$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft File: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft (raw, json) Hash identifier: wokYcJSc2cVGg5wyaJfPsIM70F0I1DtdQT+Jj1xIhI0= Subject key identifier: E4:E1:0A:9A:FD:2E:95:1F:DE:A0:11:34:E3:51:1E:48:A9:77:82:1A Authority key identifier: D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 Certificate issuer: /CN=A91F89A2/serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft Manifest number: 010A Signing time: Thu 03 Jul 2025 05:12:41 +0000 Manifest this update: Thu 03 Jul 2025 05:12:40 +0000 Manifest next update: Thu 10 Jul 2025 05:12:40 +0000 Files and hashes: 1: 2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl (hash: Ezq/yMq1A35RswQ7N2YkDE6tQD51nLbwrvVYShHxRSg=) 2: 6C363C0CF85911EE9EAE731BC4F9AE02.roa (hash: G8LAWFDM7ySLTe/ZJTkJCLPXRoKFmaYaIusDW3bZoi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=D8FC795B63CC42573FD5DB44F0A8386C8D643B84 Validity Not Before: Jul 3 05:12:40 2025 GMT Not After : Jul 10 05:12:40 2025 GMT Subject: CN=68661149-a14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6d:f6:e7:d0:fe:c3:67:ee:fc:bb:d2:aa:1f: 78:ff:4d:9a:f8:a0:a0:bd:d3:04:bd:59:4e:79:36: b9:f0:fc:ab:aa:52:58:9c:0a:35:d5:77:5e:9e:80: e7:19:3f:0b:c0:fe:d5:e1:93:8c:00:fd:b2:6f:5f: 66:fe:f2:92:0b:58:7e:bf:17:bb:39:ea:62:c0:ea: 2c:ce:e7:36:fe:4d:3c:78:a1:5d:8f:4b:e6:25:89: 3a:24:f1:e3:23:fa:45:e0:44:7d:1f:33:52:22:28: a9:e2:6b:2e:80:cc:f5:c0:6c:9d:dd:4f:c9:d5:bf: d3:60:73:68:a8:e5:01:17:9a:2b:c1:12:60:01:85: da:31:13:c5:c9:1a:48:4e:09:30:e0:45:da:ed:5d: e2:11:da:0d:37:f2:71:82:01:d8:63:36:88:aa:14: 15:92:76:47:25:90:37:56:e3:3f:18:57:78:03:cb: e7:59:b8:3d:19:10:43:fa:93:fc:86:0e:7f:ce:e9: ee:2c:a0:e6:90:9b:37:f5:8e:a5:4d:fc:e3:68:2d: 85:ff:bc:58:ce:98:0b:49:88:e8:1d:44:13:84:2c: 81:0e:b9:f4:6b:c4:e4:75:eb:c4:6c:09:6a:11:3b: e4:3c:c6:6c:06:39:34:5a:f8:02:b3:e4:88:26:20: 09:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:0A:9A:FD:2E:95:1F:DE:A0:11:34:E3:51:1E:48:A9:77:82:1A X509v3 Authority Key Identifier: keyid:D8:FC:79:5B:63:CC:42:57:3F:D5:DB:44:F0:A8:38:6C:8D:64:3B:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/B396F3C0C54111EEABC2C385C4F9AE02/2Px5W2PMQlc_1dtE8Kg4bI1kO4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e7:f3:7c:3d:cc:16:51:96:ab:b2:61:3a:ed:9b:46:9b:fb: 2b:da:1e:00:76:5a:bd:47:00:03:78:8d:0c:79:08:80:ff:f1: 70:df:48:b8:40:cc:19:93:ea:14:0b:77:e1:17:90:26:3b:4e: d0:17:2d:0f:a4:37:c0:94:1a:6d:3c:86:67:74:f5:c3:0c:a5: fb:ff:08:d0:ac:62:e3:db:4a:94:71:35:08:c5:31:77:b7:a3: 35:a4:33:68:6a:d4:98:4d:ff:8b:26:95:44:f8:bd:78:c3:21: ec:2e:f6:86:6f:f3:ee:92:8b:c0:ba:46:f0:6a:67:03:dd:93: ae:cf:94:29:c4:6e:07:e9:5c:fa:6b:89:c3:0e:b3:39:0f:ea: 43:04:cf:11:79:13:66:99:66:39:66:a9:4f:37:b1:bd:4a:f1: d4:8c:d4:fd:c3:99:3c:86:cf:e8:85:7a:15:f2:7a:90:53:5b: c8:56:c5:10:e5:00:d6:db:53:25:e1:91:ba:ef:68:da:50:46: 4d:03:fe:c8:81:67:74:79:ba:85:58:d7:55:30:a1:4d:0d:8e: 24:a3:0f:67:3e:8b:51:e4:94:e7:72:4c:cd:e8:1c:c9:fa:24: aa:0e:a5:72:c7:ea:e3:6f:9b:b4:3d:8f:dc:55:90:2c:c1:14: f3:4c:9e:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKEQ4RkM3OTVCNjNDQzQyNTczRkQ1REI0NEYwQTgzODZD OEQ2NDNCODQwHhcNMjUwNzAzMDUxMjQwWhcNMjUwNzEwMDUxMjQwWjAYMRYwFAYD VQQDEw02ODY2MTE0OS1hMTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3G3259D+w2fu/LvSqh94/02a+KCgvdMEvVlOeTa58PyrqlJYnAo11XdenoDn GT8LwP7V4ZOMAP2yb19m/vKSC1h+vxe7OepiwOoszuc2/k08eKFdj0vmJYk6JPHj I/pF4ER9HzNSIiip4msugMz1wGyd3U/J1b/TYHNoqOUBF5orwRJgAYXaMRPFyRpI Tgkw4EXa7V3iEdoNN/JxggHYYzaIqhQVknZHJZA3VuM/GFd4A8vnWbg9GRBD+pP8 hg5/zunuLKDmkJs39Y6lTfzjaC2F/7xYzpgLSYjoHUQThCyBDrn0a8TkdevEbAlq ETvkPMZsBjk0WvgCs+SIJiAJ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOThCpr9 LpUf3qARNONRHkipd4IaMB8GA1UdIwQYMBaAFNj8eVtjzEJXP9XbRPCoOGyNZDuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CMzk2RjNDMEM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFsY18xZHRFOEtnNGJJMWtP NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJQeDVXMlBNUWxjXzFkdEU4S2c0Ykkxa080US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CMzk2RjNDMEM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi8yUHg1VzJQTVFs Y18xZHRFOEtnNGJJMWtPNFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB85/N8PcwWUZarsmE67ZtGm/sr2h4Adlq9RwADeI0MeQiA//Fw30i4 QMwZk+oUC3fhF5AmO07QFy0PpDfAlBptPIZndPXDDKX7/wjQrGLj20qUcTUIxTF3 t6M1pDNoatSYTf+LJpVE+L14wyHsLvaGb/PukovAukbwamcD3ZOuz5QpxG4H6Vz6 a4nDDrM5D+pDBM8ReRNmmWY5ZqlPN7G9SvHUjNT9w5k8hs/ohXoV8nqQU1vIVsUQ 5QDW21Ml4ZG672jaUEZNA/7IgWd0ebqFWNdVMKFNDY4kow9nPotR5JTnckzN6BzJ +iSqDqVyx+rjb5u0PY/cVZAswRTzTJ5V -----END CERTIFICATE-----Generated at Thu Jul 3 23:16:04 2025 by rpki-client