$ rpki-client -vvf rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft File: 2QaTkaPngEpuvd-dQfLeTZG9UbM.mft (raw, json) Hash identifier: mKGeIKWG01/lRQAdTbefCUgsiJikna4OxgIdZfWktig= Subject key identifier: E9:DF:E5:02:B1:1A:8F:E7:EA:6D:EA:84:92:DC:B7:59:17:8A:65:7B Authority key identifier: D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 Certificate issuer: /CN=A9125C22/serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Certificate serial: 0666 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft Manifest number: 065C Signing time: Thu 24 Apr 2025 22:14:46 +0000 Manifest this update: Thu 24 Apr 2025 22:14:45 +0000 Manifest next update: Thu 01 May 2025 22:14:45 +0000 Files and hashes: 1: 2QaTkaPngEpuvd-dQfLeTZG9UbM.crl (hash: lmWzh2wKk2CIuqBoGMVpMvXBUwelYPWvVN6f4IczXCo=) 2: 202A51EA52D611EFA0333E23C4F9AE02.roa (hash: jy45pLpGUEHdAvcc7aV1J1N0BlCts0GUmsU/8qKGZrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1638 (0x666) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125C22, serialNumber=D9069391A3E7804A6EBDDF9D41F2DE4D91BD51B3 Validity Not Before: Apr 24 22:14:45 2025 GMT Not After : May 1 22:14:45 2025 GMT Subject: CN=680ab7d5-e51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:16:d3:4f:fb:76:8c:1c:ee:f4:c0:d1:c3:69: 52:7c:d0:d6:52:0b:a2:20:d6:b7:4c:4b:37:c0:f3: 4c:a7:79:7f:e1:81:59:63:49:1d:eb:04:65:e0:69: 41:d9:8b:03:59:cf:b9:66:5f:f3:b7:52:ca:41:5e: 17:09:cc:6b:6b:af:a1:5f:80:53:cc:7b:3d:53:c0: ea:06:4a:de:e3:a9:96:9b:a9:15:b6:04:84:10:4e: 42:bd:06:e4:2e:da:30:bf:4e:be:3c:45:af:55:e2: be:5d:22:58:91:a9:67:03:e2:1c:c7:b7:dd:f8:bb: 8a:89:25:3d:3d:6d:2e:76:b0:54:16:c0:79:30:97: be:13:3a:82:34:63:75:4f:03:62:9b:b6:6b:b8:d9: 17:0e:8e:11:59:ad:ed:94:52:4b:46:12:e0:e8:9e: 18:e8:17:f6:e9:bf:2a:30:25:53:1d:ca:d6:85:83: a4:81:f2:c8:e3:d8:0c:3e:08:35:a8:c2:fb:dd:86: 0d:2a:63:fc:a7:24:1e:7b:30:c4:0f:f5:d4:8b:bf: 00:a7:ca:80:a8:df:e8:39:d2:db:8e:b8:0f:39:64: 64:ea:03:7c:d3:75:32:89:dc:72:c6:ef:42:1d:b1: 01:4b:95:0d:54:f9:9e:58:aa:a9:c7:1d:4e:bc:68: 73:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DF:E5:02:B1:1A:8F:E7:EA:6D:EA:84:92:DC:B7:59:17:8A:65:7B X509v3 Authority Key Identifier: keyid:D9:06:93:91:A3:E7:80:4A:6E:BD:DF:9D:41:F2:DE:4D:91:BD:51:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QaTkaPngEpuvd-dQfLeTZG9UbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/045695B87FAE11EB977B5335C4F9AE02/2QaTkaPngEpuvd-dQfLeTZG9UbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:72:2f:dd:a7:ff:d6:3a:16:1c:5e:76:ff:3e:bf:71:84:31: fc:c5:03:e2:6c:f9:70:5b:fb:6e:1d:a2:bc:b3:3f:e1:b5:87: 2e:a3:5a:1e:9f:59:2c:68:49:a5:e8:e4:03:05:a2:08:4e:01: e7:54:85:fa:56:a5:6d:7c:8b:75:17:6a:55:24:f1:e3:12:10: 5e:7d:eb:f0:f3:93:95:a0:a2:d4:2f:cf:fa:db:82:71:1d:aa: e4:b3:f8:68:dd:9e:24:e0:54:64:17:db:50:12:7e:b1:d9:70: b5:06:66:8a:0c:2e:cc:b1:ac:cb:39:f5:21:b8:7b:e3:ba:4d: 34:60:8c:87:6c:31:67:3b:e5:a8:1c:d5:ad:09:88:e4:c1:98: 1c:08:fe:2e:51:6c:53:e0:69:17:13:74:31:ac:a8:27:36:1d: 0c:69:be:d4:a6:75:dd:b5:31:3c:18:3d:15:96:7a:6f:37:c7: 21:81:26:e6:ec:e6:0b:93:08:55:ad:9a:de:ca:82:31:01:4c: d7:57:c7:eb:c3:ce:2d:fb:32:9f:05:64:50:07:91:b5:53:c0: 42:00:f7:a9:1c:07:f3:bf:36:d1:7c:93:c7:29:7f:09:05:7d: 84:89:03:7a:ab:5b:5d:64:d9:3b:bc:29:92:93:f1:aa:c6:81: fc:1a:01:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjVDMjIxMTAvBgNVBAUTKEQ5MDY5MzkxQTNFNzgwNEE2RUJEREY5RDQxRjJERTRE OTFCRDUxQjMwHhcNMjUwNDI0MjIxNDQ1WhcNMjUwNTAxMjIxNDQ1WjAYMRYwFAYD VQQDEw02ODBhYjdkNS1lNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5hbTT/t2jBzu9MDRw2lSfNDWUguiINa3TEs3wPNMp3l/4YFZY0kd6wRl4GlB 2YsDWc+5Zl/zt1LKQV4XCcxra6+hX4BTzHs9U8DqBkre46mWm6kVtgSEEE5CvQbk Ltowv06+PEWvVeK+XSJYkalnA+Icx7fd+LuKiSU9PW0udrBUFsB5MJe+EzqCNGN1 TwNim7ZruNkXDo4RWa3tlFJLRhLg6J4Y6Bf26b8qMCVTHcrWhYOkgfLI49gMPgg1 qML73YYNKmP8pyQeezDED/XUi78Ap8qAqN/oOdLbjrgPOWRk6gN803Uyidxyxu9C HbEBS5UNVPmeWKqpxx1OvGhzHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnf5QKx Go/n6m3qhJLct1kXimV7MB8GA1UdIwQYMBaAFNkGk5Gj54BKbr3fnUHy3k2RvVGz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNUMyMi8wNDU2OTVCODdG QUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdFcHV2ZC1kUWZMZVRaRzlV Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJRYVRrYVBuZ0VwdXZkLWRRZkxlVFpHOVViTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NUMyMi8wNDU2OTVCODdGQUUxMUVCOTc3QjUzMzVDNEY5QUUwMi8yUWFUa2FQbmdF cHV2ZC1kUWZMZVRaRzlVYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIci/dp//WOhYcXnb/Pr9xhDH8xQPibPlwW/tuHaK8sz/htYcuo1oe n1ksaEml6OQDBaIITgHnVIX6VqVtfIt1F2pVJPHjEhBefevw85OVoKLUL8/624Jx Harks/ho3Z4k4FRkF9tQEn6x2XC1BmaKDC7MsazLOfUhuHvjuk00YIyHbDFnO+Wo HNWtCYjkwZgcCP4uUWxT4GkXE3QxrKgnNh0Mab7UpnXdtTE8GD0VlnpvN8chgSbm 7OYLkwhVrZreyoIxAUzXV8frw84t+zKfBWRQB5G1U8BCAPepHAfzvzbRfJPHKX8J BX2EiQN6q1tdZNk7vCmSk/GqxoH8GgGf -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:22 2025 by rpki-client