$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json) Hash identifier: Y5yEUanQfPxIJ1yL+0Sww806xxuJFpZTrVsVnIYjAes= Subject key identifier: 8C:DC:0A:B5:72:40:57:D1:65:F3:23:E2:70:63:64:12:92:09:C5:D9 Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft Manifest number: 01E0 Signing time: Tue 01 Jul 2025 03:30:24 +0000 Manifest this update: Tue 01 Jul 2025 03:30:23 +0000 Manifest next update: Tue 08 Jul 2025 03:30:23 +0000 Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: h0rjYASmshYfKA17Th0JUb3OF0yeZ4cBbchDOBGJYaY=) 2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: gmdIOgts2gqY1ppnefV+yq0uoAlH32RZLcAhOdl6QRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:30:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Validity Not Before: Jul 1 03:30:23 2025 GMT Not After : Jul 8 03:30:23 2025 GMT Subject: CN=6863564f-ed0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d7:94:9d:8a:ac:2a:f4:2c:1c:35:b7:84:08: 08:1d:92:33:79:b8:34:4a:0f:f2:73:21:ad:b3:e2: c8:74:dd:ed:4a:67:cb:32:3f:f7:b1:a0:86:74:c2: ab:83:ff:55:c9:3b:7b:bb:b8:7f:e8:7c:b1:69:7e: 05:3a:4a:40:db:60:0f:d7:57:e8:d0:a2:db:11:f2: df:2b:25:1a:59:67:38:8a:40:ca:1e:be:b7:06:61: 0a:19:17:ae:03:e6:5a:29:19:1a:82:af:f8:f5:bb: a8:44:ce:4b:6e:10:aa:36:9b:96:76:a3:a8:f9:7a: bf:33:ab:03:ef:c8:a6:26:3e:ce:51:51:c1:ab:87: db:2f:04:89:df:a7:24:aa:9c:8f:a3:48:db:1f:a4: 8d:ab:97:35:c0:93:35:75:01:22:dc:27:15:2e:39: 90:1a:f9:fe:c8:ad:fd:65:a5:47:f9:a6:67:27:98: 46:24:11:ab:27:da:92:8c:25:18:0e:86:2c:4a:ca: 6b:c2:d6:ba:69:d4:8f:35:61:79:22:3c:7a:e8:74: b3:73:87:61:19:a5:f3:b0:7b:2c:c1:70:58:2c:95: 1d:01:c1:43:9a:2c:94:d7:c7:d8:58:50:da:e5:d6: 67:1a:da:52:18:64:38:5f:a3:b3:3c:3b:c8:79:ac: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DC:0A:B5:72:40:57:D1:65:F3:23:E2:70:63:64:12:92:09:C5:D9 X509v3 Authority Key Identifier: keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c2:28:a8:d3:4c:c3:bd:b7:91:da:a8:5a:72:ea:11:c5:f6: 46:27:f7:09:67:e3:3f:7e:ed:23:3c:fa:64:8f:0a:ab:90:5b: fd:b6:9e:f8:ae:a6:a3:16:4a:a8:19:38:4e:df:46:d2:77:52: f2:29:e3:c7:42:72:94:37:07:6e:64:a9:de:c1:8c:b3:a1:15: 5b:18:d7:be:e7:75:e2:8d:92:16:67:1a:0f:a1:74:f2:5a:6e: a1:8f:c6:0f:26:f7:1e:02:5e:89:6e:d4:7d:8d:45:68:c4:a5: cb:69:6e:b3:30:d9:e8:89:cc:29:4d:97:e5:38:a1:92:89:bf: 8b:20:ec:ae:0f:5c:39:4e:b3:5a:c3:98:37:32:61:cb:6b:d3: 63:ae:6e:1a:e0:41:c7:7f:93:77:1f:8b:02:c5:21:89:df:9f: 52:03:92:0f:14:3f:06:04:fd:23:7f:82:70:63:c4:90:d4:8b: c4:20:fa:ae:ed:3d:10:bf:81:3a:18:50:6f:fb:1d:ef:a1:60: 7d:9f:e3:c8:5b:c6:2d:1e:49:ae:83:69:e0:16:ea:b7:09:13: 0c:12:b3:3c:22:9c:e3:04:56:2c:70:b8:ee:4d:6a:6a:c4:dd: db:ca:50:3f:79:04:97:22:9c:65:62:2a:be:08:e4:bf:bc:7c: 1d:02:48:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3RjgxMTAvBgNVBAUTKDlGNjRGRTUwOTkyNTM3RkIwQjQwRTUyRjlDRkFDMzEw Q0EyNzE5MTgwHhcNMjUwNzAxMDMzMDIzWhcNMjUwNzA4MDMzMDIzWjAYMRYwFAYD VQQDEw02ODYzNTY0Zi1lZDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdeUnYqsKvQsHDW3hAgIHZIzebg0Sg/ycyGts+LIdN3tSmfLMj/3saCGdMKr g/9VyTt7u7h/6HyxaX4FOkpA22AP11fo0KLbEfLfKyUaWWc4ikDKHr63BmEKGReu A+ZaKRkagq/49buoRM5LbhCqNpuWdqOo+Xq/M6sD78imJj7OUVHBq4fbLwSJ36ck qpyPo0jbH6SNq5c1wJM1dQEi3CcVLjmQGvn+yK39ZaVH+aZnJ5hGJBGrJ9qSjCUY DoYsSsprwta6adSPNWF5Ijx66HSzc4dhGaXzsHsswXBYLJUdAcFDmiyU18fYWFDa 5dZnGtpSGGQ4X6OzPDvIeazr9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIzcCrVy QFfRZfMj4nBjZBKSCcXZMB8GA1UdIwQYMBaAFJ9k/lCZJTf7C0DlL5z6wxDKJxkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdGOC8zNDUwOTQwMEI5 NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5fc0xRT1V2blByREVNb25H UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yVC1VSmtsTl9zTFFPVXZuUHJERU1vbkdSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTdGOC8zNDUwOTQwMEI5NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5f c0xRT1V2blByREVNb25HUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqwiio00zDvbeR2qhacuoRxfZGJ/cJZ+M/fu0jPPpkjwqrkFv9tp74 rqajFkqoGThO30bSd1LyKePHQnKUNwduZKnewYyzoRVbGNe+53XijZIWZxoPoXTy Wm6hj8YPJvceAl6JbtR9jUVoxKXLaW6zMNnoicwpTZflOKGSib+LIOyuD1w5TrNa w5g3MmHLa9Njrm4a4EHHf5N3H4sCxSGJ359SA5IPFD8GBP0jf4JwY8SQ1IvEIPqu 7T0Qv4E6GFBv+x3voWB9n+PIW8YtHkmug2ngFuq3CRMMErM8IpzjBFYscLjuTWpq xN3bylA/eQSXIpxlYiq+COS/vHwdAkjF -----END CERTIFICATE-----Generated at Thu Jul 3 01:17:25 2025 by rpki-client