$ rpki-client -vvf rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft File: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft (raw, json) Hash identifier: lAwPhKs8yncqRRvQObIYHibSIzTEsUsX9vWNkPEeLsw= Subject key identifier: 6C:80:E5:81:1D:A7:59:7B:08:C9:45:E7:7E:7B:96:85:C0:77:55:E3 Authority key identifier: DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E Certificate issuer: /CN=A915FA96/serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Certificate serial: 4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft Manifest number: 49 Signing time: Fri 25 Apr 2025 06:22:34 +0000 Manifest this update: Fri 25 Apr 2025 06:22:33 +0000 Manifest next update: Fri 02 May 2025 06:22:33 +0000 Files and hashes: 1: 2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl (hash: Lee0hYJhmic0qa17xEWmPNEEZ4o/9/2hi7D/SLTU6Ng=) 2: 50B93FA8B5EE11EF9AC9D812C4F9AE02.roa (hash: XoqSoHkPs1ffdTh6W19ne37H+1CKa62i2t43qmhHxIQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FA96, serialNumber=DAEFA54358F4BCC0D847CC6DC9CAF78BC5E0996E Validity Not Before: Apr 25 06:22:33 2025 GMT Not After : May 2 06:22:33 2025 GMT Subject: CN=680b2a2a-9ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:d6:45:fa:8b:3a:1d:a3:17:ba:22:8e:3c: 90:ff:32:50:e4:62:b4:94:13:b5:f4:81:23:56:4e: 3b:6d:d4:b5:12:b5:7b:b7:dd:ca:6d:bc:10:90:cb: 4b:c5:5f:d8:11:44:74:b0:e5:84:a2:c9:95:41:d8: 52:e7:27:51:25:5a:41:30:d7:2d:a9:be:bc:8a:ea: 2e:48:3b:44:49:08:de:97:af:fa:9e:1e:8e:91:0d: d7:d9:53:28:ba:53:25:5f:b9:cc:1c:59:ff:c5:25: 81:ea:de:2c:04:de:a1:21:e0:87:e5:99:49:4c:23: 1a:63:8b:d9:5c:c3:ae:33:32:5a:cb:04:ec:5e:93: c2:c6:86:2f:e9:59:eb:8b:98:d1:6b:86:f5:14:e2: e7:e0:f8:48:af:f2:8d:ae:c7:a1:e9:29:64:d9:e5: 94:7a:30:90:fa:80:e2:67:1d:a4:21:03:90:38:77: d7:71:b1:f4:8e:46:9d:78:8b:29:bc:64:bc:a8:85: 46:de:c4:52:d4:ea:13:7e:bc:04:de:06:39:6c:13: d7:33:77:4f:bd:07:d4:d3:7a:23:a4:41:a9:50:50: 81:0e:e3:6c:37:5d:30:0f:42:17:5b:07:1e:b3:fc: 19:76:5a:80:ed:18:f4:b8:0a:78:90:79:99:fa:91: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:80:E5:81:1D:A7:59:7B:08:C9:45:E7:7E:7B:96:85:C0:77:55:E3 X509v3 Authority Key Identifier: keyid:DA:EF:A5:43:58:F4:BC:C0:D8:47:CC:6D:C9:CA:F7:8B:C5:E0:99:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2u-lQ1j0vMDYR8xtycr3i8XgmW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FA96/8A35090CB5ED11EF9D20690EC4F9AE02/2u-lQ1j0vMDYR8xtycr3i8XgmW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9a:18:ca:0d:d6:f1:9b:5a:2b:e0:70:3f:a6:3d:f1:be:2b: 62:04:70:62:9a:ee:9b:87:e0:e6:fc:4a:14:79:d0:45:06:55: da:00:90:67:c3:1e:6c:6e:7c:67:ff:8b:25:b2:a9:b8:9e:23: d0:7b:10:81:cf:9d:6d:ba:f1:2a:3b:3d:65:4b:56:1b:a7:91: 66:20:23:13:93:bd:0d:ec:b4:4d:b7:ff:8d:3f:80:70:20:7b: de:34:aa:a4:bf:90:4d:ee:56:22:64:47:56:5e:e5:ec:ce:aa: 1b:2a:7f:6b:de:84:e8:ee:3e:26:07:1f:6e:62:61:db:f9:13: 49:73:49:2e:f1:b1:ca:e4:99:f8:f1:ff:41:29:b5:5e:d7:10: 0b:6a:ec:73:d7:16:11:a5:6e:e2:a2:70:1e:d4:29:ab:75:94: fb:cc:81:ae:b9:54:f3:b0:1e:ab:2e:bc:c8:2c:25:0d:d3:04: e0:58:e9:42:9a:ff:c0:66:d7:2c:23:84:bc:d4:9f:bb:9e:60: 51:7f:5b:a0:9d:be:8b:a9:5a:54:69:2f:21:76:28:19:4b:9d: d3:9e:86:83:5a:4c:10:cd:b7:0b:7d:d7:17:9d:ba:2c:9e:3a: 8b:50:70:84:6c:a2:cf:6f:e3:79:a0:03:b2:c4:3f:f3:17:41: b5:56:af:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RkE5NjExMC8GA1UEBRMoREFFRkE1NDM1OEY0QkNDMEQ4NDdDQzZEQzlDQUY3OEJD NUUwOTk2RTAeFw0yNTA0MjUwNjIyMzNaFw0yNTA1MDIwNjIyMzNaMBgxFjAUBgNV BAMTDTY4MGIyYTJhLTllZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCowdZF+os6HaMXuiKOPJD/MlDkYrSUE7X0gSNWTjtt1LUStXu33cptvBCQy0vF X9gRRHSw5YSiyZVB2FLnJ1ElWkEw1y2pvryK6i5IO0RJCN6Xr/qeHo6RDdfZUyi6 UyVfucwcWf/FJYHq3iwE3qEh4IflmUlMIxpji9lcw64zMlrLBOxek8LGhi/pWeuL mNFrhvUU4ufg+Eiv8o2ux6HpKWTZ5ZR6MJD6gOJnHaQhA5A4d9dxsfSORp14iym8 ZLyohUbexFLU6hN+vATeBjlsE9czd0+9B9TTeiOkQalQUIEO42w3XTAPQhdbBx6z /Bl2WoDtGPS4CniQeZn6kX6pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbIDlgR2n WXsIyUXnfnuWhcB3VeMwHwYDVR0jBBgwFoAU2u+lQ1j0vMDYR8xtycr3i8XgmW4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVGQTk2LzhBMzUwOTBDQjVF RDExRUY5RDIwNjkwRUM0RjlBRTAyLzJ1LWxRMWowdk1EWVI4eHR5Y3IzaThYZ21X NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnUtbFExajB2TURZUjh4dHljcjNpOFhnbVc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVG QTk2LzhBMzUwOTBDQjVFRDExRUY5RDIwNjkwRUM0RjlBRTAyLzJ1LWxRMWowdk1E WVI4eHR5Y3IzaThYZ21XNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ+aGMoN1vGbWivgcD+mPfG+K2IEcGKa7puH4Ob8ShR50EUGVdoAkGfD HmxufGf/iyWyqbieI9B7EIHPnW268So7PWVLVhunkWYgIxOTvQ3stE23/40/gHAg e940qqS/kE3uViJkR1Ze5ezOqhsqf2vehOjuPiYHH25iYdv5E0lzSS7xscrkmfjx /0EptV7XEAtq7HPXFhGlbuKicB7UKat1lPvMga65VPOwHqsuvMgsJQ3TBOBY6UKa /8Bm1ywjhLzUn7ueYFF/W6CdvoupWlRpLyF2KBlLndOehoNaTBDNtwt91xeduiye OotQcIRsos9v43mgA7LEP/MXQbVWr/Y= -----END CERTIFICATE-----Generated at Sat Apr 26 17:08:37 2025 by rpki-client