$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft File: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft (raw, json) Hash identifier: 32259DYK4wywu9fsHPjOCdlXZ2/ME9OKUIcoDzO7HRY= Subject key identifier: F9:E0:9A:14:BE:79:33:D2:93:D1:23:1C:98:D8:7F:FA:17:D1:2B:E7 Authority key identifier: D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 Certificate issuer: /CN=A9164F6C/serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft Manifest number: B8 Signing time: Fri 25 Apr 2025 04:58:53 +0000 Manifest this update: Fri 25 Apr 2025 04:58:53 +0000 Manifest next update: Fri 02 May 2025 04:58:53 +0000 Files and hashes: 1: 2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl (hash: kinlRWUvF9Z5dKWXX9Zqp3lHCMD7K2gyDZjiFd0DZ9E=) 2: EC1244C40C0A11EF86081F2FC4F9AE02.roa (hash: XJ6Cl0k/r34t0UIzqumXdg3IJ/QU+9th/mHz4X1ySQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164F6C, serialNumber=D9CDC089482A6749B520051C0F385F62DE8CB493 Validity Not Before: Apr 25 04:58:53 2025 GMT Not After : May 2 04:58:53 2025 GMT Subject: CN=680b168d-74e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8d:3b:8d:15:ae:51:13:15:5e:a5:3c:4a:e1: 27:2a:67:59:e0:37:db:52:5e:8b:68:03:8a:f5:dd: cc:b7:b0:5f:76:c8:ca:e8:63:36:a2:30:4b:2f:76: e7:e1:6d:74:34:44:ba:6c:89:0d:91:de:1c:d9:f5: dc:47:08:3d:5f:b9:a3:e0:a6:ac:a4:46:b0:05:e5: 32:4c:94:6e:be:7c:03:dd:c0:f1:45:82:04:e9:0b: 02:b3:23:7f:94:5f:b5:56:3e:61:4d:80:d8:a3:c4: 72:17:4a:cb:41:a7:46:12:e8:42:79:0f:5c:56:de: 89:a2:2f:fb:0f:3f:3e:59:f2:22:77:57:34:18:e7: ab:cd:f9:76:bd:3f:af:24:ae:06:1c:36:e5:8b:bb: 6f:6b:ba:26:a2:10:6e:73:b6:74:ae:03:81:7f:8f: 4d:89:64:d2:04:27:89:a1:a2:04:9d:08:70:cc:70: 69:4c:88:0f:5a:eb:c1:91:24:a5:a3:da:e2:51:5a: 4b:9e:91:95:8f:1d:54:db:d5:db:97:89:88:13:53: 48:05:55:51:36:13:89:c6:91:97:11:12:65:09:5d: 45:ba:07:bb:d6:a6:f7:9b:f1:69:80:cf:a3:21:1f: 08:e6:dc:27:f1:ff:31:b4:7e:06:69:34:fb:1a:d6: 42:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:9A:14:BE:79:33:D2:93:D1:23:1C:98:D8:7F:FA:17:D1:2B:E7 X509v3 Authority Key Identifier: keyid:D9:CD:C0:89:48:2A:67:49:B5:20:05:1C:0F:38:5F:62:DE:8C:B4:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F6C/B88237280C0911EF9BD9132CC4F9AE02/2c3AiUgqZ0m1IAUcDzhfYt6MtJM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ef:25:06:2d:fd:09:f3:ac:d4:30:5e:90:45:e3:ff:8f:47: bf:5b:31:bc:9b:90:f5:20:f3:43:bb:f0:55:f5:6a:9e:96:ec: a4:12:37:ca:22:66:cb:6d:9f:1f:19:30:4e:5d:de:a8:5f:0c: cb:50:a6:bc:97:cd:b3:9d:cc:f0:02:fd:bf:ee:2a:08:e8:a9: 9d:cb:24:70:9f:ad:af:4f:fe:25:d2:dd:18:2c:92:19:84:19: 72:f3:5c:52:23:43:44:01:da:c6:3b:28:de:a3:19:f2:cb:6b: 8e:1d:56:49:36:33:6d:b1:73:39:c5:5d:20:dc:48:3d:2f:5d: a5:60:d1:30:68:1f:9a:a1:0c:ab:5f:9b:2b:6c:36:13:ee:bf: 2a:05:7d:ed:c1:3f:a9:95:8a:22:f0:7a:06:cc:39:15:d7:5e: 38:5d:af:df:7b:a5:a1:9b:6b:4c:94:a2:58:f8:96:b5:42:ac: d2:14:22:d4:1d:a2:d7:07:95:aa:ce:45:44:c7:b6:5c:9c:7c: 6a:36:18:3d:0c:07:f1:93:ca:04:18:87:33:c9:67:63:eb:66: 2e:0b:35:86:db:33:22:e9:d0:59:87:a0:b7:12:35:2d:69:9f: c6:47:64:e8:17:a8:ba:52:25:e1:2a:ca:a5:43:a4:41:27:bb: 68:b2:22:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRGNkMxMTAvBgNVBAUTKEQ5Q0RDMDg5NDgyQTY3NDlCNTIwMDUxQzBGMzg1RjYy REU4Q0I0OTMwHhcNMjUwNDI1MDQ1ODUzWhcNMjUwNTAyMDQ1ODUzWjAYMRYwFAYD VQQDEw02ODBiMTY4ZC03NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAto07jRWuURMVXqU8SuEnKmdZ4DfbUl6LaAOK9d3Mt7BfdsjK6GM2ojBLL3bn 4W10NES6bIkNkd4c2fXcRwg9X7mj4KaspEawBeUyTJRuvnwD3cDxRYIE6QsCsyN/ lF+1Vj5hTYDYo8RyF0rLQadGEuhCeQ9cVt6Joi/7Dz8+WfIid1c0GOerzfl2vT+v JK4GHDbli7tva7omohBuc7Z0rgOBf49NiWTSBCeJoaIEnQhwzHBpTIgPWuvBkSSl o9riUVpLnpGVjx1U29Xbl4mIE1NIBVVRNhOJxpGXERJlCV1Fuge71qb3m/FpgM+j IR8I5twn8f8xtH4GaTT7GtZCGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPngmhS+ eTPSk9EjHJjYf/oX0SvnMB8GA1UdIwQYMBaAFNnNwIlIKmdJtSAFHA84X2LejLST MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY2Qy9CODgyMzcyODBD MDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVowbTFJQVVjRHpoZll0Nk10 Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjM0FpVWdxWjBtMUlBVWNEemhmWXQ2TXRKTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEY2Qy9CODgyMzcyODBDMDkxMUVGOUJEOTEzMkNDNEY5QUUwMi8yYzNBaVVncVow bTFJQVVjRHpoZll0Nk10Sk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd7yUGLf0J86zUMF6QReP/j0e/WzG8m5D1IPNDu/BV9WqeluykEjfK ImbLbZ8fGTBOXd6oXwzLUKa8l82znczwAv2/7ioI6KmdyyRwn62vT/4l0t0YLJIZ hBly81xSI0NEAdrGOyjeoxnyy2uOHVZJNjNtsXM5xV0g3Eg9L12lYNEwaB+aoQyr X5srbDYT7r8qBX3twT+plYoi8HoGzDkV1144Xa/fe6Whm2tMlKJY+Ja1QqzSFCLU HaLXB5WqzkVEx7ZcnHxqNhg9DAfxk8oEGIczyWdj62YuCzWG2zMi6dBZh6C3EjUt aZ/GR2ToF6i6UiXhKsqlQ6RBJ7tosiIv -----END CERTIFICATE-----Generated at Sat Apr 26 13:04:36 2025 by rpki-client