$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft File: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json) Hash identifier: 6uYg0azSg80dUd4UEHkL9jMkQa/fB2kA0eFgsV26cVs= Subject key identifier: 5B:BA:67:A1:EC:BD:81:3E:0F:1F:BF:5B:4B:07:8A:AB:FB:95:6E:C7 Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 Certificate issuer: /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Certificate serial: 0424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft Manifest number: 0423 Signing time: Fri 25 Apr 2025 00:07:41 +0000 Manifest this update: Fri 25 Apr 2025 00:07:41 +0000 Manifest next update: Fri 02 May 2025 00:07:41 +0000 Files and hashes: 1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: Jgn/NIBXVHK4wk5EfA4uQlU7Z6kblC7PyygbR/1Icls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4 Validity Not Before: Apr 25 00:07:41 2025 GMT Not After : May 2 00:07:41 2025 GMT Subject: CN=680ad24d-5f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5d:5b:c1:32:d3:74:7c:69:33:3a:9a:c1:88: 44:fe:4f:6b:79:ce:cc:bd:8a:5b:89:b4:cd:83:3b: 66:e8:19:e3:de:9b:d1:6f:04:7e:e1:b3:38:6d:fb: 2a:e9:ca:97:2a:7f:4c:9a:1b:c2:14:a1:59:52:2e: 7d:78:a5:c5:b5:eb:8d:41:71:f9:7f:4a:55:86:f4: 18:4f:e8:12:50:89:67:91:eb:a4:27:6b:94:af:b9: 52:84:f5:be:5d:85:61:d8:bb:1d:bc:1c:b1:22:cf: ee:13:1f:8c:df:aa:ec:83:7b:f6:6f:5b:4e:ec:e9: c5:9a:a4:5f:5f:37:95:5b:6b:58:db:db:1c:99:ed: 55:cd:52:a5:68:51:4d:74:58:f2:a6:f4:9d:26:82: 5d:93:ad:a4:8f:9c:9e:40:c2:04:eb:26:c6:85:36: 68:cb:64:bc:7d:44:7a:2f:db:4d:dc:48:2c:12:23: 55:a4:36:2b:2c:96:89:47:59:e2:41:3f:9c:df:2a: 9d:3d:4f:b1:94:e7:15:0e:f8:47:fe:ec:98:54:de: 43:63:a6:87:e5:1e:ee:9a:25:e2:7e:ec:9a:56:00: 74:ca:24:ca:fc:2a:62:1b:a5:8d:3f:5d:d3:f7:be: 94:1b:b5:1f:70:e6:49:15:bc:99:5d:8a:74:31:0b: ac:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:67:A1:EC:BD:81:3E:0F:1F:BF:5B:4B:07:8A:AB:FB:95:6E:C7 X509v3 Authority Key Identifier: keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:e5:04:61:06:95:ce:89:eb:44:f2:21:86:79:16:92:a0:8b: 09:9e:2e:b9:70:5f:58:41:9a:7f:f6:10:0b:14:11:03:67:cb: 53:b2:95:9c:aa:35:d9:0e:9b:ae:1e:e2:9b:d6:e8:17:cc:50: 6a:8a:08:9b:7d:6c:49:ba:a8:ae:86:0f:82:70:c2:6f:a4:47: 38:36:99:af:fb:d4:de:4e:f4:7c:ff:b0:a3:2d:c0:f8:1a:ac: eb:22:aa:d4:96:0e:41:c9:56:90:a1:e2:ea:6c:ca:4e:95:1d: 9c:88:3e:28:71:f2:0e:17:d9:f1:dd:8a:52:6d:9c:93:55:05: 64:f7:17:81:44:b1:df:a8:cf:18:2b:80:31:a4:f8:e3:1e:d7: aa:6e:ef:40:91:20:1e:8b:ca:3b:0c:5e:7b:2e:e9:70:c8:94: 4c:81:0e:fa:89:4b:18:12:86:e7:e3:59:cf:ee:d3:c5:09:f4: b4:44:68:78:1b:10:da:fa:bc:1c:cb:92:a5:34:87:0f:c4:5f: 15:8c:40:ad:06:2b:d3:8e:0c:ad:d1:94:1c:fb:b0:24:af:22: 08:58:de:3e:12:74:5b:f3:ca:a2:86:47:35:69:7c:e7:76:b2: 68:50:d9:d6:1e:b0:6a:a5:c1:d2:61:0c:ee:b0:2e:27:92:7f: 08:ba:e9:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4 MUMwNkIyRTQwHhcNMjUwNDI1MDAwNzQxWhcNMjUwNTAyMDAwNzQxWjAYMRYwFAYD VQQDEw02ODBhZDI0ZC01Zjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtF1bwTLTdHxpMzqawYhE/k9rec7MvYpbibTNgztm6Bnj3pvRbwR+4bM4bfsq 6cqXKn9MmhvCFKFZUi59eKXFteuNQXH5f0pVhvQYT+gSUIlnkeukJ2uUr7lShPW+ XYVh2LsdvByxIs/uEx+M36rsg3v2b1tO7OnFmqRfXzeVW2tY29scme1VzVKlaFFN dFjypvSdJoJdk62kj5yeQMIE6ybGhTZoy2S8fUR6L9tN3EgsEiNVpDYrLJaJR1ni QT+c3yqdPU+xlOcVDvhH/uyYVN5DY6aH5R7umiXifuyaVgB0yiTK/CpiG6WNP13T 976UG7UfcOZJFbyZXYp0MQusgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu6Z6Hs vYE+Dx+/W0sHiqv7lW7HMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2 QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB35QRhBpXOietE8iGGeRaSoIsJni65cF9YQZp/9hALFBEDZ8tTspWc qjXZDpuuHuKb1ugXzFBqigibfWxJuqiuhg+CcMJvpEc4Npmv+9TeTvR8/7CjLcD4 GqzrIqrUlg5ByVaQoeLqbMpOlR2ciD4ocfIOF9nx3YpSbZyTVQVk9xeBRLHfqM8Y K4AxpPjjHteqbu9AkSAei8o7DF57LulwyJRMgQ76iUsYEobn41nP7tPFCfS0RGh4 GxDa+rwcy5KlNIcPxF8VjECtBivTjgyt0ZQc+7AkryIIWN4+EnRb88qihkc1aXzn drJoUNnWHrBqpcHSYQzusC4nkn8Iuun5 -----END CERTIFICATE-----Generated at Sat Apr 26 05:07:05 2025 by rpki-client