$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft File: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft (raw, json) Hash identifier: B3HWxse/TLVbcFBsORgQ7ae0O/q4x9vLufcvHI42t38= Subject key identifier: 06:CA:E6:0A:DE:63:A7:57:81:8B:42:55:0A:22:29:BC:82:40:19:5B Authority key identifier: A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 Certificate issuer: /CN=A912BE25/serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Certificate serial: 02E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft Manifest number: 02D4 Signing time: Thu 01 May 2025 01:04:16 +0000 Manifest this update: Thu 01 May 2025 01:04:16 +0000 Manifest next update: Thu 08 May 2025 01:04:16 +0000 Files and hashes: 1: p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl (hash: bmQv6+NR4z6eFQFFTpteZMpZfo6ZvdGdqp1pmsXH48s=) 2: 5C236C16552611EFA2BEAC53C4F9AE02.roa (hash: iZ6c16QJfgq60QRYgFglwDZaB7UfKpWeC5/RltitIB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 743 (0x2e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE25, serialNumber=A760ADE0C9D05EE679EC304122BC3350C8D2A439 Validity Not Before: May 1 01:04:16 2025 GMT Not After : May 8 01:04:16 2025 GMT Subject: CN=6812c890-7165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:35:dc:6a:14:74:d9:56:ba:19:43:98:56: 94:05:b5:bb:10:26:19:e0:0d:22:69:82:7a:f3:8d: 67:77:0b:cd:67:55:fa:8c:75:0b:25:d3:71:64:20: 34:d8:1d:ba:7e:eb:06:04:f0:7e:cc:f1:38:9b:25: 24:ee:c4:42:f9:1e:5a:73:e6:73:bf:90:57:4a:a8: c5:b9:ae:61:4a:7f:5b:6c:91:fa:ba:72:3a:38:4a: ea:ae:6c:42:74:26:58:be:67:4c:64:3d:e7:53:71: a1:ff:de:09:d4:4d:a5:8b:f8:72:53:d4:0e:fc:76: 09:0e:d5:2f:fe:e6:f9:7c:b3:14:09:c5:55:8e:b8: f9:97:88:46:5c:b9:ff:9c:05:6e:e7:4d:85:75:ef: 50:ea:f4:df:92:9a:ac:1b:2c:12:30:b6:43:31:b9: 89:a6:2b:49:ff:e1:7a:a7:5a:aa:c3:ae:3b:bf:6f: 3a:79:c4:01:76:0b:eb:e9:02:ca:df:4b:46:54:c5: 5a:82:63:8a:28:9f:6b:7c:19:8b:d6:ba:0e:e9:50: 24:57:fe:f5:a6:0b:6e:59:6d:dc:eb:3e:d6:9f:f1: 0d:9f:22:46:a0:a5:93:f4:75:71:04:cf:3c:6d:84: 4a:a7:58:3a:58:e0:72:8c:aa:2c:dc:b7:1a:40:07: 13:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CA:E6:0A:DE:63:A7:57:81:8B:42:55:0A:22:29:BC:82:40:19:5B X509v3 Authority Key Identifier: keyid:A7:60:AD:E0:C9:D0:5E:E6:79:EC:30:41:22:BC:33:50:C8:D2:A4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE25/D90526E4EE1111EC95299982C4F9AE02/p2Ct4MnQXuZ57DBBIrwzUMjSpDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7f:19:d5:b2:30:79:31:34:10:05:bf:0d:27:27:c8:d3:3e: 7e:b5:59:bb:47:d8:03:1e:02:d8:ea:4b:cb:04:63:ab:64:58: dc:4d:f4:93:79:49:d4:b4:6d:64:f9:d9:59:29:39:fc:c2:e5: 43:71:68:4d:15:8c:fc:8d:79:a9:e6:33:8e:9a:1b:d5:f4:10: e8:77:29:21:54:e1:f2:21:e9:4f:16:ec:45:26:bd:6d:d6:8a: ba:fe:b6:8d:a1:c2:87:ba:b6:66:bc:b4:b4:ce:84:fb:b2:25: 2f:12:fb:e8:2c:21:90:51:7d:a4:05:e7:ee:04:08:4f:4f:0b: a1:59:83:60:22:43:cc:f7:84:db:fd:cf:c9:7e:62:0a:d1:70: 19:f4:86:28:5f:e6:8e:5e:5d:65:4d:ab:5c:36:26:45:10:aa: 7e:32:4b:a0:d1:83:71:82:21:8f:97:2b:3e:d4:a8:8e:e3:bc: ed:d6:58:ae:53:a4:63:f3:99:50:00:f3:74:b3:8c:56:f3:6a: b6:35:b3:88:4a:b7:17:41:70:4b:a4:ea:0f:a4:c5:c0:2a:6d: b0:21:55:20:58:1c:08:16:aa:91:da:de:8b:d0:a3:4c:9b:a2: cd:75:dd:5d:88:52:a1:14:03:22:14:d0:28:fd:f4:0b:54:00: 06:55:b9:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFMjUxMTAvBgNVBAUTKEE3NjBBREUwQzlEMDVFRTY3OUVDMzA0MTIyQkMzMzUw QzhEMkE0MzkwHhcNMjUwNTAxMDEwNDE2WhcNMjUwNTA4MDEwNDE2WjAYMRYwFAYD VQQDEw02ODEyYzg5MC03MTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygg13GoUdNlWuhlDmFaUBbW7ECYZ4A0iaYJ6841ndwvNZ1X6jHULJdNxZCA0 2B26fusGBPB+zPE4myUk7sRC+R5ac+Zzv5BXSqjFua5hSn9bbJH6unI6OErqrmxC dCZYvmdMZD3nU3Gh/94J1E2li/hyU9QO/HYJDtUv/ub5fLMUCcVVjrj5l4hGXLn/ nAVu502Fde9Q6vTfkpqsGywSMLZDMbmJpitJ/+F6p1qqw647v286ecQBdgvr6QLK 30tGVMVagmOKKJ9rfBmL1roO6VAkV/71pgtuWW3c6z7Wn/ENnyJGoKWT9HVxBM88 bYRKp1g6WOByjKos3LcaQAcTSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbK5gre Y6dXgYtCVQoiKbyCQBlbMB8GA1UdIwQYMBaAFKdgreDJ0F7meewwQSK8M1DI0qQ5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkUyNS9EOTA1MjZFNEVF MTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1WjU3REJCSXJ3elVNalNw RGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AyQ3Q0TW5RWHVaNTdEQkJJcnd6VU1qU3BEay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkUyNS9EOTA1MjZFNEVFMTExMUVDOTUyOTk5ODJDNEY5QUUwMi9wMkN0NE1uUVh1 WjU3REJCSXJ3elVNalNwRGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdfxnVsjB5MTQQBb8NJyfI0z5+tVm7R9gDHgLY6kvLBGOrZFjcTfST eUnUtG1k+dlZKTn8wuVDcWhNFYz8jXmp5jOOmhvV9BDodykhVOHyIelPFuxFJr1t 1oq6/raNocKHurZmvLS0zoT7siUvEvvoLCGQUX2kBefuBAhPTwuhWYNgIkPM94Tb /c/JfmIK0XAZ9IYoX+aOXl1lTatcNiZFEKp+Mkug0YNxgiGPlys+1KiO47zt1liu U6Rj85lQAPN0s4xW82q2NbOISrcXQXBLpOoPpMXAKm2wIVUgWBwIFqqR2t6L0KNM m6LNdd1diFKhFAMiFNAo/fQLVAAGVbk5 -----END CERTIFICATE-----Generated at Fri May 2 13:06:43 2025 by rpki-client