$ rpki-client -vvf rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft File: 2jyR-PFV2QuZh8kTskxPnlRF6cw.mft (raw, json) Hash identifier: Lxs3BZ3jeLegdj8aJRvklqV+/YHpXLHfkXLXCdMtnlY= Subject key identifier: 0F:DE:31:B8:83:7E:3F:7E:1B:CD:A8:81:BE:B3:FC:AE:C5:BB:47:9B Authority key identifier: DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC Certificate issuer: /CN=A91E70ED/serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Certificate serial: 0CFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft Manifest number: 0CE9 Signing time: Wed 02 Jul 2025 18:19:25 +0000 Manifest this update: Wed 02 Jul 2025 18:19:24 +0000 Manifest next update: Wed 09 Jul 2025 18:19:24 +0000 Files and hashes: 1: 2jyR-PFV2QuZh8kTskxPnlRF6cw.crl (hash: gKyd4TcYsqajl3ca5aJ5EucLCz8LhumU5Xf9Wb24IcU=) 2: 8D9FFB3EEB2911EB9891D01DC4F9AE02.roa (hash: mgW7VeujR3wQCY2FOQTLD+1AfxSaJAkPmJmO0oMCuHQ=) 3: FEB624F6B94911EE897F7947C4F9AE02.roa (hash: rybbZdEyPr2dvKbIGHG7PjXC8DWgHoGfpQtIcH3SNoo=) 4: 8E4647E6EB2911EB9891D01DC4F9AE02.roa (hash: adFrZ9wVUFL/q70xYlPOLV2jTwKmfI9/GoGFtthCxcw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E70ED, serialNumber=DA3C91F8F155D90B9987C913B24C4F9E5445E9CC Validity Not Before: Jul 2 18:19:24 2025 GMT Not After : Jul 9 18:19:24 2025 GMT Subject: CN=6865782d-2243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e0:ae:3e:fe:67:3d:41:1b:30:af:c0:ad:8b: 89:ac:0b:81:01:e3:7c:02:23:1e:e5:7c:a4:5b:45: 87:cf:3a:a3:4f:a2:aa:a0:96:be:5d:71:a9:a2:25: 33:ba:30:ad:38:30:65:d7:6c:a9:4c:2a:22:4a:24: f4:9a:97:fe:9b:0f:68:74:9a:32:32:ee:ea:80:21: ab:61:34:2f:07:06:e2:4c:3d:6e:a6:86:69:8a:36: af:5c:09:f6:89:01:a2:b1:4f:5a:ab:dc:43:95:9f: 1e:9e:b4:59:63:18:23:9d:86:4e:9d:0b:73:1a:6d: 44:0d:fa:a7:6c:e0:84:12:d2:3a:18:63:b9:98:84: 16:73:5e:08:42:07:e9:5d:bd:c1:63:46:7c:aa:d8: 7e:f4:d3:de:c6:38:70:90:6a:76:21:49:7b:4a:52: df:47:d9:8e:d8:15:30:01:21:58:c1:2f:5f:79:3c: d6:b6:3b:22:fd:2c:00:fb:1c:ea:de:d6:7f:9f:db: a9:2b:c7:3c:1f:35:f7:43:cc:4a:db:21:64:8d:36: a3:6a:cc:93:87:83:d0:bf:b1:d2:6b:16:98:3e:ea: f0:83:91:51:aa:ff:30:67:4c:b7:8c:b2:af:f2:81: da:83:fe:ac:6b:ec:57:b9:07:ed:67:f6:89:fc:58: 2a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DE:31:B8:83:7E:3F:7E:1B:CD:A8:81:BE:B3:FC:AE:C5:BB:47:9B X509v3 Authority Key Identifier: keyid:DA:3C:91:F8:F1:55:D9:0B:99:87:C9:13:B2:4C:4F:9E:54:45:E9:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2jyR-PFV2QuZh8kTskxPnlRF6cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E70ED/E6277A3EE9E111E9A5987E1FC4F9AE02/2jyR-PFV2QuZh8kTskxPnlRF6cw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ce:6e:7e:41:90:48:66:c8:39:6b:2b:eb:bf:a3:9f:4a:07: f3:18:35:20:a7:97:63:70:05:f4:5a:c1:69:32:f4:da:99:c2: 4e:fd:a9:16:9d:2f:34:c2:a2:05:99:90:6a:69:b8:de:c4:bc: 38:ce:eb:ee:9e:cb:3e:8c:62:04:65:c0:93:73:18:98:06:b6: ec:47:b8:65:71:5b:8c:1b:8d:00:26:b7:41:ee:7f:98:04:48: 99:de:99:53:2d:4d:44:a8:54:98:27:c4:fa:cd:1d:de:d3:d9: 6c:df:09:da:c5:4a:40:82:0c:ec:07:d1:c0:52:d9:e8:3a:40: 90:f2:dc:20:bc:13:73:d3:83:14:9e:97:6d:a5:7d:3b:fc:75: 9d:96:d7:f5:bf:73:28:4f:32:58:36:13:7b:0f:35:c9:5a:04: ae:9f:d0:d3:53:3a:b4:73:67:e5:23:84:97:d0:af:cc:44:f7: f3:b6:6f:c6:ce:a6:30:5f:aa:d6:18:0f:77:e3:07:db:66:c2: a4:99:b8:bc:5d:af:35:8c:68:23:36:80:b5:c2:a9:5f:c3:e7: 3d:db:92:e5:10:ad:33:11:ae:ba:88:8d:7e:e3:ab:b1:cd:3e: 45:79:ad:c5:41:0d:c8:30:5a:d3:ec:dc:02:cf:30:d4:50:36: 9c:46:b4:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwRUQxMTAvBgNVBAUTKERBM0M5MUY4RjE1NUQ5MEI5OTg3QzkxM0IyNEM0RjlF NTQ0NUU5Q0MwHhcNMjUwNzAyMTgxOTI0WhcNMjUwNzA5MTgxOTI0WjAYMRYwFAYD VQQDEw02ODY1NzgyZC0yMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouCuPv5nPUEbMK/ArYuJrAuBAeN8AiMe5XykW0WHzzqjT6KqoJa+XXGpoiUz ujCtODBl12ypTCoiSiT0mpf+mw9odJoyMu7qgCGrYTQvBwbiTD1upoZpijavXAn2 iQGisU9aq9xDlZ8enrRZYxgjnYZOnQtzGm1EDfqnbOCEEtI6GGO5mIQWc14IQgfp Xb3BY0Z8qth+9NPexjhwkGp2IUl7SlLfR9mO2BUwASFYwS9feTzWtjsi/SwA+xzq 3tZ/n9upK8c8HzX3Q8xK2yFkjTajasyTh4PQv7HSaxaYPurwg5FRqv8wZ0y3jLKv 8oHag/6sa+xXuQftZ/aJ/FgqtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/eMbiD fj9+G82ogb6z/K7Fu0ebMB8GA1UdIwQYMBaAFNo8kfjxVdkLmYfJE7JMT55URenM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzBFRC9FNjI3N0EzRUU5 RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJRdVpoOGtUc2t4UG5sUkY2 Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJqeVItUEZWMlF1Wmg4a1Rza3hQbmxSRjZjdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzBFRC9FNjI3N0EzRUU5RTExMUU5QTU5ODdFMUZDNEY5QUUwMi8yanlSLVBGVjJR dVpoOGtUc2t4UG5sUkY2Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyzm5+QZBIZsg5ayvrv6OfSgfzGDUgp5djcAX0WsFpMvTamcJO/akW nS80wqIFmZBqabjexLw4zuvunss+jGIEZcCTcxiYBrbsR7hlcVuMG40AJrdB7n+Y BEiZ3plTLU1EqFSYJ8T6zR3e09ls3wnaxUpAggzsB9HAUtnoOkCQ8twgvBNz04MU npdtpX07/HWdltf1v3MoTzJYNhN7DzXJWgSun9DTUzq0c2flI4SX0K/MRPfztm/G zqYwX6rWGA934wfbZsKkmbi8Xa81jGgjNoC1wqlfw+c925LlEK0zEa66iI1+46ux zT5Fea3FQQ3IMFrT7NwCzzDUUDacRrRl -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:29 2025 by rpki-client