$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json) Hash identifier: iYKpEPqnpBfyVUW1Zln3KB7fskqLM+ZMLnzzq3y8EJw= Subject key identifier: 65:E4:A8:55:32:7F:B6:C5:76:77:09:30:E3:B5:A6:99:9F:8D:D9:ED Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft Manifest number: 014D Signing time: Sat 31 May 2025 03:57:42 +0000 Manifest this update: Sat 31 May 2025 03:57:41 +0000 Manifest next update: Sat 07 Jun 2025 03:57:41 +0000 Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: mw43ZaLYCPsDjW46dJYLUSz9za4jfRck9pUPEYzbAgQ=) 2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: 0VizvwlSvt2Typg26qLoIMnU5PdKIxjIiPdXQB++0ps=) 3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=) 4: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: HsYr8OmdjYIdRArCv8NBd7tL5J9ojAyKHb00KhjW28U=) 5: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: May 31 03:57:41 2025 GMT Not After : Jun 7 03:57:41 2025 GMT Subject: CN=683a7e35-9df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:29:81:e6:d0:44:6f:34:d3:e9:69:bb:16: ec:c7:11:b0:46:e7:0e:b5:ee:b0:8e:4e:88:d6:aa: 79:87:99:ee:c2:2c:32:0b:28:a3:54:12:41:b3:18: 47:dc:cc:15:34:97:54:23:fb:02:33:8c:dd:96:e9: b4:e3:47:20:45:48:17:f0:13:5e:89:04:f8:5e:6f: 45:40:24:ef:ed:36:4b:f6:33:7b:d6:83:82:e3:79: 9f:5a:50:ed:93:51:f6:6f:7d:f2:52:3c:44:a7:28: e4:3e:e0:b1:95:a3:e2:ec:66:88:6f:e7:47:bb:85: c6:cc:70:98:b0:33:b0:51:8b:a1:06:30:d6:1f:9d: 8c:66:f7:e4:6e:a1:fa:cd:1c:7f:74:b5:08:d5:fd: 94:a6:cb:c8:fd:d8:8b:9d:f4:ab:8e:81:e1:a2:4a: dc:f5:0a:4b:b9:e1:4e:85:0f:2a:b8:1f:48:2c:30: ec:ee:f8:34:07:0a:c8:d3:60:73:4d:c5:48:e9:4d: 0d:b0:21:dc:82:18:64:af:eb:40:ff:bf:a7:82:1d: 04:aa:f4:48:b2:96:1b:45:77:cf:89:9b:a7:14:77: b3:14:88:27:60:4d:81:fb:bd:1a:6f:38:aa:86:f7: 4c:b9:90:a6:e8:b3:74:50:0b:a5:e3:6a:aa:f9:9c: ca:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E4:A8:55:32:7F:B6:C5:76:77:09:30:E3:B5:A6:99:9F:8D:D9:ED X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:a4:88:23:70:99:fe:f5:c7:77:0e:d6:5b:3a:fe:2c:c4:f8: 13:4d:f8:d9:2e:04:9f:2e:62:df:74:9f:a3:f8:27:3f:fd:75: 5f:02:11:ef:ca:4d:5c:39:9a:fa:fe:c2:a1:d6:30:7b:be:2d: 05:c0:e9:7a:cc:31:3f:2c:a8:42:01:27:cb:09:dd:74:2d:ed: bf:25:5c:cd:c2:45:d6:29:79:68:35:23:8a:59:bb:25:47:87: 9e:4d:0f:00:56:e8:6b:85:5d:ac:e5:2d:3e:d9:35:43:42:6e: 6f:1e:b7:29:c6:95:2f:be:bd:30:35:20:04:1f:da:9e:76:0a: 3e:fe:a4:fd:a7:b5:b3:d6:9e:0a:ee:44:52:2d:3a:29:fe:96: 92:06:07:a1:25:17:57:f7:91:b1:5a:6e:7d:ec:b9:d8:e5:e8: 81:c5:47:9d:74:92:b1:9f:1a:88:69:36:c2:89:d0:53:14:61: c9:b2:16:4c:dd:88:01:62:54:de:02:48:67:d1:c0:56:a1:5d: bf:b2:c3:d1:23:08:27:9a:a5:99:49:76:44:54:2e:f4:6e:84: c1:c2:5d:ae:0c:24:19:13:52:97:c2:33:e0:1c:3c:fa:61:a2: ab:fb:69:4e:a4:17:c6:00:73:a4:b5:80:26:ab:7b:b5:d2:e5: 00:50:92:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjUwNTMxMDM1NzQxWhcNMjUwNjA3MDM1NzQxWjAYMRYwFAYD VQQDEw02ODNhN2UzNS05ZGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFMpgebQRG800+lpuxbsxxGwRucOte6wjk6I1qp5h5nuwiwyCyijVBJBsxhH 3MwVNJdUI/sCM4zdlum040cgRUgX8BNeiQT4Xm9FQCTv7TZL9jN71oOC43mfWlDt k1H2b33yUjxEpyjkPuCxlaPi7GaIb+dHu4XGzHCYsDOwUYuhBjDWH52MZvfkbqH6 zRx/dLUI1f2UpsvI/diLnfSrjoHhokrc9QpLueFOhQ8quB9ILDDs7vg0BwrI02Bz TcVI6U0NsCHcghhkr+tA/7+ngh0EqvRIspYbRXfPiZunFHezFIgnYE2B+70abziq hvdMuZCm6LN0UAul42qq+ZzK+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXkqFUy f7bFdncJMOO1ppmfjdntMB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDDpIgjcJn+9cd3DtZbOv4sxPgTTfjZLgSfLmLfdJ+j+Cc//XVfAhHv yk1cOZr6/sKh1jB7vi0FwOl6zDE/LKhCASfLCd10Le2/JVzNwkXWKXloNSOKWbsl R4eeTQ8AVuhrhV2s5S0+2TVDQm5vHrcpxpUvvr0wNSAEH9qedgo+/qT9p7Wz1p4K 7kRSLTop/paSBgehJRdX95GxWm597LnY5eiBxUeddJKxnxqIaTbCidBTFGHJshZM 3YgBYlTeAkhn0cBWoV2/ssPRIwgnmqWZSXZEVC70boTBwl2uDCQZE1KXwjPgHDz6 YaKr+2lOpBfGAHOktYAmq3u10uUAUJJA -----END CERTIFICATE-----Generated at Sat May 31 17:26:11 2025 by rpki-client