$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: P8I3p4rtlLuMADJh3QdP17O+WKnnybQLN+r8LpS4AaU= Subject key identifier: C5:14:C9:3E:4D:FC:70:D3:51:63:77:AE:CA:69:07:5E:8C:70:DE:03 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 7A Signing time: Tue 03 Jun 2025 06:30:41 +0000 Manifest this update: Tue 03 Jun 2025 06:30:40 +0000 Manifest next update: Tue 10 Jun 2025 06:30:40 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: NPblm8TTAOg4IVIt1UWza8ZHYAv03zWzhuY7QI7c1kQ=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: Jun 3 06:30:40 2025 GMT Not After : Jun 10 06:30:40 2025 GMT Subject: CN=683e9690-add6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fc:72:c8:8b:ff:c2:6d:d0:79:c8:b5:d0:0d: 27:48:21:b1:d6:64:45:7a:db:fe:68:c5:df:46:14: b1:fa:e1:92:c0:aa:2e:d1:67:b8:60:1f:f1:fd:da: 77:06:2a:f6:9f:62:f2:db:08:b5:e9:da:75:c6:96: f2:e8:7e:28:69:08:ac:42:85:30:6d:a7:66:c8:9f: 0e:41:5c:8d:1e:6a:17:80:66:69:e4:1c:db:aa:b8: ca:8f:74:7d:50:46:48:8e:79:9f:92:74:c5:12:ac: 17:14:f8:ec:a1:5b:d5:9f:a8:a5:f1:97:99:8d:b9: b3:3a:51:b9:c7:0f:8a:ec:50:03:86:30:b4:6e:4a: 9a:b8:f4:0a:d7:b1:83:72:e1:4a:ae:88:aa:eb:84: 99:da:d6:11:4c:ea:9f:f5:6c:ac:5a:ff:a7:9f:f7: ae:c8:3a:a9:c7:37:c9:b7:92:9c:de:eb:34:4c:bd: b2:a7:92:d5:5e:16:1a:4f:0d:82:71:11:de:13:fb: 40:ab:41:cb:63:ef:06:10:a5:4a:0e:6b:ba:1f:10: eb:8d:03:f0:46:7d:75:4e:e8:0a:89:24:28:67:40: b8:11:c5:1c:a2:7a:e7:52:4c:88:11:e1:0e:ca:b8: 66:04:3c:a9:94:82:5c:38:aa:ea:f9:f1:c2:20:5b: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:C9:3E:4D:FC:70:D3:51:63:77:AE:CA:69:07:5E:8C:70:DE:03 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:14:2f:ed:e2:46:fc:99:9d:72:d0:e5:77:bb:dc:6b:0d:9d: 08:4b:35:03:14:22:9a:3f:e6:f3:4b:1d:91:b8:6d:07:84:06: 57:79:9a:35:a4:36:f9:f1:0f:4b:29:81:52:81:3a:7f:17:35: b1:71:c0:f3:cf:c5:ba:80:3a:67:10:38:c3:de:30:9c:35:a6: 08:62:fb:1c:2e:40:76:d0:e7:c0:79:87:06:af:9a:c1:81:9d: 6f:da:44:c8:2e:63:04:8b:69:c2:54:96:7e:64:df:54:bf:e7: de:da:cd:9e:ce:bf:30:d4:f8:50:79:fb:3e:ed:cb:58:f1:ed: 5b:2f:86:ba:6c:87:90:78:e9:ab:9b:60:90:e4:9f:6c:54:fb: 91:bd:b7:b1:ad:6f:02:ef:d7:80:3d:d2:fb:81:af:68:34:7d: 8d:fa:df:50:e8:e1:13:22:0e:2f:73:b4:89:60:d5:9b:1e:a0: f3:3f:c0:80:1c:2c:49:14:ef:65:5a:1f:a5:2f:31:86:e7:7e: 65:a6:a0:d5:1c:21:45:42:f3:26:2d:8c:24:51:b9:fd:9f:26: ae:a9:a1:80:65:2c:28:78:42:2b:e1:87:2c:66:6d:71:a9:16: 86:af:a7:64:4c:55:8d:1d:3e:1d:67:8f:e7:16:35:81:a7:39: 23:19:d1:ed -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNTA2MDMwNjMwNDBaFw0yNTA2MTAwNjMwNDBaMBgxFjAUBgNV BAMTDTY4M2U5NjkwLWFkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+/HLIi//CbdB5yLXQDSdIIbHWZEV62/5oxd9GFLH64ZLAqi7RZ7hgH/H92ncG KvafYvLbCLXp2nXGlvLofihpCKxChTBtp2bInw5BXI0eaheAZmnkHNuquMqPdH1Q RkiOeZ+SdMUSrBcU+OyhW9WfqKXxl5mNubM6UbnHD4rsUAOGMLRuSpq49ArXsYNy 4UquiKrrhJna1hFM6p/1bKxa/6ef967IOqnHN8m3kpze6zRMvbKnktVeFhpPDYJx Ed4T+0CrQctj7wYQpUoOa7ofEOuNA/BGfXVO6AqJJChnQLgRxRyieudSTIgR4Q7K uGYEPKmUglw4qur58cIgWyc/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxRTJPk38 cNNRY3euymkHXoxw3gMwHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtz dm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABcUL+3iRvyZnXLQ5Xe73GsNnQhLNQMUIpo/5vNLHZG4bQeEBld5mjWk NvnxD0spgVKBOn8XNbFxwPPPxbqAOmcQOMPeMJw1pghi+xwuQHbQ58B5hwavmsGB nW/aRMguYwSLacJUln5k31S/597azZ7OvzDU+FB5+z7ty1jx7Vsvhrpsh5B46aub YJDkn2xU+5G9t7GtbwLv14A90vuBr2g0fY3631Do4RMiDi9ztIlg1ZseoPM/wIAc LEkU72VaH6UvMYbnfmWmoNUcIUVC8yYtjCRRuf2fJq6poYBlLCh4QivhhyxmbXGp Foavp2RMVY0dPh1nj+cWNYGnOSMZ0e0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:39 2025 by rpki-client