$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: 62+rY39Voe1UasKJcF80u4FjIVANByy9DlgUS9/1EUw= Subject key identifier: AC:9B:F5:2A:C6:B2:C8:D8:AB:7B:1C:60:8A:36:19:85:AF:BA:1D:A3 Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 37 Signing time: Sun 29 Jun 2025 06:38:14 +0000 Manifest this update: Sun 29 Jun 2025 06:38:13 +0000 Manifest next update: Sun 06 Jul 2025 06:38:13 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: 0T9zQ2VMXlUjhPPmq+ce8rUVHD5VaOsC7ZBSV7/4BxQ=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Validity Not Before: Jun 29 06:38:13 2025 GMT Not After : Jul 6 06:38:13 2025 GMT Subject: CN=6860df55-9c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ee:19:be:e7:74:04:1c:a6:bc:0d:bb:c7:62: 94:54:dd:3e:48:4a:5e:f4:ed:bf:43:9a:3a:4d:b7: c8:10:61:dc:6a:e7:56:f7:95:04:65:93:74:12:01: 97:d1:5a:cf:37:69:f8:3b:c7:4b:51:dc:4e:73:34: ac:6c:0a:f5:a7:14:12:2f:b0:24:67:f4:b0:f1:af: 3f:ca:74:31:a5:85:9c:89:43:8a:a1:6d:99:de:88: 37:7c:90:ba:93:0e:59:aa:7d:37:46:30:4c:84:23: b1:d4:cd:03:22:58:83:e9:46:5d:70:d5:f3:3d:6a: fa:a5:bc:e8:90:b2:69:6d:7d:64:1e:83:e6:89:27: 30:d9:1c:7f:f9:b9:69:b7:e1:cb:00:4c:85:4d:bd: df:4b:0f:84:9f:cf:6c:98:39:e9:71:f2:1f:07:72: 13:f5:20:62:a9:bb:c2:58:3f:35:4f:f6:65:5f:58: 55:a3:06:b7:f4:5c:4f:a2:62:02:28:93:2b:2f:73: e8:4d:0b:72:d6:0a:e4:cb:84:bd:12:d5:a7:61:90: 13:56:71:4f:32:ef:84:d3:8b:5f:e1:a2:00:6f:6b: 8d:d8:47:75:d0:dc:de:cc:57:62:d3:a4:64:89:12: f4:f0:72:b8:c7:2e:5f:22:f2:09:03:0c:74:2b:2e: 81:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9B:F5:2A:C6:B2:C8:D8:AB:7B:1C:60:8A:36:19:85:AF:BA:1D:A3 X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:eb:7a:c4:51:6c:73:33:3a:7f:1c:ae:6e:05:83:d0:32:1c: d2:a3:cb:e0:c3:c2:2d:eb:82:d0:c3:59:71:32:03:c6:1f:5c: dd:75:f5:72:cd:e4:07:6e:ec:a9:76:cc:7c:e7:d2:8c:9d:57: dd:28:f1:42:61:5a:b8:ed:7e:b2:05:cc:b9:ea:20:1e:63:67: 52:98:a5:79:6e:7a:68:c6:32:7c:be:f1:09:de:f7:4c:0c:35: 71:bd:5b:e2:74:34:a4:7a:cf:a1:9e:38:57:2b:fd:9f:3f:e3: 44:c5:04:8a:e9:d9:ca:d8:e1:64:8b:04:25:19:2f:49:f6:ea: ea:2a:d9:0c:94:b7:00:87:d2:28:91:4c:91:70:b1:a3:4a:cd: 0a:6d:a5:08:c3:af:a7:8d:de:f8:9b:0b:1b:42:42:bb:66:cd: 39:12:87:6c:ff:22:d3:e3:cb:ca:48:07:7b:79:33:bc:0c:45: 9b:7c:22:8b:bf:df:51:8b:1d:2c:a3:bc:e8:13:2e:1c:a5:44: fa:c4:58:1e:f6:d9:39:0c:64:59:f4:07:27:a6:71:26:6b:a1: 88:72:b1:5b:0a:0b:50:09:09:22:7b:9a:6d:a6:ef:85:b8:ed: 28:01:62:0f:7d:99:b8:c8:a9:f8:6f:5a:ce:88:bc:85:73:18: 56:26:b2:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjAxRDExMC8GA1UEBRMoREIxQjk2RTA1QTk4RDgyOEJGNTdFQTBBNzE1NUFGMUQz MzIyM0UyQzAeFw0yNTA2MjkwNjM4MTNaFw0yNTA3MDYwNjM4MTNaMBgxFjAUBgNV BAMTDTY4NjBkZjU1LTljNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC77hm+53QEHKa8DbvHYpRU3T5ISl707b9DmjpNt8gQYdxq51b3lQRlk3QSAZfR Ws83afg7x0tR3E5zNKxsCvWnFBIvsCRn9LDxrz/KdDGlhZyJQ4qhbZneiDd8kLqT DlmqfTdGMEyEI7HUzQMiWIPpRl1w1fM9avqlvOiQsmltfWQeg+aJJzDZHH/5uWm3 4csATIVNvd9LD4Sfz2yYOelx8h8HchP1IGKpu8JYPzVP9mVfWFWjBrf0XE+iYgIo kysvc+hNC3LWCuTLhL0S1adhkBNWcU8y74TTi1/hogBva43YR3XQ3N7MV2LTpGSJ EvTwcrjHLl8i8gkDDHQrLoG3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrJv1Ksay yNirexxgijYZha+6HaMwHwYDVR0jBBgwFoAU2xuW4FqY2Ci/V+oKcVWvHTMiPiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMDFELzg1QjhDMjkwMDNG MTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnh1VzRGcVkyQ2lfVi1vS2NWV3ZIVE1pUGl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MDFELzg1QjhDMjkwMDNGMTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNp X1Ytb0tjVld2SFRNaVBpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMfresRRbHMzOn8crm4Fg9AyHNKjy+DDwi3rgtDDWXEyA8YfXN119XLN 5Adu7Kl2zHzn0oydV90o8UJhWrjtfrIFzLnqIB5jZ1KYpXluemjGMny+8Qne90wM NXG9W+J0NKR6z6GeOFcr/Z8/40TFBIrp2crY4WSLBCUZL0n26uoq2QyUtwCH0iiR TJFwsaNKzQptpQjDr6eN3vibCxtCQrtmzTkSh2z/ItPjy8pIB3t5M7wMRZt8Iou/ 31GLHSyjvOgTLhylRPrEWB722TkMZFn0ByemcSZroYhysVsKC1AJCSJ7mm2m74W4 7SgBYg99mbjIqfhvWs6IvIVzGFYmsqg= -----END CERTIFICATE-----Generated at Mon Jun 30 17:05:35 2025 by rpki-client