$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: WCz88Zk2bdu82eXJimj6x+8KivAffbb6k0f/nha/s9Q= Subject key identifier: 99:C7:D0:30:6D:1E:12:5F:1F:76:D5:9F:BA:30:42:9D:80:1F:E0:E8 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02CE Signing time: Sat 31 May 2025 01:34:05 +0000 Manifest this update: Sat 31 May 2025 01:34:04 +0000 Manifest next update: Sat 07 Jun 2025 01:34:04 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 4ivboH0EQPC6usjqW6k1gawGV6IW1hYgje12gZbZ87Q=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 722 (0x2d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: May 31 01:34:04 2025 GMT Not After : Jun 7 01:34:04 2025 GMT Subject: CN=683a5c8d-f5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2b:12:0f:0a:f8:ef:82:5d:fa:bf:d7:05:6a: fd:76:fb:2d:19:2d:9d:b6:b0:0e:b1:b0:23:29:40: f7:8a:56:8e:5d:a8:c4:f9:c8:45:95:f4:4c:7c:47: 35:4a:f7:56:86:50:a7:d1:93:85:0f:b4:5c:c7:97: ff:da:f1:0e:7a:ca:19:29:e4:a6:07:bd:34:bd:8c: ca:93:87:77:71:f8:20:72:f0:30:35:af:09:d8:f0: 52:d7:4b:f8:96:15:07:81:90:5b:d7:83:9a:c2:a6: 57:42:61:7a:f6:0c:61:3c:df:1a:01:db:d2:ed:99: f9:f5:73:ca:5e:ce:0b:c3:c8:db:06:12:61:f9:1d: 92:7b:6b:fa:fa:5c:4c:84:af:7d:6f:e5:34:bb:98: 01:b0:ae:d7:38:76:ad:9a:db:ae:80:bf:18:d8:e9: 41:a3:d6:4c:d6:56:08:0d:a7:c7:6f:61:1e:4a:07: 5d:b4:af:f8:e4:78:1f:a1:37:60:ad:46:c4:7c:bb: 78:bc:42:79:4f:5a:68:64:6f:fa:a6:79:ba:bc:a1: fe:4c:36:78:3e:eb:63:08:22:03:06:d0:47:ac:33: 51:41:bf:69:0d:c8:7c:e8:04:0d:78:66:30:bb:c8: 98:18:af:73:ab:0d:9a:ec:00:75:49:f4:17:9b:c8: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:D0:30:6D:1E:12:5F:1F:76:D5:9F:BA:30:42:9D:80:1F:E0:E8 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:3e:86:34:ae:cc:57:62:c2:32:27:59:4d:97:81:05:5c:5c: 46:58:de:a5:e7:00:b7:c0:2e:5a:4a:05:c2:9d:b9:3c:c4:37: 6f:05:8e:91:aa:b6:55:fd:1a:b1:ad:07:0a:3d:60:29:1f:0b: 84:f8:dc:f7:0b:1f:09:39:a5:97:40:ee:be:40:61:b1:03:72: b7:1a:9f:86:fe:aa:b5:ae:75:34:46:27:38:41:ec:d7:94:10: 09:b3:d7:47:a6:da:a4:b0:12:cb:02:62:c9:34:52:64:00:51: 2b:8e:f6:47:ae:83:a7:f5:19:8f:fc:4a:9b:f0:e3:fb:2d:3b: d9:33:8f:ef:00:94:ec:47:65:a5:b0:4b:a8:1f:1e:68:f8:5a: 02:1c:b5:9c:bf:c7:be:df:d1:44:f2:9a:a9:2e:d3:ad:b9:39: c9:0f:ae:50:90:be:a7:bf:0d:52:e5:45:65:e1:8d:75:54:81: b9:6e:9b:54:d9:7a:b8:f6:3b:06:a0:7d:b9:f0:20:9c:39:06: ec:4c:42:f1:5a:47:08:3f:b1:2d:2b:27:96:51:6b:a9:4b:cf: 12:37:d8:28:49:bd:37:29:fa:2a:08:55:8b:27:8a:a4:ff:41: 4c:15:33:a4:46:3e:68:da:79:61:01:89:93:d3:b9:ad:14:0c: ed:57:a1:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwNTMxMDEzNDA0WhcNMjUwNjA3MDEzNDA0WjAYMRYwFAYD VQQDEw02ODNhNWM4ZC1mNWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SsSDwr474Jd+r/XBWr9dvstGS2dtrAOsbAjKUD3ilaOXajE+chFlfRMfEc1 SvdWhlCn0ZOFD7Rcx5f/2vEOesoZKeSmB700vYzKk4d3cfggcvAwNa8J2PBS10v4 lhUHgZBb14OawqZXQmF69gxhPN8aAdvS7Zn59XPKXs4Lw8jbBhJh+R2Se2v6+lxM hK99b+U0u5gBsK7XOHatmtuugL8Y2OlBo9ZM1lYIDafHb2EeSgddtK/45HgfoTdg rUbEfLt4vEJ5T1poZG/6pnm6vKH+TDZ4PutjCCIDBtBHrDNRQb9pDch86AQNeGYw u8iYGK9zqw2a7AB1SfQXm8haswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnH0DBt HhJfH3bVn7owQp2AH+DoMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUPoY0rsxXYsIyJ1lNl4EFXFxGWN6l5wC3wC5aSgXCnbk8xDdvBY6R qrZV/RqxrQcKPWApHwuE+Nz3Cx8JOaWXQO6+QGGxA3K3Gp+G/qq1rnU0Ric4QezX lBAJs9dHptqksBLLAmLJNFJkAFErjvZHroOn9RmP/Eqb8OP7LTvZM4/vAJTsR2Wl sEuoHx5o+FoCHLWcv8e+39FE8pqpLtOtuTnJD65QkL6nvw1S5UVl4Y11VIG5bptU 2Xq49jsGoH258CCcOQbsTELxWkcIP7EtKyeWUWupS88SN9goSb03KfoqCFWLJ4qk /0FMFTOkRj5o2nlhAYmT07mtFAztV6Eb -----END CERTIFICATE-----Generated at Sat May 31 17:10:23 2025 by rpki-client