$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: 7TlHIhamUqd43MAmjBmQY68TaoxQgolJyI6eCflv3/g= Subject key identifier: B3:86:68:C4:BE:BA:52:42:4F:F3:FA:72:57:EB:28:92:31:4B:C0:2A Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: 0173 Signing time: Fri 25 Apr 2025 02:56:43 +0000 Manifest this update: Fri 25 Apr 2025 02:56:42 +0000 Manifest next update: Fri 02 May 2025 02:56:42 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: utwg2qzeNjJ1qrnl1gIBWGmfP7qSGG3GN2xiBO6bciY=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: XG0ognbrHuDFVvw75BGHMdtpiHu/beUvd7TsChbHkCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:56:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: Apr 25 02:56:42 2025 GMT Not After : May 2 02:56:42 2025 GMT Subject: CN=680af9ea-3e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c3:09:3f:4e:c7:16:7c:5f:d6:3d:80:b9:a2: d6:5e:23:46:37:65:4e:3d:12:eb:19:d8:fe:c0:46: e9:59:e8:b9:f0:9b:55:d9:b5:28:0e:96:57:db:b5: d0:89:15:7c:5d:99:7d:e3:64:ef:60:a8:db:fd:b4: 09:3a:b4:0e:f6:ad:d9:e8:58:51:7a:24:15:8a:88: 54:65:0c:77:04:6f:88:0d:13:99:d5:c1:d3:39:05: 93:cb:41:4a:1d:10:1e:17:a6:67:6e:dd:5d:d8:78: 0f:8f:7f:5e:89:47:1b:f7:bf:17:d1:7b:c1:ea:29: c2:52:c7:44:3f:0f:3b:db:ee:ba:cc:0a:04:6b:55: 44:a0:b2:62:1c:9d:a0:61:7d:52:ed:d6:a9:82:3d: 88:9c:ce:f2:a9:89:81:79:3d:85:4c:b3:04:09:f7: b8:78:84:e9:ce:e2:05:ca:1b:e6:a3:5d:8e:e0:13: 40:b6:42:50:98:a6:9b:da:06:c6:fe:ab:8c:43:ef: 61:3e:20:75:38:a8:a1:61:a1:48:f1:28:3b:0b:93: 08:6a:bd:53:96:a1:ed:95:bd:91:0c:23:ea:c0:6d: 0e:2f:0b:43:64:ea:3e:6d:c5:96:8e:5d:dd:a7:58: 8c:33:e0:4f:95:2c:63:02:be:59:58:85:8e:30:dd: 33:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:68:C4:BE:BA:52:42:4F:F3:FA:72:57:EB:28:92:31:4B:C0:2A X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:cf:b6:02:c6:fa:70:5f:81:da:cf:b7:f6:b8:d5:d1:ff:54: 22:84:53:f4:61:e7:ba:99:5a:9a:27:ba:71:6a:8d:79:be:80: 6a:08:30:7a:eb:2c:b4:1e:03:20:bc:29:86:8f:5e:30:d9:86: 98:60:95:ae:2c:01:ea:45:90:d2:de:be:a1:80:2f:2f:c0:bb: e2:23:1a:31:d8:5a:7f:1b:3f:6e:5d:50:41:ad:ea:71:34:f1: 71:d2:2f:4c:30:45:87:70:d7:e6:4d:bf:11:63:50:66:90:22: 9c:56:80:ca:7d:fa:71:aa:91:0a:19:d5:10:d6:aa:7f:93:02: 16:c5:b0:46:55:f1:4a:a8:a9:f0:61:67:74:60:a4:96:4f:ad: 4a:28:2e:a1:e2:57:1c:f5:76:f3:2f:14:2b:5d:4a:55:54:d4: 15:30:9a:32:bb:09:15:35:08:a8:04:86:01:8d:76:b7:47:4f: 9a:03:03:57:5d:81:35:68:4d:41:a2:a6:c6:aa:7b:5c:f7:41: ff:c0:c7:9b:b7:06:72:35:e7:f5:73:c8:92:8e:dd:93:2a:b0: 0f:f6:fa:0f:91:c7:91:2c:98:81:97:27:24:b9:0b:b7:77:a8: ef:91:1e:05:e8:51:79:6c:aa:05:46:85:7c:15:a6:d3:e5:18: 84:90:b4:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjUwNDI1MDI1NjQyWhcNMjUwNTAyMDI1NjQyWjAYMRYwFAYD VQQDEw02ODBhZjllYS0zZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78MJP07HFnxf1j2AuaLWXiNGN2VOPRLrGdj+wEbpWei58JtV2bUoDpZX27XQ iRV8XZl942TvYKjb/bQJOrQO9q3Z6FhReiQViohUZQx3BG+IDROZ1cHTOQWTy0FK HRAeF6Znbt1d2HgPj39eiUcb978X0XvB6inCUsdEPw872+66zAoEa1VEoLJiHJ2g YX1S7dapgj2InM7yqYmBeT2FTLMECfe4eITpzuIFyhvmo12O4BNAtkJQmKab2gbG /quMQ+9hPiB1OKihYaFI8Sg7C5MIar1TlqHtlb2RDCPqwG0OLwtDZOo+bcWWjl3d p1iMM+BPlSxjAr5ZWIWOMN0z3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOGaMS+ ulJCT/P6clfrKJIxS8AqMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhz7YCxvpwX4Haz7f2uNXR/1QihFP0Yee6mVqaJ7pxao15voBqCDB6 6yy0HgMgvCmGj14w2YaYYJWuLAHqRZDS3r6hgC8vwLviIxox2Fp/Gz9uXVBBrepx NPFx0i9MMEWHcNfmTb8RY1BmkCKcVoDKffpxqpEKGdUQ1qp/kwIWxbBGVfFKqKnw YWd0YKSWT61KKC6h4lcc9XbzLxQrXUpVVNQVMJoyuwkVNQioBIYBjXa3R0+aAwNX XYE1aE1BoqbGqntc90H/wMebtwZyNef1c8iSjt2TKrAP9voPkceRLJiBlyckuQu3 d6jvkR4F6FF5bKoFRoV8FabT5RiEkLQF -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:37 2025 by rpki-client