:46:ae:2e:fa:84:42:8a:d3:dc:33:9d:25: 39:95:1b:62:c2:1d:16:cb:26:11:70:a7:2e:fc:b1: d2:8a:8f:fd:07:3e:7e:f9:00:e9:47:02:52:1a:a2: e6:f5:f5:eb:2e:a8:34:81:d6:56:b3:09:79:88:97: e4:49:07:b2:be:6c:88:4b:59:84:5d:a8:a2:79:74: df:cc:95:25:40:1f:22:1c:25:f1:59:78:2b:39:8f: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:42:E9:55:E8:93:0D:95:E9:F9:F8:63:EA:3B:32:1D:9C:19:39:03 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:87:d9:e6:42:79:50:66:dd:1e:25:11:3c:fa:39:a1:35:81: 8a:22:cf:3a:44:4f:c3:ca:2e:16:b7:16:45:9b:b8:a1:3e:32: 36:60:37:6e:57:6a:21:4f:3f:97:29:e4:7a:fe:14:29:7e:42: 16:db:65:1c:95:61:7e:fa:c2:cf:db:d5:1b:45:15:2d:ff:75: 79:7c:41:4d:1a:53:3a:ba:39:8e:10:04:e4:c5:ab:a0:88:28: d6:67:50:74:e7:01:16:32:d6:1c:68:f4:99:a1:c8:8e:9f:1e: 08:da:6d:ce:c7:ed:2c:38:3f:af:b2:ea:83:62:88:1f:12:8d: 3b:bc:c5:0b:ab:65:11:ca:5c:93:dd:96:47:fd:5d:1c:1e:be: 57:dd:78:ae:9b:2d:b0:49:ed:b3:0b:8b:92:71:a3:48:95:0f: 7e:bf:9e:b6:85:a5:91:14:84:68:1f:cd:25:92:07:7b:97:c8: 14:3c:3b:8a:11:f0:82:26:d3:c5:36:fb:ab:ad:e9:8a:02:44: 2d:91:6f:6e:39:10:2c:db:24:83:c0:e8:aa:b7:01:01:fb:cf: b7:e8:04:a8:e2:0d:41:48:6f:c6:d7:df:8d:6a:99:33:17:93: 07:78:f3:37:58:a8:80:b6:51:df:18:6f:af:09:fc:02:05:9b: 60:fb:81:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwNjA3MDEzMDI3WhcNMjUwNjE0MDEzMDI3WjAYMRYwFAYD VQQDEw02ODQzOTYzMy1hOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWhdPStAvON03e/CRLGUT1+Q7IsjAF82644H32lnKMiKuFeH46DvJGR/8csZ NbWpadYs8LlV7fEmCTEVrLmtnlLDArm7htRgmv2/WiZb0+ReJgQ6NmDW7zJhHWY8 pZzjddl04IwK38F7U+kNW7k7EEt2QIePccGhOacFkIB7erIl9XSBAGtCMqWoCuiI q9s8DFOo/ZmR36PRvHpe9Ylr8rOTy0hdaiRGri76hEKK09wznSU5lRtiwh0WyyYR cKcu/LHSio/9Bz5++QDpRwJSGqLm9fXrLqg0gdZWswl5iJfkSQeyvmyIS1mEXaii eXTfzJUlQB8iHCXxWXgrOY9XjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtC6VXo kw2V6fn4Y+o7Mh2cGTkDMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAh9nmQnlQZt0eJRE8+jmhNYGKIs86RE/Dyi4WtxZFm7ihPjI2YDdu V2ohTz+XKeR6/hQpfkIW22UclWF++sLP29UbRRUt/3V5fEFNGlM6ujmOEATkxaug iCjWZ1B05wEWMtYcaPSZociOnx4I2m3Ox+0sOD+vsuqDYogfEo07vMULq2URylyT 3ZZH/V0cHr5X3Xiumy2wSe2zC4uScaNIlQ9+v562haWRFIRoH80lkgd7l8gUPDuK EfCCJtPFNvurremKAkQtkW9uORAs2ySDwOiqtwEB+8+36ASo4g1BSG/G19+Napkz F5MHePM3WKiAtlHfGG+vCfwCBZtg+4G0 -----END CERTIFICATE-----Generated at Sun Jun 8 23:22:28 2025 by rpki-client