$ rpki-client -vvf rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft File: 2-bH-ZCQRq41ohWw4hVErlIjfoo.mft (raw, json) Hash identifier: aZr8BlDS02Ka5ItSnwdHSrl1/uBHEBjme+Ubt83d8vc= Subject key identifier: 7B:B9:19:F8:6E:93:9D:19:13:E0:11:CF:58:64:7C:6F:AD:6C:15:D1 Authority key identifier: DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A Certificate issuer: /CN=A914F697/serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft Manifest number: 07AA Signing time: Fri 30 May 2025 21:13:01 +0000 Manifest this update: Fri 30 May 2025 21:13:01 +0000 Manifest next update: Fri 06 Jun 2025 21:13:01 +0000 Files and hashes: 1: 2-bH-ZCQRq41ohWw4hVErlIjfoo.crl (hash: /uP0cKpugyxyndHLRBo8rd2L1jbwP8mzhOOPWo2xXKY=) 2: 1AA7504A92DD11EB9B9E993FC4F9AE02.roa (hash: C75Vrv4Uz+C6zFOBFG0FQ16ertvfsDBJQmC7BROeKb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F697, serialNumber=DBE6C7F9909046AE35A215B0E21544AE52237E8A Validity Not Before: May 30 21:13:01 2025 GMT Not After : Jun 6 21:13:01 2025 GMT Subject: CN=683a1f5d-186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:f9:05:30:0c:71:2c:ae:2d:5d:f2:47:7b: 3d:1c:56:1d:e4:14:a0:d8:58:f9:64:2e:1d:6c:11: f0:e9:11:1e:7e:71:5f:1c:9d:5e:36:36:da:19:7c: ed:d6:af:e4:fe:a0:ab:bf:b5:28:f7:db:6f:45:db: 3b:27:68:4a:47:86:6f:6f:47:44:59:c2:f5:f3:22: 72:7d:b5:44:41:eb:0b:92:e0:84:53:35:c7:00:9c: 2b:75:45:67:d2:af:b8:f0:80:51:b5:92:69:fc:46: 49:c2:fc:5a:48:ff:78:22:9b:f6:d5:e7:cd:99:e2: 86:b2:da:9c:f3:74:59:07:a2:35:2b:4f:63:82:ab: bf:a5:41:54:01:66:bd:b4:2c:44:1a:31:11:c8:f7: 3b:0e:c7:2d:62:5a:82:40:5c:c8:74:d7:ba:a3:19: 2d:aa:bb:f4:fa:0c:03:6f:d3:27:2a:40:d4:91:f8: 9f:42:a9:5e:89:e1:e8:0e:67:6e:df:bd:09:ae:22: 08:4f:ce:9b:af:2c:a9:a8:4c:42:78:4a:86:2c:f4: 28:b2:56:a7:bf:42:e2:b5:ae:3c:de:d4:ea:24:8d: 5d:dd:87:39:7d:2b:0f:a1:42:2c:6c:6c:d4:02:6e: c3:4b:2f:b2:83:c2:ec:df:99:6b:bb:84:ad:9e:43: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B9:19:F8:6E:93:9D:19:13:E0:11:CF:58:64:7C:6F:AD:6C:15:D1 X509v3 Authority Key Identifier: keyid:DB:E6:C7:F9:90:90:46:AE:35:A2:15:B0:E2:15:44:AE:52:23:7E:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-bH-ZCQRq41ohWw4hVErlIjfoo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F697/7521DFC0E85D11EAB23C8F87C4F9AE02/2-bH-ZCQRq41ohWw4hVErlIjfoo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:51:fd:7f:35:52:55:86:72:33:a5:21:e7:63:dc:97:ed:e3: 70:2d:99:79:16:7c:a9:13:a6:5d:11:86:02:16:74:c1:48:b1: ce:3e:ae:a3:fd:8d:ef:d1:8e:0b:4d:a3:2b:64:d7:8c:c4:08: 18:5b:58:c6:bf:f2:8d:3b:62:12:29:fb:af:24:a4:9a:50:e5: 58:4f:5d:e5:f0:41:8a:07:aa:16:6c:db:8c:f0:6b:62:eb:d3: 3e:a9:1d:e9:54:a9:6e:67:3e:26:49:e0:28:11:03:f7:42:ca: 5b:3b:74:2d:a9:7d:f4:96:ca:4d:76:c1:44:43:a9:e5:82:9d: 2a:c8:b7:fb:32:4d:14:a1:b8:57:04:5e:4a:d8:c6:5f:c9:1d: 7c:37:96:3c:e7:30:bc:bf:82:84:ce:ac:dc:43:6b:21:27:aa: dd:75:50:8c:4d:20:77:4a:fc:ab:d8:6f:51:18:94:cc:18:d2: 2f:a1:22:15:8e:ac:c1:62:41:2b:eb:c2:d9:95:ec:ae:a3:b8: 8e:49:2a:f9:55:1f:77:79:0b:df:c4:23:b5:ca:f2:25:26:48: af:ab:74:1e:09:e8:c7:aa:b1:86:bb:b0:58:d2:53:2d:d2:43: f4:62:cd:4f:d0:27:15:99:9a:ff:65:1a:f1:07:b0:60:8a:c5: ab:86:8a:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEY2OTcxMTAvBgNVBAUTKERCRTZDN0Y5OTA5MDQ2QUUzNUEyMTVCMEUyMTU0NEFF NTIyMzdFOEEwHhcNMjUwNTMwMjExMzAxWhcNMjUwNjA2MjExMzAxWjAYMRYwFAYD VQQDEw02ODNhMWY1ZC0xODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnr5BTAMcSyuLV3yR3s9HFYd5BSg2Fj5ZC4dbBHw6REefnFfHJ1eNjbaGXzt 1q/k/qCrv7Uo99tvRds7J2hKR4Zvb0dEWcL18yJyfbVEQesLkuCEUzXHAJwrdUVn 0q+48IBRtZJp/EZJwvxaSP94Ipv21efNmeKGstqc83RZB6I1K09jgqu/pUFUAWa9 tCxEGjERyPc7DsctYlqCQFzIdNe6oxktqrv0+gwDb9MnKkDUkfifQqleieHoDmdu 370JriIIT86bryypqExCeEqGLPQoslanv0Lita483tTqJI1d3Yc5fSsPoUIsbGzU Am7DSy+yg8Ls35lru4StnkPNDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHu5Gfhu k50ZE+ARz1hkfG+tbBXRMB8GA1UdIwQYMBaAFNvmx/mQkEauNaIVsOIVRK5SI36K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjY5Ny83NTIxREZDMEU4 NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJxNDFvaFd3NGhWRXJsSWpm b28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItYkgtWkNRUnE0MW9oV3c0aFZFcmxJamZvby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RjY5Ny83NTIxREZDMEU4NUQxMUVBQjIzQzhGODdDNEY5QUUwMi8yLWJILVpDUVJx NDFvaFd3NGhWRXJsSWpmb28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaUf1/NVJVhnIzpSHnY9yX7eNwLZl5FnypE6ZdEYYCFnTBSLHOPq6j /Y3v0Y4LTaMrZNeMxAgYW1jGv/KNO2ISKfuvJKSaUOVYT13l8EGKB6oWbNuM8Gti 69M+qR3pVKluZz4mSeAoEQP3QspbO3QtqX30lspNdsFEQ6nlgp0qyLf7Mk0UobhX BF5K2MZfyR18N5Y85zC8v4KEzqzcQ2shJ6rddVCMTSB3Svyr2G9RGJTMGNIvoSIV jqzBYkEr68LZleyuo7iOSSr5VR93eQvfxCO1yvIlJkivq3QeCejHqrGGu7BY0lMt 0kP0Ys1P0CcVmZr/ZRrxB7BgisWrhorQ -----END CERTIFICATE-----Generated at Sat May 31 16:57:50 2025 by rpki-client