$ rpki-client -vvf rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft File: 2RBlAbU10PfK1XyOenR8oGnQTVk.mft (raw, json) Hash identifier: s+vzRSKj1oOiqWA52FGo5Zuj8Cr3Td5q8wzjOpnvRA8= Subject key identifier: E7:B0:68:E8:90:F9:56:FC:3A:B2:68:90:51:79:D3:C0:41:A6:05:AF Authority key identifier: D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 Certificate issuer: /CN=A916FACB/serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Certificate serial: 03BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft Manifest number: 03BA Signing time: Sun 15 Jun 2025 00:23:36 +0000 Manifest this update: Sun 15 Jun 2025 00:23:35 +0000 Manifest next update: Sun 22 Jun 2025 00:23:35 +0000 Files and hashes: 1: 2RBlAbU10PfK1XyOenR8oGnQTVk.crl (hash: Wg1KGEMRNHosh4KXdwj75WSSMOU/lLwIvYrko/Op59g=) 2: 97D35382924311EC927C972FC4F9AE02.roa (hash: F5cT4m4LGvhZopgIl7MS1o33/eaQaKX2bSwBB1GnJYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 958 (0x3be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916FACB, serialNumber=D9106501B535D0F7CAD57C8E7A747CA069D04D59 Validity Not Before: Jun 15 00:23:35 2025 GMT Not After : Jun 22 00:23:35 2025 GMT Subject: CN=684e1288-a9ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:ef:1d:d9:1f:2a:91:bc:6a:0d:00:d7:b4: cc:66:c2:ab:47:d4:a2:23:ea:d8:d1:d0:0d:9f:b6: 08:1a:3d:38:04:27:d0:e1:5e:49:c5:24:f0:3b:8a: 49:bf:83:fa:5a:70:1e:13:a0:79:7f:5e:92:e8:49: 37:a3:af:67:73:e6:10:9b:58:63:56:19:ac:d9:a0: 8f:38:bc:30:c4:61:99:6b:c4:b7:99:cf:2b:0b:6d: 90:5a:85:80:57:d7:66:88:08:f4:51:cb:8e:46:3e: 78:2a:30:9b:61:0e:c4:59:8c:22:7c:81:39:1f:e0: 6d:0f:d8:77:f6:8b:ea:71:71:95:bd:3e:a7:5d:df: 23:77:ed:66:9b:3c:ab:ba:b1:c6:0d:11:51:21:ae: 31:78:cd:71:74:71:2d:4d:f0:cf:bd:b7:01:dd:b1: 2b:79:c8:cf:ac:11:aa:1b:06:f3:e8:00:d7:fd:86: c3:c2:b2:10:c3:a0:d4:0c:8d:03:24:60:ba:e8:53: 22:f9:31:86:3a:9b:96:5c:ab:22:5d:9d:0e:d8:3f: 54:60:61:be:ef:cd:3d:59:47:35:6a:18:fd:44:a2: a1:aa:1e:78:a1:f4:16:f1:1b:56:8b:76:fe:bb:25: cb:d4:f6:7f:8b:1d:73:63:07:91:f1:9a:39:c6:46: 69:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B0:68:E8:90:F9:56:FC:3A:B2:68:90:51:79:D3:C0:41:A6:05:AF X509v3 Authority Key Identifier: keyid:D9:10:65:01:B5:35:D0:F7:CA:D5:7C:8E:7A:74:7C:A0:69:D0:4D:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2RBlAbU10PfK1XyOenR8oGnQTVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916FACB/F5598D08924011ECBED4DA2CC4F9AE02/2RBlAbU10PfK1XyOenR8oGnQTVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:d2:0d:9f:ed:ba:e4:1b:4d:3a:d2:99:a0:59:96:1b:6b:4e: 1c:3e:34:13:61:05:e8:5d:3f:95:a6:88:ad:1b:07:dd:45:c5: c8:8f:b6:72:ed:35:39:65:4e:36:2a:e1:c3:39:a8:53:07:af: db:16:54:de:f0:a8:cc:5d:7e:09:de:31:e4:76:6e:97:24:39: 4a:7d:97:a5:a0:8a:0a:71:de:b9:b0:c8:41:78:6f:e0:8c:a5: 5c:f8:ad:45:f5:30:e0:91:00:16:de:46:04:0e:ef:be:b4:06: 92:d1:88:e5:9b:2b:95:b5:bb:50:da:d6:1f:ae:f7:52:29:05: 55:ca:3b:1b:cd:ac:76:66:ce:58:c6:1d:f9:46:96:f4:5b:0f: c7:b5:6a:66:e0:99:02:ac:73:56:c4:dc:45:2b:fd:b3:78:c3: 67:48:26:2e:de:bb:10:f1:56:46:61:76:6d:b5:e0:02:3d:d4: e7:91:53:a6:81:4a:4e:52:2a:49:97:b0:42:81:75:a0:ed:f5: 11:2c:ba:46:bd:db:af:80:11:c6:c8:cf:80:80:1c:6f:28:e8: ae:18:5b:ae:ff:b9:47:6b:ed:d6:2a:04:93:68:84:b1:11:35: 3a:de:c7:18:65:71:fb:df:78:e0:4b:4b:eb:a4:f0:62:bd:37: ff:09:fb:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkZBQ0IxMTAvBgNVBAUTKEQ5MTA2NTAxQjUzNUQwRjdDQUQ1N0M4RTdBNzQ3Q0Ew NjlEMDRENTkwHhcNMjUwNjE1MDAyMzM1WhcNMjUwNjIyMDAyMzM1WjAYMRYwFAYD VQQDEw02ODRlMTI4OC1hOWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPvvHdkfKpG8ag0A17TMZsKrR9SiI+rY0dANn7YIGj04BCfQ4V5JxSTwO4pJ v4P6WnAeE6B5f16S6Ek3o69nc+YQm1hjVhms2aCPOLwwxGGZa8S3mc8rC22QWoWA V9dmiAj0UcuORj54KjCbYQ7EWYwifIE5H+BtD9h39ovqcXGVvT6nXd8jd+1mmzyr urHGDRFRIa4xeM1xdHEtTfDPvbcB3bErecjPrBGqGwbz6ADX/YbDwrIQw6DUDI0D JGC66FMi+TGGOpuWXKsiXZ0O2D9UYGG+7809WUc1ahj9RKKhqh54ofQW8RtWi3b+ uyXL1PZ/ix1zYweR8Zo5xkZpNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOewaOiQ +Vb8OrJokFF508BBpgWvMB8GA1UdIwQYMBaAFNkQZQG1NdD3ytV8jnp0fKBp0E1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RkFDQi9GNTU5OEQwODky NDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQZksxWHlPZW5SOG9HblFU VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJSQmxBYlUxMFBmSzFYeU9lblI4b0duUVRWay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RkFDQi9GNTU5OEQwODkyNDAxMUVDQkVENERBMkNDNEY5QUUwMi8yUkJsQWJVMTBQ ZksxWHlPZW5SOG9HblFUVmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/0g2f7brkG0060pmgWZYba04cPjQTYQXoXT+VpoitGwfdRcXIj7Zy 7TU5ZU42KuHDOahTB6/bFlTe8KjMXX4J3jHkdm6XJDlKfZeloIoKcd65sMhBeG/g jKVc+K1F9TDgkQAW3kYEDu++tAaS0YjlmyuVtbtQ2tYfrvdSKQVVyjsbzax2Zs5Y xh35Rpb0Ww/HtWpm4JkCrHNWxNxFK/2zeMNnSCYu3rsQ8VZGYXZtteACPdTnkVOm gUpOUipJl7BCgXWg7fURLLpGvduvgBHGyM+AgBxvKOiuGFuu/7lHa+3WKgSTaISx ETU63scYZXH733jgS0vrpPBivTf/CfvN -----END CERTIFICATE-----Generated at Sun Jun 15 08:37:18 2025 by rpki-client