$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: nlhiVRg2xLR/gmQkqJd49n1gaVJR8ZL95UZSvq2cmtE= Subject key identifier: D2:97:60:92:63:3D:73:2B:31:0A:A4:B7:CE:83:A8:75:3A:37:8E:64 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 01A0 Signing time: Fri 13 Jun 2025 02:21:15 +0000 Manifest this update: Fri 13 Jun 2025 02:21:15 +0000 Manifest next update: Fri 20 Jun 2025 02:21:15 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: mbkP1iRG6oWlWycfsspVkdeAGVeLfxzRruHOHHbwOuU=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 3+A2ANkp0TI4iEFiuxaHkbdXUeiNj96UO23AWbpZWqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:21:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Jun 13 02:21:15 2025 GMT Not After : Jun 20 02:21:15 2025 GMT Subject: CN=684b8b1b-411d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9d:81:81:a7:af:5c:0c:b6:fd:61:db:48:50: 74:15:c5:14:92:41:47:af:a7:d5:f9:a7:7c:2a:fe: 3f:4f:17:0e:a1:43:a3:1e:5e:46:58:42:c6:2e:59: 2a:73:47:16:a8:73:93:3a:d7:a7:c9:57:06:c0:ba: 15:95:0a:33:3d:44:dc:57:cb:95:c8:20:10:f6:ab: 39:e5:59:38:15:6c:25:bc:57:9f:0c:6b:13:17:35: db:d8:f8:03:6e:48:54:66:6d:ae:0a:f3:36:db:2a: d1:4f:77:a0:b9:1d:1b:44:28:96:6b:ce:96:5b:c1: 13:81:e8:99:54:6c:44:28:5e:ca:ec:b3:94:d6:78: 56:4c:d7:f5:d8:ec:92:4e:61:6d:32:33:dd:db:0d: 5b:94:06:ed:96:bd:e3:1f:5b:e4:b1:4c:99:96:99: 2c:e9:29:cc:df:53:b0:0b:d4:14:f9:38:66:a9:98: c5:e3:b4:8d:09:8a:40:1e:c0:48:3d:1c:80:87:52: 94:78:e5:58:ce:16:ca:e7:46:b0:da:5c:92:70:b6: f5:67:e4:7e:14:75:93:ef:fc:3f:62:d8:17:c3:03: 2c:d8:30:df:d3:b0:07:a1:83:ee:4e:15:5d:b0:5a: 0e:95:3d:55:82:4c:dd:c4:d3:3a:c2:a2:9b:0a:e9: 38:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:97:60:92:63:3D:73:2B:31:0A:A4:B7:CE:83:A8:75:3A:37:8E:64 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:f0:fc:a0:0a:ab:e0:96:9e:66:b7:b7:8a:84:08:41:f6:8c: 68:ec:66:6e:69:2e:0b:fd:c2:dc:36:af:3e:80:18:13:eb:8d: e8:5b:be:75:60:f3:1d:c0:89:75:dc:f5:55:1a:8a:0d:96:ec: fe:45:62:7d:bf:dd:8b:e2:2b:0c:ac:c9:65:bc:74:59:19:77: 91:1d:c4:16:11:1c:e8:52:9d:19:b7:dc:2f:42:8d:53:3d:20: 12:a2:c7:47:09:fa:00:c4:81:98:2e:5f:57:02:93:29:8c:ac: a9:b3:10:50:fb:cb:fa:c4:c4:df:9a:ca:e9:2c:58:30:fc:4e: 08:42:55:a0:31:53:40:aa:dd:cb:77:2d:1d:f6:b7:1f:4a:6f: 87:7f:0e:b1:cb:56:6e:cf:b2:31:07:4e:b9:74:46:e1:55:89: c6:7d:65:dd:3d:fa:1b:88:8f:68:58:49:93:f0:44:35:68:1a: 88:fd:84:f5:28:2d:5e:22:46:c4:97:ca:29:37:67:7b:cd:ee: 8b:03:fc:a2:cf:8e:7a:2a:08:62:c7:2f:5c:24:92:c2:c8:7d: e4:b1:7b:50:29:72:19:4e:fa:d9:82:2d:93:da:55:53:98:4b: 28:2e:bd:d4:0b:81:e1:45:90:43:62:03:62:ec:cb:a0:73:40: fe:05:9b:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUwNjEzMDIyMTE1WhcNMjUwNjIwMDIyMTE1WjAYMRYwFAYD VQQDEw02ODRiOGIxYi00MTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZ2BgaevXAy2/WHbSFB0FcUUkkFHr6fV+ad8Kv4/TxcOoUOjHl5GWELGLlkq c0cWqHOTOtenyVcGwLoVlQozPUTcV8uVyCAQ9qs55Vk4FWwlvFefDGsTFzXb2PgD bkhUZm2uCvM22yrRT3eguR0bRCiWa86WW8ETgeiZVGxEKF7K7LOU1nhWTNf12OyS TmFtMjPd2w1blAbtlr3jH1vksUyZlpks6SnM31OwC9QU+ThmqZjF47SNCYpAHsBI PRyAh1KUeOVYzhbK50aw2lyScLb1Z+R+FHWT7/w/YtgXwwMs2DDf07AHoYPuThVd sFoOlT1VgkzdxNM6wqKbCuk4vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKXYJJj PXMrMQqkt86DqHU6N45kMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH8PygCqvglp5mt7eKhAhB9oxo7GZuaS4L/cLcNq8+gBgT643oW751 YPMdwIl13PVVGooNluz+RWJ9v92L4isMrMllvHRZGXeRHcQWERzoUp0Zt9wvQo1T PSASosdHCfoAxIGYLl9XApMpjKypsxBQ+8v6xMTfmsrpLFgw/E4IQlWgMVNAqt3L dy0d9rcfSm+Hfw6xy1Zuz7IxB065dEbhVYnGfWXdPfobiI9oWEmT8EQ1aBqI/YT1 KC1eIkbEl8opN2d7ze6LA/yiz456Kghixy9cJJLCyH3ksXtQKXIZTvrZgi2T2lVT mEsoLr3UC4HhRZBDYgNi7Mugc0D+BZvF -----END CERTIFICATE-----Generated at Sat Jun 14 19:26:01 2025 by rpki-client