$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: /sWeRpPXibQ52PR+VuHhCyBp8ppAZLGHgeyGsLOkh08= Subject key identifier: BB:9C:04:80:40:F9:04:12:48:9D:63:56:1B:67:5F:C8:B3:80:48:08 Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: 1E Signing time: Sat 31 May 2025 07:27:21 +0000 Manifest this update: Sat 31 May 2025 07:27:20 +0000 Manifest next update: Sat 07 Jun 2025 07:27:20 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: v9KYZ/WHaZ4yYPDl1Ar5xMPHDVZzhuHnDLpFodfKFX8=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: 0kwUuP5urHGVd8jLbBCR4DTFP/4KfdSRWVGXFWx70hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:27:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: May 31 07:27:20 2025 GMT Not After : Jun 7 07:27:20 2025 GMT Subject: CN=683aaf59-c0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8c:fb:b7:8c:0b:14:f0:4a:4c:34:fb:d6:64: 4b:ad:e9:53:bd:f5:78:db:ac:89:58:73:1a:f9:94: 54:2e:0f:71:08:fe:0e:99:f1:48:67:50:34:44:d1: 33:87:ae:a4:a6:16:15:c1:52:d6:24:95:ef:b5:de: 51:c5:a2:e6:b9:f2:a0:57:ae:30:f7:3b:e8:54:26: 87:49:48:52:b4:db:4b:a4:ad:c0:b9:b6:16:7d:21: fd:84:eb:5d:2e:29:ba:99:05:c7:41:16:62:db:4d: cb:d7:73:01:77:ad:ec:32:b7:b6:c3:33:5e:e9:36: 3b:e8:31:a8:4b:38:96:88:f3:8f:2c:2b:62:cb:9a: 5d:1e:10:b9:5a:70:e5:cd:03:09:ad:a8:f2:97:57: 99:59:af:82:90:ab:15:24:06:ec:4e:eb:7c:96:fc: cb:96:c6:bd:fd:5c:62:fe:9e:83:12:7a:d9:ef:b0: 7c:64:c3:45:ac:bb:93:96:c0:07:fc:1a:6e:7e:16: a9:77:13:fe:69:fe:d4:9e:75:5c:6b:49:27:27:6e: d7:c0:b9:7c:d7:c5:0c:f6:43:ad:71:af:3c:26:6d: e3:36:55:77:40:ab:29:b6:30:f0:49:47:5e:b9:9b: 90:b5:15:4e:9c:76:a3:c4:31:61:8d:38:ba:7a:f8: f8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9C:04:80:40:F9:04:12:48:9D:63:56:1B:67:5F:C8:B3:80:48:08 X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c5:7b:38:f9:0a:ea:91:d0:ee:52:c8:86:e2:7e:de:ed:d7: 29:12:b3:a4:ee:34:da:1c:c8:3e:01:97:7f:9b:72:da:7c:31: 1c:72:15:09:2a:69:e5:21:5a:d8:6f:50:5d:d9:93:c0:16:52: 0b:06:b7:36:46:ee:13:3f:1f:a0:1f:a4:20:a4:0f:d2:15:51: 58:cb:0c:b3:7c:a7:29:3c:24:96:9e:c8:d8:29:b7:a3:89:29: 4a:98:38:18:7c:2a:bb:d4:29:97:f4:e9:57:47:bc:8c:2d:dd: 63:93:8d:96:f7:a5:06:21:83:7d:8f:b2:50:e8:c1:e7:2c:4d: 70:8a:03:1b:90:6f:d6:ca:1e:08:28:0d:11:4a:10:c1:f4:29: df:43:21:0d:0b:3f:48:e5:1c:05:d7:ac:b2:95:c6:2c:3e:da: 6c:27:cb:8a:01:d6:08:bd:97:c5:4d:bf:6f:5e:23:f2:9c:ff: 77:29:12:00:35:4a:4e:03:a3:0c:3c:63:71:67:68:d5:cc:a7: 78:f4:f6:ee:4e:48:90:5b:13:2a:f4:ae:80:c8:5b:96:d1:20: 43:df:ce:a2:52:48:97:4e:19:70:ef:0f:b6:ee:6f:bf:3f:65: 5b:29:4b:7a:58:94:f5:66:ec:ff:ca:42:ee:95:8d:57:44:28: fc:3e:26:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoREIxM0ZCQUY3QjNCMzhEQjc2MzBEQjBCOTczNzREQUFE MDMxNUFERTAeFw0yNTA1MzEwNzI3MjBaFw0yNTA2MDcwNzI3MjBaMBgxFjAUBgNV BAMTDTY4M2FhZjU5LWMwYzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcjPu3jAsU8EpMNPvWZEut6VO99XjbrIlYcxr5lFQuD3EI/g6Z8UhnUDRE0TOH rqSmFhXBUtYkle+13lHFoua58qBXrjD3O+hUJodJSFK020ukrcC5thZ9If2E610u KbqZBcdBFmLbTcvXcwF3rewyt7bDM17pNjvoMahLOJaI848sK2LLml0eELlacOXN AwmtqPKXV5lZr4KQqxUkBuxO63yW/MuWxr39XGL+noMSetnvsHxkw0Wsu5OWwAf8 Gm5+Fql3E/5p/tSedVxrSScnbtfAuXzXxQz2Q61xrzwmbeM2VXdAqym2MPBJR165 m5C1FU6cdqPEMWGNOLp6+PgzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu5wEgED5 BBJInWNWG2dfyLOASAgwHwYDVR0jBBgwFoAU2xP7r3s7ONt2MNsLlzdNqtAxWt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzI0MDEwRDUyMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhQN3IzczdPTnQyTU5zTGx6ZE5xdEF4V3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzI0MDEwRDUyMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050 Mk1Oc0xsemROcXRBeFd0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHzFezj5CuqR0O5SyIbift7t1ykSs6TuNNocyD4Bl3+bctp8MRxyFQkq aeUhWthvUF3Zk8AWUgsGtzZG7hM/H6AfpCCkD9IVUVjLDLN8pyk8JJaeyNgpt6OJ KUqYOBh8KrvUKZf06VdHvIwt3WOTjZb3pQYhg32PslDowecsTXCKAxuQb9bKHggo DRFKEMH0Kd9DIQ0LP0jlHAXXrLKVxiw+2mwny4oB1gi9l8VNv29eI/Kc/3cpEgA1 Sk4Doww8Y3FnaNXMp3j09u5OSJBbEyr0roDIW5bRIEPfzqJSSJdOGXDvD7bub78/ ZVspS3pYlPVm7P/KQu6VjVdEKPw+JoA= -----END CERTIFICATE-----Generated at Sat May 31 16:38:01 2025 by rpki-client