$ rpki-client -vvf rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft File: 2CKi28iCNPgPcORngrLU2c0_m9w.mft (raw, json) Hash identifier: 4W0NvT/yNwGvkYgDQB6YOT63cnucnGDLnVQhukYjoOk= Subject key identifier: 76:CC:08:BA:E7:19:7F:C9:98:2B:0F:52:FF:27:E2:72:1C:49:B6:A4 Authority key identifier: D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC Certificate issuer: /CN=A9176B32/serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft Manifest number: 022B Signing time: Mon 09 Jun 2025 01:30:34 +0000 Manifest this update: Mon 09 Jun 2025 01:30:33 +0000 Manifest next update: Mon 16 Jun 2025 01:30:33 +0000 Files and hashes: 1: 2CKi28iCNPgPcORngrLU2c0_m9w.crl (hash: 9bi1mO169u0AG5+naYuGwdZG0ugE0TcQ7j1+UP+n/Cs=) 2: 14C5F2A62F3C11ED84084082C4F9AE02.roa (hash: tIgnOUYL9AaMF3o6uRCl3XbHRWVvM0EG7is36EBsHLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 01:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176B32, serialNumber=D822A2DBC88234F80F70E46782B2D4D9CD3F9BDC Validity Not Before: Jun 9 01:30:33 2025 GMT Not After : Jun 16 01:30:33 2025 GMT Subject: CN=6846393a-43b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:32:7b:37:e2:55:1f:a1:05:11:b8:5f:22:0e: 0f:d6:90:e8:57:8f:3d:4f:b7:b4:88:45:8e:9a:30: 1a:6f:1d:1b:e5:42:86:53:d9:8c:9d:ae:18:1f:a8: c7:dd:88:b3:3b:f3:a9:e6:7a:bb:ca:e4:a5:42:c4: f7:dd:3c:3e:e9:25:3d:78:8d:fe:8f:f4:af:3e:c1: b8:d3:97:85:76:44:85:a4:37:42:f3:2b:fd:82:ac: a5:eb:84:8a:c7:a4:0b:ba:94:31:70:ad:56:51:54: 2d:ba:90:a0:a3:1e:87:26:d5:3a:ea:f9:11:91:64: 3c:b0:ee:73:04:02:a7:93:3b:19:8b:fa:ea:bd:c1: 07:f3:f1:ca:09:ed:c9:ec:55:85:38:f2:07:41:eb: c6:12:68:59:0b:43:da:69:cb:5d:4b:2f:29:12:fb: 44:05:71:e2:a1:06:0b:7c:cd:4a:b8:79:84:f5:88: 2d:ed:cb:6e:be:a7:a0:25:c4:5a:38:94:7d:8f:7d: 37:4f:33:05:06:c8:a6:6a:18:46:27:d5:a9:19:1a: b5:07:09:75:e0:e7:a1:df:75:ba:d9:03:f3:45:95: 3f:76:07:3b:2f:c4:b5:e6:f7:77:33:2f:72:53:29: ac:5e:04:6c:17:26:d5:8d:c3:9d:d4:27:d1:ca:ec: 0c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:08:BA:E7:19:7F:C9:98:2B:0F:52:FF:27:E2:72:1C:49:B6:A4 X509v3 Authority Key Identifier: keyid:D8:22:A2:DB:C8:82:34:F8:0F:70:E4:67:82:B2:D4:D9:CD:3F:9B:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CKi28iCNPgPcORngrLU2c0_m9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176B32/738796182F3811ED9E7E027DC4F9AE02/2CKi28iCNPgPcORngrLU2c0_m9w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:63:c8:06:c3:08:26:ec:5b:2e:03:48:2d:9f:65:41:db:35: 7a:9f:f4:a5:28:b7:70:db:2f:e0:c3:9c:dc:67:fa:a4:94:b8: fa:62:dc:26:a0:c7:c1:59:8b:1b:24:09:ae:df:f8:69:15:9d: a7:8a:e7:57:04:0d:38:cf:b9:7b:ec:64:0a:b1:9a:6f:e2:a9: b7:d4:8f:96:89:04:b4:f1:fb:62:b4:dc:df:96:2f:4e:6c:95: 65:a3:04:ae:8a:83:b8:0b:d0:59:e4:18:af:df:d1:dd:0d:fe: aa:ab:66:0a:fc:10:ac:ea:c8:e8:96:95:ec:51:4d:b7:c2:99: 97:77:8c:36:1b:02:a9:65:bc:7a:0a:0e:27:b3:99:47:00:42: 28:ea:27:c2:ae:15:49:d2:83:12:88:23:01:0a:57:54:01:ce: cc:ca:40:0c:a0:ea:3e:84:0b:a1:71:26:8b:cc:f5:26:9f:3f: b6:d4:de:29:2d:a2:ca:a8:00:42:9c:22:e3:46:ec:b1:7a:0b: 2d:da:ac:37:ec:1e:dd:b7:eb:fc:01:45:d6:38:76:00:b0:2e: 6d:d2:9b:17:a8:c8:52:d2:89:eb:c4:44:ff:3f:b4:03:17:dc: da:7b:40:9b:43:b7:69:57:21:5b:d1:d1:2b:44:b2:c2:a8:1b: b1:37:c2:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZCMzIxMTAvBgNVBAUTKEQ4MjJBMkRCQzg4MjM0RjgwRjcwRTQ2NzgyQjJENEQ5 Q0QzRjlCREMwHhcNMjUwNjA5MDEzMDMzWhcNMjUwNjE2MDEzMDMzWjAYMRYwFAYD VQQDEw02ODQ2MzkzYS00M2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jJ7N+JVH6EFEbhfIg4P1pDoV489T7e0iEWOmjAabx0b5UKGU9mMna4YH6jH 3YizO/Op5nq7yuSlQsT33Tw+6SU9eI3+j/SvPsG405eFdkSFpDdC8yv9gqyl64SK x6QLupQxcK1WUVQtupCgox6HJtU66vkRkWQ8sO5zBAKnkzsZi/rqvcEH8/HKCe3J 7FWFOPIHQevGEmhZC0PaactdSy8pEvtEBXHioQYLfM1KuHmE9Ygt7ctuvqegJcRa OJR9j303TzMFBsimahhGJ9WpGRq1Bwl14Oeh33W62QPzRZU/dgc7L8S15vd3My9y UymsXgRsFybVjcOd1CfRyuwMQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbMCLrn GX/JmCsPUv8n4nIcSbakMB8GA1UdIwQYMBaAFNgiotvIgjT4D3DkZ4Ky1NnNP5vc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkIzMi83Mzg3OTYxODJG MzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05QZ1BjT1JuZ3JMVTJjMF9t OXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDS2kyOGlDTlBnUGNPUm5nckxVMmMwX205dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkIzMi83Mzg3OTYxODJGMzgxMUVEOUU3RTAyN0RDNEY5QUUwMi8yQ0tpMjhpQ05Q Z1BjT1JuZ3JMVTJjMF9tOXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgY8gGwwgm7FsuA0gtn2VB2zV6n/SlKLdw2y/gw5zcZ/qklLj6Ytwm oMfBWYsbJAmu3/hpFZ2niudXBA04z7l77GQKsZpv4qm31I+WiQS08ftitNzfli9O bJVlowSuioO4C9BZ5Biv39HdDf6qq2YK/BCs6sjolpXsUU23wpmXd4w2GwKpZbx6 Cg4ns5lHAEIo6ifCrhVJ0oMSiCMBCldUAc7MykAMoOo+hAuhcSaLzPUmnz+21N4p LaLKqABCnCLjRuyxegst2qw37B7dt+v8AUXWOHYAsC5t0psXqMhS0onrxET/P7QD F9zae0CbQ7dpVyFb0dErRLLCqBuxN8L6 -----END CERTIFICATE-----Generated at Mon Jun 9 07:18:42 2025 by rpki-client