$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: w4lib24tW8cbbYmX1RwS0jVUXAFuLJ+79n+CyrUpi2w= Subject key identifier: A0:AF:DF:67:BE:04:62:9D:95:0D:12:60:69:16:FA:92:2A:9F:D2:FA Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 0925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 091D Signing time: Thu 24 Apr 2025 20:10:51 +0000 Manifest this update: Thu 24 Apr 2025 20:10:51 +0000 Manifest next update: Thu 01 May 2025 20:10:51 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: i1lzBvRYDf6TnDNpmQ7LrQhpkqCjvpZufD6u2IhZxmg=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: Apr 24 20:10:51 2025 GMT Not After : May 1 20:10:51 2025 GMT Subject: CN=680a9acb-c8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:05:8c:11:1b:91:1a:ee:97:c4:5d:e8:3d: 4d:d2:51:33:19:e6:6c:26:bd:9b:ec:7f:a0:ff:e1: 39:52:51:7c:c9:43:cb:e8:07:b8:6a:34:04:b3:80: 8c:f5:05:1e:a7:4a:b8:e1:ff:0b:59:3f:a5:01:6b: f1:d2:44:f6:63:92:23:80:cd:9c:9c:a6:46:14:95: 62:c5:64:f4:65:9d:80:d0:0f:fc:20:5a:02:2b:80: 48:97:41:63:63:1f:6e:ee:2a:04:ed:67:f3:a5:d4: c1:3a:d3:4b:0c:25:87:e5:34:2f:a2:54:dd:b2:77: 1b:40:c2:60:44:67:17:6b:44:21:d5:c1:a1:21:c7: b6:a9:c1:4f:c0:b6:38:e9:55:68:78:fc:2a:27:26: ac:ba:5a:1f:ba:14:68:3c:ba:e3:c3:16:cf:11:5f: 1f:26:11:7a:a6:06:61:bf:de:c8:f1:1d:1a:52:73: 77:af:f0:56:9d:f0:3c:3a:57:d0:b8:f0:3f:e9:a3: 12:d8:24:bf:2c:94:93:08:a8:fc:0c:c6:03:3f:0f: 81:0a:cd:21:b3:93:45:1d:9b:99:1d:2f:6f:83:5e: 5d:3b:2b:53:e9:c3:bf:f0:8f:d9:05:f8:2c:72:f8: 11:02:bd:dc:47:e0:3c:84:33:0e:cc:31:5f:75:4a: 99:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:DF:67:BE:04:62:9D:95:0D:12:60:69:16:FA:92:2A:9F:D2:FA X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:e1:95:5e:e0:1e:d4:c7:d7:05:54:a6:81:c3:58:f9:6f:88: d0:e8:90:3d:f5:63:26:bf:a0:91:95:c9:84:31:58:5d:aa:af: 54:b6:bc:51:21:21:cd:4a:48:f8:74:14:02:b3:a6:1f:ad:5a: 8b:ba:5d:e1:73:ed:b3:5e:3e:9e:15:ae:09:1c:6d:fd:78:ab: b9:1e:c9:d3:02:9e:6a:6d:74:7b:55:64:16:44:86:8b:f1:aa: 41:cc:22:2d:b2:64:04:81:65:1f:fd:f2:dd:34:bd:ad:d7:48: e6:43:09:1c:08:37:7c:8a:8d:1f:c5:31:03:22:90:01:10:31: 70:03:2d:61:f6:a5:12:43:cb:0b:09:56:64:4b:72:3e:8d:8f: c1:80:11:c3:78:b5:27:02:b5:c7:3b:38:e0:d4:ef:66:e6:91: 91:08:a3:ea:93:86:c4:a8:24:5e:85:a8:80:14:c8:ab:69:ee: d8:1f:29:7f:c0:6a:24:10:9b:c2:34:d2:ca:6b:5c:4a:31:5e: b2:cc:89:27:7a:f5:92:63:a7:40:61:fb:33:ee:ff:34:a6:2c: 40:86:7d:74:ce:26:dc:08:9e:83:ef:6c:c5:be:3f:db:25:8f: 30:97:8a:84:ac:a2:86:7f:ff:49:66:e0:11:da:fe:de:36:b9: 1a:72:13:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUwNDI0MjAxMDUxWhcNMjUwNTAxMjAxMDUxWjAYMRYwFAYD VQQDEw02ODBhOWFjYi1jOGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZoFjBEbkRrul8Rd6D1N0lEzGeZsJr2b7H+g/+E5UlF8yUPL6Ae4ajQEs4CM 9QUep0q44f8LWT+lAWvx0kT2Y5IjgM2cnKZGFJVixWT0ZZ2A0A/8IFoCK4BIl0Fj Yx9u7ioE7WfzpdTBOtNLDCWH5TQvolTdsncbQMJgRGcXa0Qh1cGhIce2qcFPwLY4 6VVoePwqJyasulofuhRoPLrjwxbPEV8fJhF6pgZhv97I8R0aUnN3r/BWnfA8OlfQ uPA/6aMS2CS/LJSTCKj8DMYDPw+BCs0hs5NFHZuZHS9vg15dOytT6cO/8I/ZBfgs cvgRAr3cR+A8hDMOzDFfdUqZEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCv32e+ BGKdlQ0SYGkW+pIqn9L6MB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBA4ZVe4B7Ux9cFVKaBw1j5b4jQ6JA99WMmv6CRlcmEMVhdqq9UtrxR ISHNSkj4dBQCs6YfrVqLul3hc+2zXj6eFa4JHG39eKu5HsnTAp5qbXR7VWQWRIaL 8apBzCItsmQEgWUf/fLdNL2t10jmQwkcCDd8io0fxTEDIpABEDFwAy1h9qUSQ8sL CVZkS3I+jY/BgBHDeLUnArXHOzjg1O9m5pGRCKPqk4bEqCRehaiAFMirae7YHyl/ wGokEJvCNNLKa1xKMV6yzIknevWSY6dAYfsz7v80pixAhn10zibcCJ6D72zFvj/b JY8wl4qErKKGf/9JZuAR2v7eNrkachNS -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:21 2025 by rpki-client