$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: bIwQ7xYW7glYEKIdEU7qSQOF/F9hNLwiNauGxXrEKM4= Subject key identifier: B4:6A:9D:06:33:D4:2C:FA:F3:B5:6A:4E:EC:F9:08:FE:0A:95:9E:65 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 0415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 040E Signing time: Sat 31 May 2025 00:37:31 +0000 Manifest this update: Sat 31 May 2025 00:37:31 +0000 Manifest next update: Sat 07 Jun 2025 00:37:31 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: /RvCegJ9aMF+98bQ8DdCSVQ2aGR9bxShg6V+OBRdOCk=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1045 (0x415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: May 31 00:37:31 2025 GMT Not After : Jun 7 00:37:31 2025 GMT Subject: CN=683a4f4b-8660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:93:9a:1f:15:2b:b9:d8:d1:1a:50:45:a2: 71:11:b8:17:07:f7:cb:7f:74:96:46:f9:60:c7:ce: 75:5e:1a:d6:c5:8d:d0:ae:b4:a8:09:d3:36:60:a7: 5a:51:3a:42:9c:1c:cb:6b:e6:3c:3d:82:71:42:ad: 04:d9:53:17:1d:36:2c:69:57:4b:98:e9:1d:f9:20: bd:d1:97:2c:ee:4a:ff:8f:64:09:c6:e3:6d:ae:a4: dd:1d:1c:5d:0f:c7:20:e0:4a:af:f7:f4:41:0c:3e: 2f:6a:48:3d:e6:1d:65:b3:46:a7:be:6e:e3:ce:08: 7a:7a:ce:e5:5e:45:c6:54:bd:95:c1:b2:5f:39:48: d9:81:05:94:a7:2f:f0:98:bf:c3:e6:6f:d1:d7:f2: 21:3b:86:2a:dc:c8:1a:53:5c:bc:4a:08:c0:72:a5: 77:cd:4f:9d:7f:20:98:6a:3d:08:e0:95:dc:13:5a: cb:d8:d5:69:cc:50:2f:ae:19:bf:46:81:3c:59:d9: 4e:47:73:8a:5c:2b:39:0e:91:3c:60:2d:55:58:cc: 2b:40:e8:c4:8b:d0:7f:0e:c2:0a:08:06:e8:0d:ca: a7:00:e5:58:ae:bd:6c:4b:b6:6b:31:31:eb:79:ab: ab:d9:73:54:cd:74:f8:96:9d:c0:ed:a1:9d:b5:1d: 8f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6A:9D:06:33:D4:2C:FA:F3:B5:6A:4E:EC:F9:08:FE:0A:95:9E:65 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:c1:29:dd:21:48:81:46:07:9b:90:4d:20:0b:49:0e:5c:97: 51:2c:d6:c0:93:ed:83:a2:40:65:de:d3:18:b3:ce:40:3d:36: 06:80:c6:85:dd:27:c9:38:8b:a3:d6:ec:75:d7:1f:7a:50:47: b5:de:ef:7a:73:a1:de:aa:e1:16:ae:ca:91:94:48:14:da:66: 9f:f8:80:9a:5f:77:22:95:4e:5a:8e:f1:87:00:03:93:4c:d3: 1a:a0:d7:b6:33:6c:00:a2:f0:c4:6d:07:98:02:36:a3:e5:e1: 1f:3a:0e:51:bb:28:ac:17:a6:9e:7a:14:51:58:6b:0a:fa:db: 91:fb:ba:76:99:f8:96:93:f8:88:fd:12:b8:bf:39:5f:3b:67: f5:93:81:45:a9:56:21:f6:28:b2:b5:86:50:86:83:ab:a0:53: a4:0d:41:03:70:30:16:92:0d:bc:f0:32:bc:6b:6a:92:81:a9: c4:ba:bb:9c:f2:d0:91:9f:54:22:54:d3:fd:20:49:b2:a1:45: 73:71:13:bf:01:cf:26:46:fa:69:16:7d:95:c9:20:98:f1:5d: 00:5f:90:c2:fc:03:16:56:c0:d3:f8:05:c9:4f:23:f6:ef:47: f8:fb:b7:6b:8b:01:56:06:b1:b7:f9:7e:d7:4b:c3:b6:e6:80: 99:b8:80:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUwNTMxMDAzNzMxWhcNMjUwNjA3MDAzNzMxWjAYMRYwFAYD VQQDEw02ODNhNGY0Yi04NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVSTmh8VK7nY0RpQRaJxEbgXB/fLf3SWRvlgx851XhrWxY3QrrSoCdM2YKda UTpCnBzLa+Y8PYJxQq0E2VMXHTYsaVdLmOkd+SC90Zcs7kr/j2QJxuNtrqTdHRxd D8cg4Eqv9/RBDD4vakg95h1ls0anvm7jzgh6es7lXkXGVL2VwbJfOUjZgQWUpy/w mL/D5m/R1/IhO4Yq3MgaU1y8SgjAcqV3zU+dfyCYaj0I4JXcE1rL2NVpzFAvrhm/ RoE8WdlOR3OKXCs5DpE8YC1VWMwrQOjEi9B/DsIKCAboDcqnAOVYrr1sS7ZrMTHr eaur2XNUzXT4lp3A7aGdtR2PqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLRqnQYz 1Cz687VqTuz5CP4KlZ5lMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVwSndIUiBRgebkE0gC0kOXJdRLNbAk+2DokBl3tMYs85APTYGgMaF 3SfJOIuj1ux11x96UEe13u96c6HequEWrsqRlEgU2maf+ICaX3cilU5ajvGHAAOT TNMaoNe2M2wAovDEbQeYAjaj5eEfOg5RuyisF6aeehRRWGsK+tuR+7p2mfiWk/iI /RK4vzlfO2f1k4FFqVYh9iiytYZQhoOroFOkDUEDcDAWkg288DK8a2qSganEuruc 8tCRn1QiVNP9IEmyoUVzcRO/Ac8mRvppFn2VySCY8V0AX5DC/AMWVsDT+AXJTyP2 70f4+7driwFWBrG3+X7XS8O25oCZuICD -----END CERTIFICATE-----Generated at Sat May 31 17:22:04 2025 by rpki-client