$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: gRlersVlbxA6pf08j/bpZl/rZAXPPbJn3kUwx8y5yT0= Subject key identifier: 28:BA:E2:E8:B4:94:80:17:55:C5:40:7B:F0:BC:65:B6:69:31:B1:B4 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 9E Signing time: Fri 25 Apr 2025 05:18:55 +0000 Manifest this update: Fri 25 Apr 2025 05:18:55 +0000 Manifest next update: Fri 02 May 2025 05:18:55 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: XGI+EfBVxOzTzR3wTginMr2ITppfgGwPmlesfOeY0As=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:18:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Apr 25 05:18:55 2025 GMT Not After : May 2 05:18:55 2025 GMT Subject: CN=680b1b3f-e0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:79:b6:33:ce:ea:e9:0d:0f:c2:5b:ae:94: 50:29:79:ee:66:ca:15:dd:e7:f4:b8:ca:5f:1c:66: 9c:db:34:af:bd:e7:78:3b:68:83:e3:c2:bc:9a:c7: ee:c2:80:4f:a1:1f:d0:8c:e2:68:ca:28:fc:a7:21: fd:fd:e3:2a:54:3a:85:ed:ad:53:64:30:b4:3b:07: 39:6b:bb:45:1b:32:3b:1b:cf:56:52:4e:3c:e4:22: 49:2e:cd:7e:24:20:f7:3e:15:53:c8:1f:ed:9f:87: bb:e2:b8:02:b4:58:7c:b5:79:28:ec:1c:83:6f:32: 49:8d:dc:03:9b:b2:53:7b:40:aa:6f:eb:b7:0b:96: 60:05:e6:e5:3c:de:52:0f:9d:eb:83:14:3b:f3:c2: 37:25:63:96:a3:4b:89:ae:a7:ef:70:95:95:14:5d: 5b:8c:83:fc:2f:cb:bc:5a:3d:c6:87:c7:06:42:06: 0a:4b:09:b1:a4:21:30:7d:b2:73:fc:e0:bc:28:2f: 1a:b6:d5:64:4e:fa:52:a3:54:65:f8:53:96:8a:2e: 13:70:b1:d0:82:fd:11:e2:03:02:88:f9:cc:44:77: ba:04:d8:0d:6f:6b:34:bc:0b:8a:31:c7:de:96:3e: 15:29:1e:b6:34:44:ee:c0:90:60:f3:f0:99:84:a2: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:BA:E2:E8:B4:94:80:17:55:C5:40:7B:F0:BC:65:B6:69:31:B1:B4 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7f:2b:14:b9:02:7d:61:5d:2a:1b:0e:17:71:66:38:c8:d8: 38:26:16:fe:3d:31:48:6a:2a:7b:98:ff:9a:b5:c2:9d:0b:aa: c8:4e:aa:e0:0a:2e:dc:66:79:27:e1:f0:48:84:a7:71:4a:14: 99:b9:01:41:81:1a:f2:99:e4:af:b2:0d:bf:72:b8:af:ec:4f: 81:4c:18:28:07:ad:98:b0:70:af:73:82:86:e7:68:ab:5f:03: d8:4e:21:fc:76:ef:fb:1a:4a:68:7b:dd:52:00:8b:9d:b9:f2: 02:2e:40:f7:4d:89:03:64:8a:8b:ea:0a:74:b4:09:66:52:01: ef:ba:86:4d:23:a5:1e:df:f6:a0:d5:b8:7a:2c:b7:7e:ab:9c: 32:89:7e:b8:5b:17:bf:ba:76:bb:ab:ab:6a:3e:f6:8c:4d:83: 5f:b9:a5:43:95:19:cf:52:cb:a0:23:3c:d6:45:01:5f:8d:e9: e4:d5:ed:a8:27:8a:28:64:4b:8a:db:4d:66:ee:5d:2d:4e:8a: ff:4d:cf:a7:48:d0:9e:10:6b:cf:94:76:87:d5:78:9d:8b:a6: 67:36:a0:ff:5a:c3:b3:59:cc:9d:9b:b1:37:e5:be:72:94:f3: a7:1d:e1:bc:df:c6:04:5a:3a:fa:3c:56:c7:c3:68:19:e2:a1: f6:ba:62:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwNDI1MDUxODU1WhcNMjUwNTAyMDUxODU1WjAYMRYwFAYD VQQDEw02ODBiMWIzZi1lMGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyF5tjPO6ukND8JbrpRQKXnuZsoV3ef0uMpfHGac2zSvved4O2iD48K8msfu woBPoR/QjOJoyij8pyH9/eMqVDqF7a1TZDC0Owc5a7tFGzI7G89WUk485CJJLs1+ JCD3PhVTyB/tn4e74rgCtFh8tXko7ByDbzJJjdwDm7JTe0Cqb+u3C5ZgBeblPN5S D53rgxQ788I3JWOWo0uJrqfvcJWVFF1bjIP8L8u8Wj3Gh8cGQgYKSwmxpCEwfbJz /OC8KC8attVkTvpSo1Rl+FOWii4TcLHQgv0R4gMCiPnMRHe6BNgNb2s0vAuKMcfe lj4VKR62NETuwJBg8/CZhKK8AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCi64ui0 lIAXVcVAe/C8ZbZpMbG0MB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcfysUuQJ9YV0qGw4XcWY4yNg4Jhb+PTFIaip7mP+atcKdC6rITqrg Ci7cZnkn4fBIhKdxShSZuQFBgRrymeSvsg2/criv7E+BTBgoB62YsHCvc4KG52ir XwPYTiH8du/7Gkpoe91SAIudufICLkD3TYkDZIqL6gp0tAlmUgHvuoZNI6Ue3/ag 1bh6LLd+q5wyiX64Wxe/una7q6tqPvaMTYNfuaVDlRnPUsugIzzWRQFfjenk1e2o J4ooZEuK201m7l0tTor/Tc+nSNCeEGvPlHaH1Xidi6ZnNqD/WsOzWcydm7E35b5y lPOnHeG838YEWjr6PFbHw2gZ4qH2umL/ -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:36 2025 by rpki-client