$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: /KnnJqPqDH/ILqzZplXLhd5xzT0LYJk2fmtoOSj1Ddc= Subject key identifier: 0D:93:AF:77:11:FA:2D:C3:41:F7:54:CB:04:86:47:7B:5A:E6:1E:75 Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 08C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 08C0 Signing time: Fri 16 May 2025 20:46:54 +0000 Manifest this update: Fri 16 May 2025 20:46:53 +0000 Manifest next update: Fri 23 May 2025 20:46:53 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: K7Zhv5W/nzHfIeKNP6F2GFltEiypR+fQaZ1VOjHZt+g=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: v6eXZmLrZttsFYphww5DwQSaxSYNhoXZnZd8akGhwqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2246 (0x8c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652, serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Validity Not Before: May 16 20:46:53 2025 GMT Not After : May 23 20:46:53 2025 GMT Subject: CN=6827a43d-ac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:82:c0:f1:19:5b:d5:e8:ed:86:c3:f6:1a: 7c:3e:29:a9:37:4e:e5:8d:4c:fe:14:0e:aa:45:04: 3b:07:34:23:dd:b4:e1:0d:3d:f2:03:b6:a9:46:5e: 7a:79:e4:fd:81:7a:ac:ba:40:34:9c:5e:8a:b5:8a: 08:cc:c3:32:61:a1:00:b7:5e:2b:82:03:59:86:86: d8:5e:bc:83:3e:9f:e3:0c:12:45:f5:43:b2:b6:61: 92:75:ce:03:df:b1:48:59:85:d2:1c:52:56:b6:21: 18:6f:6f:5d:2e:53:e0:05:e2:ba:00:a7:34:20:76: f3:33:8a:a1:d6:87:78:13:78:3c:5c:63:e9:a6:41: 0a:a0:90:36:2a:7c:2b:60:7a:42:12:59:cd:7f:85: e2:8c:aa:33:9f:91:44:d3:6a:b2:2c:95:f8:d4:43: cd:02:09:cf:d4:af:39:6a:2a:2a:f6:83:cb:5c:02: c5:97:48:7a:83:97:f4:26:1d:37:81:7d:3d:c1:3d: 2b:5c:36:8e:82:72:c6:54:26:61:73:01:61:32:80: 68:ec:18:7d:69:7a:3c:7e:6d:70:8e:f2:ac:a4:a9: 9b:92:0d:df:2a:02:db:5f:a9:59:43:76:6a:08:67: 32:2e:86:fe:a4:0b:47:ea:8d:45:18:10:34:bc:36: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:AF:77:11:FA:2D:C3:41:F7:54:CB:04:86:47:7B:5A:E6:1E:75 X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:a5:1d:4f:3c:84:6f:76:8d:05:1c:8f:0c:6a:7d:96:26:a3: 9e:a5:cc:63:94:fc:46:be:7b:1e:98:e1:af:5e:99:73:58:77: f7:05:ce:7e:1a:2b:56:27:6e:8a:1c:96:33:6e:18:9e:f2:88: 9b:62:50:ed:a4:e8:6a:40:45:d1:ae:2f:41:9e:75:ef:ac:f2: 31:53:ef:a3:d1:85:10:98:17:aa:a9:51:69:e2:26:5d:1b:80: 4c:3f:de:82:c0:96:72:ce:72:45:be:60:69:7d:45:ad:79:31: 63:7f:54:b5:49:d9:ba:c7:0c:f4:ae:d7:55:34:86:36:c1:52: 80:b7:61:1e:6e:cf:d7:00:13:3a:0e:23:e8:78:69:b9:ce:f9: da:47:e6:39:e6:b4:8e:f9:10:72:a7:8c:59:11:8f:ee:df:71: cc:3a:ce:dd:6b:68:ba:ab:53:cd:00:66:55:04:02:d2:7c:a7: 32:d1:ed:40:40:68:62:70:3b:23:df:01:93:2d:75:54:58:00: 6d:cf:c5:56:40:78:af:38:e0:37:64:f2:98:b6:9b:61:46:da: e9:22:5b:e2:38:b2:bf:f8:12:8d:de:45:b2:5d:ca:08:28:53: 61:ef:0d:5b:89:9e:03:ad:4a:72:a0:fe:2d:8f:ff:88:0a:f1: d1:c1:c0:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjUwNTE2MjA0NjUzWhcNMjUwNTIzMjA0NjUzWjAYMRYwFAYD VQQDEw02ODI3YTQzZC1hYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7uCwPEZW9Xo7YbD9hp8PimpN07ljUz+FA6qRQQ7BzQj3bThDT3yA7apRl56 eeT9gXqsukA0nF6KtYoIzMMyYaEAt14rggNZhobYXryDPp/jDBJF9UOytmGSdc4D 37FIWYXSHFJWtiEYb29dLlPgBeK6AKc0IHbzM4qh1od4E3g8XGPppkEKoJA2Knwr YHpCElnNf4XijKozn5FE02qyLJX41EPNAgnP1K85aioq9oPLXALFl0h6g5f0Jh03 gX09wT0rXDaOgnLGVCZhcwFhMoBo7Bh9aXo8fm1wjvKspKmbkg3fKgLbX6lZQ3Zq CGcyLob+pAtH6o1FGBA0vDZp5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2Tr3cR +i3DQfdUywSGR3ta5h51MB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLpR1PPIRvdo0FHI8Man2WJqOepcxjlPxGvnsemOGvXplzWHf3Bc5+ GitWJ26KHJYzbhie8oibYlDtpOhqQEXRri9BnnXvrPIxU++j0YUQmBeqqVFp4iZd G4BMP96CwJZyznJFvmBpfUWteTFjf1S1Sdm6xwz0rtdVNIY2wVKAt2Eebs/XABM6 DiPoeGm5zvnaR+Y55rSO+RByp4xZEY/u33HMOs7da2i6q1PNAGZVBALSfKcy0e1A QGhicDsj3wGTLXVUWABtz8VWQHivOOA3ZPKYtpthRtrpIlviOLK/+BKN3kWyXcoI KFNh7w1biZ4DrUpyoP4tj/+ICvHRwcDl -----END CERTIFICATE-----Generated at Sat May 17 07:02:55 2025 by rpki-client