$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft File: C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft (raw, json) Hash identifier: APQgw4sxR9CDpGZJRR9NcEnKskBc6RX5oCGmmb2YUi0= Subject key identifier: 12:11:30:CD:1B:41:A5:AB:F8:43:BA:40:75:EA:9D:99:DB:43:39:C3 Authority key identifier: 0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 Certificate issuer: /CN=A91B43F4/serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Certificate serial: 24C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft Manifest number: 24B2 Signing time: Fri 18 Jul 2025 15:52:41 +0000 Manifest this update: Fri 18 Jul 2025 15:52:40 +0000 Manifest next update: Fri 25 Jul 2025 15:52:40 +0000 Files and hashes: 1: C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl (hash: FC1H69kuriEk1DFolZyyv2bpWJUIEyYTE3TrDBkSPRo=) 2: EBC23D9A041E11ECA959B779C4F9AE02.roa (hash: CE+jGBv1hmvPpnjcj/lZMkYxYBXBElFQLbmvrCZoU3o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9415 (0x24c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43F4, serialNumber=0B63E63A5FA3B2E3CCB9930E8F6C8CECC2458B45 Validity Not Before: Jul 18 15:52:40 2025 GMT Not After : Jul 25 15:52:40 2025 GMT Subject: CN=687a6dc9-e2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:dc:fd:7b:5f:13:b4:d5:07:c6:37:c6:16: d5:4c:29:c1:55:2a:20:66:ca:3b:73:ca:83:f8:6f: 18:cc:39:22:85:34:a2:19:e5:02:f1:4c:da:b0:0e: 0a:bb:68:af:a8:29:18:d7:49:f9:59:39:f3:b6:2b: 54:aa:5c:08:88:9c:b7:c1:f9:92:34:fa:89:b1:66: 4e:8f:7e:08:45:f4:28:d7:01:64:ac:54:f4:ae:84: f5:5d:96:27:04:2f:ac:3b:50:02:e1:c7:f5:23:3c: 1a:b8:09:95:e8:8a:49:99:da:4c:2e:b0:0d:da:d1: d9:fe:69:70:6d:87:75:0f:54:8d:9b:39:d6:41:b8: dd:11:40:23:2b:0b:e9:08:62:20:e7:00:d9:b2:48: 90:a7:20:31:fb:78:1a:c7:b3:65:13:2e:53:97:fc: 77:22:19:16:a5:19:53:ec:c5:1e:35:94:ea:79:12: b0:44:2a:2f:32:c1:91:80:8e:59:1a:af:3c:80:a9: ad:b1:6b:fd:5b:e2:06:6b:31:79:15:29:f5:ab:d9: 39:7b:4c:21:48:b6:fb:89:55:6e:62:b2:e2:96:01: 61:53:07:30:c3:c8:71:b1:35:b9:98:98:d2:dc:05: 9d:ac:bd:1b:28:41:2d:fa:eb:a8:a3:13:b8:d3:9a: b2:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:11:30:CD:1B:41:A5:AB:F8:43:BA:40:75:EA:9D:99:DB:43:39:C3 X509v3 Authority Key Identifier: keyid:0B:63:E6:3A:5F:A3:B2:E3:CC:B9:93:0E:8F:6C:8C:EC:C2:45:8B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2PmOl-jsuPMuZMOj2yM7MJFi0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43F4/17AC2A70419C11E5835FD183C4F9AE02/C2PmOl-jsuPMuZMOj2yM7MJFi0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9a:63:7f:8f:31:fe:15:bf:ef:b5:b6:51:63:a2:43:12:f5: 99:33:aa:b6:db:d3:cb:dd:dc:c5:79:49:cf:eb:c4:c7:41:5d: 5d:94:f8:2c:ba:95:12:11:fb:89:b4:b3:63:73:7e:29:42:62: df:9c:41:1e:27:62:cf:25:2b:f7:6b:06:6d:be:9d:e5:56:0c: 7b:86:0a:5c:2d:89:dc:7a:40:0d:ed:6e:d1:4d:f0:09:88:1f: 73:2d:3d:94:ee:28:d4:6e:84:5f:53:d7:f0:6d:03:f2:85:d4: 19:4b:da:2f:16:59:38:f8:39:16:86:bc:63:96:20:3b:d6:40: 8d:e1:64:ab:a0:23:4a:a8:f7:bb:21:75:58:19:54:b9:35:74: 9b:b0:ed:55:93:e2:6d:d2:18:bc:dd:f6:59:0a:95:ff:fb:96: 00:13:1c:de:e7:3a:98:dd:b4:10:2d:68:3e:4e:df:8a:60:45: a6:1d:52:2e:85:00:dc:81:13:5c:34:52:d9:55:56:17:89:58: 05:53:fc:44:42:92:aa:b1:5f:ff:c9:0d:ba:2e:44:3b:b2:40: cb:93:12:b5:cb:15:51:d1:0f:95:5c:9b:78:0b:10:69:92:5f: b4:74:3f:3b:af:6d:b4:9a:4b:1f:0e:5b:06:26:55:a5:ba:3d: 4c:17:c7:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRjQxMTAvBgNVBAUTKDBCNjNFNjNBNUZBM0IyRTNDQ0I5OTMwRThGNkM4Q0VD QzI0NThCNDUwHhcNMjUwNzE4MTU1MjQwWhcNMjUwNzI1MTU1MjQwWjAYMRYwFAYD VQQDEw02ODdhNmRjOS1lMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqTc/XtfE7TVB8Y3xhbVTCnBVSogZso7c8qD+G8YzDkihTSiGeUC8UzasA4K u2ivqCkY10n5WTnztitUqlwIiJy3wfmSNPqJsWZOj34IRfQo1wFkrFT0roT1XZYn BC+sO1AC4cf1IzwauAmV6IpJmdpMLrAN2tHZ/mlwbYd1D1SNmznWQbjdEUAjKwvp CGIg5wDZskiQpyAx+3gax7NlEy5Tl/x3IhkWpRlT7MUeNZTqeRKwRCovMsGRgI5Z Gq88gKmtsWv9W+IGazF5FSn1q9k5e0whSLb7iVVuYrLilgFhUwcww8hxsTW5mJjS 3AWdrL0bKEEt+uuooxO405qy+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIRMM0b QaWr+EO6QHXqnZnbQznDMB8GA1UdIwQYMBaAFAtj5jpfo7LjzLmTDo9sjOzCRYtF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNGNC8xN0FDMkE3MDQx OUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1UE11Wk1PajJ5TTdNSkZp MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyUG1PbC1qc3VQTXVaTU9qMnlNN01KRmkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNGNC8xN0FDMkE3MDQxOUMxMUU1ODM1RkQxODNDNEY5QUUwMi9DMlBtT2wtanN1 UE11Wk1PajJ5TTdNSkZpMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXmmN/jzH+Fb/vtbZRY6JDEvWZM6q229PL3dzFeUnP68THQV1dlPgs upUSEfuJtLNjc34pQmLfnEEeJ2LPJSv3awZtvp3lVgx7hgpcLYncekAN7W7RTfAJ iB9zLT2U7ijUboRfU9fwbQPyhdQZS9ovFlk4+DkWhrxjliA71kCN4WSroCNKqPe7 IXVYGVS5NXSbsO1Vk+Jt0hi83fZZCpX/+5YAExze5zqY3bQQLWg+Tt+KYEWmHVIu hQDcgRNcNFLZVVYXiVgFU/xEQpKqsV//yQ26LkQ7skDLkxK1yxVR0Q+VXJt4CxBp kl+0dD87r220mksfDlsGJlWluj1MF8fU -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:19 2025 by rpki-client