$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: EnxSAHLaWdeExc8tfQmb6ccxlw6hv9i2hFL9JqrzT8E= Subject key identifier: 54:1E:B2:49:1A:8F:FE:5A:33:67:A2:E8:7F:BC:B2:84:88:A3:86:5B Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 010B Signing time: Fri 25 Apr 2025 04:04:06 +0000 Manifest this update: Fri 25 Apr 2025 04:04:05 +0000 Manifest next update: Fri 02 May 2025 04:04:05 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: xueEh3QKMARRDweTkc1ZfkjqHO9VSpxjVMN4bbJLht4=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:04:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: Apr 25 04:04:05 2025 GMT Not After : May 2 04:04:05 2025 GMT Subject: CN=680b09b6-32fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:08:13:36:b5:6a:b5:6d:a5:25:be:d1:b0:ac: 6f:02:e4:8a:ee:f0:f7:87:50:eb:b4:95:7b:0b:a2: a9:5a:91:90:23:d0:a5:30:e1:c6:89:11:dc:42:71: 61:d0:54:54:a2:9f:ca:57:5e:c1:23:d3:43:3f:28: b5:d7:63:89:3c:a7:cb:1c:bd:2d:a7:61:09:07:a6: 2c:14:51:c7:20:17:80:ce:db:1c:3d:c2:f6:72:fd: f8:2c:19:1c:2b:69:4c:e6:84:b6:45:25:7a:09:99: 4e:73:ef:eb:ac:db:8a:cf:ce:c2:82:49:49:79:53: a2:87:ca:7b:de:1d:16:f6:ca:c3:f0:69:bd:f4:6f: 9d:45:51:4c:82:ac:c7:09:be:06:29:65:1a:42:8f: 14:eb:93:8c:89:7b:19:5f:8a:3e:86:ca:4b:9b:cb: e7:01:12:3a:04:8b:4f:ab:82:83:9e:01:b4:f7:55: d3:f1:1f:64:64:1e:d0:5e:25:58:a7:d7:78:b0:b5: c8:c7:09:cc:a6:32:f3:4f:71:2d:7e:92:bf:5e:fd: 69:b3:6e:05:02:ec:1c:60:41:90:2b:a1:cc:62:c0: 80:fa:42:5a:13:cf:bf:ea:1d:ce:8e:59:76:3e:6f: 2c:9f:f1:7b:14:26:1e:97:e1:53:9e:52:55:70:bf: f0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1E:B2:49:1A:8F:FE:5A:33:67:A2:E8:7F:BC:B2:84:88:A3:86:5B X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:dd:9b:2f:6d:04:c3:df:ac:d4:f7:b7:94:3c:ec:32:e7:30: 6a:38:a3:2c:26:4b:4b:d5:42:37:68:d0:1c:5e:54:00:7f:7f: 9a:33:ac:ce:a6:94:4e:be:8b:05:5f:90:92:b2:4e:b2:93:ee: d1:0c:39:f5:84:13:b6:2c:ae:c5:98:91:47:c3:cd:86:48:12: f9:4c:14:5e:a0:94:42:7d:27:88:31:0d:1c:4f:1d:90:03:60: 6b:22:80:4f:96:09:97:d0:a2:8c:15:61:7f:ee:25:c6:10:9a: 27:01:2e:90:6d:e2:c8:06:b6:f2:ff:0a:ab:36:a3:2e:4f:13: 7d:a2:c8:4c:72:28:a6:60:32:28:34:fc:14:62:6d:9e:32:4d: ef:14:0e:9a:e0:e8:72:92:09:e8:7c:49:51:b3:91:2f:4f:b1: 82:2a:34:62:4b:eb:fc:ca:fe:ab:1b:d4:27:6b:ab:d4:41:60: 31:23:99:bc:db:c4:7c:50:48:0e:98:87:76:be:c2:c4:a5:2d: aa:fd:ba:50:62:19:96:8d:68:fb:1f:f8:8a:64:54:2e:0d:c8: a8:be:ca:aa:85:f8:11:83:d1:a0:2d:7d:60:5f:54:10:be:c4: df:db:f0:a3:e3:c2:c7:b2:44:e3:d5:2c:06:2a:6d:aa:cb:6e: 91:fe:a9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUwNDI1MDQwNDA1WhcNMjUwNTAyMDQwNDA1WjAYMRYwFAYD VQQDEw02ODBiMDliNi0zMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQgTNrVqtW2lJb7RsKxvAuSK7vD3h1DrtJV7C6KpWpGQI9ClMOHGiRHcQnFh 0FRUop/KV17BI9NDPyi112OJPKfLHL0tp2EJB6YsFFHHIBeAztscPcL2cv34LBkc K2lM5oS2RSV6CZlOc+/rrNuKz87CgklJeVOih8p73h0W9srD8Gm99G+dRVFMgqzH Cb4GKWUaQo8U65OMiXsZX4o+hspLm8vnARI6BItPq4KDngG091XT8R9kZB7QXiVY p9d4sLXIxwnMpjLzT3EtfpK/Xv1ps24FAuwcYEGQK6HMYsCA+kJaE8+/6h3Ojll2 Pm8sn/F7FCYel+FTnlJVcL/wVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQeskka j/5aM2ei6H+8soSIo4ZbMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe3ZsvbQTD36zU97eUPOwy5zBqOKMsJktL1UI3aNAcXlQAf3+aM6zO ppROvosFX5CSsk6yk+7RDDn1hBO2LK7FmJFHw82GSBL5TBReoJRCfSeIMQ0cTx2Q A2BrIoBPlgmX0KKMFWF/7iXGEJonAS6QbeLIBrby/wqrNqMuTxN9oshMciimYDIo NPwUYm2eMk3vFA6a4OhykgnofElRs5EvT7GCKjRiS+v8yv6rG9Qna6vUQWAxI5m8 28R8UEgOmId2vsLEpS2q/bpQYhmWjWj7H/iKZFQuDciovsqqhfgRg9GgLX1gX1QQ vsTf2/Cj48LHskTj1SwGKm2qy26R/qlq -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:47 2025 by rpki-client