$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft File: 2S2tTXbh9aAmwn8tuRxE-62OSHw.mft (raw, json) Hash identifier: ItXa3LwfnhhAnx5Dh7SSfsH6J6lVaMBeJK0oEWMYnu0= Subject key identifier: F1:76:AB:FE:ED:ED:7B:B9:D0:DE:1E:3A:F5:A8:1D:28:4D:9B:8B:1E Authority key identifier: D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C Certificate issuer: /CN=A91F5143/serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Certificate serial: 0E34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft Manifest number: 0E2C Signing time: Wed 02 Jul 2025 18:00:37 +0000 Manifest this update: Wed 02 Jul 2025 18:00:37 +0000 Manifest next update: Wed 09 Jul 2025 18:00:37 +0000 Files and hashes: 1: 2S2tTXbh9aAmwn8tuRxE-62OSHw.crl (hash: +FpY0O1JaIIwUsT18a0960tysCrhre1zr9H4bPhEpI0=) 2: FBBFC6D8A86B11E9A1385758C4F9AE02.roa (hash: 3xSZw8Zvxp55d8XEuNe65AngqRjiPtOfsG/OL3mouOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3636 (0xe34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5143, serialNumber=D92DAD4D76E1F5A026C27F2DB91C44FBAD8E487C Validity Not Before: Jul 2 18:00:37 2025 GMT Not After : Jul 9 18:00:37 2025 GMT Subject: CN=686573c5-84b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:32:dc:86:2e:1a:75:16:e6:ba:d6:70:5b:db: 28:3f:99:5a:12:e1:24:43:58:70:68:a1:ee:f7:a5: 5b:f9:6e:79:74:18:89:85:de:3e:09:b0:96:b3:ef: 18:ff:1c:42:05:37:de:bd:83:04:7f:a9:ae:de:e2: c1:5e:79:40:bc:ed:4c:35:3a:c6:a3:dc:91:6b:6a: eb:ed:f8:ea:9e:c4:41:a0:09:3f:41:e3:36:3a:94: 2b:50:cf:eb:ef:6a:9c:4d:0c:b7:4c:87:28:70:eb: dd:f6:8b:0e:05:23:f4:08:f0:c2:be:1d:1c:e3:8e: 1b:43:ca:06:bb:2b:36:61:d1:b3:c0:22:bb:69:e1: 85:d2:9c:75:3d:46:24:6c:bf:47:b6:9c:e9:c1:01: 3a:5c:15:af:d9:2f:35:3b:7d:eb:b2:e0:64:ee:93: 7d:58:90:ff:d3:9f:88:8c:83:a5:f4:fb:b4:9a:c2: f6:8c:ca:30:66:0b:04:03:38:99:3a:07:6c:09:d8: ce:13:b2:b8:ec:a8:06:24:3d:fe:d8:aa:b9:d3:80: 1b:d4:2a:1f:ec:f7:e6:42:c3:cb:39:ae:7a:0a:ed: f6:0b:ce:f6:8d:6d:96:61:3f:64:ca:32:94:6d:59: 7b:4d:8c:ee:eb:5f:79:5b:08:74:34:2f:95:60:d1: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:76:AB:FE:ED:ED:7B:B9:D0:DE:1E:3A:F5:A8:1D:28:4D:9B:8B:1E X509v3 Authority Key Identifier: keyid:D9:2D:AD:4D:76:E1:F5:A0:26:C2:7F:2D:B9:1C:44:FB:AD:8E:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2S2tTXbh9aAmwn8tuRxE-62OSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5143/0DE9F776A86B11E9A701C856C4F9AE02/2S2tTXbh9aAmwn8tuRxE-62OSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:4c:1a:5f:0a:a0:cc:f9:74:44:7e:2e:36:01:5f:32:21:83: b7:54:c9:95:f2:c1:cb:10:46:92:09:ec:ac:5f:1a:27:30:50: 2c:ca:b0:85:03:c5:a8:71:66:c7:13:67:29:44:10:dc:75:0c: 73:b7:47:bf:60:dd:6f:c3:62:40:10:d8:6c:72:a3:47:cd:e8: a2:e2:76:13:bf:82:aa:66:51:a6:7a:a4:6b:34:dd:29:92:a1: e9:08:83:fb:b2:11:d0:61:f5:a0:2c:ba:58:3b:3d:9f:1c:72: 9e:ba:57:1c:9b:90:1b:ff:05:26:2c:14:aa:44:50:1c:0e:29: 97:73:30:b1:58:21:b7:b2:13:a3:12:ff:f3:d4:39:7e:f0:67: 3d:73:3e:e7:82:63:05:20:1a:92:28:cf:3b:77:9d:41:a9:95: 84:6a:a1:75:5d:7a:ed:f4:44:55:44:2a:98:03:58:6f:c6:d9: 2f:ae:20:7a:7f:10:32:db:64:06:98:ee:ee:15:38:69:57:be: 10:c6:e0:93:69:6a:b3:b5:d0:cb:aa:e0:80:7b:03:dc:11:ba: 34:0d:36:c5:75:3e:95:4b:a9:64:67:31:72:8c:40:73:5e:55: d7:15:c2:94:62:a5:51:85:a3:29:61:7a:c8:3a:62:61:46:4c: d1:05:a3:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUxNDMxMTAvBgNVBAUTKEQ5MkRBRDRENzZFMUY1QTAyNkMyN0YyREI5MUM0NEZC QUQ4RTQ4N0MwHhcNMjUwNzAyMTgwMDM3WhcNMjUwNzA5MTgwMDM3WjAYMRYwFAYD VQQDEw02ODY1NzNjNS04NGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjLchi4adRbmutZwW9soP5laEuEkQ1hwaKHu96Vb+W55dBiJhd4+CbCWs+8Y /xxCBTfevYMEf6mu3uLBXnlAvO1MNTrGo9yRa2rr7fjqnsRBoAk/QeM2OpQrUM/r 72qcTQy3TIcocOvd9osOBSP0CPDCvh0c444bQ8oGuys2YdGzwCK7aeGF0px1PUYk bL9HtpzpwQE6XBWv2S81O33rsuBk7pN9WJD/05+IjIOl9Pu0msL2jMowZgsEAziZ OgdsCdjOE7K47KgGJD3+2Kq504Ab1Cof7PfmQsPLOa56Cu32C872jW2WYT9kyjKU bVl7TYzu6195Wwh0NC+VYNEpRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF2q/7t 7Xu50N4eOvWoHShNm4seMB8GA1UdIwQYMBaAFNktrU124fWgJsJ/LbkcRPutjkh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTE0My8wREU5Rjc3NkE4 NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlhQW13bjh0dVJ4RS02Mk9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJTMnRUWGJoOWFBbXduOHR1UnhFLTYyT1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTE0My8wREU5Rjc3NkE4NkIxMUU5QTcwMUM4NTZDNEY5QUUwMi8yUzJ0VFhiaDlh QW13bjh0dVJ4RS02Mk9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHTBpfCqDM+XREfi42AV8yIYO3VMmV8sHLEEaSCeysXxonMFAsyrCF A8WocWbHE2cpRBDcdQxzt0e/YN1vw2JAENhscqNHzeii4nYTv4KqZlGmeqRrNN0p kqHpCIP7shHQYfWgLLpYOz2fHHKeulccm5Ab/wUmLBSqRFAcDimXczCxWCG3shOj Ev/z1Dl+8Gc9cz7ngmMFIBqSKM87d51BqZWEaqF1XXrt9ERVRCqYA1hvxtkvriB6 fxAy22QGmO7uFThpV74QxuCTaWqztdDLquCAewPcEbo0DTbFdT6VS6lkZzFyjEBz XlXXFcKUYqVRhaMpYXrIOmJhRkzRBaPO -----END CERTIFICATE-----Generated at Thu Jul 3 09:10:08 2025 by rpki-client