$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft File: mlTRAXUBnPgIazCzHmUq4GAv9rw.mft (raw, json) Hash identifier: xXe18jaJFRU1nilpDmfbfr5NMT92Uk/eOmLnyE4GfJw= Subject key identifier: 29:74:56:16:40:F8:88:04:B7:51:9A:2C:D3:AC:37:18:A8:26:5F:C0 Authority key identifier: 9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC Certificate issuer: /CN=A91E57C9/serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft Manifest number: 02BA Signing time: Tue 01 Jul 2025 02:06:16 +0000 Manifest this update: Tue 01 Jul 2025 02:06:15 +0000 Manifest next update: Tue 08 Jul 2025 02:06:15 +0000 Files and hashes: 1: mlTRAXUBnPgIazCzHmUq4GAv9rw.crl (hash: WXsnufHjWQ/DYi3yzSzZD/VeVq39335klAy7Bxy53AY=) 2: 2AEC4C4EF9D911ECBC381559C4F9AE02.roa (hash: mXf2uQ5mcSdD+NErxrFlghuWQs3NGoZkupDcd+zBXVE=) 3: 2B658C44F9D911ECBC381559C4F9AE02.roa (hash: M9uQ6pPxIBbjIwPVgVR3Gml4RjG64rh15R2Po2BA/0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:06:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57C9, serialNumber=9A54D10175019CF8086B30B31E652AE0602FF6BC Validity Not Before: Jul 1 02:06:15 2025 GMT Not After : Jul 8 02:06:15 2025 GMT Subject: CN=68634297-480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c2:d2:07:29:f2:53:a4:1d:8a:6a:64:ea:1f: 9a:2f:5f:42:c7:87:c1:a2:a3:a8:50:49:0b:30:7a: d1:87:84:83:a0:d8:ef:e3:d3:c5:84:ad:71:11:3e: 6b:e5:92:4a:86:01:06:39:07:c7:71:42:f6:13:e0: 12:db:13:e8:bb:a3:1c:ef:36:11:13:bd:40:01:42: d7:ba:d9:bb:39:aa:75:99:e8:a8:74:00:cc:e2:73: 0f:5b:79:b8:8e:08:94:ec:96:9d:91:43:a2:27:2b: b7:e1:07:cc:e3:e6:c1:9e:17:83:90:2f:ff:48:7b: a3:e9:8d:43:c7:de:9d:7e:b3:ac:f8:0c:ed:a4:a3: cc:e8:04:2c:1f:24:89:1b:97:a3:d0:e0:41:33:3f: 2f:12:a5:a4:89:64:24:73:bf:8d:c5:8e:d4:8b:c2: 53:c5:a7:19:57:bc:12:99:88:77:8a:17:9d:ac:5b: e8:9b:ec:cf:e3:3a:25:6b:ee:44:81:eb:6f:80:d5: 9d:d4:3e:67:28:8e:9a:c7:bc:4f:93:b0:36:e8:84: b6:6d:5d:21:1f:72:46:c2:31:e0:2f:b3:7b:f6:b3: 20:cd:0b:ef:28:cb:36:de:0d:b3:08:76:29:8d:b9: ae:c3:ea:c3:3e:20:fe:dd:97:64:6b:28:6c:34:27: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:74:56:16:40:F8:88:04:B7:51:9A:2C:D3:AC:37:18:A8:26:5F:C0 X509v3 Authority Key Identifier: keyid:9A:54:D1:01:75:01:9C:F8:08:6B:30:B3:1E:65:2A:E0:60:2F:F6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mlTRAXUBnPgIazCzHmUq4GAv9rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57C9/9C6EF74EF9D511ECB6DCAD54C4F9AE02/mlTRAXUBnPgIazCzHmUq4GAv9rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:58:08:60:73:c7:c9:5f:c7:56:b3:e4:02:e2:d4:3d:4b:08: 27:af:43:64:ea:ca:04:4b:46:da:f3:16:cc:38:c2:cc:06:d6: 26:90:77:48:76:ba:36:bb:f5:23:04:51:7f:41:72:78:cc:e1: 60:ff:ba:5d:05:d3:ef:b2:56:52:f5:5d:29:c3:55:45:a7:9e: 19:49:ae:83:a1:d4:a5:3a:f6:1f:86:b8:e2:46:09:87:80:ee: 50:c6:14:e5:b8:17:73:ae:c5:1f:51:1a:4e:81:8a:69:e4:1c: 2d:ba:40:ed:0f:7d:72:3c:27:d3:58:bd:ff:64:8d:72:0a:9d: ab:2b:52:4d:1c:f9:44:76:e8:af:25:83:ce:ae:09:c6:9f:c2: e7:79:04:62:e4:17:4f:a8:17:c6:4f:bc:41:d4:6e:be:c5:cd: 43:2c:bd:1b:e5:6a:7b:06:eb:cb:ba:67:6a:41:ab:21:f1:58: a1:ad:00:e1:7e:bd:6c:a0:75:5b:12:5e:1b:63:5a:0f:77:8e: f7:1a:fa:4b:b3:a1:8b:d2:2b:f1:4f:5e:8d:16:e2:12:c0:77: ab:3d:b4:ab:37:79:ee:9e:5e:94:bb:60:34:0d:c1:77:89:08: 24:0e:84:5d:0c:70:2c:2b:3f:87:cd:f8:89:c8:bd:c2:ff:f8: e9:49:ce:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QzkxMTAvBgNVBAUTKDlBNTREMTAxNzUwMTlDRjgwODZCMzBCMzFFNjUyQUUw NjAyRkY2QkMwHhcNMjUwNzAxMDIwNjE1WhcNMjUwNzA4MDIwNjE1WjAYMRYwFAYD VQQDEw02ODYzNDI5Ny00ODBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8LSBynyU6Qdimpk6h+aL19Cx4fBoqOoUEkLMHrRh4SDoNjv49PFhK1xET5r 5ZJKhgEGOQfHcUL2E+AS2xPou6Mc7zYRE71AAULXutm7Oap1meiodADM4nMPW3m4 jgiU7JadkUOiJyu34QfM4+bBnheDkC//SHuj6Y1Dx96dfrOs+AztpKPM6AQsHySJ G5ej0OBBMz8vEqWkiWQkc7+NxY7Ui8JTxacZV7wSmYh3ihedrFvom+zP4zola+5E getvgNWd1D5nKI6ax7xPk7A26IS2bV0hH3JGwjHgL7N79rMgzQvvKMs23g2zCHYp jbmuw+rDPiD+3ZdkayhsNCejpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl0VhZA +IgEt1GaLNOsNxioJl/AMB8GA1UdIwQYMBaAFJpU0QF1AZz4CGswsx5lKuBgL/a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdDOS85QzZFRjc0RUY5 RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5QZ0lhekN6SG1VcTRHQXY5 cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21sVFJBWFVCblBnSWF6Q3pIbVVxNEdBdjlydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdDOS85QzZFRjc0RUY5RDUxMUVDQjZEQ0FENTRDNEY5QUUwMi9tbFRSQVhVQm5Q Z0lhekN6SG1VcTRHQXY5cncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZWAhgc8fJX8dWs+QC4tQ9Swgnr0Nk6soES0ba8xbMOMLMBtYmkHdI dro2u/UjBFF/QXJ4zOFg/7pdBdPvslZS9V0pw1VFp54ZSa6DodSlOvYfhrjiRgmH gO5QxhTluBdzrsUfURpOgYpp5BwtukDtD31yPCfTWL3/ZI1yCp2rK1JNHPlEduiv JYPOrgnGn8LneQRi5BdPqBfGT7xB1G6+xc1DLL0b5Wp7BuvLumdqQash8VihrQDh fr1soHVbEl4bY1oPd473GvpLs6GL0ivxT16NFuISwHerPbSrN3nunl6Uu2A0DcF3 iQgkDoRdDHAsKz+HzfiJyL3C//jpSc5h -----END CERTIFICATE-----Generated at Wed Jul 2 06:20:09 2025 by rpki-client