$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: WUv0MMFAm1cFnYPjaCMakDHzsdgZDsH9S/LjNq76L+8= Subject key identifier: 97:BA:C0:DF:D8:BD:2F:FF:C7:96:FF:BA:4D:6E:02:28:48:CE:2E:40 Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03C4 Signing time: Fri 13 Jun 2025 00:11:55 +0000 Manifest this update: Fri 13 Jun 2025 00:11:54 +0000 Manifest next update: Fri 20 Jun 2025 00:11:54 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: b00OFnSpeXEejpibM80Qu9l5xbik6dUNBqT5VY5d/Nw=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:11:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 974 (0x3ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Jun 13 00:11:54 2025 GMT Not After : Jun 20 00:11:54 2025 GMT Subject: CN=684b6ccb-1879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:31:7f:a0:f3:3e:4f:9c:0a:47:2f:1c:d7:7b: 7e:29:81:fd:ff:f6:a3:c4:02:9d:da:78:f7:b5:9b: bb:d4:25:71:d8:9e:83:c8:f3:e6:e1:4e:45:ba:88: 64:71:d2:31:60:43:71:fe:86:53:d9:73:47:65:1b: 61:88:53:ae:9c:b5:76:3e:25:ff:4b:b2:b6:6a:66: 3d:32:58:13:b9:16:17:c9:ca:eb:d1:b5:88:13:0c: 02:98:0b:76:d4:24:15:2f:02:bf:10:42:71:53:69: a2:d5:1f:87:4c:83:03:10:de:d8:26:73:fb:61:81: 14:94:45:bb:6a:60:35:ef:c5:88:02:8f:bd:13:ce: ac:92:50:3b:06:0c:22:ca:70:86:12:c4:d3:57:f2: 8a:a4:4a:ee:55:66:d3:19:8f:be:67:91:e2:b0:6e: 7e:02:04:41:f8:97:73:58:cf:56:4b:b3:15:68:8a: 43:e0:eb:65:4e:ca:5c:f7:f6:b7:a9:07:59:b3:79: 80:39:fc:93:0b:54:30:f8:73:e4:73:9c:0b:05:83: 9b:8e:06:37:bb:33:20:02:bb:e5:00:7d:33:5a:a3: ce:b6:be:7e:2f:b9:15:05:be:56:b7:31:25:65:ba: dd:10:2b:6d:ab:a1:d1:25:cf:83:49:b3:9f:95:ca: 64:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BA:C0:DF:D8:BD:2F:FF:C7:96:FF:BA:4D:6E:02:28:48:CE:2E:40 X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6b:55:a8:41:0d:88:e1:ae:dd:bd:9b:b4:55:47:05:76:6f: e0:c1:b0:ac:6d:9b:b9:6b:94:73:45:d7:b7:8e:b0:a2:70:10: 62:cc:45:93:6c:bf:09:e2:e6:d9:9d:2e:13:7f:49:1e:12:92: c3:f0:e8:d5:70:f3:c5:05:2c:87:43:b6:81:70:c2:7a:51:06: e6:06:71:83:8f:1e:17:ae:cd:26:7c:11:03:92:06:ad:34:d0: 42:14:cc:8b:39:86:58:a1:04:a5:b7:1f:db:5c:0d:bb:b3:a2: b5:ab:d7:f5:fb:53:c8:df:8d:58:a1:dc:6e:1f:d1:e4:f2:aa: 4f:e5:c2:dc:a2:e7:d8:87:db:8a:47:57:58:c5:68:48:0a:d9: a6:48:7a:fd:0a:c9:c3:a0:98:29:49:01:f9:4d:91:b9:f7:a0: 46:aa:d4:2b:1e:6e:7b:3b:b9:c1:d3:fc:ef:66:52:53:5c:2f: 00:b1:14:a4:fc:73:32:fd:eb:34:6e:ef:6a:fd:fa:fd:e5:5e: 94:3f:aa:bd:1d:d4:b5:5a:b0:03:9c:af:42:96:e4:da:35:fa: c1:e5:35:68:26:ce:9f:87:7b:fe:14:d6:8f:87:9e:02:41:bd: 33:0b:a7:44:28:8d:8d:36:16:7b:85:19:72:05:d5:d2:65:d7: 12:c7:91:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwNjEzMDAxMTU0WhcNMjUwNjIwMDAxMTU0WjAYMRYwFAYD VQQDEw02ODRiNmNjYi0xODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzF/oPM+T5wKRy8c13t+KYH9//ajxAKd2nj3tZu71CVx2J6DyPPm4U5Fuohk cdIxYENx/oZT2XNHZRthiFOunLV2PiX/S7K2amY9MlgTuRYXycrr0bWIEwwCmAt2 1CQVLwK/EEJxU2mi1R+HTIMDEN7YJnP7YYEUlEW7amA178WIAo+9E86sklA7Bgwi ynCGEsTTV/KKpEruVWbTGY++Z5HisG5+AgRB+JdzWM9WS7MVaIpD4OtlTspc9/a3 qQdZs3mAOfyTC1Qw+HPkc5wLBYObjgY3uzMgArvlAH0zWqPOtr5+L7kVBb5WtzEl ZbrdECttq6HRJc+DSbOflcpkfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe6wN/Y vS//x5b/uk1uAihIzi5AMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAja1WoQQ2I4a7dvZu0VUcFdm/gwbCsbZu5a5RzRde3jrCicBBizEWT bL8J4ubZnS4Tf0keEpLD8OjVcPPFBSyHQ7aBcMJ6UQbmBnGDjx4Xrs0mfBEDkgat NNBCFMyLOYZYoQSltx/bXA27s6K1q9f1+1PI341YodxuH9Hk8qpP5cLcoufYh9uK R1dYxWhICtmmSHr9CsnDoJgpSQH5TZG596BGqtQrHm57O7nB0/zvZlJTXC8AsRSk /HMy/es0bu9q/fr95V6UP6q9HdS1WrADnK9CluTaNfrB5TVoJs6fh3v+FNaPh54C Qb0zC6dEKI2NNhZ7hRlyBdXSZdcSx5Gg -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:15 2025 by rpki-client