$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json) Hash identifier: pWRggz2JJ9mAmQxMWkfmydmlrla8Uz7bnSokIlMs/mU= Subject key identifier: C5:A5:66:B0:B2:00:C8:FE:75:63:45:45:C6:40:90:88:53:95:31:32 Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft Manifest number: 0247 Signing time: Sun 15 Jun 2025 01:32:52 +0000 Manifest this update: Sun 15 Jun 2025 01:32:52 +0000 Manifest next update: Sun 22 Jun 2025 01:32:52 +0000 Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: Sl1mkH8C/OWuA2L1PeU7uRrF8FX/KiCB3vFJ/MaBxdM=) 2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: DDdOGJKEKYKXbDa5vtjLSsnRV8BgpNNS0rM4LZRyfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Validity Not Before: Jun 15 01:32:52 2025 GMT Not After : Jun 22 01:32:52 2025 GMT Subject: CN=684e22c4-4558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2b:2c:5e:86:e3:0e:43:d6:c9:1e:fa:d7:47: 40:e9:75:db:b9:50:c7:0b:bd:3e:74:c2:8d:4e:c1: ce:7f:af:06:e0:76:d8:59:25:0f:2c:35:41:d1:72: f0:eb:00:f4:37:d6:65:ab:ad:8c:7f:ec:80:b7:75: bd:d2:70:6f:79:01:1b:9c:7a:f0:ba:67:c4:ec:83: fd:70:5a:74:aa:ba:47:0f:62:79:63:81:7c:88:ee: e5:a1:49:6d:b3:c3:6d:4f:18:c7:fc:2d:9f:13:a1: e5:71:26:04:b1:08:af:1e:33:9e:bd:ee:49:52:46: 0c:9a:44:2a:d5:a5:a8:c1:40:72:d2:8c:75:b7:f7: 20:a9:0d:20:0b:ec:23:89:67:ff:5f:40:bc:95:19: c3:42:bd:dc:ee:86:4f:72:96:05:60:e2:fa:ea:bd: 8b:1a:ed:2f:66:0b:89:36:65:7e:82:31:f6:97:bc: 95:5e:5f:83:d4:cb:ea:6b:a3:bb:9a:58:9a:b9:91: b4:60:0d:de:83:98:85:4a:7f:90:74:30:e3:1f:f4: b7:e9:20:f4:4f:c6:c8:2f:e1:ae:cb:1c:95:05:b4: 08:c2:b2:4e:0d:f5:3f:10:e6:ef:f9:e5:ac:f5:41: 82:24:39:01:ee:75:6a:41:13:70:9b:83:5f:de:8a: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A5:66:B0:B2:00:C8:FE:75:63:45:45:C6:40:90:88:53:95:31:32 X509v3 Authority Key Identifier: keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:52:f5:a5:0b:00:7f:e5:f5:02:0d:cc:f6:1f:92:f5:cd:8c: 7e:06:45:40:52:d0:f0:3c:05:98:8e:01:85:1e:1b:a3:49:00: e3:8a:2d:f4:3a:28:f6:06:a3:b3:e2:fe:49:33:12:30:e7:b4: b3:89:7d:9e:e7:8b:44:ed:ef:aa:5b:aa:e1:3e:80:60:56:da: d0:77:3a:49:f6:af:60:6f:fe:4f:71:f7:7b:48:1b:e6:ea:42: 3f:47:e1:87:61:3c:6b:ac:6e:80:a4:c9:2d:7e:1d:ef:2d:a1: 10:1a:9b:c0:5c:40:01:cf:d3:ad:e5:c4:e9:91:e3:11:56:a1: ce:d5:f2:38:c6:37:f3:81:cb:ed:79:9a:fd:41:09:b9:1f:eb: d8:3a:1b:d1:04:d1:52:19:6f:ee:3d:b7:cc:b9:09:5f:b0:5f: 3c:d8:82:2f:3e:ce:2f:81:18:71:b7:de:a0:6b:32:91:e5:36: 16:07:91:e1:22:51:21:c3:f7:90:5e:c5:da:67:a5:a0:95:22: 5c:b4:6c:75:50:2d:13:68:a0:f8:1d:07:56:f7:0b:7b:df:59: e9:f7:35:5e:6d:ca:b1:6a:ad:dd:13:dd:cb:ba:60:b4:de:c6: 2a:25:32:7b:44:fb:8b:c5:c6:58:7e:65:d8:ed:05:a3:02:de: 1b:51:43:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5 QTgxNEZDQzMwHhcNMjUwNjE1MDEzMjUyWhcNMjUwNjIyMDEzMjUyWjAYMRYwFAYD VQQDEw02ODRlMjJjNC00NTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmCssXobjDkPWyR7610dA6XXbuVDHC70+dMKNTsHOf68G4HbYWSUPLDVB0XLw 6wD0N9Zlq62Mf+yAt3W90nBveQEbnHrwumfE7IP9cFp0qrpHD2J5Y4F8iO7loUlt s8NtTxjH/C2fE6HlcSYEsQivHjOeve5JUkYMmkQq1aWowUBy0ox1t/cgqQ0gC+wj iWf/X0C8lRnDQr3c7oZPcpYFYOL66r2LGu0vZguJNmV+gjH2l7yVXl+D1Mvqa6O7 mliauZG0YA3eg5iFSn+QdDDjH/S36SD0T8bIL+GuyxyVBbQIwrJODfU/EObv+eWs 9UGCJDkB7nVqQRNwm4Nf3opVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWlZrCy AMj+dWNFRcZAkIhTlTEyMB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0 NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5 YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEUvWlCwB/5fUCDcz2H5L1zYx+BkVAUtDwPAWYjgGFHhujSQDjii30 Oij2BqOz4v5JMxIw57SziX2e54tE7e+qW6rhPoBgVtrQdzpJ9q9gb/5Pcfd7SBvm 6kI/R+GHYTxrrG6ApMktfh3vLaEQGpvAXEABz9Ot5cTpkeMRVqHO1fI4xjfzgcvt eZr9QQm5H+vYOhvRBNFSGW/uPbfMuQlfsF882IIvPs4vgRhxt96gazKR5TYWB5Hh IlEhw/eQXsXaZ6WglSJctGx1UC0TaKD4HQdW9wt731np9zVebcqxaq3dE93LumC0 3sYqJTJ7RPuLxcZYfmXY7QWjAt4bUUNT -----END CERTIFICATE-----Generated at Sun Jun 15 22:01:45 2025 by rpki-client