$ rpki-client -vvf rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft File: 2dCjxqTde6e0VN6uAa9nryxUxDM.mft (raw, json) Hash identifier: bI4D7hWkttvBaT4iQMdrP3k9Ic+Y0Zq8YuxGzIVrqeo= Subject key identifier: FB:77:99:C7:98:B4:64:A1:CB:72:C0:74:FA:0F:A4:B4:14:72:56:09 Authority key identifier: D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 Certificate issuer: /CN=A915C9B7/serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft Manifest number: 07DF Signing time: Fri 30 May 2025 21:15:14 +0000 Manifest this update: Fri 30 May 2025 21:15:13 +0000 Manifest next update: Fri 06 Jun 2025 21:15:13 +0000 Files and hashes: 1: 2dCjxqTde6e0VN6uAa9nryxUxDM.crl (hash: lZIYCXv44X/eIYm75ENCAAspGB4ZFwNtakiWUT4y16A=) 2: 12A47D4E9CDB11EF857FB626C4F9AE02.roa (hash: 6+tk9n+mwKmveOFrTOSyNOKqHKQyrXgQ60Gavs+tji8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C9B7, serialNumber=D9D0A3C6A4DD7BA7B454DEAE01AF67AF2C54C433 Validity Not Before: May 30 21:15:13 2025 GMT Not After : Jun 6 21:15:13 2025 GMT Subject: CN=683a1fe2-643a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:13:6b:8e:09:97:3b:49:51:19:4a:f7:b0: c0:e4:72:fe:10:3c:2a:4b:7d:a4:ff:70:dd:a9:b2: 24:bf:60:31:1d:e6:db:d2:69:2b:42:fb:76:e0:b8: 60:15:30:81:5e:13:19:5a:87:b9:91:56:09:23:ed: ea:c4:09:75:0e:6f:d0:2b:0f:5b:5f:c2:b6:99:e9: f5:74:d8:df:3c:0c:59:51:c4:be:6e:ca:1f:39:98: 04:29:83:45:26:df:f3:52:37:36:11:ad:67:14:c3: 0b:68:10:f8:a3:80:68:58:45:a3:ca:a1:bc:e2:40: 13:4b:89:b6:97:85:b8:5b:ed:85:61:69:64:b6:29: 35:6a:21:79:78:8d:d9:92:62:11:c2:8f:8c:28:85: bd:6b:65:5c:72:c2:07:59:13:75:02:a5:0b:7e:b5: a7:f2:14:ec:e9:fa:8e:5b:09:12:98:69:73:39:45: 99:89:b5:b8:81:d7:51:48:e9:03:f3:6c:69:e8:aa: 1e:a3:2b:97:ce:18:e3:30:bc:3b:6e:78:e6:07:58: 97:93:37:d1:24:dd:13:7c:4d:68:91:e8:e8:74:29: 99:e3:a5:97:d7:80:05:e4:d7:40:53:7d:aa:66:99: dd:b6:97:59:da:dc:07:89:fa:1e:54:5f:f9:40:a1: 4a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:77:99:C7:98:B4:64:A1:CB:72:C0:74:FA:0F:A4:B4:14:72:56:09 X509v3 Authority Key Identifier: keyid:D9:D0:A3:C6:A4:DD:7B:A7:B4:54:DE:AE:01:AF:67:AF:2C:54:C4:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dCjxqTde6e0VN6uAa9nryxUxDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C9B7/8C264FD2EE5A11EAAD769033C4F9AE02/2dCjxqTde6e0VN6uAa9nryxUxDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:fb:c3:7a:98:77:7f:a1:12:54:b8:e1:2e:c5:42:2f:dd:c8: d9:90:8c:01:46:ca:47:5b:a6:66:81:52:98:7d:1b:3e:4c:cb: e9:18:f8:05:bd:af:00:5f:6c:6c:12:cd:ee:b4:80:d5:b8:db: 5b:42:b5:db:0b:67:58:f4:19:68:89:2d:90:43:7d:ab:02:73: 03:ee:8c:91:87:ce:6d:9b:29:48:e0:23:64:1b:f2:76:3a:1c: 38:f0:69:1c:b5:3b:5a:41:07:0d:3c:71:91:9b:97:e5:e0:7d: 7d:c3:b2:9a:ff:87:fd:c8:a3:0a:ff:bb:e1:63:52:94:96:e8: 73:2f:2a:62:c5:7b:ed:83:19:e2:6a:06:18:91:64:4a:85:23: 05:4b:19:4e:8f:57:b4:71:5c:ed:07:c5:f6:ee:1c:98:d1:9c: ac:83:2e:37:4f:f4:83:99:38:28:8a:58:8d:c1:26:2e:a9:ff: fc:9d:dd:07:f3:98:7c:6a:48:72:a6:62:ce:6c:25:c7:89:eb: b3:5f:65:ce:b2:4a:a8:1f:17:e5:ba:2c:05:b5:b7:b5:ba:b6: f7:ba:c5:4c:6d:1b:52:4b:89:83:63:eb:1d:75:46:63:2c:b4: 3a:78:47:c0:1a:e2:2b:a2:89:af:29:64:bb:08:c2:38:51:91: 0c:83:ff:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM5QjcxMTAvBgNVBAUTKEQ5RDBBM0M2QTRERDdCQTdCNDU0REVBRTAxQUY2N0FG MkM1NEM0MzMwHhcNMjUwNTMwMjExNTEzWhcNMjUwNjA2MjExNTEzWjAYMRYwFAYD VQQDEw02ODNhMWZlMi02NDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvqQTa44JlztJURlK97DA5HL+EDwqS32k/3DdqbIkv2AxHebb0mkrQvt24Lhg FTCBXhMZWoe5kVYJI+3qxAl1Dm/QKw9bX8K2men1dNjfPAxZUcS+bsofOZgEKYNF Jt/zUjc2Ea1nFMMLaBD4o4BoWEWjyqG84kATS4m2l4W4W+2FYWlktik1aiF5eI3Z kmIRwo+MKIW9a2VccsIHWRN1AqULfrWn8hTs6fqOWwkSmGlzOUWZibW4gddRSOkD 82xp6KoeoyuXzhjjMLw7bnjmB1iXkzfRJN0TfE1okejodCmZ46WX14AF5NdAU32q ZpndtpdZ2twHifoeVF/5QKFKwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPt3mceY tGShy3LAdPoPpLQUclYJMB8GA1UdIwQYMBaAFNnQo8ak3XuntFTergGvZ68sVMQz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzlCNy84QzI2NEZEMkVF NUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2ZTBWTjZ1QWE5bnJ5eFV4 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkQ2p4cVRkZTZlMFZONnVBYTlucnl4VXhETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzlCNy84QzI2NEZEMkVFNUExMUVBQUQ3NjkwMzNDNEY5QUUwMi8yZENqeHFUZGU2 ZTBWTjZ1QWE5bnJ5eFV4RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC+8N6mHd/oRJUuOEuxUIv3cjZkIwBRspHW6ZmgVKYfRs+TMvpGPgF va8AX2xsEs3utIDVuNtbQrXbC2dY9BloiS2QQ32rAnMD7oyRh85tmylI4CNkG/J2 Ohw48GkctTtaQQcNPHGRm5fl4H19w7Ka/4f9yKMK/7vhY1KUluhzLypixXvtgxni agYYkWRKhSMFSxlOj1e0cVztB8X27hyY0Zysgy43T/SDmTgoiliNwSYuqf/8nd0H 85h8akhypmLObCXHieuzX2XOskqoHxfluiwFtbe1urb3usVMbRtSS4mDY+sddUZj LLQ6eEfAGuIroomvKWS7CMI4UZEMg/+p -----END CERTIFICATE-----Generated at Sat May 31 16:43:01 2025 by rpki-client