$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: 6yrMxxWadyi7LpUoIVCvw3Q3mcsDqrpgG1DwUeXO9gg= Subject key identifier: 17:C9:FD:00:41:08:2D:B3:70:5F:CA:AF:25:4C:06:2C:D0:0F:5C:CA Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 048C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 0487 Signing time: Sat 07 Jun 2025 00:04:24 +0000 Manifest this update: Sat 07 Jun 2025 00:04:24 +0000 Manifest next update: Sat 14 Jun 2025 00:04:24 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: 9Mxk4lXWZpvUCa3Irn9pCAiuWlWnIjxnpenCVJLAgtQ=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: oCq0GS/e8jzWI+qfCm+Q9EBQNv1mP52MN9gsJPInZfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 00:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1164 (0x48c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: Jun 7 00:04:24 2025 GMT Not After : Jun 14 00:04:24 2025 GMT Subject: CN=68438208-2b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:39:8c:53:63:7d:0b:96:a4:3d:e6:46:2a: 52:43:c6:6d:5c:08:ae:14:5a:6a:ef:ab:d7:d1:dd: 89:b1:46:41:3c:61:b8:8c:8a:b7:a5:e4:5b:53:8e: c6:02:8e:ac:d0:73:0a:50:37:62:2e:f7:98:a2:2e: 66:3e:b0:cb:b8:69:7c:0c:3b:d4:9a:2b:fb:ef:e6: 84:31:50:9d:34:b3:d8:ef:46:10:b6:32:9c:e2:f4: 07:6a:8a:05:02:b5:dd:4c:47:8b:9d:24:93:09:6b: 69:51:0b:e7:a8:b6:f1:d5:95:82:e6:37:ab:2a:a0: 64:c9:57:db:26:33:af:0e:2b:0a:9a:34:04:1d:5a: 92:30:16:98:88:4f:67:70:2f:78:9a:96:43:6b:a3: e1:df:85:31:a3:c2:49:b0:3e:f1:cb:2e:dd:8a:0e: 5a:61:70:e0:64:99:2e:00:23:69:c0:20:59:49:8b: 40:fa:f2:b9:a1:ea:eb:c7:95:74:d5:9b:5e:8e:24: 29:66:95:ee:0d:b2:46:84:66:38:fb:76:40:7b:77: 6d:c0:ee:da:08:d0:30:26:41:2a:21:50:9b:6d:09: 14:79:24:79:ab:aa:d4:44:e0:ad:c0:6c:4b:5a:6a: c5:66:7f:92:22:40:aa:f4:f6:0d:c8:3b:2b:7a:53: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:FD:00:41:08:2D:B3:70:5F:CA:AF:25:4C:06:2C:D0:0F:5C:CA X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:3e:ba:64:16:f9:e6:e3:51:4b:18:05:f7:67:85:e8:d9:66: 16:e0:e9:fe:9a:4d:d9:c3:ed:87:b2:82:2a:9c:68:da:4c:02: e9:22:f5:7e:02:1a:a4:b5:99:c2:6e:aa:e4:55:8f:16:85:6b: 9f:79:ea:2d:9a:de:f0:74:9a:f0:f4:a6:b3:a9:6a:a2:44:33: 12:a3:d1:f6:e3:cd:e0:e6:1e:e7:9c:7f:c9:27:a4:6c:5a:bd: 8c:d9:92:67:bf:4d:87:ca:80:8b:49:8b:29:a8:06:21:05:1c: 62:d8:8c:b2:9b:39:05:c4:0a:ce:80:42:bb:44:f2:22:30:c8: 56:d1:27:55:04:ca:bc:be:27:b5:06:64:0a:84:d6:56:3d:3a: 89:af:92:b7:59:4b:1e:00:3b:c6:d3:5b:78:a8:78:32:5d:0b: ad:0f:a7:23:97:58:1f:16:78:46:bf:11:f7:1a:62:16:31:f7: a3:e2:de:04:ee:55:98:15:e8:a1:b1:08:00:f2:58:67:c9:13: d9:c0:64:31:72:92:cc:bb:be:08:9a:fd:62:6a:df:d4:1a:f0: 1c:cd:13:6c:ac:0d:21:e2:f8:22:88:6e:94:a5:ba:cb:d0:f2: 96:52:84:ec:51:26:16:a9:30:7a:4a:97:3e:b6:9f:78:bc:ee: 67:ae:9e:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjUwNjA3MDAwNDI0WhcNMjUwNjE0MDAwNDI0WjAYMRYwFAYD VQQDEw02ODQzODIwOC0yYjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvU5jFNjfQuWpD3mRipSQ8ZtXAiuFFpq76vX0d2JsUZBPGG4jIq3peRbU47G Ao6s0HMKUDdiLveYoi5mPrDLuGl8DDvUmiv77+aEMVCdNLPY70YQtjKc4vQHaooF ArXdTEeLnSSTCWtpUQvnqLbx1ZWC5jerKqBkyVfbJjOvDisKmjQEHVqSMBaYiE9n cC94mpZDa6Ph34Uxo8JJsD7xyy7dig5aYXDgZJkuACNpwCBZSYtA+vK5oerrx5V0 1ZtejiQpZpXuDbJGhGY4+3ZAe3dtwO7aCNAwJkEqIVCbbQkUeSR5q6rUROCtwGxL WmrFZn+SIkCq9PYNyDsrelOT9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBfJ/QBB CC2zcF/KryVMBizQD1zKMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0PrpkFvnm41FLGAX3Z4Xo2WYW4On+mk3Zw+2HsoIqnGjaTALpIvV+ AhqktZnCbqrkVY8WhWufeeotmt7wdJrw9KazqWqiRDMSo9H2483g5h7nnH/JJ6Rs Wr2M2ZJnv02HyoCLSYspqAYhBRxi2IyymzkFxArOgEK7RPIiMMhW0SdVBMq8vie1 BmQKhNZWPTqJr5K3WUseADvG01t4qHgyXQutD6cjl1gfFnhGvxH3GmIWMfej4t4E 7lWYFeihsQgA8lhnyRPZwGQxcpLMu74Imv1iat/UGvAczRNsrA0h4vgiiG6UpbrL 0PKWUoTsUSYWqTB6Spc+tp94vO5nrp6q -----END CERTIFICATE-----Generated at Sun Jun 8 11:46:48 2025 by rpki-client