$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: phf70L21TuCzp3niC0dyvmo9A1kIm/PZaPlTRqnJ2zM= Subject key identifier: EC:F8:5C:E3:8A:78:86:46:4E:AE:20:54:76:3C:31:D9:22:1A:95:AA Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 05 Signing time: Sat 31 May 2025 07:45:25 +0000 Manifest this update: Sat 31 May 2025 07:45:25 +0000 Manifest next update: Sat 07 Jun 2025 07:45:25 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: 65GVH2dE6sHmPjqP7lag5n+GPZS+pmjYl87lCnuTiwA=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: May 31 07:45:25 2025 GMT Not After : Jun 7 07:45:25 2025 GMT Subject: CN=683ab395-eb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:7d:f3:59:0a:d1:98:26:eb:5f:90:6e:02: 6b:82:1e:41:c9:98:23:f6:1c:35:75:1d:63:de:d7: 29:43:d5:d7:fa:3c:dd:50:c2:00:18:46:17:c0:0a: 54:bb:56:46:53:cd:65:45:0f:45:40:f9:64:4a:29: 0c:1c:5c:b8:f7:97:e4:c6:91:21:60:e8:2f:91:be: a8:d7:92:ec:14:84:65:54:2d:b8:17:d7:e7:a4:ba: f3:d8:b1:9a:b7:04:58:05:d1:7e:cc:ad:b6:c3:d4: cf:e1:b9:bc:64:44:b1:9a:26:29:b4:be:df:15:86: 12:ec:df:29:80:a9:65:41:c4:2f:bd:0d:d8:37:a3: 32:8d:66:c5:af:0e:a1:51:66:db:aa:4b:53:48:2a: 8f:30:b9:f6:e6:c8:49:2c:f7:34:d3:60:9d:47:30: 35:de:e8:ce:3c:cd:3f:1f:2c:91:b6:dd:96:24:f2: 88:56:e6:7d:fe:d1:bc:f0:cc:6d:96:ba:e2:f8:5e: 37:8f:39:13:21:05:82:55:1d:a0:16:2d:5e:7f:46: aa:99:78:c9:ea:73:91:47:23:fd:69:ed:5a:62:63: d8:81:2a:ff:86:8b:98:a1:1f:e5:1a:9e:6b:69:48: 7c:e7:d0:4e:47:c1:df:b4:fe:0c:e0:02:b2:fd:5a: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F8:5C:E3:8A:78:86:46:4E:AE:20:54:76:3C:31:D9:22:1A:95:AA X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:79:e8:0b:54:e1:1c:10:f8:c4:fc:fa:03:b4:f1:1e:ec:48: b2:e5:85:88:7d:67:c0:38:ed:5d:57:fe:3e:04:72:4c:da:f3: 11:f1:e9:1c:ab:a7:ac:27:b0:c3:c8:ed:6c:bb:80:8a:a6:b0: fa:4a:13:41:13:08:8e:2a:db:38:25:1e:6a:5a:23:dd:7c:d1: a9:eb:e2:3d:18:74:3f:57:d0:a1:0a:3c:5e:fc:b4:1d:65:2e: 45:63:d1:2f:4b:57:9f:00:7e:d9:0b:1e:31:00:11:71:30:c4: 8a:3b:c3:03:5d:c5:7c:26:b3:79:e2:03:0c:2e:01:a4:a3:25: 30:37:8d:12:4b:84:cf:d8:7b:0b:c7:ff:36:69:e6:e9:2f:af: e3:27:52:8e:20:bf:47:50:b7:6c:f5:79:21:2b:82:55:ca:81: e2:b3:fb:d8:03:02:51:06:3f:28:78:1d:69:9a:0b:db:e2:d4: 5e:03:43:0f:76:72:9c:48:a5:38:26:08:12:bf:c4:a3:02:7f: d5:d8:5f:6c:d5:94:22:d4:f5:41:71:aa:6b:27:2b:12:0a:5f: a2:7c:0f:9d:ed:5d:ce:13:88:93:2e:c6:80:43:d6:af:b0:21: e1:d8:24:08:7f:3b:5b:3a:ec:32:f8:a0:f1:0f:97:84:2f:47: 08:6a:46:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTA1MzEwNzQ1MjVaFw0yNTA2MDcwNzQ1MjVaMBgxFjAUBgNV BAMTDTY4M2FiMzk1LWViOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsdX3zWQrRmCbrX5BuAmuCHkHJmCP2HDV1HWPe1ylD1df6PN1QwgAYRhfAClS7 VkZTzWVFD0VA+WRKKQwcXLj3l+TGkSFg6C+RvqjXkuwUhGVULbgX1+ekuvPYsZq3 BFgF0X7MrbbD1M/hubxkRLGaJim0vt8VhhLs3ymAqWVBxC+9Ddg3ozKNZsWvDqFR ZtuqS1NIKo8wufbmyEks9zTTYJ1HMDXe6M48zT8fLJG23ZYk8ohW5n3+0bzwzG2W uuL4XjePORMhBYJVHaAWLV5/RqqZeMnqc5FHI/1p7VpiY9iBKv+Gi5ihH+Uanmtp SHzn0E5Hwd+0/gzgArL9Wp2NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7Phc44p4 hkZOriBUdjwx2SIalaowHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGx56AtU4RwQ+MT8+gO08R7sSLLlhYh9Z8A47V1X/j4Eckza8xHx6Ryr p6wnsMPI7Wy7gIqmsPpKE0ETCI4q2zglHmpaI9180anr4j0YdD9X0KEKPF78tB1l LkVj0S9LV58AftkLHjEAEXEwxIo7wwNdxXwms3niAwwuAaSjJTA3jRJLhM/YewvH /zZp5ukvr+MnUo4gv0dQt2z1eSErglXKgeKz+9gDAlEGPyh4HWmaC9vi1F4DQw92 cpxIpTgmCBK/xKMCf9XYX2zVlCLU9UFxqmsnKxIKX6J8D53tXc4TiJMuxoBD1q+w IeHYJAh/O1s67DL4oPEPl4QvRwhqRoc= -----END CERTIFICATE-----Generated at Sat May 31 17:45:00 2025 by rpki-client