$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft File: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft (raw, json) Hash identifier: aU3txlputNIUue1i9xz3YX3VMrYLkIPUmS6bs1YFjDE= Subject key identifier: 6A:D3:CE:7F:6E:38:11:3B:EC:F5:06:DB:31:FC:73:82:E9:CA:4D:F2 Authority key identifier: D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 Certificate issuer: /CN=A914C4ED/serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft Manifest number: 01C6 Signing time: Fri 25 Apr 2025 00:45:58 +0000 Manifest this update: Fri 25 Apr 2025 00:45:58 +0000 Manifest next update: Fri 02 May 2025 00:45:58 +0000 Files and hashes: 1: 2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl (hash: p1H0loWPqPxQqG2kS2825B43E9yGGf9sGfSrHTzCjdE=) 2: F060FF0E720D11EDA84BE02EC4F9AE02.roa (hash: GlAc5fAZweTglvbASziU5BwBtzuZgb2Uajdg0QEwpgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C4ED, serialNumber=D98529148CBA5DDED3B73D6052EE0516C024C4F3 Validity Not Before: Apr 25 00:45:58 2025 GMT Not After : May 2 00:45:58 2025 GMT Subject: CN=680adb46-eb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:57:81:95:12:1a:ec:fa:e2:a9:09:7a:9c: 5a:56:c6:0a:e8:8a:b4:c2:22:80:37:d4:b5:d0:de: 68:59:65:25:5f:59:a0:2a:15:32:83:4b:91:ff:63: ac:88:da:ec:c6:06:37:9a:1f:aa:a2:52:a2:02:83: 56:31:ba:b5:73:78:9c:4f:c5:53:f8:42:0a:b0:b1: 54:35:72:f5:3c:d3:11:a4:a1:80:35:c8:f4:c0:74: c1:c2:de:0d:63:8a:20:1c:32:6d:e7:cb:42:28:79: 09:10:9f:e1:77:70:ac:af:ab:87:0a:f6:65:07:00: 91:13:13:03:de:3c:36:32:0c:86:eb:65:e4:77:71: 94:52:e7:c2:38:20:9b:46:c8:56:d9:e6:22:7d:29: 70:67:76:4a:a3:97:df:73:fc:0f:4a:33:6a:d5:f9: bd:dd:d2:08:ea:2a:98:1b:9e:d4:27:48:53:a6:ca: b2:72:cb:39:18:91:75:79:ed:ec:e6:b9:c2:cf:13: de:c6:17:b7:7d:7f:04:65:38:fb:93:33:d5:44:ef: 63:8f:a1:18:fe:ae:37:1a:61:a9:ff:e2:4f:5c:75: 89:a7:9a:73:d3:48:0e:71:96:6c:0e:e2:81:ce:5d: c0:f9:d1:b8:fa:3c:98:5e:88:3a:a9:16:f6:e0:d1: 30:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D3:CE:7F:6E:38:11:3B:EC:F5:06:DB:31:FC:73:82:E9:CA:4D:F2 X509v3 Authority Key Identifier: keyid:D9:85:29:14:8C:BA:5D:DE:D3:B7:3D:60:52:EE:05:16:C0:24:C4:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4ED/75984444720D11EDB545E030C4F9AE02/2YUpFIy6Xd7Ttz1gUu4FFsAkxPM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a3:18:58:02:12:6c:5c:38:78:2f:8c:ec:84:fe:f9:dd:c0: 55:21:b0:e6:9f:ce:f6:7f:36:52:3a:22:f6:f0:3d:28:e0:d4: 5c:ed:39:e6:9d:07:b0:95:d6:b6:a9:26:bf:c1:70:d9:57:89: 91:d8:04:21:bd:2c:d9:cb:40:fe:50:30:72:41:12:ac:5b:12: 04:9b:8a:48:2f:76:68:a5:78:98:20:94:e2:55:eb:5e:4c:7f: 50:8b:93:87:30:0b:44:78:ba:ae:b7:4e:47:4c:20:3b:14:23: 4f:d0:d2:c8:6e:c4:46:58:ec:0a:95:b8:c4:f1:47:f8:27:a6: 81:b1:ce:78:e9:41:a7:ab:8e:63:ed:e7:13:18:f2:42:88:59: 0c:33:e6:59:d0:f3:ae:0d:91:bd:29:81:62:34:c6:09:cf:6e: e3:c2:64:aa:3f:5d:5e:ce:01:4a:30:fa:59:a5:8e:05:ca:34: 3e:61:e0:d8:92:6e:27:6e:79:7f:30:a3:54:2c:4b:45:6a:3b: f9:53:c6:5a:fb:ff:0e:2b:c3:6d:58:d4:36:b8:7b:e9:a4:60: db:f4:e8:97:81:d4:b8:ca:66:f7:4c:ee:42:49:c0:6c:16:ea: 52:19:30:a9:36:41:ff:a7:84:40:26:aa:51:19:15:11:2a:12: b0:5c:00:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM0RUQxMTAvBgNVBAUTKEQ5ODUyOTE0OENCQTVEREVEM0I3M0Q2MDUyRUUwNTE2 QzAyNEM0RjMwHhcNMjUwNDI1MDA0NTU4WhcNMjUwNTAyMDA0NTU4WjAYMRYwFAYD VQQDEw02ODBhZGI0Ni1lYjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtipXgZUSGuz64qkJepxaVsYK6Iq0wiKAN9S10N5oWWUlX1mgKhUyg0uR/2Os iNrsxgY3mh+qolKiAoNWMbq1c3icT8VT+EIKsLFUNXL1PNMRpKGANcj0wHTBwt4N Y4ogHDJt58tCKHkJEJ/hd3Csr6uHCvZlBwCRExMD3jw2MgyG62Xkd3GUUufCOCCb RshW2eYifSlwZ3ZKo5ffc/wPSjNq1fm93dII6iqYG57UJ0hTpsqycss5GJF1ee3s 5rnCzxPexhe3fX8EZTj7kzPVRO9jj6EY/q43GmGp/+JPXHWJp5pz00gOcZZsDuKB zl3A+dG4+jyYXog6qRb24NEw5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrTzn9u OBE77PUG2zH8c4Lpyk3yMB8GA1UdIwQYMBaAFNmFKRSMul3e07c9YFLuBRbAJMTz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRFRC83NTk4NDQ0NDcy MEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5NlhkN1R0ejFnVXU0RkZzQWt4 UE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJZVXBGSXk2WGQ3VHR6MWdVdTRGRnNBa3hQTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzRFRC83NTk4NDQ0NDcyMEQxMUVEQjU0NUUwMzBDNEY5QUUwMi8yWVVwRkl5Nlhk N1R0ejFnVXU0RkZzQWt4UE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAToxhYAhJsXDh4L4zshP753cBVIbDmn872fzZSOiL28D0o4NRc7Tnm nQewlda2qSa/wXDZV4mR2AQhvSzZy0D+UDByQRKsWxIEm4pIL3ZopXiYIJTiVete TH9Qi5OHMAtEeLqut05HTCA7FCNP0NLIbsRGWOwKlbjE8Uf4J6aBsc546UGnq45j 7ecTGPJCiFkMM+ZZ0POuDZG9KYFiNMYJz27jwmSqP11ezgFKMPpZpY4FyjQ+YeDY km4nbnl/MKNULEtFajv5U8Za+/8OK8NtWNQ2uHvppGDb9OiXgdS4ymb3TO5CScBs FupSGTCpNkH/p4RAJqpRGRURKhKwXAAh -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:32 2025 by rpki-client