$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: dHzveeyTiysKsFhapE/RdqIAcvAx1owLdumxO2Is4ns= Subject key identifier: 6B:D5:2C:DA:4A:1D:C6:E0:13:AF:EF:FF:7E:7A:B1:BD:09:CE:B7:40 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 5F Signing time: Wed 09 Apr 2025 05:53:44 +0000 Manifest this update: Wed 09 Apr 2025 05:53:43 +0000 Manifest next update: Wed 16 Apr 2025 05:53:43 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: E3CF+eA56iNsY9CCcUt/wK3TiYNmkIR1WbAJ6VpJSho=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 05:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C Validity Not Before: Apr 9 05:53:43 2025 GMT Not After : Apr 16 05:53:43 2025 GMT Subject: CN=67f60b68-741b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:24:9f:a6:81:6a:6c:c6:19:0c:90:05:f1:b1: d4:56:21:f2:0f:cd:b3:ba:88:f2:ef:e7:e1:3d:33: fd:d9:d0:a3:8d:6f:c1:b1:93:14:ff:aa:75:d5:bb: 3e:ac:83:8f:27:94:87:2e:40:fc:82:6d:d7:44:ec: 71:ef:55:81:9f:e1:c3:28:2e:75:af:66:2f:04:43: ad:5a:ff:07:28:de:f5:3a:c1:7a:9c:a1:34:e7:b2: 7e:0b:1c:2a:dd:b8:4c:c3:c7:cf:73:d9:94:44:82: a8:21:f7:de:c5:78:88:84:38:e7:1b:d5:9a:61:df: 50:2a:e9:e2:98:0c:6a:09:0d:ab:a9:4b:da:71:c2: b3:21:05:a1:96:ab:64:7f:df:4b:d9:a0:c2:90:16: b4:4b:c0:ee:10:04:58:fe:4b:ba:51:e1:da:22:af: f0:ac:e9:a1:bb:63:6a:32:0d:51:b4:92:67:c3:c5: 95:1f:c9:45:5e:29:13:ef:6d:3f:e0:b8:e9:3e:6e: c7:8f:91:44:a6:31:b9:46:75:97:a1:c0:2e:67:45: d8:d6:0b:72:d6:74:a6:d7:2d:4a:32:7b:be:5d:d6: a4:28:50:8e:a7:d0:c7:be:09:00:22:94:db:d1:68: ff:aa:6a:56:5d:1a:a3:94:25:d9:38:5a:64:77:04: 41:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:2C:DA:4A:1D:C6:E0:13:AF:EF:FF:7E:7A:B1:BD:09:CE:B7:40 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:e8:18:79:09:e8:78:00:83:48:60:91:93:89:58:b5:a0:a7: 2e:75:c7:72:af:57:98:45:23:72:e0:9d:47:8d:e5:2a:b0:a4: c5:b6:c9:09:f7:02:af:42:c5:64:e9:9d:31:d2:d4:eb:00:0e: 00:0c:ce:99:02:fb:21:a8:da:79:15:cc:d6:98:90:1a:3a:c0: 89:12:f4:bf:f6:0a:db:48:ae:dd:97:64:73:0b:09:80:43:bd: 80:51:b6:5c:ee:ca:ad:de:62:ad:43:df:ee:69:10:f9:c3:d4: 87:67:55:ce:d5:90:62:1f:c2:64:77:b2:31:77:0e:e1:9d:0b: b2:ee:88:c6:25:90:37:05:38:57:aa:f5:f9:10:a4:b2:1e:2d: 43:30:42:be:10:22:de:1c:69:90:37:30:92:1b:e2:9d:2d:6e: 17:ab:a4:a9:56:21:e4:b3:49:16:45:da:e0:2f:fe:13:68:ef: f0:ee:ea:72:07:bf:e2:74:c6:ca:d4:00:28:49:ab:54:92:7d: 8b:d7:8d:87:e9:a9:59:17:60:3f:bc:a8:a8:69:5c:98:c5:c6: 9f:92:00:33:ce:32:cb:01:dd:02:29:a9:5d:33:a2:6b:03:85: 3a:a8:26:67:c0:61:29:57:5c:b0:f5:b4:2b:fd:71:02:70:46: 92:99:68:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNTA0MDkwNTUzNDNaFw0yNTA0MTYwNTUzNDNaMBgxFjAUBgNV BAMTDTY3ZjYwYjY4LTc0MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsJJ+mgWpsxhkMkAXxsdRWIfIPzbO6iPLv5+E9M/3Z0KONb8GxkxT/qnXVuz6s g48nlIcuQPyCbddE7HHvVYGf4cMoLnWvZi8EQ61a/wco3vU6wXqcoTTnsn4LHCrd uEzDx89z2ZREgqgh997FeIiEOOcb1Zph31Aq6eKYDGoJDaupS9pxwrMhBaGWq2R/ 30vZoMKQFrRLwO4QBFj+S7pR4doir/Cs6aG7Y2oyDVG0kmfDxZUfyUVeKRPvbT/g uOk+bsePkUSmMblGdZehwC5nRdjWC3LWdKbXLUoye75d1qQoUI6n0Me+CQAilNvR aP+qalZdGqOUJdk4WmR3BEFhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUa9Us2kod xuATr+//fnqxvQnOt0AwHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtz dm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADjoGHkJ6HgAg0hgkZOJWLWgpy51x3KvV5hFI3LgnUeN5SqwpMW2yQn3 Aq9CxWTpnTHS1OsADgAMzpkC+yGo2nkVzNaYkBo6wIkS9L/2CttIrt2XZHMLCYBD vYBRtlzuyq3eYq1D3+5pEPnD1IdnVc7VkGIfwmR3sjF3DuGdC7LuiMYlkDcFOFeq 9fkQpLIeLUMwQr4QIt4caZA3MJIb4p0tbherpKlWIeSzSRZF2uAv/hNo7/Du6nIH v+J0xsrUAChJq1SSfYvXjYfpqVkXYD+8qKhpXJjFxp+SADPOMssB3QIpqV0zomsD hTqoJmfAYSlXXLD1tCv9cQJwRpKZaFg= -----END CERTIFICATE-----Generated at Thu Apr 10 23:21:08 2025 by rpki-client