$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: 2g5H922qKDoY+UyKHrvo1pQgH58Fz68CpFzabzpgkW8= Subject key identifier: C1:DA:DF:DF:52:A0:BB:02:34:6C:94:67:8A:7E:2A:DB:21:7D:BB:9E Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 038C Signing time: Fri 25 Apr 2025 00:35:06 +0000 Manifest this update: Fri 25 Apr 2025 00:35:06 +0000 Manifest next update: Fri 02 May 2025 00:35:06 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: SbXbfZezP1aIpDowcYUerilCIfXXExSlYPKKOShf42g=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:35:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: Apr 25 00:35:06 2025 GMT Not After : May 2 00:35:06 2025 GMT Subject: CN=680ad8ba-fb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:ad:74:17:7a:fe:e1:d5:67:db:e1:33:1f: d9:22:15:d0:05:ad:b7:c0:55:6e:13:ff:07:f4:c1: 63:c8:7d:df:d0:09:9b:53:35:76:47:dd:e1:6c:a9: b0:99:ca:8d:69:63:70:84:69:3c:61:49:1d:b1:65: 58:f6:4d:10:ea:41:74:86:78:fc:22:c7:3e:f6:13: 03:7d:8b:33:47:9e:ac:13:95:ee:1a:64:0f:b1:1a: 56:fc:2e:52:02:c2:b6:56:60:46:b6:5d:29:87:7c: 5e:2f:92:da:f1:c4:98:a3:34:74:b2:5b:1e:f6:6b: 1c:8a:34:cf:dd:e5:5c:1a:b4:c3:6e:cc:67:b0:3f: 15:af:7a:0e:e1:0e:70:10:76:04:4e:6e:2e:0e:b5: cb:90:17:df:b6:ec:78:13:7e:a9:d2:7d:97:d4:51: 1a:e4:6d:14:0f:ae:55:d2:5e:9a:9e:1d:60:49:c2: 96:c8:fa:71:2f:65:72:7b:0f:e6:c7:74:ba:f3:96: aa:af:38:69:88:a4:c0:24:0d:cc:4b:72:c5:ba:67: ad:b5:ff:ed:0d:6d:11:1c:fe:b5:41:de:30:be:64: 1d:cf:54:6f:85:87:c7:d8:97:72:9a:80:04:44:40: a2:1d:9b:f6:ba:aa:d1:0f:5a:3a:10:92:2f:53:3a: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DA:DF:DF:52:A0:BB:02:34:6C:94:67:8A:7E:2A:DB:21:7D:BB:9E X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:3e:2f:9a:1b:1b:50:21:9f:fd:5e:c5:42:37:d7:fd:11:2a: 23:87:1b:b6:24:d2:69:92:81:b3:16:45:7d:60:b8:28:40:3e: a5:f8:f1:a2:f1:99:14:c9:4f:a5:e3:67:5d:af:98:c3:f7:50: b9:34:22:e5:9a:54:4e:64:44:26:03:a4:a0:da:de:3c:e1:95: 8e:e8:3a:3d:7f:29:f8:25:1a:6d:0e:a6:f5:da:b8:af:ea:04: 6d:e1:33:63:79:10:f1:e5:a5:b4:71:59:fc:0c:7a:06:2d:eb: 2f:8e:08:e0:23:5f:33:45:60:4d:2f:e9:de:06:66:50:1e:dd: 66:31:a9:bd:f0:cb:68:65:db:29:ad:bb:ec:f9:e8:f3:ae:61: 42:e1:04:9c:98:db:3a:10:07:a5:b0:6c:8e:3d:3a:a0:a4:2a: 56:fa:08:21:70:3f:ee:75:c3:f5:42:19:c5:8a:ff:60:de:66: 12:a6:5e:b0:c0:a3:87:78:cc:ad:d3:c1:40:03:62:f7:f8:0f: 31:1d:60:7c:76:54:af:ec:10:9c:2a:df:09:94:09:32:b9:13: cc:93:91:c0:57:e4:84:b8:92:1c:a4:f9:5f:70:8d:d0:85:08: 1e:a3:bb:a2:4b:d5:2e:cc:46:b0:83:fc:0f:17:28:77:1a:f4: 07:94:66:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUwNDI1MDAzNTA2WhcNMjUwNTAyMDAzNTA2WjAYMRYwFAYD VQQDEw02ODBhZDhiYS1mYjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/CtdBd6/uHVZ9vhMx/ZIhXQBa23wFVuE/8H9MFjyH3f0AmbUzV2R93hbKmw mcqNaWNwhGk8YUkdsWVY9k0Q6kF0hnj8Isc+9hMDfYszR56sE5XuGmQPsRpW/C5S AsK2VmBGtl0ph3xeL5La8cSYozR0slse9mscijTP3eVcGrTDbsxnsD8Vr3oO4Q5w EHYETm4uDrXLkBfftux4E36p0n2X1FEa5G0UD65V0l6anh1gScKWyPpxL2Vyew/m x3S685aqrzhpiKTAJA3MS3LFumettf/tDW0RHP61Qd4wvmQdz1RvhYfH2JdymoAE RECiHZv2uqrRD1o6EJIvUzo+TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHa399S oLsCNGyUZ4p+KtshfbueMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArPi+aGxtQIZ/9XsVCN9f9ESojhxu2JNJpkoGzFkV9YLgoQD6l+PGi 8ZkUyU+l42ddr5jD91C5NCLlmlROZEQmA6Sg2t484ZWO6Do9fyn4JRptDqb12riv 6gRt4TNjeRDx5aW0cVn8DHoGLesvjgjgI18zRWBNL+neBmZQHt1mMam98MtoZdsp rbvs+ejzrmFC4QScmNs6EAelsGyOPTqgpCpW+gghcD/udcP1QhnFiv9g3mYSpl6w wKOHeMyt08FAA2L3+A8xHWB8dlSv7BCcKt8JlAkyuRPMk5HAV+SEuJIcpPlfcI3Q hQgeo7uiS9UuzEawg/wPFyh3GvQHlGY7 -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:02 2025 by rpki-client