$ rpki-client -vvf rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft File: plb2DT8RZBpXG9H_rSRg3UV2My0.mft (raw, json) Hash identifier: pcWlekSX7EZzfKH29RIBWjX5GLr5oQ7GFtbn2Sj3j+c= Subject key identifier: F9:A9:CC:A2:2E:81:CB:B3:37:D2:73:23:4E:14:AA:07:28:11:27:C9 Authority key identifier: A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D Certificate issuer: /CN=A919986F/serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Certificate serial: 2830 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft Manifest number: 282B Signing time: Mon 30 Jun 2025 15:39:54 +0000 Manifest this update: Mon 30 Jun 2025 15:39:54 +0000 Manifest next update: Mon 07 Jul 2025 15:39:54 +0000 Files and hashes: 1: plb2DT8RZBpXG9H_rSRg3UV2My0.crl (hash: j2bAsOqAZVzCoETD6XQ8YI0qVPGxvm8aDE0MgBxO6Cw=) 2: 27F621183B5D11EB97506B7AC4F9AE02.roa (hash: +GMl4Xu8VPkNDBOVR1baOfDzoyBidluum1AgF508r2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10288 (0x2830) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919986F, serialNumber=A656F60D3F11641A571BD1FFAD2460DD4576332D Validity Not Before: Jun 30 15:39:54 2025 GMT Not After : Jul 7 15:39:54 2025 GMT Subject: CN=6862afca-8fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:84:36:bf:ce:ac:3c:8c:00:ca:00:e0:af:4c: 2c:f8:e2:15:6d:f4:b3:1d:51:1a:4b:8d:83:1b:cd: f8:b3:05:eb:61:9c:d1:10:d2:c8:31:bb:62:a3:f5: f2:9d:57:5f:ab:0d:1a:0b:51:5e:56:df:3d:c7:11: 79:6d:52:15:ca:bb:00:33:e7:08:2c:8e:a4:56:25: 32:73:2c:3f:b9:71:9b:7e:ff:f5:31:49:62:cd:25: 49:92:48:60:74:aa:b9:04:1a:d4:f8:a6:af:ce:d0: 75:c5:6f:62:46:8c:ba:47:17:af:75:05:8f:4b:40: 61:1a:1d:87:d2:5f:5d:64:5b:44:09:f7:25:61:69: a9:8a:d4:3f:f3:32:64:1f:78:35:de:2f:3e:40:49: 18:de:ac:9f:87:5c:ba:e1:12:74:72:20:37:d9:be: 94:03:3a:e0:07:98:23:cd:c9:23:35:5c:0e:d0:97: 1e:e4:3a:3d:5e:c0:e6:3d:5d:63:96:19:97:3e:85: c0:72:f5:66:87:b4:a7:c5:3a:4b:af:a2:54:c4:0b: 71:ff:e6:32:8e:f2:cb:94:e1:91:8e:f1:77:85:27: e7:87:c6:1e:0a:a1:60:2e:04:74:9a:ac:f8:74:c6: 20:4c:d8:56:11:2b:8c:b8:06:e1:68:73:70:33:50: da:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A9:CC:A2:2E:81:CB:B3:37:D2:73:23:4E:14:AA:07:28:11:27:C9 X509v3 Authority Key Identifier: keyid:A6:56:F6:0D:3F:11:64:1A:57:1B:D1:FF:AD:24:60:DD:45:76:33:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plb2DT8RZBpXG9H_rSRg3UV2My0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919986F/EC870B868F2A11E4BF98B432C4F9AE02/plb2DT8RZBpXG9H_rSRg3UV2My0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:00:0e:c6:b6:d5:39:06:bc:c3:fa:69:0d:d8:8f:92:39:43: e3:fc:13:af:d5:29:89:68:e7:bf:02:3e:c8:52:97:27:57:93: ff:dc:26:5b:09:ef:0d:3b:63:46:6c:89:21:01:09:c4:37:83: 8c:09:01:a7:41:54:21:f8:70:8d:9b:96:83:8f:08:b5:67:b8: e9:43:c2:5e:8d:27:b0:30:7a:6a:5a:76:dd:45:9c:97:88:de: 38:ef:6f:f4:4c:21:f4:b2:87:96:0d:83:4a:c1:1e:14:b1:f1: 3c:61:fe:25:cb:fe:00:8a:b3:ed:bc:f9:31:19:e8:90:5b:75: c6:5f:f2:16:20:7d:6b:3f:a9:7c:0d:bf:39:8c:d7:cd:4f:52: 82:56:a4:28:81:ec:29:e7:16:a2:40:ef:d5:99:e9:56:35:1e: 53:73:77:ec:0a:ef:c8:ff:62:6f:85:db:43:ee:aa:4b:d2:23: 06:72:0c:06:25:ed:8d:a7:be:b2:38:ad:a7:f8:18:5f:d6:db: b4:a3:18:56:95:43:75:5d:24:e5:d3:a0:76:c2:97:3d:a3:72: 8b:77:81:1b:e2:f7:6d:ab:59:9d:56:38:88:06:13:61:a8:e6: 2d:31:f1:92:83:62:ab:cf:52:0e:a0:f1:91:fd:8a:a8:6e:42: c9:9f:64:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKDAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk4NkYxMTAvBgNVBAUTKEE2NTZGNjBEM0YxMTY0MUE1NzFCRDFGRkFEMjQ2MERE NDU3NjMzMkQwHhcNMjUwNjMwMTUzOTU0WhcNMjUwNzA3MTUzOTU0WjAYMRYwFAYD VQQDEw02ODYyYWZjYS04ZmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIQ2v86sPIwAygDgr0ws+OIVbfSzHVEaS42DG834swXrYZzRENLIMbtio/Xy nVdfqw0aC1FeVt89xxF5bVIVyrsAM+cILI6kViUycyw/uXGbfv/1MUlizSVJkkhg dKq5BBrU+KavztB1xW9iRoy6RxevdQWPS0BhGh2H0l9dZFtECfclYWmpitQ/8zJk H3g13i8+QEkY3qyfh1y64RJ0ciA32b6UAzrgB5gjzckjNVwO0Jce5Do9XsDmPV1j lhmXPoXAcvVmh7SnxTpLr6JUxAtx/+YyjvLLlOGRjvF3hSfnh8YeCqFgLgR0mqz4 dMYgTNhWESuMuAbhaHNwM1DabwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmpzKIu gcuzN9JzI04UqgcoESfJMB8GA1UdIwQYMBaAFKZW9g0/EWQaVxvR/60kYN1FdjMt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTg2Ri9FQzg3MEI4NjhG MkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpCcFhHOUhfclNSZzNVVjJN eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BsYjJEVDhSWkJwWEc5SF9yU1JnM1VWMk15MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTg2Ri9FQzg3MEI4NjhGMkExMUU0QkY5OEI0MzJDNEY5QUUwMi9wbGIyRFQ4UlpC cFhHOUhfclNSZzNVVjJNeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAA7GttU5BrzD+mkN2I+SOUPj/BOv1SmJaOe/Aj7IUpcnV5P/3CZb Ce8NO2NGbIkhAQnEN4OMCQGnQVQh+HCNm5aDjwi1Z7jpQ8JejSewMHpqWnbdRZyX iN4472/0TCH0soeWDYNKwR4UsfE8Yf4ly/4AirPtvPkxGeiQW3XGX/IWIH1rP6l8 Db85jNfNT1KCVqQogewp5xaiQO/VmelWNR5Tc3fsCu/I/2JvhdtD7qpL0iMGcgwG Je2Np76yOK2n+Bhf1tu0oxhWlUN1XSTl06B2wpc9o3KLd4Eb4vdtq1mdVjiIBhNh qOYtMfGSg2Krz1IOoPGR/YqobkLJn2R8 -----END CERTIFICATE-----Generated at Wed Jul 2 13:05:47 2025 by rpki-client