$ rpki-client -vvf rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft File: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft (raw, json) Hash identifier: SyXD01XwNflWzjYBoypKkID0q4nG+tR4Cfd07eLzEBI= Subject key identifier: AA:5A:88:B1:5F:8F:07:88:BC:0E:D8:F9:91:88:98:B6:B1:EE:B8:D6 Authority key identifier: DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 Certificate issuer: /CN=A91A300F/serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Certificate serial: 043E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft Manifest number: 0439 Signing time: Sat 31 May 2025 00:30:51 +0000 Manifest this update: Sat 31 May 2025 00:30:51 +0000 Manifest next update: Sat 07 Jun 2025 00:30:51 +0000 Files and hashes: 1: 2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl (hash: 13uc5CHVRi9k2MgMTP/YDP9UVB3w8+9/HAfX4FDVCrA=) 2: 9C2DE17A5D9311ECB2ABB63FC4F9AE02.roa (hash: XCMHw1WVIEMLU74HMo1cPz+oPVQmbB2z+VPLna5yZDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1086 (0x43e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A300F, serialNumber=DBEEEBC25A7A9B9B675A04E2F421EFE46EA72520 Validity Not Before: May 31 00:30:51 2025 GMT Not After : Jun 7 00:30:51 2025 GMT Subject: CN=683a4dbb-f6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4e:af:bf:ff:66:e5:c2:d5:b9:53:8e:fa:f6: 34:a0:2a:4d:7f:db:6c:78:6a:d5:00:17:5a:a9:55: 3c:ca:4f:0f:d9:34:96:91:42:9a:83:7f:ba:f1:e5: fd:d4:39:58:83:ff:ca:82:e1:48:e4:c3:24:e1:da: 91:68:dd:48:65:f0:de:d9:47:3c:9e:95:df:e0:16: 8f:f6:c1:0c:d5:f0:83:be:dd:a4:02:f9:2f:73:13: bc:e4:d8:5f:4f:98:c4:7d:c3:fc:f9:8b:61:05:89: 3c:88:b9:c2:85:5c:c0:32:8e:1a:43:c0:cb:2d:03: 46:4a:5a:a7:9e:fd:da:47:8e:73:d4:60:05:06:89: 01:a1:80:96:7b:36:1a:e5:0a:ff:42:35:0d:76:5c: 69:3c:de:89:09:d4:28:4f:87:11:7b:8c:68:f4:c3: fe:45:10:31:32:e2:85:57:63:76:67:9f:35:7f:cf: cb:ae:36:ec:a9:a7:69:94:9f:76:35:6d:c3:14:59: 92:3b:e8:12:7a:0d:e2:6a:04:7e:11:3b:06:17:1c: 0c:6c:e4:f9:2c:08:76:e8:2a:0e:0b:f5:ba:26:c1: 53:d0:55:73:46:89:d9:a6:a4:7a:05:eb:3f:c4:91: 8c:3e:f4:df:0c:9e:4a:34:67:19:75:77:f6:54:22: e5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5A:88:B1:5F:8F:07:88:BC:0E:D8:F9:91:88:98:B6:B1:EE:B8:D6 X509v3 Authority Key Identifier: keyid:DB:EE:EB:C2:5A:7A:9B:9B:67:5A:04:E2:F4:21:EF:E4:6E:A7:25:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-7rwlp6m5tnWgTi9CHv5G6nJSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A300F/1AD5AF745D9111EC9AFB8D3DC4F9AE02/2-7rwlp6m5tnWgTi9CHv5G6nJSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1b:5c:44:0a:f9:e7:f1:24:6b:b5:7d:b9:49:2e:1e:39:61: 8d:87:8b:33:a1:91:a1:23:11:fb:e3:80:06:be:a7:b6:53:89: b7:84:d5:8b:8b:96:ba:dd:9b:ff:26:aa:b1:b2:44:fd:6e:8f: e5:be:ca:25:3e:93:57:c9:ee:61:cd:ce:f7:1e:8c:0d:ff:dd: 19:20:02:45:70:5d:ba:31:94:47:0f:84:d0:ab:b7:9b:1e:37: 03:56:a5:ea:ff:10:f4:14:18:97:ed:cf:4b:da:1c:3a:8c:37: c7:92:ef:7e:be:ce:e4:05:df:6a:6c:76:b5:18:85:09:fd:af: 25:77:5c:d3:b7:ad:0b:7a:64:07:b3:72:47:89:3c:ef:0b:0f: 4f:2d:69:3c:c0:a7:05:0d:43:84:2b:31:4e:ba:42:42:4a:0b: 8f:05:6f:02:f8:af:ec:e7:3d:02:bf:77:15:44:6b:49:b2:e7: 04:88:66:07:e4:ea:02:32:6c:c1:b2:c8:3a:fb:ee:e1:a7:4a: 14:07:82:0b:5a:fd:a3:c6:5b:07:63:30:9d:80:a7:0d:01:27: 94:25:ca:e3:36:fd:36:61:6b:ec:8d:85:1c:0d:ed:4f:db:a5: 27:16:68:e8:ac:72:bd:b2:b1:49:4c:20:95:f2:16:b4:e5:bd: 9a:17:c2:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTMwMEYxMTAvBgNVBAUTKERCRUVFQkMyNUE3QTlCOUI2NzVBMDRFMkY0MjFFRkU0 NkVBNzI1MjAwHhcNMjUwNTMxMDAzMDUxWhcNMjUwNjA3MDAzMDUxWjAYMRYwFAYD VQQDEw02ODNhNGRiYi1mNmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyU6vv/9m5cLVuVOO+vY0oCpNf9tseGrVABdaqVU8yk8P2TSWkUKag3+68eX9 1DlYg//KguFI5MMk4dqRaN1IZfDe2Uc8npXf4BaP9sEM1fCDvt2kAvkvcxO85Nhf T5jEfcP8+YthBYk8iLnChVzAMo4aQ8DLLQNGSlqnnv3aR45z1GAFBokBoYCWezYa 5Qr/QjUNdlxpPN6JCdQoT4cRe4xo9MP+RRAxMuKFV2N2Z581f8/LrjbsqadplJ92 NW3DFFmSO+gSeg3iagR+ETsGFxwMbOT5LAh26CoOC/W6JsFT0FVzRonZpqR6Bes/ xJGMPvTfDJ5KNGcZdXf2VCLlcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpaiLFf jweIvA7Y+ZGImLax7rjWMB8GA1UdIwQYMBaAFNvu68JaepubZ1oE4vQh7+RupyUg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzAwRi8xQUQ1QUY3NDVE OTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01dG5XZ1RpOUNIdjVHNm5K U0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItN3J3bHA2bTV0bldnVGk5Q0h2NUc2bkpTQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzAwRi8xQUQ1QUY3NDVEOTExMUVDOUFGQjhEM0RDNEY5QUUwMi8yLTdyd2xwNm01 dG5XZ1RpOUNIdjVHNm5KU0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2G1xECvnn8SRrtX25SS4eOWGNh4szoZGhIxH744AGvqe2U4m3hNWL i5a63Zv/JqqxskT9bo/lvsolPpNXye5hzc73HowN/90ZIAJFcF26MZRHD4TQq7eb HjcDVqXq/xD0FBiX7c9L2hw6jDfHku9+vs7kBd9qbHa1GIUJ/a8ld1zTt60LemQH s3JHiTzvCw9PLWk8wKcFDUOEKzFOukJCSguPBW8C+K/s5z0Cv3cVRGtJsucEiGYH 5OoCMmzBssg6++7hp0oUB4ILWv2jxlsHYzCdgKcNASeUJcrjNv02YWvsjYUcDe1P 26UnFmjorHK9srFJTCCV8ha05b2aF8Iv -----END CERTIFICATE-----Generated at Sat May 31 14:43:10 2025 by rpki-client