$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: wNA2X68AXW4GufUbc64nQGGQdwZlnAsLyTaZ0s2/uLk= Subject key identifier: ED:C7:20:D2:70:00:09:77:DB:BC:17:78:AF:72:87:E2:C3:7B:DA:D2 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 022D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 022A Signing time: Fri 13 Jun 2025 01:25:00 +0000 Manifest this update: Fri 13 Jun 2025 01:24:59 +0000 Manifest next update: Fri 20 Jun 2025 01:24:59 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: 5H64WMNgtYk00jDmjG3hdvcaysXkFOkUK97HOl05qiQ=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:24:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 557 (0x22d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Jun 13 01:24:59 2025 GMT Not After : Jun 20 01:24:59 2025 GMT Subject: CN=684b7deb-0354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:95:f7:8f:41:7f:23:49:12:95:37:77:d4: 9f:4d:22:2c:1a:ba:f7:1c:e3:b6:17:c5:49:0c:d8: c2:9f:6c:97:28:a9:60:e3:9e:8b:7a:4e:9b:18:dc: be:9a:86:af:af:77:4e:cf:6d:ae:b0:19:65:92:87: 23:df:c7:fc:67:1d:b1:6c:88:df:07:6d:d4:c2:49: 24:fc:06:78:5e:f2:e1:44:e5:b4:96:79:ea:68:96: 21:2b:96:fa:68:07:4d:f0:68:cd:1d:b3:e9:ff:8d: 64:f9:61:5d:1f:db:9a:87:df:f5:40:2e:19:ee:42: 66:c0:3b:73:87:e5:f8:73:b6:d1:b1:2a:d9:a8:2c: 51:df:4d:88:18:d1:1e:47:33:ce:80:5f:e1:0c:5a: 70:26:de:f6:58:e8:9f:35:9e:2b:2c:0b:5b:f6:8e: 22:54:25:27:ff:12:5e:5b:56:bb:62:08:ce:d4:12: 93:d1:17:7a:e9:93:cc:6b:85:ac:45:09:bd:ae:f1: 8b:d1:23:7f:8d:68:d7:8f:84:fe:4d:07:65:5f:61: db:24:c6:d3:68:0a:4d:2e:64:53:e4:25:54:fa:0e: 67:63:9a:48:19:8c:af:3f:ce:cb:aa:3b:15:0a:24: d1:09:38:14:a1:7a:af:54:2e:06:db:f2:b3:26:f3: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C7:20:D2:70:00:09:77:DB:BC:17:78:AF:72:87:E2:C3:7B:DA:D2 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ff:89:8f:34:e3:9c:43:e9:0e:3c:b2:fc:2d:e0:ff:f5:b2: af:11:0a:6f:b0:c1:92:f0:f1:55:f2:8d:7a:28:0f:3f:32:08: 1a:8f:c0:19:8d:c2:e2:42:d6:fc:8d:c3:5a:d9:42:93:57:e6: f0:36:eb:da:35:47:f7:3d:58:f4:62:f8:e5:58:7f:71:26:42: d2:fb:ce:c0:c3:72:a6:c5:c4:cb:97:aa:04:d7:fa:b5:b6:cd: 05:84:a6:0d:29:9c:db:33:e7:df:2c:c6:b9:07:b2:47:04:aa: ac:a4:58:d4:43:1c:bc:ff:3d:fb:83:92:68:f9:fa:77:95:01: d7:19:16:f4:73:0c:64:a9:a3:c5:11:d9:fd:ef:af:dc:22:63: c1:bf:f8:be:94:6e:89:bc:41:4a:65:24:9f:2f:ce:84:14:ae: 16:82:fb:c2:aa:8f:08:4d:de:a7:99:dd:2a:fe:dd:8d:51:83: 9b:af:21:1e:0e:18:98:4c:1f:d3:a3:1f:85:47:87:3c:fa:19: 75:f9:f0:70:c1:c9:c0:d4:0c:06:61:64:73:c1:00:79:ee:95: d6:49:1d:12:ad:24:50:67:f3:7c:fd:2b:ad:c9:ee:5a:94:f9: a3:43:58:c1:75:64:c2:e1:09:31:52:7d:44:ce:dc:3a:15:1a: 4f:14:aa:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwNjEzMDEyNDU5WhcNMjUwNjIwMDEyNDU5WjAYMRYwFAYD VQQDEw02ODRiN2RlYi0wMzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/GV949BfyNJEpU3d9SfTSIsGrr3HOO2F8VJDNjCn2yXKKlg456Lek6bGNy+ moavr3dOz22usBllkocj38f8Zx2xbIjfB23Uwkkk/AZ4XvLhROW0lnnqaJYhK5b6 aAdN8GjNHbPp/41k+WFdH9uah9/1QC4Z7kJmwDtzh+X4c7bRsSrZqCxR302IGNEe RzPOgF/hDFpwJt72WOifNZ4rLAtb9o4iVCUn/xJeW1a7YgjO1BKT0Rd66ZPMa4Ws RQm9rvGL0SN/jWjXj4T+TQdlX2HbJMbTaApNLmRT5CVU+g5nY5pIGYyvP87LqjsV CiTRCTgUoXqvVC4G2/KzJvMsjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3HINJw AAl327wXeK9yh+LDe9rSMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq/4mPNOOcQ+kOPLL8LeD/9bKvEQpvsMGS8PFV8o16KA8/Mggaj8AZ jcLiQtb8jcNa2UKTV+bwNuvaNUf3PVj0YvjlWH9xJkLS+87Aw3KmxcTLl6oE1/q1 ts0FhKYNKZzbM+ffLMa5B7JHBKqspFjUQxy8/z37g5Jo+fp3lQHXGRb0cwxkqaPF Edn976/cImPBv/i+lG6JvEFKZSSfL86EFK4WgvvCqo8ITd6nmd0q/t2NUYObryEe DhiYTB/Tox+FR4c8+hl1+fBwwcnA1AwGYWRzwQB57pXWSR0SrSRQZ/N8/Sutye5a lPmjQ1jBdWTC4QkxUn1Eztw6FRpPFKqP -----END CERTIFICATE-----Generated at Sat Jun 14 18:32:02 2025 by rpki-client