$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: qHwqVLH/L/I7BTgONTBxyIBCJkEEonBJGrS7/IJnRP8= Subject key identifier: 4B:F8:5A:03:1C:BE:34:45:3E:50:9B:72:99:B3:DD:A7:E8:42:18:FA Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 0678 Signing time: Fri 30 May 2025 22:57:00 +0000 Manifest this update: Fri 30 May 2025 22:56:59 +0000 Manifest next update: Fri 06 Jun 2025 22:56:59 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: 3JtiQ0g9MWy0qfSYFrr380tKVuTb5qB8nXwIyHE9ujw=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=) 3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=) 4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: T0CswBD2KIPNfh8TN7kP5VLd+HEy8GI9WMF69x1b8Qc=) 5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=) 6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: May 30 22:56:59 2025 GMT Not After : Jun 6 22:56:59 2025 GMT Subject: CN=683a37bc-480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cf:7a:2e:e7:d4:5c:9f:dc:54:89:f5:cd:b6: 5d:0e:b2:85:14:c7:97:a4:ff:fa:6e:10:c5:5c:a1: 16:a9:39:72:70:bf:41:7e:86:3b:95:01:e5:ac:49: 8e:de:a5:4f:4c:c6:0a:88:de:6a:19:12:2e:76:aa: 01:9f:fa:6d:49:ac:1e:4e:10:92:05:4e:51:9d:87: 47:5f:b7:49:24:a3:41:01:6a:0a:db:7c:ea:24:04: f1:66:96:46:0a:8d:e4:05:3d:10:20:ff:ea:15:b2: 10:a7:75:c6:7a:8d:b3:9f:0e:04:39:7b:31:99:ee: ed:cd:f8:bd:42:6b:fa:ec:d0:ea:45:9d:79:76:d7: e1:b7:1e:2f:41:4c:8b:d0:55:cc:66:8f:c3:28:48: f8:b8:4f:7e:3a:c1:f4:d8:5c:35:bd:d3:8b:f6:d9: 1c:cf:0c:dd:d3:87:f8:0b:77:b3:6d:a0:2a:41:9d: ce:e1:38:ac:90:4d:bb:20:6e:a2:b5:f2:43:d8:ee: f9:45:a0:b4:4a:60:0b:68:26:93:87:05:fd:46:ce: e5:42:6f:4a:d3:14:52:1f:40:49:08:8b:de:16:bc: 84:c8:10:f4:64:0d:3c:5f:c0:0a:e3:e5:cd:2d:91: 6d:86:d0:6d:a0:48:fe:f9:ab:ff:6e:88:56:77:34: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F8:5A:03:1C:BE:34:45:3E:50:9B:72:99:B3:DD:A7:E8:42:18:FA X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:c5:e1:33:60:08:0d:bc:ad:7f:04:14:23:96:fa:03:d6:e4: 15:0f:de:72:65:3e:85:65:85:c9:56:bb:73:dd:cc:65:f9:80: b7:2c:a6:05:56:d6:c1:6a:66:12:2c:e2:8f:75:99:2c:d7:36: 98:9f:0a:25:24:19:c1:8c:18:24:b8:b7:0f:4c:28:ce:56:6a: 83:b0:d3:6a:ed:7b:3b:b1:a0:e2:21:e4:0d:29:94:64:84:c0: d7:d1:bc:c7:bb:5a:b8:59:59:e5:b3:c2:b2:fe:a2:3b:46:9a: 46:b6:71:bc:9a:f6:6f:2b:a3:20:87:1c:fd:81:7d:75:b5:32: 66:46:24:dd:83:90:2e:92:0c:11:52:d1:cc:bd:45:8e:e7:45: 51:eb:46:41:41:24:a4:ca:bc:a4:05:11:53:35:94:57:e7:ec: 04:6a:4e:f5:bc:1a:24:9f:c9:33:71:a6:64:50:6e:da:22:41: 86:5a:af:2e:c2:69:e0:9f:0a:01:9a:b6:31:dc:1b:20:31:e1: c2:bc:bf:84:85:af:1a:d9:78:c1:ac:2f:26:30:ea:d5:d2:b4: 76:6b:db:7e:1c:76:6d:d8:78:22:3c:70:36:4a:a4:bf:02:7a: e4:5d:7a:c1:3d:bb:40:72:d2:2b:b0:88:af:a3:f1:93:79:38: e4:a3:ad:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUwNTMwMjI1NjU5WhcNMjUwNjA2MjI1NjU5WjAYMRYwFAYD VQQDEw02ODNhMzdiYy00ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5c96LufUXJ/cVIn1zbZdDrKFFMeXpP/6bhDFXKEWqTlycL9BfoY7lQHlrEmO 3qVPTMYKiN5qGRIudqoBn/ptSaweThCSBU5RnYdHX7dJJKNBAWoK23zqJATxZpZG Co3kBT0QIP/qFbIQp3XGeo2znw4EOXsxme7tzfi9Qmv67NDqRZ15dtfhtx4vQUyL 0FXMZo/DKEj4uE9+OsH02Fw1vdOL9tkczwzd04f4C3ezbaAqQZ3O4TiskE27IG6i tfJD2O75RaC0SmALaCaThwX9Rs7lQm9K0xRSH0BJCIveFryEyBD0ZA08X8AK4+XN LZFthtBtoEj++av/bohWdzRIJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv4WgMc vjRFPlCbcpmz3afoQhj6MB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3xeEzYAgNvK1/BBQjlvoD1uQVD95yZT6FZYXJVrtz3cxl+YC3LKYF VtbBamYSLOKPdZks1zaYnwolJBnBjBgkuLcPTCjOVmqDsNNq7Xs7saDiIeQNKZRk hMDX0bzHu1q4WVnls8Ky/qI7RppGtnG8mvZvK6Mghxz9gX11tTJmRiTdg5AukgwR UtHMvUWO50VR60ZBQSSkyrykBRFTNZRX5+wEak71vBokn8kzcaZkUG7aIkGGWq8u wmngnwoBmrYx3BsgMeHCvL+Eha8a2XjBrC8mMOrV0rR2a9t+HHZt2HgiPHA2SqS/ AnrkXXrBPbtActIrsIivo/GTeTjko60u -----END CERTIFICATE-----Generated at Sat May 31 17:04:51 2025 by rpki-client