$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: BQjFMTnioOMVBMqthHSbxwiygL5wltjvBVqltYcTIHA= Subject key identifier: 0E:57:CA:9C:35:F3:45:B4:42:AB:B6:BA:F7:37:0D:A6:8E:2E:2F:DA Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 0678 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 066C Signing time: Sat 31 May 2025 22:29:18 +0000 Manifest this update: Sat 31 May 2025 22:29:17 +0000 Manifest next update: Sat 07 Jun 2025 22:29:17 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: XGRBEURj+2I7mfF/pOpZ52IMRIV73eCrxIofFbkOCUc=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: 6WUJgqskzShx2CRmJsEzW4Lp5E25NIFa3cIFrPQTpQE=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: bchSnNZ1JAHUbuS+ZuP7bZtOW8CbMzZJlPlo9vXpT60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1656 (0x678) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: May 31 22:29:17 2025 GMT Not After : Jun 7 22:29:17 2025 GMT Subject: CN=683b82bd-503b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b8:0c:18:88:ee:a3:ad:35:32:7d:b7:54:fc: bb:31:86:d1:ad:e1:fd:9e:84:08:e9:f7:88:c2:7f: d3:07:f6:85:ce:ba:2a:fc:9e:29:fc:94:24:6b:8c: 6d:78:45:d2:5d:f5:29:9a:42:19:5a:97:f4:c7:ca: 93:bd:02:ee:87:3d:57:b7:b2:aa:c7:1f:59:6d:23: 43:09:9e:d7:eb:c0:14:d3:53:ea:08:35:dd:f8:77: d5:e5:da:95:26:da:09:ee:2b:83:d8:c4:72:b1:af: 15:25:29:c9:50:b5:2e:9c:bb:71:1e:7f:42:dd:0a: 08:1d:51:fd:b8:40:90:96:1c:d6:c2:9f:6c:8f:33: 18:e7:e1:58:08:f1:00:de:60:89:da:03:66:b6:36: 2b:b4:6f:22:19:c8:f1:9d:cf:d0:11:f8:8b:6c:f9: d1:d5:e4:91:ef:a6:b5:c5:40:a8:8d:e5:12:5a:96: c1:05:43:be:b9:2a:e5:1e:e4:d3:11:3f:3a:c8:1e: f8:37:22:4d:cd:a3:31:9b:9c:a3:24:03:55:31:63: 18:aa:9e:e3:63:54:1d:57:3d:bc:58:18:33:b8:ba: 91:dc:32:b7:0f:44:a3:aa:5c:da:2c:e5:d5:51:8a: 65:8c:f5:54:22:aa:15:67:b4:96:5d:8f:79:28:e8: 9c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:57:CA:9C:35:F3:45:B4:42:AB:B6:BA:F7:37:0D:A6:8E:2E:2F:DA X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:2a:8e:f2:c5:dc:b1:60:39:34:0d:5d:4d:74:fe:ca:8e:53: 95:a4:37:d2:c5:fd:57:c6:89:23:f7:92:7c:f1:bc:1b:59:87: bb:be:de:bb:f6:39:3d:cb:e8:17:5d:c2:35:43:3f:66:fe:25: 07:f1:41:a5:85:ae:55:24:0b:9f:04:70:20:6c:14:01:28:33: d9:21:1f:b0:5a:0d:9b:59:54:c4:5f:0f:da:c8:f7:2e:86:74: fe:12:2a:1b:46:bc:f6:69:3c:da:50:3d:1e:a2:b9:02:ee:43: 4d:e8:8a:c2:8a:6e:a3:64:be:7a:39:9e:b9:2a:4a:67:d4:b4: bc:79:3d:11:da:06:c2:8d:77:51:12:9b:e5:76:82:ec:54:3e: 89:9c:e2:8c:0d:6c:4e:ba:5c:b5:bc:b7:49:3e:ed:0a:f7:3e: 4d:fb:f3:54:b3:7b:28:1b:0e:3b:25:31:5f:5a:0e:67:fc:b6: 08:70:db:5a:4d:19:e5:ff:cb:b4:de:d3:b2:08:da:30:0a:45: 67:9e:80:e1:7d:92:b5:47:1d:44:47:ef:19:90:5e:70:79:3c: 19:6c:78:d5:ec:75:8b:00:41:0a:08:0c:78:c3:d2:7a:7f:54: 92:d0:f8:93:22:f1:95:f6:c6:5b:07:80:53:3f:8c:21:c6:e1: db:98:59:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBngwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwNTMxMjIyOTE3WhcNMjUwNjA3MjIyOTE3WjAYMRYwFAYD VQQDEw02ODNiODJiZC01MDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rgMGIjuo601Mn23VPy7MYbRreH9noQI6feIwn/TB/aFzroq/J4p/JQka4xt eEXSXfUpmkIZWpf0x8qTvQLuhz1Xt7Kqxx9ZbSNDCZ7X68AU01PqCDXd+HfV5dqV JtoJ7iuD2MRysa8VJSnJULUunLtxHn9C3QoIHVH9uECQlhzWwp9sjzMY5+FYCPEA 3mCJ2gNmtjYrtG8iGcjxnc/QEfiLbPnR1eSR76a1xUCojeUSWpbBBUO+uSrlHuTT ET86yB74NyJNzaMxm5yjJANVMWMYqp7jY1QdVz28WBgzuLqR3DK3D0SjqlzaLOXV UYpljPVUIqoVZ7SWXY95KOiclQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5Xypw1 80W0Qqu2uvc3DaaOLi/aMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXKo7yxdyxYDk0DV1NdP7KjlOVpDfSxf1Xxokj95J88bwbWYe7vt67 9jk9y+gXXcI1Qz9m/iUH8UGlha5VJAufBHAgbBQBKDPZIR+wWg2bWVTEXw/ayPcu hnT+EiobRrz2aTzaUD0eorkC7kNN6IrCim6jZL56OZ65Kkpn1LS8eT0R2gbCjXdR EpvldoLsVD6JnOKMDWxOuly1vLdJPu0K9z5N+/NUs3soGw47JTFfWg5n/LYIcNta TRnl/8u03tOyCNowCkVnnoDhfZK1Rx1ER+8ZkF5weTwZbHjV7HWLAEEKCAx4w9J6 f1SS0PiTIvGV9sZbB4BTP4whxuHbmFlr -----END CERTIFICATE-----Generated at Mon Jun 2 22:23:43 2025 by rpki-client