$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: FX4YR0BfNpsKFHr9Sx6qamCm8SonNJSvpkBlcrul+ko= Subject key identifier: 23:07:D9:D0:56:7A:B8:A9:7A:1E:23:45:A9:9D:58:83:FB:1A:BC:06 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02D5 Signing time: Fri 13 Jun 2025 00:52:52 +0000 Manifest this update: Fri 13 Jun 2025 00:52:51 +0000 Manifest next update: Fri 20 Jun 2025 00:52:51 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: Xzes2W8J2SJA9noDI8cZvik7Pxi59gEx6vpg3PljG1o=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 00:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Jun 13 00:52:51 2025 GMT Not After : Jun 20 00:52:51 2025 GMT Subject: CN=684b7664-4299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:85:3c:f9:13:d6:f6:0a:4d:1c:c4:3a:e9: dc:2f:ab:4b:b3:ae:db:7e:a8:aa:39:de:05:5a:5e: 39:1a:8b:1f:a7:6e:c8:46:7b:63:17:05:02:fc:d8: a5:7e:7a:d4:b4:8d:53:56:65:2a:d8:39:91:37:10: 79:c9:8c:87:13:ee:af:c2:95:07:db:30:76:29:6b: 3a:91:47:75:51:60:14:10:34:1e:47:67:9f:65:bb: c0:e2:04:b1:4a:82:0b:75:94:e2:07:7f:2c:c1:4e: 50:36:b9:38:00:f2:46:f6:b6:bb:10:c3:f1:60:25: 61:91:81:b0:06:78:c2:b6:46:e6:24:2d:b9:a0:0c: 83:c4:02:07:50:ec:f0:48:cc:56:c1:bf:2c:a3:bc: 4f:92:fd:94:67:2d:4f:3e:fd:0a:40:22:d4:e3:d1: db:09:3d:da:50:ce:55:b9:2e:77:ff:ad:2d:ea:0c: dc:b3:92:eb:17:67:85:f6:a8:c7:43:cd:ce:9f:1e: 9c:3c:5c:e1:de:b4:11:cc:00:c3:f4:9b:f5:44:de: 9f:64:ed:b7:c8:6a:f6:16:d3:47:3e:fd:64:64:5d: bf:0f:53:ad:a8:27:c6:a8:20:e7:4d:42:ac:fd:e0: f5:6f:27:76:fd:9d:0e:48:10:ef:41:2c:d9:f2:89: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:07:D9:D0:56:7A:B8:A9:7A:1E:23:45:A9:9D:58:83:FB:1A:BC:06 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:42:22:e4:1f:f2:d2:20:ad:f9:cf:4b:fa:fa:bc:cf:9a:7a: 0a:9f:a3:b2:98:d0:d9:ed:bd:1f:d2:3c:89:04:dd:d0:a3:a1: 01:07:da:0d:71:9b:de:48:3a:9a:83:2d:ce:49:97:16:18:60: 53:8e:49:64:46:14:58:cd:3c:ef:41:70:df:3e:40:74:ff:5a: a5:60:b1:4f:7a:4b:a3:8b:18:40:a9:f2:b9:e4:aa:15:c8:f5: 8c:84:38:17:c8:ac:bf:b5:12:a7:c4:63:a3:41:05:81:0f:e7: c9:33:4c:02:9c:81:98:fe:d7:4f:4c:95:c5:6e:08:6c:9e:65: 5d:2a:7b:bb:f1:69:84:dc:78:6c:90:64:48:e8:62:a9:4f:72: c9:17:80:24:c8:24:6f:cf:a6:7d:ac:dd:d7:2f:2f:dc:84:0c: 61:f4:33:01:99:22:41:03:e2:7e:8c:43:a2:d7:3e:66:81:3f: 2b:39:a8:14:f4:7e:27:db:eb:a7:70:be:73:ed:5e:ec:d6:25: e7:d6:8e:0a:99:21:04:6f:15:28:38:73:21:0a:a0:c4:2d:0e: e0:6b:2f:32:1a:4a:27:2e:07:57:fa:c2:3d:d7:43:cb:da:88: 73:3a:9a:49:14:bb:b7:2f:90:2b:c2:94:99:cd:ea:55:fe:45: 10:5d:9f:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwNjEzMDA1MjUxWhcNMjUwNjIwMDA1MjUxWjAYMRYwFAYD VQQDEw02ODRiNzY2NC00Mjk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02OFPPkT1vYKTRzEOuncL6tLs67bfqiqOd4FWl45Gosfp27IRntjFwUC/Nil fnrUtI1TVmUq2DmRNxB5yYyHE+6vwpUH2zB2KWs6kUd1UWAUEDQeR2efZbvA4gSx SoILdZTiB38swU5QNrk4APJG9ra7EMPxYCVhkYGwBnjCtkbmJC25oAyDxAIHUOzw SMxWwb8so7xPkv2UZy1PPv0KQCLU49HbCT3aUM5VuS53/60t6gzcs5LrF2eF9qjH Q83Onx6cPFzh3rQRzADD9Jv1RN6fZO23yGr2FtNHPv1kZF2/D1OtqCfGqCDnTUKs /eD1byd2/Z0OSBDvQSzZ8okVRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCMH2dBW eripeh4jRamdWIP7GrwGMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9QiLkH/LSIK35z0v6+rzPmnoKn6OymNDZ7b0f0jyJBN3Qo6EBB9oN cZveSDqagy3OSZcWGGBTjklkRhRYzTzvQXDfPkB0/1qlYLFPekujixhAqfK55KoV yPWMhDgXyKy/tRKnxGOjQQWBD+fJM0wCnIGY/tdPTJXFbghsnmVdKnu78WmE3Hhs kGRI6GKpT3LJF4AkyCRvz6Z9rN3XLy/chAxh9DMBmSJBA+J+jEOi1z5mgT8rOagU 9H4n2+uncL5z7V7s1iXn1o4KmSEEbxUoOHMhCqDELQ7gay8yGkonLgdX+sI910PL 2ohzOppJFLu3L5ArwpSZzepV/kUQXZ/w -----END CERTIFICATE-----Generated at Sat Jun 14 19:15:48 2025 by rpki-client