$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft File: R2e2k72EYu6vqD2egDydKGtiHcg.mft (raw, json) Hash identifier: 4cgRA9+qeeIpmZlReE4cJakqW3Gpf1FXP6tC5yrRzbk= Subject key identifier: B8:CF:FF:E7:46:1A:C2:88:95:5E:00:56:97:42:ED:C3:22:36:BE:A2 Authority key identifier: 47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 Certificate issuer: /CN=A91F9B6C/serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft Manifest number: 2F Signing time: Sat 31 May 2025 07:15:56 +0000 Manifest this update: Sat 31 May 2025 07:15:55 +0000 Manifest next update: Sat 07 Jun 2025 07:15:55 +0000 Files and hashes: 1: R2e2k72EYu6vqD2egDydKGtiHcg.crl (hash: A+hfrsTbHM97ZixIxNU6/oI3tuNbF58WXVp7xawKijE=) 2: 3D60B6FCFA5E11EFB84AF068C4F9AE02.roa (hash: Ya8UAl3AvyfkYqVmnBZyGneXfArx61d1F2XHtbOSrtU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:15:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9B6C, serialNumber=4767B693BD8462EEAFA83D9E803C9D286B621DC8 Validity Not Before: May 31 07:15:55 2025 GMT Not After : Jun 7 07:15:55 2025 GMT Subject: CN=683aacac-e8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:d5:9b:51:34:aa:bc:4d:e5:17:84:d8:2e: f4:e1:d4:85:01:3e:09:65:fc:66:8d:6f:04:c2:bd: 5e:bc:1b:ea:5b:a7:ec:52:3b:f7:41:2c:b8:da:28: bb:4a:f0:82:db:a1:30:c5:f7:15:01:c1:64:3f:99: dc:d2:83:8f:d8:69:ee:17:bd:a4:6c:1e:ad:99:04: d4:08:74:35:40:57:84:c8:9e:b6:d4:ee:a8:57:cb: 3a:64:84:f8:97:d0:e9:6c:a2:ac:f7:af:75:30:a4: 1a:fc:4f:43:ed:c3:e3:8b:56:e7:1b:93:d6:9b:c6: ab:e4:33:47:a0:d3:5b:c7:99:fe:65:37:fe:87:1c: 05:18:39:af:09:1f:4c:86:d6:b8:f4:0d:45:03:26: 1a:51:84:20:94:75:90:5d:39:91:9b:b1:25:01:93: 65:27:37:0b:c3:2d:86:6f:77:5e:d6:9c:3b:46:30: 5c:4e:ec:7a:60:33:ae:9f:55:19:c4:9f:7c:cd:73: 44:a3:15:3d:b7:ee:51:04:57:68:9d:93:0b:36:64: 64:e5:db:e5:7d:81:46:7c:f6:60:1a:d5:7b:3e:6d: c1:78:a0:64:47:51:8e:5f:5b:66:0a:c8:18:70:cb: a3:e4:d9:18:7b:ae:bc:7c:87:88:c3:17:18:e2:26: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:CF:FF:E7:46:1A:C2:88:95:5E:00:56:97:42:ED:C3:22:36:BE:A2 X509v3 Authority Key Identifier: keyid:47:67:B6:93:BD:84:62:EE:AF:A8:3D:9E:80:3C:9D:28:6B:62:1D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2e2k72EYu6vqD2egDydKGtiHcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9B6C/D7DB0A08FA5D11EFAE374D68C4F9AE02/R2e2k72EYu6vqD2egDydKGtiHcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:05:60:5e:e1:16:4c:0f:39:55:6c:73:ce:97:b1:5e:2b:30: f9:d6:59:60:93:b1:fb:9e:45:4a:19:da:29:4c:88:31:27:c2: 3e:e9:e7:51:3c:e2:9f:49:ee:d5:06:4b:e5:31:cc:09:5c:65: 15:f4:38:cc:c8:73:c0:38:b3:33:45:41:73:5d:e8:d7:75:5e: fc:5d:ea:e7:21:56:d4:4f:5b:c2:4d:45:4d:0c:ee:f7:8a:8e: 76:c0:60:87:0e:4f:1d:5f:a4:55:43:eb:02:92:81:dd:64:b6: 70:44:0e:e4:93:df:ff:22:97:78:00:00:74:af:1f:3c:9a:67: 11:9e:22:11:fc:c2:40:4a:b0:38:38:7a:32:82:c5:50:f0:b0: 1b:52:bf:25:25:fa:93:ce:c2:78:00:9f:04:08:7b:72:dd:97: e7:64:4d:6c:db:1b:ee:04:84:24:45:b2:85:09:82:39:e4:bf: 8f:d5:3d:32:95:f2:0b:be:96:3b:e9:51:b4:8e:fe:07:7f:ee: 43:5b:d4:12:a5:d1:2d:c9:53:ff:8b:b8:31:00:3e:86:f5:22: 23:f4:91:53:b5:03:ac:64:2e:0e:13:ae:4e:a3:da:93:f3:a7: c0:2a:8b:b4:5e:f5:d8:4b:56:f2:e1:94:f7:5a:66:d8:40:98: 52:ea:88:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OUI2QzExMC8GA1UEBRMoNDc2N0I2OTNCRDg0NjJFRUFGQTgzRDlFODAzQzlEMjg2 QjYyMURDODAeFw0yNTA1MzEwNzE1NTVaFw0yNTA2MDcwNzE1NTVaMBgxFjAUBgNV BAMTDTY4M2FhY2FjLWU4YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi/dWbUTSqvE3lF4TYLvTh1IUBPgll/GaNbwTCvV68G+pbp+xSO/dBLLjaKLtK 8ILboTDF9xUBwWQ/mdzSg4/Yae4XvaRsHq2ZBNQIdDVAV4TInrbU7qhXyzpkhPiX 0Olsoqz3r3UwpBr8T0Ptw+OLVucbk9abxqvkM0eg01vHmf5lN/6HHAUYOa8JH0yG 1rj0DUUDJhpRhCCUdZBdOZGbsSUBk2UnNwvDLYZvd17WnDtGMFxO7HpgM66fVRnE n3zNc0SjFT237lEEV2idkws2ZGTl2+V9gUZ89mAa1Xs+bcF4oGRHUY5fW2YKyBhw y6Pk2Rh7rrx8h4jDFxjiJn2TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuM//50Ya woiVXgBWl0LtwyI2vqIwHwYDVR0jBBgwFoAUR2e2k72EYu6vqD2egDydKGtiHcgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5QjZDL0Q3REIwQTA4RkE1 RDExRUZBRTM3NEQ2OEM0RjlBRTAyL1IyZTJrNzJFWXU2dnFEMmVnRHlkS0d0aUhj Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjJlMms3MkVZdTZ2cUQyZWdEeWRLR3RpSGNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 QjZDL0Q3REIwQTA4RkE1RDExRUZBRTM3NEQ2OEM0RjlBRTAyL1IyZTJrNzJFWXU2 dnFEMmVnRHlkS0d0aUhjZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAMFYF7hFkwPOVVsc86XsV4rMPnWWWCTsfueRUoZ2ilMiDEnwj7p51E8 4p9J7tUGS+UxzAlcZRX0OMzIc8A4szNFQXNd6Nd1Xvxd6uchVtRPW8JNRU0M7veK jnbAYIcOTx1fpFVD6wKSgd1ktnBEDuST3/8il3gAAHSvHzyaZxGeIhH8wkBKsDg4 ejKCxVDwsBtSvyUl+pPOwngAnwQIe3Ldl+dkTWzbG+4EhCRFsoUJgjnkv4/VPTKV 8gu+ljvpUbSO/gd/7kNb1BKl0S3JU/+LuDEAPob1IiP0kVO1A6xkLg4Trk6j2pPz p8Aqi7Re9dhLVvLhlPdaZthAmFLqiIY= -----END CERTIFICATE-----Generated at Sat May 31 17:01:21 2025 by rpki-client