$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: /Sy+XrD4hQ0yfvwrUnopn6JaqLnPDk9sf+kNnCBemmI= Subject key identifier: AC:32:41:7A:C5:B9:4C:8E:86:CE:6A:6E:87:33:4C:53:A4:7E:AF:C5 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0940 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0938 Signing time: Sat 14 Jun 2025 20:03:46 +0000 Manifest this update: Sat 14 Jun 2025 20:03:45 +0000 Manifest next update: Sat 21 Jun 2025 20:03:45 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: /M7RRZt+YadVIeHL/hHEl6nnjyt/mAp+vzhORtdYozI=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 20:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2368 (0x940) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Jun 14 20:03:45 2025 GMT Not After : Jun 21 20:03:45 2025 GMT Subject: CN=684dd5a1-afc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d2:77:58:be:79:08:b5:96:20:f8:04:49:8f: 6b:11:54:5e:fd:5e:59:82:d3:3e:16:05:52:64:38: 57:55:0a:12:2f:c7:64:d8:8b:5f:fb:6d:1a:45:ac: f3:fe:eb:f5:67:70:4e:77:37:b5:73:05:fe:51:8a: df:15:cb:20:b2:a8:2a:09:9e:a7:73:7c:2e:07:4d: 4d:44:d8:a2:f5:94:bc:0f:7b:0c:b8:a6:b0:71:69: d0:93:0d:00:39:a9:88:e7:55:fb:7a:79:82:dd:6d: 76:55:c4:1a:26:55:88:0a:5b:b9:74:97:4a:c3:20: 7e:11:82:e3:2c:ec:2a:0e:db:e8:97:9f:4b:60:9d: 34:c7:19:a4:6b:b1:b3:ec:4f:87:d3:e2:24:a7:21: 0f:42:77:93:8a:d8:a6:99:ad:6b:e2:2d:cb:3a:c0: 2e:8c:1b:99:03:bf:b5:c9:c9:e2:45:33:6f:12:7c: 66:b1:6b:db:52:9e:78:52:e6:6d:9e:35:0a:92:de: 2c:19:70:89:65:65:0f:de:b1:00:ed:b2:65:01:1a: e6:48:5c:12:d6:86:dc:7f:a9:42:bd:d9:b6:e3:2b: 75:d5:05:69:31:b6:ec:a9:76:df:2a:11:12:dd:58: 74:2e:2b:fc:d9:d7:3e:56:c3:66:e5:ae:30:fd:2e: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:41:7A:C5:B9:4C:8E:86:CE:6A:6E:87:33:4C:53:A4:7E:AF:C5 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ed:81:71:37:7e:44:6a:e6:3b:92:85:f4:43:89:2c:9d:07: 73:8f:ad:0c:f2:49:23:2d:86:c9:6b:55:ea:02:2e:4d:71:c0: d2:40:f9:8c:91:ff:dc:5c:8f:c3:17:e9:99:46:14:36:af:5e: 9d:7a:c2:45:7b:44:c0:34:69:08:e0:39:08:02:85:72:c8:6a: 34:d6:3c:56:12:b0:9b:ae:28:40:73:b0:bd:4f:ab:d1:1d:a4: 7a:dc:f4:6f:6a:b8:b8:43:1f:9a:ed:d3:dc:96:86:52:36:8e: c4:0d:79:c8:aa:98:98:ac:95:25:ab:c7:7d:10:e7:d8:98:4f: 5c:f3:94:3a:9e:a2:27:97:60:6e:40:22:76:e4:76:b7:43:54: fb:a8:9c:b5:b5:fd:a8:bd:93:51:88:c5:b4:e7:44:cf:10:10: 88:47:96:a1:9b:fd:4b:38:66:7f:27:af:c4:18:db:0c:25:a3: 96:90:ab:c5:4d:f1:f5:9b:04:08:93:75:d3:76:35:4d:94:c5: 28:cd:89:d9:d9:e8:9d:c6:95:5f:0f:6c:37:c1:53:30:70:78: f6:d7:ac:30:b2:18:13:d2:41:59:f5:6d:5f:88:68:96:c1:69: 9d:78:4b:9b:7e:2d:78:e5:4f:f7:f7:a9:8a:47:c6:68:05:3f: 7a:5e:7d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUwNjE0MjAwMzQ1WhcNMjUwNjIxMjAwMzQ1WjAYMRYwFAYD VQQDEw02ODRkZDVhMS1hZmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtJ3WL55CLWWIPgESY9rEVRe/V5ZgtM+FgVSZDhXVQoSL8dk2Itf+20aRazz /uv1Z3BOdze1cwX+UYrfFcsgsqgqCZ6nc3wuB01NRNii9ZS8D3sMuKawcWnQkw0A OamI51X7enmC3W12VcQaJlWIClu5dJdKwyB+EYLjLOwqDtvol59LYJ00xxmka7Gz 7E+H0+IkpyEPQneTitimma1r4i3LOsAujBuZA7+1ycniRTNvEnxmsWvbUp54UuZt njUKkt4sGXCJZWUP3rEA7bJlARrmSFwS1obcf6lCvdm24yt11QVpMbbsqXbfKhES 3Vh0Liv82dc+VsNm5a4w/S4gpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwyQXrF uUyOhs5qboczTFOkfq/FMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP7YFxN35EauY7koX0Q4ksnQdzj60M8kkjLYbJa1XqAi5NccDSQPmM kf/cXI/DF+mZRhQ2r16desJFe0TANGkI4DkIAoVyyGo01jxWErCbrihAc7C9T6vR HaR63PRvari4Qx+a7dPcloZSNo7EDXnIqpiYrJUlq8d9EOfYmE9c85Q6nqInl2Bu QCJ25Ha3Q1T7qJy1tf2ovZNRiMW050TPEBCIR5ahm/1LOGZ/J6/EGNsMJaOWkKvF TfH1mwQIk3XTdjVNlMUozYnZ2eidxpVfD2w3wVMwcHj216wwshgT0kFZ9W1fiGiW wWmdeEubfi145U/396mKR8ZoBT96Xn0f -----END CERTIFICATE-----Generated at Sun Jun 15 08:31:22 2025 by rpki-client