$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft File: wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft (raw, json) Hash identifier: 9k4BPUh5kAuEP+w7h3mZ+hVkUwHfXi2ocK9iDy6rCYM= Subject key identifier: 59:61:E3:76:AC:C5:84:2D:B1:06:27:62:B0:2D:98:04:B1:D6:7C:48 Authority key identifier: C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D Certificate issuer: /CN=A913DA3E/serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft Manifest number: 0686 Signing time: Fri 30 May 2025 22:28:08 +0000 Manifest this update: Fri 30 May 2025 22:28:07 +0000 Manifest next update: Fri 06 Jun 2025 22:28:07 +0000 Files and hashes: 1: wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl (hash: RIkwjg+65ubS7f4CAOLh5IZyueg8EaZWEd+OuNs3M5U=) 2: 19AB8E92734611EB816DB064C4F9AE02.roa (hash: qtAk8oTZDrgTWNBm9Xz8I2B3TKuJD5JEiZtJXgjDA28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DA3E, serialNumber=C13D8F82B3D3CE474653540E5365C4C90894C03D Validity Not Before: May 30 22:28:07 2025 GMT Not After : Jun 6 22:28:07 2025 GMT Subject: CN=683a30f7-c5b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:13:be:85:31:8d:3a:7d:3f:83:ec:10:e1:5d: c7:51:b0:8f:36:05:84:de:36:12:dd:f8:5e:36:6b: 07:c8:03:26:b0:61:54:28:fa:dd:37:90:d8:16:bf: 15:e8:e1:34:32:a2:cb:88:bf:43:b8:63:da:88:1f: 9e:3f:46:21:88:c5:2a:84:62:c4:8b:6e:63:dc:f0: 75:37:10:7c:34:bc:66:42:bb:6d:b2:58:8e:8e:c1: 91:27:0d:0a:0a:23:9c:4f:f8:bd:f4:6a:26:f0:d2: 4a:c9:3e:9f:d3:23:94:b9:1b:cb:c7:10:f6:77:fd: 25:5c:ec:a7:84:be:d9:2a:97:39:7a:76:0b:71:26: 80:2f:cc:97:05:f9:75:33:cb:c8:b8:cf:d3:3a:99: 1c:0b:c6:65:1a:6a:00:ca:de:bc:51:de:06:67:62: b9:1e:83:4e:7e:8d:58:9f:3b:f4:a4:7d:3d:44:da: fe:28:a3:49:db:91:b7:d5:25:fa:d5:71:0e:9a:3e: d6:e6:32:29:0a:ec:08:90:29:a4:d8:c7:85:92:59: c3:9a:b1:33:1f:be:75:e2:15:eb:c3:e5:84:7c:7d: b0:9d:b6:31:43:1a:47:27:dc:48:b2:85:74:cf:76: 76:1a:52:bd:69:61:6c:72:21:b2:5c:41:40:aa:90: cf:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:E3:76:AC:C5:84:2D:B1:06:27:62:B0:2D:98:04:B1:D6:7C:48 X509v3 Authority Key Identifier: keyid:C1:3D:8F:82:B3:D3:CE:47:46:53:54:0E:53:65:C4:C9:08:94:C0:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wT2PgrPTzkdGU1QOU2XEyQiUwD0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA3E/42268748734411EBA8E4DA5FC4F9AE02/wT2PgrPTzkdGU1QOU2XEyQiUwD0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f8:16:fa:3c:03:b3:5c:98:d7:5a:df:95:04:3f:80:c4:a1: 2f:05:27:e9:06:e7:f7:09:cb:d5:74:db:c4:1a:d4:7f:5e:f9: 85:02:7f:5a:fa:b2:f7:ba:b8:6a:b2:c5:0e:8a:2b:0e:41:74: d6:a6:11:9a:67:44:81:f6:97:3a:8d:f0:dc:55:9c:61:55:cb: 91:8a:bb:fa:0c:6b:18:fb:73:9e:99:6d:21:df:a5:cf:0e:75: ab:b6:2e:a0:f5:52:80:f2:50:01:09:cb:e1:5b:d7:00:f5:6c: 6f:2d:5c:1b:68:48:e8:98:6a:03:98:b0:d7:ac:1c:05:26:5a: ab:36:22:22:0a:3a:e8:a6:36:74:4e:5c:b9:11:ef:ff:49:e0: fe:e8:ac:f7:7a:97:a4:af:63:1f:62:e1:11:b6:03:eb:22:23: bb:b3:64:1f:f9:46:aa:7d:35:55:8e:ca:35:61:9b:63:a2:1d: a4:6a:b0:19:44:56:3f:12:ff:b1:a9:69:c7:77:4c:2b:10:a0: b5:8c:a6:57:21:81:73:a7:64:bb:d8:0e:a2:08:ea:6c:19:98: 10:78:58:83:ad:4f:d9:06:65:c8:6c:0b:55:96:41:3b:91:7d: 24:66:dd:41:c4:b0:df:ce:81:10:2b:56:60:b6:2c:e3:90:25: 3a:b7:a8:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBM0UxMTAvBgNVBAUTKEMxM0Q4RjgyQjNEM0NFNDc0NjUzNTQwRTUzNjVDNEM5 MDg5NEMwM0QwHhcNMjUwNTMwMjIyODA3WhcNMjUwNjA2MjIyODA3WjAYMRYwFAYD VQQDEw02ODNhMzBmNy1jNWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxO+hTGNOn0/g+wQ4V3HUbCPNgWE3jYS3fheNmsHyAMmsGFUKPrdN5DYFr8V 6OE0MqLLiL9DuGPaiB+eP0YhiMUqhGLEi25j3PB1NxB8NLxmQrttsliOjsGRJw0K CiOcT/i99Gom8NJKyT6f0yOUuRvLxxD2d/0lXOynhL7ZKpc5enYLcSaAL8yXBfl1 M8vIuM/TOpkcC8ZlGmoAyt68Ud4GZ2K5HoNOfo1Ynzv0pH09RNr+KKNJ25G31SX6 1XEOmj7W5jIpCuwIkCmk2MeFklnDmrEzH7514hXrw+WEfH2wnbYxQxpHJ9xIsoV0 z3Z2GlK9aWFsciGyXEFAqpDP2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFlh43as xYQtsQYnYrAtmASx1nxIMB8GA1UdIwQYMBaAFME9j4Kz085HRlNUDlNlxMkIlMA9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREEzRS80MjI2ODc0ODcz NDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHprZEdVMVFPVTJYRXlRaVV3 RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dUMlBnclBUemtkR1UxUU9VMlhFeVFpVXdEMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REEzRS80MjI2ODc0ODczNDQxMUVCQThFNERBNUZDNEY5QUUwMi93VDJQZ3JQVHpr ZEdVMVFPVTJYRXlRaVV3RDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm+Bb6PAOzXJjXWt+VBD+AxKEvBSfpBuf3CcvVdNvEGtR/XvmFAn9a +rL3urhqssUOiisOQXTWphGaZ0SB9pc6jfDcVZxhVcuRirv6DGsY+3OemW0h36XP DnWrti6g9VKA8lABCcvhW9cA9WxvLVwbaEjomGoDmLDXrBwFJlqrNiIiCjropjZ0 Tly5Ee//SeD+6Kz3epekr2MfYuERtgPrIiO7s2Qf+UaqfTVVjso1YZtjoh2karAZ RFY/Ev+xqWnHd0wrEKC1jKZXIYFzp2S72A6iCOpsGZgQeFiDrU/ZBmXIbAtVlkE7 kX0kZt1BxLDfzoEQK1ZgtizjkCU6t6jS -----END CERTIFICATE-----Generated at Sat May 31 16:47:46 2025 by rpki-client