$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft File: 2CIvXKRzliJE_BNBFXEOvtXjlWA.mft (raw, json) Hash identifier: UK+Usyq70q0ymxMX4Bz8wJUoLDTm2h1QhqS1UGY3ZT0= Subject key identifier: BF:0E:78:76:36:68:BC:9C:B9:C9:CC:7B:FE:EF:6B:78:88:4E:74:08 Authority key identifier: D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 Certificate issuer: /CN=A9119624/serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Certificate serial: 0BF9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft Manifest number: 0BF3 Signing time: Thu 24 Apr 2025 17:58:39 +0000 Manifest this update: Thu 24 Apr 2025 17:58:38 +0000 Manifest next update: Thu 01 May 2025 17:58:38 +0000 Files and hashes: 1: 2CIvXKRzliJE_BNBFXEOvtXjlWA.crl (hash: 36t8SJpey5F43RIcvpal4RTc80+qmVEQef0gRysHtec=) 2: A4049C06213E11EAAA89A95DC4F9AE02.roa (hash: fJj5V7B0tj2U/amxOYn7MfT1h8cR0RvRgHTxKdHbOM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3065 (0xbf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=D8222F5CA473962244FC134115710EBED5E39560 Validity Not Before: Apr 24 17:58:38 2025 GMT Not After : May 1 17:58:38 2025 GMT Subject: CN=680a7bcf-59f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:82:35:65:79:4e:09:63:6a:56:c6:47:3e:33: fc:d9:ba:f3:87:71:51:3e:9a:3f:ca:e4:17:01:ac: 44:bf:cd:75:8e:e7:1f:11:ed:3e:4a:e5:27:e4:46: ee:82:17:2b:ef:56:a4:c4:79:52:17:ce:32:96:f5: ec:4f:0c:89:0f:e3:c5:b6:47:85:4b:b3:e5:30:b0: 77:41:19:0f:4d:99:26:2d:49:ac:a7:82:b3:19:80: fe:a7:30:e0:38:f3:34:e0:e6:91:2c:2c:78:7d:1b: 4b:2a:71:4b:06:fe:ad:b4:3b:c4:b0:ad:8f:91:f7: c3:ce:fd:fe:66:f2:71:bc:cc:2b:da:93:0b:0f:a3: be:9e:8b:0e:d4:e4:cd:45:fb:d4:3b:5d:2b:be:f6: 87:72:c2:af:d2:25:4b:76:44:55:80:5e:06:4d:68: 19:fe:c1:12:06:91:b3:7f:61:4f:89:b4:4e:bd:25: c8:ad:7d:64:14:41:a5:71:0d:0c:f5:04:b9:ff:88: d7:ac:c3:6e:c4:f2:31:fd:01:f0:18:ae:40:ff:19: e9:ec:ee:ae:d3:18:8e:77:25:12:36:2a:3a:36:14: b4:7a:54:e7:f8:55:f0:9c:d5:1a:02:61:5d:bc:cd: 66:c3:f7:18:ce:1d:52:6e:d4:83:9c:fa:39:37:c3: d6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0E:78:76:36:68:BC:9C:B9:C9:CC:7B:FE:EF:6B:78:88:4E:74:08 X509v3 Authority Key Identifier: keyid:D8:22:2F:5C:A4:73:96:22:44:FC:13:41:15:71:0E:BE:D5:E3:95:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2CIvXKRzliJE_BNBFXEOvtXjlWA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/C694823610E011EA9BD1A55DC4F9AE02/2CIvXKRzliJE_BNBFXEOvtXjlWA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:31:7e:1f:ed:b8:d4:0e:69:91:c1:d1:5b:ad:2d:1a:19:9a: 4f:cf:35:7f:a2:f6:3e:59:6d:1a:b0:14:53:89:e6:05:a0:3c: f4:35:dd:f9:54:ca:c4:e0:65:bb:5b:99:55:75:14:ac:90:29: 5e:dd:6f:be:a8:06:0a:0d:9b:df:5b:58:f6:8e:47:54:c6:eb: b7:df:fa:72:83:67:cd:ed:3f:3e:76:58:9b:23:ef:60:a2:ef: ea:50:1c:7f:b8:5c:77:1c:c7:7c:f1:37:51:f7:70:32:96:4b: 70:81:60:0f:a6:e7:b9:6e:a1:75:a8:ff:a4:0d:06:1c:e9:3a: 61:1e:9a:07:fe:7a:81:3a:d1:51:e3:d6:da:ec:81:45:70:50: 1b:48:6e:ab:84:e1:96:11:60:6e:c7:e3:0d:be:74:a3:ae:0d: 58:97:72:e0:e1:cf:08:21:d2:c9:fa:71:2e:ca:ac:4d:ab:a6: 82:9f:72:75:4b:df:87:23:f4:f0:76:a9:ab:0d:ea:24:86:1b: f1:b9:44:c3:c8:8c:2d:f0:30:6a:41:b9:5b:53:4b:cb:58:77: 24:87:6c:4b:97:48:5b:44:2a:67:a8:df:cc:5c:06:d3:9a:e4: 68:46:71:32:6d:f3:9d:c8:c3:d1:35:97:1f:8c:fe:2c:54:e9: 0a:b7:28:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEQ4MjIyRjVDQTQ3Mzk2MjI0NEZDMTM0MTE1NzEwRUJF RDVFMzk1NjAwHhcNMjUwNDI0MTc1ODM4WhcNMjUwNTAxMTc1ODM4WjAYMRYwFAYD VQQDEw02ODBhN2JjZi01OWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo4I1ZXlOCWNqVsZHPjP82brzh3FRPpo/yuQXAaxEv811jucfEe0+SuUn5Ebu ghcr71akxHlSF84ylvXsTwyJD+PFtkeFS7PlMLB3QRkPTZkmLUmsp4KzGYD+pzDg OPM04OaRLCx4fRtLKnFLBv6ttDvEsK2PkffDzv3+ZvJxvMwr2pMLD6O+nosO1OTN RfvUO10rvvaHcsKv0iVLdkRVgF4GTWgZ/sESBpGzf2FPibROvSXIrX1kFEGlcQ0M 9QS5/4jXrMNuxPIx/QHwGK5A/xnp7O6u0xiOdyUSNio6NhS0elTn+FXwnNUaAmFd vM1mw/cYzh1SbtSDnPo5N8PWkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8OeHY2 aLycucnMe/7va3iITnQIMB8GA1UdIwQYMBaAFNgiL1ykc5YiRPwTQRVxDr7V45Vg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC9DNjk0ODIzNjEw RTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxpSkVfQk5CRlhFT3Z0WGps V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJDSXZYS1J6bGlKRV9CTkJGWEVPdnRYamxXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC9DNjk0ODIzNjEwRTAxMUVBOUJEMUE1NURDNEY5QUUwMi8yQ0l2WEtSemxp SkVfQk5CRlhFT3Z0WGpsV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJMX4f7bjUDmmRwdFbrS0aGZpPzzV/ovY+WW0asBRTieYFoDz0Nd35 VMrE4GW7W5lVdRSskCle3W++qAYKDZvfW1j2jkdUxuu33/pyg2fN7T8+dlibI+9g ou/qUBx/uFx3HMd88TdR93AylktwgWAPpue5bqF1qP+kDQYc6TphHpoH/nqBOtFR 49ba7IFFcFAbSG6rhOGWEWBux+MNvnSjrg1Yl3Lg4c8IIdLJ+nEuyqxNq6aCn3J1 S9+HI/TwdqmrDeokhhvxuUTDyIwt8DBqQblbU0vLWHckh2xLl0hbRCpnqN/MXAbT muRoRnEybfOdyMPRNZcfjP4sVOkKtyiT -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:08 2025 by rpki-client