$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft File: 2rx4_BTzDLhy7ADtak_0dtlMsng.mft (raw, json) Hash identifier: zzXHSvuc1Pn8d0awIrNEA3BY6rygmuu8Slk5sfUJfL4= Subject key identifier: E2:4C:E2:0D:5E:AE:92:D6:78:D8:13:BD:B7:B3:EE:23:D0:33:90:67 Authority key identifier: DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 Certificate issuer: /CN=A91CE1E6/serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Certificate serial: 02E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft Manifest number: 02DF Signing time: Thu 03 Jul 2025 01:42:32 +0000 Manifest this update: Thu 03 Jul 2025 01:42:32 +0000 Manifest next update: Thu 10 Jul 2025 01:42:32 +0000 Files and hashes: 1: 2rx4_BTzDLhy7ADtak_0dtlMsng.crl (hash: +UROPqBi/ymT7dtR8cJyGxj2JpMMpQnc3E+8BZCIXoM=) 2: F585ED70EBB511ECA410BF6DC4F9AE02.roa (hash: FDgCbVEtaiF6hhOlzAuEf/7GQvnyK8/vB0MpeqREr6Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 739 (0x2e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE1E6, serialNumber=DABC78FC14F30CB872EC00ED6A4FF476D94CB278 Validity Not Before: Jul 3 01:42:32 2025 GMT Not After : Jul 10 01:42:32 2025 GMT Subject: CN=6865e008-0c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:12:93:3a:4b:64:7a:05:c1:02:1b:d0:e0:6b: 37:a8:f9:ec:4a:a9:a1:ba:d7:b8:5f:9c:11:b7:27: c1:39:b9:9f:e0:4f:59:8f:e6:1b:a0:6e:c4:1e:03: 7e:1b:7d:c3:a4:d7:3f:ff:ab:99:c2:88:50:7b:24: 69:f5:54:86:62:9f:c7:ba:68:39:6c:6b:88:c7:af: b2:99:8b:53:48:f4:71:c8:36:2e:f9:d2:4f:d2:5d: 37:a4:3e:7a:88:ee:bd:0a:d2:aa:ea:cf:a2:be:94: 27:51:00:d0:3b:3c:27:bb:c0:a7:51:81:cf:c3:46: ca:83:75:4c:34:97:a1:10:c9:e9:fd:99:60:1b:e5: 1f:0e:83:75:e0:99:3d:89:78:99:73:82:07:98:4b: 6e:c5:aa:17:54:ac:38:23:c3:ac:31:19:f3:e5:52: eb:e7:3b:3d:68:c4:fd:9f:c4:d6:ac:3f:2f:be:0b: 37:e2:ef:2f:e7:07:3f:ec:40:f3:d3:7a:da:52:a2: be:77:36:78:01:ac:94:49:f2:1c:a8:ce:e1:c4:69: d8:20:4e:84:81:2e:86:b9:2d:ef:5a:53:ed:5c:77: c7:78:19:c4:6f:69:c5:33:8a:d6:e6:38:f8:8b:52: 8b:26:e1:d0:54:11:8e:06:df:c5:e4:cd:c6:dc:33: 11:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:4C:E2:0D:5E:AE:92:D6:78:D8:13:BD:B7:B3:EE:23:D0:33:90:67 X509v3 Authority Key Identifier: keyid:DA:BC:78:FC:14:F3:0C:B8:72:EC:00:ED:6A:4F:F4:76:D9:4C:B2:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rx4_BTzDLhy7ADtak_0dtlMsng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE1E6/CD94B8B8EBB111EC9D9B2569C4F9AE02/2rx4_BTzDLhy7ADtak_0dtlMsng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e6:3b:8c:ed:81:35:d9:9c:ae:0b:1a:c2:35:b2:66:4e:57:bb: 2f:12:ea:c9:b9:81:1a:49:83:4b:d3:20:43:6e:84:26:2c:99: 46:18:92:ed:a2:1a:c2:89:4b:d7:36:d2:2f:34:01:36:5a:b9: 06:1e:b0:c2:2b:8c:e4:4b:87:e5:ea:17:fe:ec:be:6e:8f:78: f3:31:ca:d2:13:d0:02:fb:6b:0d:f7:92:f4:92:ed:c0:bb:92: f5:fe:62:ba:cd:95:49:0a:73:d1:ae:ec:62:e9:fa:60:2f:fd: c0:9b:b2:8b:1e:c0:25:21:92:32:c1:d0:fd:67:52:e2:68:48: 5e:83:3f:a0:63:3f:7d:ef:1d:8b:dd:0a:8c:fc:22:18:0c:2b: ef:d7:c3:ad:3b:bd:06:c3:51:00:a4:41:f9:cd:68:f1:bc:0d: eb:2c:13:a5:b9:76:20:ad:0d:7c:9f:4a:e9:76:80:ee:a0:7c: 19:97:2b:62:87:22:a5:a3:8e:c1:f6:49:99:fc:95:46:a7:08: a1:3f:a6:27:7a:44:bb:e2:00:b7:e1:67:df:04:c8:80:ee:91: 7c:57:53:25:86:67:8d:24:03:d5:ce:94:a3:b8:cc:53:02:f6: 39:3c:12:74:97:b3:f0:84:65:1b:e7:b1:00:18:a2:8e:df:e5: 15:dd:d7:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UxRTYxMTAvBgNVBAUTKERBQkM3OEZDMTRGMzBDQjg3MkVDMDBFRDZBNEZGNDc2 RDk0Q0IyNzgwHhcNMjUwNzAzMDE0MjMyWhcNMjUwNzEwMDE0MjMyWjAYMRYwFAYD VQQDEw02ODY1ZTAwOC0wYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxKTOktkegXBAhvQ4Gs3qPnsSqmhute4X5wRtyfBObmf4E9Zj+YboG7EHgN+ G33DpNc//6uZwohQeyRp9VSGYp/Humg5bGuIx6+ymYtTSPRxyDYu+dJP0l03pD56 iO69CtKq6s+ivpQnUQDQOzwnu8CnUYHPw0bKg3VMNJehEMnp/ZlgG+UfDoN14Jk9 iXiZc4IHmEtuxaoXVKw4I8OsMRnz5VLr5zs9aMT9n8TWrD8vvgs34u8v5wc/7EDz 03raUqK+dzZ4AayUSfIcqM7hxGnYIE6EgS6GuS3vWlPtXHfHeBnEb2nFM4rW5jj4 i1KLJuHQVBGOBt/F5M3G3DMRqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJM4g1e rpLWeNgTvbez7iPQM5BnMB8GA1UdIwQYMBaAFNq8ePwU8wy4cuwA7WpP9HbZTLJ4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTFFNi9DRDk0QjhCOEVC QjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRMaHk3QUR0YWtfMGR0bE1z bmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyeDRfQlR6RExoeTdBRHRha18wZHRsTXNuZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTFFNi9DRDk0QjhCOEVCQjExMUVDOUQ5QjI1NjlDNEY5QUUwMi8ycng0X0JUekRM aHk3QUR0YWtfMGR0bE1zbmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDmO4ztgTXZnK4LGsI1smZOV7svEurJuYEaSYNL0yBDboQmLJlGGJLt ohrCiUvXNtIvNAE2WrkGHrDCK4zkS4fl6hf+7L5uj3jzMcrSE9AC+2sN95L0ku3A u5L1/mK6zZVJCnPRruxi6fpgL/3Am7KLHsAlIZIywdD9Z1LiaEhegz+gYz997x2L 3QqM/CIYDCvv18OtO70Gw1EApEH5zWjxvA3rLBOluXYgrQ18n0rpdoDuoHwZlyti hyKlo47B9kmZ/JVGpwihP6YnekS74gC34WffBMiA7pF8V1MlhmeNJAPVzpSjuMxT AvY5PBJ0l7PwhGUb57EAGKKO3+UV3dfw -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:41 2025 by rpki-client