$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: HadCkGm2cTjKjpoesvYA/x6LhoNH5ITO0dChPdhzcy0= Subject key identifier: AE:78:41:16:B9:19:E3:FC:47:9A:03:30:4A:B3:38:2C:87:29:5E:AA Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E1E Signing time: Wed 04 Jun 2025 17:48:54 +0000 Manifest this update: Wed 04 Jun 2025 17:48:54 +0000 Manifest next update: Wed 11 Jun 2025 17:48:54 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: oLoG09NLxrEldwzpxqu2RWmKVrkTNoJmUBc9lOeFY2M=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: 3xSZw8Zvxp55d8XEuNe65AngqRjiPtOfsG/OL3mouOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 17:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3622 (0xe26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Jun 4 17:48:54 2025 GMT Not After : Jun 11 17:48:54 2025 GMT Subject: CN=68408706-10c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:8d:7d:80:03:a3:64:e6:5f:d6:ce:b5:32: d4:48:08:28:67:f6:1b:47:f1:1c:f9:bd:71:f5:eb: 6d:eb:0b:1e:8e:27:4c:00:21:07:b8:cc:f5:56:a6: 16:81:12:a8:5f:bf:5c:e1:b9:ac:dc:06:7d:6e:48: 67:bb:15:41:85:f4:20:0e:03:21:a9:84:fe:05:84: 11:bb:21:d9:54:4c:2e:61:88:48:48:cf:1d:97:28: ed:76:c5:be:b0:71:16:77:89:30:81:5b:85:d7:3b: 40:d3:6f:ef:3c:4d:1b:44:7c:16:ec:c2:12:95:3e: 71:5f:95:ac:43:46:d9:99:2b:2f:ef:f5:af:43:17: 1a:8a:2d:83:54:76:c6:05:e7:2a:6e:bc:e3:bd:d6: ca:cc:2a:6c:a3:32:1e:c5:a0:0b:73:62:10:05:c9: b5:92:42:35:fe:4a:1b:62:55:3f:a7:f6:e1:fa:8e: 02:41:f2:8c:cb:8c:63:38:e2:8b:b5:9c:8d:01:b1: eb:ef:23:b5:73:35:41:c4:74:8d:7f:27:91:99:f2: 9b:ef:5e:0e:9c:fd:9a:80:1f:af:b6:ab:86:2c:8a: 20:ba:5b:15:e7:43:57:1c:39:a1:55:f3:59:5f:84: bf:0a:df:09:77:2d:7b:ac:78:38:13:6c:b5:ef:15: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:78:41:16:B9:19:E3:FC:47:9A:03:30:4A:B3:38:2C:87:29:5E:AA X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ef:12:10:94:6a:41:26:53:52:94:0c:cb:0b:57:ce:aa:f2: 75:12:19:a4:8a:05:66:93:53:32:be:60:2d:6d:89:7d:a4:f7: 65:3a:75:9e:d7:af:df:f6:e9:e0:ca:fd:c5:ae:08:17:71:51: 09:da:33:5e:1f:d2:19:15:6e:b9:c9:d7:b7:82:35:3c:3e:9c: 08:69:20:a2:62:ed:1c:e3:7d:f7:4f:b0:76:4d:92:82:62:4a: 51:88:74:86:d6:cd:d7:7f:98:8f:ed:59:25:74:4a:11:8f:e2: 4e:5d:11:bd:ef:c5:91:c8:a2:fb:ff:15:3d:ab:46:55:db:89: 5a:fe:5a:cf:a9:99:2d:a4:33:71:a7:45:8e:6f:f2:3c:b1:d7: 00:02:91:7e:04:50:ab:e2:ff:40:fb:8b:2a:ae:79:43:fb:21: 14:fe:70:75:26:80:20:3a:66:cd:13:28:b3:7f:b8:f2:81:c9: 58:5d:d9:d6:3c:99:ba:da:5b:65:1c:a6:37:8c:95:09:96:31: eb:47:29:51:dd:f1:d2:dc:bd:a8:7e:9e:db:ab:59:a1:c1:b9: 52:37:bb:57:fc:fa:d5:7d:b9:70:3b:33:f4:ba:57:2a:cc:90: b6:37:4a:40:bd:07:51:8d:15:10:2c:22:e8:96:2b:c8:79:a4: 15:ec:0a:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUwNjA0MTc0ODU0WhcNMjUwNjExMTc0ODU0WjAYMRYwFAYD VQQDEw02ODQwODcwNi0xMGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso+NfYADo2TmX9bOtTLUSAgoZ/YbR/Ec+b1x9ett6wsejidMACEHuMz1VqYW gRKoX79c4bms3AZ9bkhnuxVBhfQgDgMhqYT+BYQRuyHZVEwuYYhISM8dlyjtdsW+ sHEWd4kwgVuF1ztA02/vPE0bRHwW7MISlT5xX5WsQ0bZmSsv7/WvQxcaii2DVHbG BecqbrzjvdbKzCpsozIexaALc2IQBcm1kkI1/kobYlU/p/bh+o4CQfKMy4xjOOKL tZyNAbHr7yO1czVBxHSNfyeRmfKb714OnP2agB+vtquGLIogulsV50NXHDmhVfNZ X4S/Ct8Jdy17rHg4E2y17xWGgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK54QRa5 GeP8R5oDMEqzOCyHKV6qMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAM7xIQlGpBJlNSlAzLC1fOqvJ1EhmkigVmk1MyvmAtbYl9pPdlOnWe 16/f9ungyv3FrggXcVEJ2jNeH9IZFW65yde3gjU8PpwIaSCiYu0c4333T7B2TZKC YkpRiHSG1s3Xf5iP7VkldEoRj+JOXRG978WRyKL7/xU9q0ZV24la/lrPqZktpDNx p0WOb/I8sdcAApF+BFCr4v9A+4sqrnlD+yEU/nB1JoAgOmbNEyizf7jygclYXdnW PJm62ltlHKY3jJUJljHrRylR3fHS3L2ofp7bq1mhwblSN7tX/PrVfblwOzP0ulcq zJC2N0pAvQdRjRUQLCLolivIeaQV7ArA -----END CERTIFICATE-----Generated at Thu Jun 5 20:00:29 2025 by rpki-client