$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: kFIevwMU8iPA6oyufDZJWceWpWVCtPLmPvVN8Ifx7zw= Subject key identifier: C1:2B:84:13:60:BD:95:C6:38:A6:25:B7:B7:42:2E:57:52:67:9B:BC Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 0220 Signing time: Thu 03 Jul 2025 02:20:46 +0000 Manifest this update: Thu 03 Jul 2025 02:20:46 +0000 Manifest next update: Thu 10 Jul 2025 02:20:46 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: ceOp0X3Iy80YGRli6ATElxQAI1fIS+jYDXGdflK1Lb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: Jul 3 02:20:46 2025 GMT Not After : Jul 10 02:20:46 2025 GMT Subject: CN=6865e8fe-b0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:97:b6:35:e3:86:72:e0:84:20:54:1e:14:0c: 10:de:12:1d:df:20:8e:24:44:ca:78:92:50:35:67: ed:e7:c5:cb:3e:bb:91:62:71:6c:0d:e7:6a:7b:61: 51:15:f3:67:4d:14:e4:d2:b5:6c:2e:14:18:24:97: 84:ac:8d:db:53:80:c1:6f:71:8d:44:0b:9d:81:f1: a7:5b:3d:63:0c:54:e2:bd:ff:67:13:e7:06:31:27: 07:12:20:c8:63:c2:f1:5e:3b:c8:f3:93:d6:25:bd: 07:6f:ae:34:9e:71:11:40:02:eb:54:f1:1d:f6:4a: 7b:47:cb:1b:bf:8e:f0:33:d5:99:20:85:75:b0:dd: ee:2a:59:fe:5e:01:b1:68:1a:9f:53:77:86:34:32: 24:bf:b7:4e:e3:0b:3f:06:8f:d2:f2:a8:c8:0d:04: ba:6c:b6:5d:d1:9b:e9:a1:aa:b7:f9:6a:5a:38:e6: cc:f5:13:51:62:9d:28:c5:ac:0b:77:f5:47:91:f6: d5:f2:fe:32:65:94:ed:6d:eb:fb:0c:92:f9:60:40: 04:d4:b7:92:fc:23:01:5b:02:3c:d5:32:d8:1f:91: 23:59:5b:8b:d3:53:89:d1:74:1e:56:bb:ec:95:96: a2:4d:c1:3a:e5:6d:9b:3c:5c:c8:1f:0b:97:df:b3: f0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2B:84:13:60:BD:95:C6:38:A6:25:B7:B7:42:2E:57:52:67:9B:BC X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:18:8c:af:ee:e1:a0:c6:ce:2c:f8:ab:6c:2d:39:fc:04:76: 19:fc:5a:12:ed:98:c8:12:1e:57:81:f3:aa:ef:6d:bc:68:36: 90:cf:75:97:cd:53:92:1b:50:ab:f4:b3:ca:4c:13:ee:05:96: 06:27:ac:83:e6:16:95:3d:2a:2f:93:3d:60:54:62:35:0f:b5: 1d:17:de:86:18:82:96:2c:12:c0:a0:46:d1:5e:84:8b:b9:a4: a6:57:8f:58:cc:c0:df:7e:e6:e2:0f:cd:3f:1a:1a:a9:0f:1f: 82:88:9d:00:66:04:19:ad:06:20:60:67:67:c2:66:6b:d0:b1: 55:f2:b0:2f:ae:ec:5b:0e:1a:af:d7:d7:73:a3:6e:d1:25:47: 47:73:f7:67:08:c4:16:6b:15:34:3e:31:b5:be:fc:bd:6e:21: d7:60:29:23:01:d1:a5:c2:0d:46:ed:3d:40:5b:0a:f8:42:ff: 0e:15:36:9e:b3:dc:b7:0b:7e:71:ca:2a:24:3e:6f:6b:f4:f3: d2:8c:ca:c2:c6:ec:b5:77:21:9b:bd:7d:1d:d5:07:24:f4:f6: b5:e4:c5:3d:19:d5:76:d2:27:b5:24:a8:e6:0d:34:99:ed:b8: 86:25:8e:73:e4:eb:fe:6c:c3:6d:b0:ab:51:4e:c4:59:07:df: 79:1f:c4:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUwNzAzMDIyMDQ2WhcNMjUwNzEwMDIyMDQ2WjAYMRYwFAYD VQQDEw02ODY1ZThmZS1iMGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJe2NeOGcuCEIFQeFAwQ3hId3yCOJETKeJJQNWft58XLPruRYnFsDedqe2FR FfNnTRTk0rVsLhQYJJeErI3bU4DBb3GNRAudgfGnWz1jDFTivf9nE+cGMScHEiDI Y8LxXjvI85PWJb0Hb640nnERQALrVPEd9kp7R8sbv47wM9WZIIV1sN3uKln+XgGx aBqfU3eGNDIkv7dO4ws/Bo/S8qjIDQS6bLZd0Zvpoaq3+WpaOObM9RNRYp0oxawL d/VHkfbV8v4yZZTtbev7DJL5YEAE1LeS/CMBWwI81TLYH5EjWVuL01OJ0XQeVrvs lZaiTcE65W2bPFzIHwuX37Pw2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMErhBNg vZXGOKYlt7dCLldSZ5u8MB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLGIyv7uGgxs4s+KtsLTn8BHYZ/FoS7ZjIEh5XgfOq7228aDaQz3WX zVOSG1Cr9LPKTBPuBZYGJ6yD5haVPSovkz1gVGI1D7UdF96GGIKWLBLAoEbRXoSL uaSmV49YzMDffubiD80/GhqpDx+CiJ0AZgQZrQYgYGdnwmZr0LFV8rAvruxbDhqv 19dzo27RJUdHc/dnCMQWaxU0PjG1vvy9biHXYCkjAdGlwg1G7T1AWwr4Qv8OFTae s9y3C35xyiokPm9r9PPSjMrCxuy1dyGbvX0d1Qck9Pa15MU9GdV20ie1JKjmDTSZ 7biGJY5z5Ov+bMNtsKtRTsRZB995H8RD -----END CERTIFICATE-----Generated at Thu Jul 3 15:07:23 2025 by rpki-client