$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: 3Q7mZ2+JwCKhyAogP1Far5GwXVb9MuAiXpJ85/kTJjU= Subject key identifier: E9:88:F6:79:0B:6D:BC:4B:F7:D2:46:FB:1A:DF:FC:9C:F5:6A:D1:7F Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02BD Signing time: Fri 25 Apr 2025 01:11:22 +0000 Manifest this update: Fri 25 Apr 2025 01:11:22 +0000 Manifest next update: Fri 02 May 2025 01:11:22 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: 4GlAU+1GhSrSo1Y8Yj0hKu3fo6E5CRhbo/phJDGfAeM=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 705 (0x2c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Apr 25 01:11:22 2025 GMT Not After : May 2 01:11:22 2025 GMT Subject: CN=680ae13a-c567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:4c:cf:ac:88:2c:a4:a7:3d:ac:9f:d8:56: 52:bf:f8:72:fe:36:a8:ab:68:e2:d8:db:fb:d3:ee: a1:ec:d8:29:3d:ac:e4:74:03:fc:e5:e3:50:5b:05: 6b:b0:ac:ef:ac:2a:59:3b:3e:8f:83:cb:24:1e:4e: f3:dc:36:97:a8:7e:51:2e:6c:4a:da:23:5c:0a:5a: 6f:73:92:f8:41:14:e2:d1:cf:32:4f:f3:12:47:39: 9e:06:03:87:c6:8a:6f:03:e9:62:1f:44:86:d6:52: b7:c1:2c:51:49:e4:de:34:44:e9:d4:1a:df:03:f4: af:a9:0b:d4:0f:11:2d:91:c3:89:62:1a:bd:44:e1: 13:22:88:3d:dd:11:f0:69:55:e6:88:67:2c:04:63: 96:a2:3e:43:5d:f8:f0:ba:68:41:59:f6:47:1e:c1: 74:1c:f2:32:df:8b:5f:6e:92:1b:9e:e5:52:6c:35: 9c:08:7b:6a:cb:a5:4a:93:ef:cf:f5:ad:ee:3a:80: 0f:f2:a8:2e:fa:f6:cc:3d:3f:74:61:3c:11:52:8b: bc:2d:c8:07:88:9a:aa:9f:98:7f:5e:dc:c1:15:bb: a0:fc:6e:94:ad:50:4d:83:9e:2b:e6:a9:35:4a:c1: 81:90:8a:8c:59:69:92:05:35:29:83:63:0d:88:b5: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:88:F6:79:0B:6D:BC:4B:F7:D2:46:FB:1A:DF:FC:9C:F5:6A:D1:7F X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:49:61:15:54:ea:ec:c0:0e:59:c0:f7:ef:d6:f6:8f:31:a5: 1f:aa:8d:32:cb:4d:a8:aa:44:e2:41:05:aa:93:ff:02:03:3a: 32:53:92:28:c9:41:fb:9b:dd:85:06:b8:5f:a2:52:d1:36:6e: 32:f7:0a:2e:5f:7f:b1:f1:67:f2:bc:9d:50:07:dd:4a:f1:4d: 28:cd:1e:5c:5e:1f:83:07:d8:0f:a5:ee:58:b0:35:1a:ea:3a: 79:40:25:ab:df:31:73:e5:fe:30:51:3c:de:0d:11:a7:59:37: 4c:71:a9:71:8b:65:63:c3:52:aa:fc:eb:eb:9a:48:c0:a9:0e: 20:7e:d3:eb:ea:e8:ae:c7:05:70:7b:e0:fb:ca:a7:1d:6f:ce: 8e:21:98:61:46:4d:0a:f9:f5:0b:f9:c3:5a:a5:fd:e7:78:5e: a5:63:45:43:aa:12:e9:1c:c4:78:c8:ba:96:73:59:df:b5:e9: 92:e2:85:5b:67:db:1a:33:e0:28:52:42:99:d8:c1:7e:31:08: 12:0f:1e:40:78:83:06:95:b8:cc:06:44:44:67:e7:0e:ab:f5: 38:81:ed:93:76:c6:da:68:69:4e:25:9c:01:b0:80:6c:cc:27: 00:06:21:99:e2:eb:c4:d0:09:db:2d:f5:57:80:32:51:fa:07: c5:c9:d5:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwNDI1MDExMTIyWhcNMjUwNTAyMDExMTIyWjAYMRYwFAYD VQQDEw02ODBhZTEzYS1jNTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLVMz6yILKSnPayf2FZSv/hy/jaoq2ji2Nv70+6h7NgpPazkdAP85eNQWwVr sKzvrCpZOz6Pg8skHk7z3DaXqH5RLmxK2iNcClpvc5L4QRTi0c8yT/MSRzmeBgOH xopvA+liH0SG1lK3wSxRSeTeNETp1BrfA/SvqQvUDxEtkcOJYhq9ROETIog93RHw aVXmiGcsBGOWoj5DXfjwumhBWfZHHsF0HPIy34tfbpIbnuVSbDWcCHtqy6VKk+/P 9a3uOoAP8qgu+vbMPT90YTwRUou8LcgHiJqqn5h/XtzBFbug/G6UrVBNg54r5qk1 SsGBkIqMWWmSBTUpg2MNiLW9bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmI9nkL bbxL99JG+xrf/Jz1atF/MB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkSWEVVOrswA5ZwPfv1vaPMaUfqo0yy02oqkTiQQWqk/8CAzoyU5Io yUH7m92FBrhfolLRNm4y9wouX3+x8WfyvJ1QB91K8U0ozR5cXh+DB9gPpe5YsDUa 6jp5QCWr3zFz5f4wUTzeDRGnWTdMcalxi2Vjw1Kq/OvrmkjAqQ4gftPr6uiuxwVw e+D7yqcdb86OIZhhRk0K+fUL+cNapf3neF6lY0VDqhLpHMR4yLqWc1nftemS4oVb Z9saM+AoUkKZ2MF+MQgSDx5AeIMGlbjMBkREZ+cOq/U4ge2TdsbaaGlOJZwBsIBs zCcABiGZ4uvE0AnbLfVXgDJR+gfFydXD -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:47 2025 by rpki-client