$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft File: u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json) Hash identifier: y6Fys28Tux1y3kdQCidjotyXXZjN/KRGsGvw1KmjToc= Subject key identifier: 34:E6:F3:1D:A5:AC:05:A6:B8:A1:60:5D:3B:7D:7C:59:4A:B7:2E:0E Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0BC2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft Manifest number: 0BB9 Signing time: Fri 30 May 2025 19:07:37 +0000 Manifest this update: Fri 30 May 2025 19:07:37 +0000 Manifest next update: Fri 06 Jun 2025 19:07:37 +0000 Files and hashes: 1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: o1lYy7hfX/bQixiXhyID0cN/gybjZA/9n313PFRMs4Q=) 2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: 6VuhUdY4wX4JtAdDLdZ6VRCxsSJ2dhl5mfVJFdysXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3010 (0xbc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: May 30 19:07:37 2025 GMT Not After : Jun 6 19:07:37 2025 GMT Subject: CN=683a01f9-c816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6c:f8:af:16:7e:68:0d:4d:19:71:21:d3:04: c7:e8:2a:41:27:4b:71:d4:a9:f5:31:ba:d0:7e:c8: 09:99:23:1a:42:f2:f8:19:42:95:7a:7a:ed:ed:5e: f3:4f:eb:60:14:a9:44:bd:a0:48:86:06:fa:15:ea: 44:5b:e1:45:01:1a:84:85:51:bf:db:a6:67:7d:68: 33:a2:94:8f:3d:a0:18:e2:3f:10:49:f3:7d:90:8e: f3:2e:37:d3:6b:1d:2e:9b:1f:1b:76:64:77:62:b1: 7c:c1:8d:77:b4:cd:21:c6:cc:c6:51:79:93:4a:35: 1e:c7:9f:04:a5:cd:23:b0:f6:64:17:b4:b2:af:18: ef:34:c9:b1:9a:1b:b8:f6:c7:d8:02:10:6a:4f:b0: 75:0c:69:50:c9:a8:d7:d8:2c:92:e3:7f:a0:4a:37: 77:95:ef:de:65:4c:a1:b3:74:4c:5d:5f:dc:e0:d8: 8f:ca:27:a0:01:55:cb:20:8d:b1:c8:22:0a:9a:e2: 23:d4:e0:af:44:3e:57:02:08:4c:0d:80:b2:97:d4: 3d:2b:47:1f:0b:67:46:e0:29:d5:58:40:12:ae:f8: 27:ad:ff:33:29:78:4e:68:82:c2:50:1e:fb:05:0d: e7:0e:ff:a8:b2:84:3c:d2:34:97:37:c2:50:95:09: 2d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E6:F3:1D:A5:AC:05:A6:B8:A1:60:5D:3B:7D:7C:59:4A:B7:2E:0E X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:76:6c:4f:19:f0:11:79:c1:e0:cf:d0:96:9d:e9:16:7c:09: 22:c1:30:64:90:b1:6a:58:03:8e:87:f2:37:68:f0:7e:ec:af: 52:37:0d:27:a6:d5:86:bc:04:a6:d2:f8:38:e9:06:0c:db:83: 53:26:e9:c9:4b:90:1d:fa:01:2f:3a:10:dd:4d:27:e3:87:2f: ab:74:b4:35:0b:4f:d1:25:c6:b8:68:f3:5c:53:01:dc:a7:47: 26:98:5c:cc:3a:1e:b2:a3:3f:76:93:1c:98:08:b4:55:f4:93: 6f:a9:11:09:60:8b:f3:d2:34:cc:ca:71:bd:10:ab:60:e5:6e: 98:12:d1:8b:aa:1c:93:97:ce:9f:46:dc:74:87:c2:7f:c6:70: fa:ab:30:ea:e3:4e:3b:a0:82:9b:b3:7b:45:55:e2:69:10:38: 0e:c4:c3:6b:5f:c8:e6:13:43:cf:bb:61:e1:0e:e2:ea:69:17: f4:8c:c9:01:08:ec:0a:d1:36:d1:17:5d:e2:09:15:e1:dd:5e: 7c:d3:fb:4b:76:59:b4:f9:09:30:72:72:3e:4a:b3:24:f9:71: 3d:d0:42:83:1a:f6:93:b6:da:f0:79:b0:18:00:d9:8d:05:f4: ec:bb:5b:12:c3:04:ad:cc:fa:08:18:60:eb:01:33:66:52:80: cc:eb:63:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjUwNTMwMTkwNzM3WhcNMjUwNjA2MTkwNzM3WjAYMRYwFAYD VQQDEw02ODNhMDFmOS1jODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGz4rxZ+aA1NGXEh0wTH6CpBJ0tx1Kn1MbrQfsgJmSMaQvL4GUKVenrt7V7z T+tgFKlEvaBIhgb6FepEW+FFARqEhVG/26ZnfWgzopSPPaAY4j8QSfN9kI7zLjfT ax0umx8bdmR3YrF8wY13tM0hxszGUXmTSjUex58Epc0jsPZkF7SyrxjvNMmxmhu4 9sfYAhBqT7B1DGlQyajX2CyS43+gSjd3le/eZUyhs3RMXV/c4NiPyiegAVXLII2x yCIKmuIj1OCvRD5XAghMDYCyl9Q9K0cfC2dG4CnVWEASrvgnrf8zKXhOaILCUB77 BQ3nDv+osoQ80jSXN8JQlQktiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTm8x2l rAWmuKFgXTt9fFlKty4OMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0dmxPGfARecHgz9CWnekWfAkiwTBkkLFqWAOOh/I3aPB+7K9SNw0n ptWGvASm0vg46QYM24NTJunJS5Ad+gEvOhDdTSfjhy+rdLQ1C0/RJca4aPNcUwHc p0cmmFzMOh6yoz92kxyYCLRV9JNvqREJYIvz0jTMynG9EKtg5W6YEtGLqhyTl86f Rtx0h8J/xnD6qzDq4047oIKbs3tFVeJpEDgOxMNrX8jmE0PPu2HhDuLqaRf0jMkB COwK0TbRF13iCRXh3V580/tLdlm0+QkwcnI+SrMk+XE90EKDGvaTttrwebAYANmN BfTsu1sSwwStzPoIGGDrATNmUoDM62NH -----END CERTIFICATE-----Generated at Sat May 31 17:53:11 2025 by rpki-client