$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: OXJK7aH7x21gu2zV+3p53pBSbPI6/G7ZNa4D3ZZD8Bg= Subject key identifier: 02:A3:0F:11:ED:E8:1B:8F:7E:B5:36:34:BC:75:8D:F2:FD:5A:65:2A Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02B2 Signing time: Thu 03 Apr 2025 01:27:54 +0000 Manifest this update: Thu 03 Apr 2025 01:27:53 +0000 Manifest next update: Thu 10 Apr 2025 01:27:53 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: /sfHLe3JNCFDVKe4fMTGSu0oZCNsmAl/Ft63e+ARJ8E=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 01:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 694 (0x2b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6 Validity Not Before: Apr 3 01:27:53 2025 GMT Not After : Apr 10 01:27:53 2025 GMT Subject: CN=67ede41a-c124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c2:10:da:33:bc:09:d8:ef:42:8a:86:f7:35: 45:97:e1:46:71:d0:01:3b:e0:55:34:5e:31:d1:52: bb:4c:5b:f5:36:e1:66:b3:96:a7:49:3a:e3:35:fc: d8:97:33:8f:45:29:d5:d5:37:e8:f8:5c:b4:5d:31: f4:41:1d:01:71:7b:18:36:77:34:0a:78:39:12:5c: ce:4f:8a:32:f3:b9:86:89:3f:93:3f:55:0e:6d:c5: 03:e8:fc:a8:a3:f6:60:bb:46:8f:5d:49:0b:ad:82: fe:f7:23:d5:08:e5:34:60:b4:8e:e1:d2:da:c7:6f: 8f:45:6d:90:80:c2:e1:e1:35:cb:5b:a8:60:bd:b8: 52:fd:95:fa:e9:e5:58:fa:9b:7d:b4:d0:a4:23:21: 0c:ba:e8:bc:7b:c3:dd:0d:38:e3:40:24:a4:52:04: c4:b6:ec:66:68:ce:17:27:e8:58:0b:98:6d:d6:03: 0b:66:49:72:34:53:dc:e8:a4:09:ed:ab:38:af:03: 44:1e:7c:dd:36:e9:5e:e3:52:c1:b5:a1:f6:c4:1a: 52:e6:84:56:d7:82:18:b2:13:0f:3d:e6:e4:3d:bd: d6:13:31:a1:d7:d5:8c:79:e4:fd:79:33:db:85:f0: 43:d2:8d:d8:6f:57:43:6f:b1:d9:03:66:10:ce:d0: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A3:0F:11:ED:E8:1B:8F:7E:B5:36:34:BC:75:8D:F2:FD:5A:65:2A X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:ae:89:e2:cb:9a:3b:fe:6b:f7:24:11:f0:ac:62:73:9a:e1: a2:72:35:21:14:1d:b0:ee:87:7d:4c:30:64:ac:ba:31:e6:1f: 37:98:e1:be:27:13:22:d8:67:c2:46:7c:13:a4:36:51:ae:73: 7a:f6:a6:dc:5a:78:2b:c3:75:36:7b:b6:95:bc:71:a9:02:20: b0:af:74:2e:f8:81:25:8e:22:01:f4:ff:c6:ec:b4:fd:3d:14: 09:65:81:70:8d:33:88:f8:98:bb:6a:44:70:06:a5:a7:e1:c1: be:7f:44:45:7b:f8:ad:b7:15:df:f5:0c:f5:dd:5c:d5:33:e3: 8f:08:51:ca:98:9d:55:17:9c:80:ed:f5:39:aa:7d:9c:1b:4f: 7f:aa:cd:61:ff:50:50:2e:a5:78:80:c3:9f:54:fd:4b:74:ef: 9c:a3:41:7a:62:75:c4:85:5b:62:38:d8:68:d8:2c:de:8d:86: 99:6a:c0:c1:18:a3:4c:5b:13:3a:3f:35:fe:19:e8:9e:4e:92: 72:cc:33:d7:83:39:ba:ca:1e:c9:ba:e5:bf:8b:cf:8d:b4:02: 0e:57:10:d4:11:b2:ee:92:b4:56:ad:8a:cd:44:fe:69:09:02: 29:33:bc:da:7b:4d:18:fb:64:6e:79:2a:22:c5:82:a6:5c:a3: 4b:6c:59:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwNDAzMDEyNzUzWhcNMjUwNDEwMDEyNzUzWjAYMRYwFAYD VQQDEw02N2VkZTQxYS1jMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtcIQ2jO8CdjvQoqG9zVFl+FGcdABO+BVNF4x0VK7TFv1NuFms5anSTrjNfzY lzOPRSnV1Tfo+Fy0XTH0QR0BcXsYNnc0Cng5ElzOT4oy87mGiT+TP1UObcUD6Pyo o/Zgu0aPXUkLrYL+9yPVCOU0YLSO4dLax2+PRW2QgMLh4TXLW6hgvbhS/ZX66eVY +pt9tNCkIyEMuui8e8PdDTjjQCSkUgTEtuxmaM4XJ+hYC5ht1gMLZklyNFPc6KQJ 7as4rwNEHnzdNule41LBtaH2xBpS5oRW14IYshMPPebkPb3WEzGh19WMeeT9eTPb hfBD0o3Yb1dDb7HZA2YQztBjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAKjDxHt 6BuPfrU2NLx1jfL9WmUqMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuroniy5o7/mv3JBHwrGJzmuGicjUhFB2w7od9TDBkrLox5h83mOG+ JxMi2GfCRnwTpDZRrnN69qbcWngrw3U2e7aVvHGpAiCwr3Qu+IEljiIB9P/G7LT9 PRQJZYFwjTOI+Ji7akRwBqWn4cG+f0RFe/ittxXf9Qz13VzVM+OPCFHKmJ1VF5yA 7fU5qn2cG09/qs1h/1BQLqV4gMOfVP1LdO+co0F6YnXEhVtiONho2CzejYaZasDB GKNMWxM6PzX+GeieTpJyzDPXgzm6yh7JuuW/i8+NtAIOVxDUEbLukrRWrYrNRP5p CQIpM7zae00Y+2RueSoixYKmXKNLbFm2 -----END CERTIFICATE-----Generated at Fri Apr 4 22:06:40 2025 by rpki-client