$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: MirjDVjy2B/sM2X84OwyqifrpDJOXYmQ1nBuba1LyM4= Subject key identifier: E2:EB:5F:60:3C:61:17:EC:0C:85:CA:08:1E:C2:E6:DF:66:EC:EA:A5 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 0182 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 017F Signing time: Fri 25 Apr 2025 02:49:23 +0000 Manifest this update: Fri 25 Apr 2025 02:49:22 +0000 Manifest next update: Fri 02 May 2025 02:49:22 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: L/VNJj6yApoVr5RnC3AyXb/8GLmm2zZF10HERjNvG8U=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: lrJXxDbusDQNnxZVLvp/KiXpw4drpdRHgf2/ruvhTVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 386 (0x182) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: Apr 25 02:49:22 2025 GMT Not After : May 2 02:49:22 2025 GMT Subject: CN=680af833-f553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:22:fa:dd:30:90:55:35:45:4c:88:99:3d:4a: 21:98:a7:9c:d3:ac:b4:ba:cb:10:3c:f6:39:cd:5c: 3c:54:ef:82:3a:fc:37:f8:57:b9:90:57:1d:a0:ff: 22:01:1b:9a:d1:ac:b7:c0:ce:1f:1b:9e:cc:be:c8: 55:22:af:72:51:68:64:b3:74:88:de:86:87:8c:24: 4d:34:e8:b1:e1:08:83:2e:44:b2:99:d3:c8:72:56: 8a:6e:b7:7d:8e:7f:d5:2e:fb:6f:ad:3b:79:62:01: 83:c1:8e:d4:f2:65:ab:9d:f4:f3:75:25:c3:75:01: 25:31:cd:9a:47:90:55:99:81:f5:75:35:20:c4:09: 55:20:61:2b:26:52:03:e1:b3:ee:eb:da:4f:7a:fa: 66:96:01:81:11:e5:09:51:0c:32:21:0a:1a:90:16: 33:b2:8f:de:5b:db:34:7c:e4:b1:3e:eb:34:6b:fd: 05:be:3c:00:2b:62:f5:39:1f:63:19:6b:82:ae:c6: eb:d1:0b:e9:d0:b7:4f:4f:b3:9d:74:13:66:02:31: bf:9f:00:1e:f2:21:ba:61:03:b7:36:d3:ce:cb:3b: 65:6d:26:7c:07:8b:56:aa:66:49:2c:21:b7:bc:63: d1:c9:0f:2d:1e:5c:f8:c8:4e:5a:4d:45:78:f5:07: 05:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:5F:60:3C:61:17:EC:0C:85:CA:08:1E:C2:E6:DF:66:EC:EA:A5 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:a8:b3:67:9c:57:26:49:5d:64:69:bb:f8:b6:2d:78:56:17: 9c:7b:71:ec:d0:a8:9c:fa:c7:b4:b9:fd:74:68:7a:e4:a8:71: 35:46:aa:45:1a:aa:09:29:bf:7f:4d:61:45:c7:6c:64:b7:88: 1c:c4:ae:13:19:72:01:86:32:d4:bf:6e:b6:cd:c1:c0:17:16: 91:98:f4:82:0b:ad:43:0c:8a:21:6a:fd:21:f0:d8:c1:5a:13: ae:98:1e:59:c1:ac:28:b9:f9:0f:04:8f:6d:fd:b8:5f:35:de: 74:07:2c:cd:69:54:48:ed:82:86:1a:88:6a:36:f6:1c:15:e1: a0:73:2f:4a:b1:c3:b8:73:67:08:99:a9:a5:23:36:5b:b3:8d: ca:fd:01:e0:a1:43:13:9b:8d:ea:84:43:e4:27:4a:44:5e:90: b1:2b:a9:84:db:6f:4e:95:49:39:6b:55:bc:f3:39:59:34:ea: 54:6e:68:31:c4:2f:44:53:35:49:3b:58:a7:8b:46:d9:4f:15: a3:4e:3e:16:51:cf:40:00:6b:2c:6a:16:34:bf:c8:f2:ca:c4: 90:7a:61:72:51:67:27:52:ac:37:90:87:8f:8f:57:33:6d:81: 19:c7:1a:3d:ef:14:2d:1d:26:59:99:9b:63:ff:ee:34:e1:87: 93:63:83:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwNDI1MDI0OTIyWhcNMjUwNTAyMDI0OTIyWjAYMRYwFAYD VQQDEw02ODBhZjgzMy1mNTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuCL63TCQVTVFTIiZPUohmKec06y0ussQPPY5zVw8VO+COvw3+Fe5kFcdoP8i ARua0ay3wM4fG57MvshVIq9yUWhks3SI3oaHjCRNNOix4QiDLkSymdPIclaKbrd9 jn/VLvtvrTt5YgGDwY7U8mWrnfTzdSXDdQElMc2aR5BVmYH1dTUgxAlVIGErJlID 4bPu69pPevpmlgGBEeUJUQwyIQoakBYzso/eW9s0fOSxPus0a/0FvjwAK2L1OR9j GWuCrsbr0Qvp0LdPT7OddBNmAjG/nwAe8iG6YQO3NtPOyztlbSZ8B4tWqmZJLCG3 vGPRyQ8tHlz4yE5aTUV49QcFmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLrX2A8 YRfsDIXKCB7C5t9m7OqlMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4qLNnnFcmSV1kabv4ti14Vhece3Hs0Kic+se0uf10aHrkqHE1RqpF GqoJKb9/TWFFx2xkt4gcxK4TGXIBhjLUv262zcHAFxaRmPSCC61DDIohav0h8NjB WhOumB5ZwawoufkPBI9t/bhfNd50ByzNaVRI7YKGGohqNvYcFeGgcy9KscO4c2cI mamlIzZbs43K/QHgoUMTm43qhEPkJ0pEXpCxK6mE229OlUk5a1W88zlZNOpUbmgx xC9EUzVJO1ini0bZTxWjTj4WUc9AAGssahY0v8jyysSQemFyUWcnUqw3kIePj1cz bYEZxxo97xQtHSZZmZtj/+404YeTY4P6 -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:29 2025 by rpki-client