$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: xKA1B9jVvaA01A0+Zu2kPRsRVIX2qqIbvcug6ZwahMU= Subject key identifier: AE:C1:0C:F6:0E:1F:A9:FD:68:A7:E9:B6:65:15:89:DD:8C:81:F6:26 Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 0276 Signing time: Sun 15 Jun 2025 01:24:02 +0000 Manifest this update: Sun 15 Jun 2025 01:24:01 +0000 Manifest next update: Sun 22 Jun 2025 01:24:01 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: mYgvOYVQmDcPchyNrW9/P8TsUu9vEjCj+DqWqWyk1dU=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: frzjCs+Z/Mi4ZDgqYWFwqblODHyg9lLqa7tObDvQ7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: Jun 15 01:24:01 2025 GMT Not After : Jun 22 01:24:01 2025 GMT Subject: CN=684e20b2-e04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:08:8a:a8:55:c6:7f:c1:e6:d9:49:db:c9:65: 78:f7:9f:55:df:ed:a3:39:4d:ad:9b:94:f7:9d:3f: af:d6:6b:ed:f6:91:83:99:63:3e:24:80:e4:f4:f3: d5:92:ab:79:cf:c4:d2:0b:96:33:dd:a2:bc:ed:8e: 7c:fd:ec:77:e2:ab:9d:07:2a:50:ee:8e:5e:fb:7f: c6:58:c2:c2:25:d0:02:b3:d8:8a:d2:f0:6c:fe:de: 06:20:45:c7:6d:6e:e1:b0:ea:ef:52:76:14:88:ff: 57:50:59:5f:2a:be:95:f0:f6:14:a6:c2:f6:0f:70: 43:33:9e:4c:b5:78:52:4a:91:cc:21:15:4e:ce:0e: 30:54:18:6a:70:21:08:d8:24:f8:2c:36:08:38:4f: 05:42:7b:b4:d8:2b:50:48:7c:10:54:ad:69:69:38: 93:f4:17:81:4b:74:80:de:6c:52:c6:0c:23:f8:51: c3:c1:cf:a9:64:fe:8b:f6:cc:97:57:9b:ff:15:16: 95:45:83:d0:dd:e4:a2:e6:9b:25:22:1b:18:5a:93: d3:78:7c:76:2e:0c:0a:c9:2d:58:90:02:72:74:df: 0b:1d:80:6d:04:28:91:7c:45:8e:3c:72:0d:48:57: 8e:de:49:f8:29:f1:ba:fe:34:cb:78:49:7b:4b:d8: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C1:0C:F6:0E:1F:A9:FD:68:A7:E9:B6:65:15:89:DD:8C:81:F6:26 X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:08:61:e1:92:23:0c:7b:e0:ce:a1:c0:0c:89:60:5d:5b:0a: 8a:2b:21:52:9b:af:b2:0d:24:ff:37:07:24:8f:7b:2f:03:99: 12:cc:67:fd:31:ee:ca:00:91:85:72:7a:d4:33:46:2a:ed:a8: af:25:1e:37:3b:fa:9e:58:1b:ee:a4:ee:1a:66:85:1f:a6:4c: ab:f4:37:4d:d3:f3:cc:ab:0d:ce:d5:3a:f9:2c:e9:d8:14:d2: b2:74:c3:17:90:a8:96:95:a6:aa:4a:f8:79:37:d8:05:f2:e9: 3d:c6:b2:3e:e5:2c:0d:19:e5:71:87:27:e6:b1:d6:6f:aa:e4: 4c:5b:ef:bf:72:86:05:fa:d7:c0:cf:8a:22:e2:85:98:0d:cf: f7:57:1c:3e:83:ac:69:86:65:06:ec:8f:ca:f3:af:f4:4c:5d: e4:83:76:37:e1:ef:e1:2f:35:d0:2c:11:94:93:d9:7f:f5:85: 48:25:d4:e6:99:c4:0f:7e:e1:c1:f5:3d:cf:80:4c:c5:bf:d2: 81:34:49:8c:e9:a9:a6:89:37:0b:14:cc:d5:54:e9:41:33:76: 10:cc:f9:47:91:34:ee:37:d7:5f:56:ec:48:a8:62:37:f0:7d: c7:9f:42:ab:34:0c:d0:b5:2e:08:4d:e2:bd:4a:dd:1f:2a:4d: 1e:3a:07:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjUwNjE1MDEyNDAxWhcNMjUwNjIyMDEyNDAxWjAYMRYwFAYD VQQDEw02ODRlMjBiMi1lMDRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4AiKqFXGf8Hm2UnbyWV4959V3+2jOU2tm5T3nT+v1mvt9pGDmWM+JIDk9PPV kqt5z8TSC5Yz3aK87Y58/ex34qudBypQ7o5e+3/GWMLCJdACs9iK0vBs/t4GIEXH bW7hsOrvUnYUiP9XUFlfKr6V8PYUpsL2D3BDM55MtXhSSpHMIRVOzg4wVBhqcCEI 2CT4LDYIOE8FQnu02CtQSHwQVK1paTiT9BeBS3SA3mxSxgwj+FHDwc+pZP6L9syX V5v/FRaVRYPQ3eSi5pslIhsYWpPTeHx2LgwKyS1YkAJydN8LHYBtBCiRfEWOPHIN SFeO3kn4KfG6/jTLeEl7S9iqewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7BDPYO H6n9aKfptmUVid2MgfYmMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJCGHhkiMMe+DOocAMiWBdWwqKKyFSm6+yDST/Nwckj3svA5kSzGf9 Me7KAJGFcnrUM0Yq7aivJR43O/qeWBvupO4aZoUfpkyr9DdN0/PMqw3O1Tr5LOnY FNKydMMXkKiWlaaqSvh5N9gF8uk9xrI+5SwNGeVxhyfmsdZvquRMW++/coYF+tfA z4oi4oWYDc/3Vxw+g6xphmUG7I/K86/0TF3kg3Y34e/hLzXQLBGUk9l/9YVIJdTm mcQPfuHB9T3PgEzFv9KBNEmM6ammiTcLFMzVVOlBM3YQzPlHkTTuN9dfVuxIqGI3 8H3Hn0KrNAzQtS4ITeK9St0fKk0eOgfx -----END CERTIFICATE-----Generated at Sun Jun 15 09:37:46 2025 by rpki-client