$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft File: r2ctqMXR1sgNUGF4yefLdE9uOOY.mft (raw, json) Hash identifier: +dsFEe5fyr0qbdqSwc4rvUJJBGkJKjjEFQnKNnnY85s= Subject key identifier: 58:FE:0E:C4:EB:3E:6A:08:7A:EE:BA:09:DE:8C:2A:FD:20:11:2B:52 Authority key identifier: AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 Certificate issuer: /CN=A91A6F2D/serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft Manifest number: 62 Signing time: Sat 31 May 2025 23:11:34 +0000 Manifest this update: Sat 31 May 2025 23:11:33 +0000 Manifest next update: Sat 07 Jun 2025 23:11:33 +0000 Files and hashes: 1: r2ctqMXR1sgNUGF4yefLdE9uOOY.crl (hash: Xqy1gttmKr/5MlYahGQ/Iuk2I/5e8lGwv1F8BnxzeaU=) 2: FBE0AB56AC6511EFAEAA8A3CC4F9AE02.roa (hash: 2bzYWZhSZUzBimn1IglwPv7AEhVCAaK8feLQOEL571A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:11:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F2D, serialNumber=AF672DA8C5D1D6C80D506178C9E7CB744F6E38E6 Validity Not Before: May 31 23:11:33 2025 GMT Not After : Jun 7 23:11:33 2025 GMT Subject: CN=683b8ca6-edcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:84:57:98:71:2e:a5:46:ce:2d:26:51:6b:49: aa:76:4d:9f:ef:d2:9c:9a:c3:68:93:04:f1:b1:0a: de:4a:69:b0:61:26:0c:0e:2d:6d:56:76:2d:28:b5: 8e:4c:99:05:f6:67:36:45:eb:cb:47:cb:50:52:86: c6:8b:c8:ab:59:aa:be:39:1b:5e:d1:da:d7:01:f1: a7:d6:fd:9a:d8:b0:2b:92:cd:d7:ed:74:7c:bc:ad: 90:d8:b7:fc:78:26:0f:7c:1e:e3:07:c4:00:00:6b: a6:03:7f:e4:08:80:9b:9a:e0:15:2a:ef:74:11:ec: 0a:35:7e:1f:da:57:74:87:9d:68:84:2e:cc:33:f2: b1:f6:b8:8c:0f:f6:df:0f:af:47:02:1f:13:18:c7: 01:6c:80:20:c8:09:d4:a1:b5:28:90:d1:fc:58:49: a2:02:c5:b4:09:e8:57:dd:28:ed:6d:e1:90:63:1f: db:1e:db:20:9e:66:0e:0f:6d:67:f0:2b:85:62:06: 09:cb:71:44:f6:a6:d0:b5:aa:ee:83:d8:f2:2c:72: 58:09:b6:51:11:3d:11:36:4b:d3:9e:20:b6:17:44: 00:99:9b:e5:62:e7:81:54:b1:ff:0b:e8:c5:3f:76: 64:a4:24:71:e9:0e:61:f6:55:00:2e:9e:00:e0:36: c3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FE:0E:C4:EB:3E:6A:08:7A:EE:BA:09:DE:8C:2A:FD:20:11:2B:52 X509v3 Authority Key Identifier: keyid:AF:67:2D:A8:C5:D1:D6:C8:0D:50:61:78:C9:E7:CB:74:4F:6E:38:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/r2ctqMXR1sgNUGF4yefLdE9uOOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F2D/6F821178AB8811EF80C75A74C4F9AE02/r2ctqMXR1sgNUGF4yefLdE9uOOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:29:33:69:66:8f:60:fa:dd:88:a1:aa:48:a9:61:35:ab:2e: ec:85:9b:39:39:d1:82:5a:aa:20:be:5a:a0:6e:ba:ea:f3:6e: ac:ed:bc:45:aa:6f:d7:54:f6:ed:b1:b8:7f:0a:31:d8:01:49: da:cc:f2:c3:e6:db:af:76:7f:d4:4e:f7:9f:f5:43:3b:fb:b5: f1:c5:35:d5:8a:b2:da:c5:65:50:b2:c8:df:c1:ed:ab:dd:f3: 8c:a8:c2:cf:3e:ce:65:f3:63:8b:c5:c2:c5:d1:21:82:dd:c0: cf:19:cf:7a:f8:e4:25:d3:30:2c:a9:1e:df:1a:41:58:76:d7: e8:98:19:69:61:23:19:c3:42:c6:64:e2:c9:89:fe:15:4e:df: 7b:b5:4c:48:4d:14:34:65:8e:61:80:7f:5b:d6:b3:d8:f3:ca: 4a:98:c0:79:d9:a4:09:35:97:d4:ff:32:1e:13:94:2a:aa:35: 1f:26:7e:07:4f:6e:1c:5b:0c:30:36:e0:bd:67:e2:11:9a:a4: 95:13:01:6e:96:d1:29:65:f4:5a:af:e8:7a:e8:f6:e3:f5:57: fc:88:48:5a:4d:a9:e8:f0:78:60:14:2c:0c:96:8f:df:fa:53: 73:b0:42:d3:cc:00:f8:f0:fa:20:ef:8e:2d:02:70:e0:db:c0: 2d:1e:ce:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkYyRDExMC8GA1UEBRMoQUY2NzJEQThDNUQxRDZDODBENTA2MTc4QzlFN0NCNzQ0 RjZFMzhFNjAeFw0yNTA1MzEyMzExMzNaFw0yNTA2MDcyMzExMzNaMBgxFjAUBgNV BAMTDTY4M2I4Y2E2LWVkY2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrhFeYcS6lRs4tJlFrSap2TZ/v0pyaw2iTBPGxCt5KabBhJgwOLW1Wdi0otY5M mQX2ZzZF68tHy1BShsaLyKtZqr45G17R2tcB8afW/ZrYsCuSzdftdHy8rZDYt/x4 Jg98HuMHxAAAa6YDf+QIgJua4BUq73QR7Ao1fh/aV3SHnWiELswz8rH2uIwP9t8P r0cCHxMYxwFsgCDICdShtSiQ0fxYSaICxbQJ6FfdKO1t4ZBjH9se2yCeZg4PbWfw K4ViBgnLcUT2ptC1qu6D2PIsclgJtlERPRE2S9OeILYXRACZm+Vi54FUsf8L6MU/ dmSkJHHpDmH2VQAungDgNsO1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWP4OxOs+ agh67roJ3owq/SARK1IwHwYDVR0jBBgwFoAUr2ctqMXR1sgNUGF4yefLdE9uOOYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjJELzZGODIxMTc4QUI4 ODExRUY4MEM3NUE3NEM0RjlBRTAyL3IyY3RxTVhSMXNnTlVHRjR5ZWZMZEU5dU9P WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcjJjdHFNWFIxc2dOVUdGNHllZkxkRTl1T09ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjJELzZGODIxMTc4QUI4ODExRUY4MEM3NUE3NEM0RjlBRTAyL3IyY3RxTVhSMXNn TlVHRjR5ZWZMZEU5dU9PWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQpM2lmj2D63YihqkipYTWrLuyFmzk50YJaqiC+WqBuuurzbqztvEWq b9dU9u2xuH8KMdgBSdrM8sPm2692f9RO95/1Qzv7tfHFNdWKstrFZVCyyN/B7avd 84yows8+zmXzY4vFwsXRIYLdwM8Zz3r45CXTMCypHt8aQVh21+iYGWlhIxnDQsZk 4smJ/hVO33u1TEhNFDRljmGAf1vWs9jzykqYwHnZpAk1l9T/Mh4TlCqqNR8mfgdP bhxbDDA24L1n4hGapJUTAW6W0Sll9Fqv6Hro9uP1V/yISFpNqejweGAULAyWj9/6 U3OwQtPMAPjw+iDvji0CcODbwC0ezjE= -----END CERTIFICATE-----Generated at Mon Jun 2 20:30:55 2025 by rpki-client