$ rpki-client -vvf rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft File: 2gElQupZNV_ohHjSHXPjbOvN88s.mft (raw, json) Hash identifier: 20RWjgK+csBLV2gkBvpGQESu6mHGHDpaC/h3Jq1tjz4= Subject key identifier: F2:8B:14:BD:5D:C7:C4:87:FF:F6:CE:49:D2:3D:04:50:BD:50:FC:FB Authority key identifier: DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB Certificate issuer: /CN=A918B241/serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Certificate serial: 02D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft Manifest number: 02CC Signing time: Sun 15 Jun 2025 01:05:42 +0000 Manifest this update: Sun 15 Jun 2025 01:05:41 +0000 Manifest next update: Sun 22 Jun 2025 01:05:41 +0000 Files and hashes: 1: 2gElQupZNV_ohHjSHXPjbOvN88s.crl (hash: 5FXk8gjd4Cl53tEW9OnLaEObBtoieLXF3aW4o3s1/4I=) 2: A33B03A2F07911ECBDB1BC4BC4F9AE02.roa (hash: 06qlKoNMAgG5qkJwM6sNlRAgtRr58eOsszFhlsT8L0o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 721 (0x2d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B241, serialNumber=DA012542EA59355FE88478D21D73E36CEBCDF3CB Validity Not Before: Jun 15 01:05:41 2025 GMT Not After : Jun 22 01:05:41 2025 GMT Subject: CN=684e1c66-7b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:3f:0b:bb:a8:0b:75:d5:db:f6:dd:c6:50: f3:a2:52:18:65:cc:ed:30:58:37:17:d3:0a:c0:42: b7:cd:dc:8e:a9:70:97:fc:20:3b:31:8b:9e:03:3d: 8f:d3:e7:81:41:d5:c1:19:0e:a2:f5:92:34:27:42: c2:23:90:e4:4a:8b:9b:d5:75:22:7b:3f:8c:a7:68: 7d:6b:5a:08:81:a3:b6:67:09:34:be:3e:9c:79:eb: c2:2f:09:71:30:e4:87:70:36:aa:00:e2:50:5e:b4: b3:a9:e0:6c:db:71:15:22:13:8d:cb:c1:a7:d8:81: a4:e4:d9:c7:a3:fc:37:21:e5:85:5a:09:79:12:50: e1:65:c3:7e:61:e5:27:8b:23:1b:10:67:03:14:d5: 45:49:17:85:20:d7:ca:d3:99:70:d4:63:1e:53:c3: 30:7a:b5:74:35:5d:ff:e4:b1:55:4b:a4:23:a2:50: 39:8b:6e:70:08:75:b7:3a:d2:b8:6f:97:c1:f7:b2: f4:91:ff:f7:30:24:94:83:e2:57:0f:24:20:0b:40: 28:46:86:9b:d6:fe:32:c8:5b:74:77:42:1f:b9:74: 24:b1:07:ab:87:e8:53:0d:cf:cb:26:3d:da:9a:3d: 08:7a:d5:39:b8:24:db:14:55:25:5e:19:57:5a:2a: 78:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8B:14:BD:5D:C7:C4:87:FF:F6:CE:49:D2:3D:04:50:BD:50:FC:FB X509v3 Authority Key Identifier: keyid:DA:01:25:42:EA:59:35:5F:E8:84:78:D2:1D:73:E3:6C:EB:CD:F3:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gElQupZNV_ohHjSHXPjbOvN88s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B241/B649CA96F07411EC9A51D548C4F9AE02/2gElQupZNV_ohHjSHXPjbOvN88s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:c4:6d:58:15:38:78:f3:1e:fa:6d:8e:0c:80:a4:da:4f:62: 5f:c8:87:4f:ca:9c:ce:2f:33:5c:f3:9a:c2:10:e0:e3:a0:39: 06:3d:d6:04:88:79:c8:0c:81:71:94:7a:69:ee:a9:43:a7:2c: 89:6b:66:8c:25:0b:8a:f5:e4:f4:5b:d3:01:c9:58:6d:25:f3: b9:31:19:32:63:8d:c9:46:56:0f:e4:73:35:d8:2a:69:2c:fc: 03:7e:0c:fa:d5:32:e1:f5:0f:60:2b:44:9e:a9:b7:33:64:42: ea:f9:f3:f9:d0:27:6c:f0:e8:4b:db:ba:50:f1:4b:f0:6b:cf: 7c:d8:8f:50:2c:dd:8d:e1:ab:00:a3:4b:c9:8e:7d:7d:ad:2b: 06:b1:0a:d5:36:67:22:0c:0c:34:86:26:cf:ea:c1:37:29:f6: 1c:f3:8e:f4:fb:52:43:b2:2a:26:34:a3:44:08:3c:79:5d:33: 9c:06:46:80:90:05:8d:f5:24:99:34:b3:5a:0c:d0:38:8f:a1: 14:91:99:fc:d5:67:47:7e:ff:6d:f4:69:c1:06:0c:70:db:89: a6:ce:a6:0a:13:71:42:32:4b:f9:fe:2b:a0:1d:0c:f5:b2:1e: 29:a4:9b:af:0f:50:04:93:0c:34:3a:93:ac:8e:8f:c9:15:86: ff:88:8e:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEIyNDExMTAvBgNVBAUTKERBMDEyNTQyRUE1OTM1NUZFODg0NzhEMjFENzNFMzZD RUJDREYzQ0IwHhcNMjUwNjE1MDEwNTQxWhcNMjUwNjIyMDEwNTQxWjAYMRYwFAYD VQQDEw02ODRlMWM2Ni03YjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqLE/C7uoC3XV2/bdxlDzolIYZcztMFg3F9MKwEK3zdyOqXCX/CA7MYueAz2P 0+eBQdXBGQ6i9ZI0J0LCI5DkSoub1XUiez+Mp2h9a1oIgaO2Zwk0vj6ceevCLwlx MOSHcDaqAOJQXrSzqeBs23EVIhONy8Gn2IGk5NnHo/w3IeWFWgl5ElDhZcN+YeUn iyMbEGcDFNVFSReFINfK05lw1GMeU8MwerV0NV3/5LFVS6QjolA5i25wCHW3OtK4 b5fB97L0kf/3MCSUg+JXDyQgC0AoRoab1v4yyFt0d0IfuXQksQerh+hTDc/LJj3a mj0IetU5uCTbFFUlXhlXWip4CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKLFL1d x8SH//bOSdI9BFC9UPz7MB8GA1UdIwQYMBaAFNoBJULqWTVf6IR40h1z42zrzfPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjI0MS9CNjQ5Q0E5NkYw NzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5WX29oSGpTSFhQamJPdk44 OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRWxRdXBaTlZfb2hIalNIWFBqYk92Tjg4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjI0MS9CNjQ5Q0E5NkYwNzQxMUVDOUE1MUQ1NDhDNEY5QUUwMi8yZ0VsUXVwWk5W X29oSGpTSFhQamJPdk44OHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXxG1YFTh48x76bY4MgKTaT2JfyIdPypzOLzNc85rCEODjoDkGPdYE iHnIDIFxlHpp7qlDpyyJa2aMJQuK9eT0W9MByVhtJfO5MRkyY43JRlYP5HM12Cpp LPwDfgz61TLh9Q9gK0SeqbczZELq+fP50Cds8OhL27pQ8Uvwa8982I9QLN2N4asA o0vJjn19rSsGsQrVNmciDAw0hibP6sE3KfYc8470+1JDsiomNKNECDx5XTOcBkaA kAWN9SSZNLNaDNA4j6EUkZn81WdHfv9t9GnBBgxw24mmzqYKE3FCMkv5/iugHQz1 sh4ppJuvD1AEkww0OpOsjo/JFYb/iI5g -----END CERTIFICATE-----Generated at Sun Jun 15 09:52:48 2025 by rpki-client