$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: jyQF0I8pWESj4nQ/f7Cfn5Y2hzTS66FpQWTqby8GEvU= Subject key identifier: DF:2D:4C:03:83:28:32:D9:72:65:6A:77:0A:FD:53:C6:26:34:DA:CB Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 54 Signing time: Fri 25 Apr 2025 06:13:01 +0000 Manifest this update: Fri 25 Apr 2025 06:13:01 +0000 Manifest next update: Fri 02 May 2025 06:13:01 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: fkDResuPY/4m3rfMGWCBUGvUHGCI1txVD7nAxwX0HM0=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: Apr 25 06:13:01 2025 GMT Not After : May 2 06:13:01 2025 GMT Subject: CN=680b27ed-ceb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:21:63:69:db:bc:65:a2:05:47:15:38:e9: 63:f2:ae:2a:d7:cb:95:cb:59:4f:9b:d6:17:5d:66: 1d:8b:7f:9a:88:72:e0:ad:33:1e:d3:3e:62:13:fc: b2:ec:44:b3:e0:b8:8f:fa:a6:70:b6:40:50:b8:32: df:14:71:eb:2a:6f:21:05:84:1e:65:de:69:32:9b: 31:cd:d1:1b:a1:9d:e7:f5:be:b6:39:fa:2c:9e:b5: b0:0c:06:e6:0c:64:bf:76:1e:20:f5:71:47:06:a6: 96:9b:5d:c9:eb:a2:76:84:f1:ac:d6:20:d3:72:d4: fe:93:e9:02:0d:a5:56:70:b9:55:bc:f9:af:35:a3: dc:64:41:cb:75:3c:b9:e3:a7:ee:13:6c:da:16:e4: 5b:8d:9c:05:08:60:64:52:21:5e:5b:e5:08:88:6a: d9:ee:5d:2c:92:85:ed:07:be:d6:a1:79:96:9a:aa: 4b:54:2e:33:31:7c:fb:36:6b:93:20:ce:14:bc:32: ab:16:79:7c:9b:7d:ea:07:3f:94:bd:97:78:1a:bf: 8c:17:5b:b9:b1:88:dc:9e:b7:e4:d1:88:a5:34:61: 02:59:f0:8a:01:82:5f:ac:af:e6:fe:24:ef:5f:cc: 73:57:ed:c0:31:4b:9a:f7:8c:60:25:d8:0e:4d:02: e7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2D:4C:03:83:28:32:D9:72:65:6A:77:0A:FD:53:C6:26:34:DA:CB X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:21:db:bc:14:da:90:28:0d:e4:7f:a6:fd:46:30:53:ff:60: 7c:90:00:5e:7f:1d:ca:cf:50:7d:68:c2:dc:21:39:37:ef:cc: 54:1b:af:94:e3:8a:b7:12:12:44:83:91:1c:b0:c5:f5:71:61: 35:83:80:10:8f:76:3b:6e:65:99:ff:2d:71:a0:b6:82:4b:d3: 57:75:21:80:ba:f1:9c:05:58:9b:6a:ec:04:d2:b1:4d:b7:c3: 26:73:a3:8d:35:13:fa:c9:0e:38:e0:ad:57:00:92:63:29:ba: e1:80:16:fb:4c:0d:7d:52:63:71:25:d8:67:b4:b2:16:78:0b: 7c:dd:0c:f1:d9:f8:df:eb:00:8f:f3:76:83:92:16:93:77:29: e0:a9:49:ee:b8:a6:17:65:b8:c7:e8:09:83:4b:fa:0a:f3:df: b1:0f:bb:3f:9b:82:0f:9b:28:1b:54:cb:eb:f7:d3:86:41:52: 3e:78:67:4e:9c:84:b4:89:eb:32:45:59:3c:32:f8:06:ae:f6: 91:5d:b6:ae:26:d8:83:55:d3:cd:56:1a:f5:bc:62:98:d1:00: 35:f9:a1:e0:7e:24:d5:17:b6:34:04:66:03:db:14:cc:b6:5e: 26:50:cf:ac:5c:f3:cd:09:60:69:9a:da:d9:53:cc:e5:f4:06: 2d:e4:a5:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoREIzREZEODZDRUJGRUFFRDNBQUYxNURFQUVFNjk2NTIz NDc0NkEyOTAeFw0yNTA0MjUwNjEzMDFaFw0yNTA1MDIwNjEzMDFaMBgxFjAUBgNV BAMTDTY4MGIyN2VkLWNlYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNuiFjadu8ZaIFRxU46WPyrirXy5XLWU+b1hddZh2Lf5qIcuCtMx7TPmIT/LLs RLPguI/6pnC2QFC4Mt8UcesqbyEFhB5l3mkymzHN0Ruhnef1vrY5+iyetbAMBuYM ZL92HiD1cUcGppabXcnronaE8azWINNy1P6T6QINpVZwuVW8+a81o9xkQct1PLnj p+4TbNoW5FuNnAUIYGRSIV5b5QiIatnuXSyShe0HvtaheZaaqktULjMxfPs2a5Mg zhS8MqsWeXybfeoHP5S9l3gav4wXW7mxiNyet+TRiKU0YQJZ8IoBgl+sr+b+JO9f zHNX7cAxS5r3jGAl2A5NAudfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3y1MA4Mo MtlyZWp3Cv1TxiY02sswHwYDVR0jBBgwFoAU2z39hs6/6u06rxXeruaWUjR0aikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwL0E3OEYxQjEyQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnozOWhzNl82dTA2cnhYZXJ1YVdValIwYWlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwL0E3OEYxQjEyQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUw NnJ4WGVydWFXVWpSMGFpay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG8h27wU2pAoDeR/pv1GMFP/YHyQAF5/HcrPUH1owtwhOTfvzFQbr5Tj ircSEkSDkRywxfVxYTWDgBCPdjtuZZn/LXGgtoJL01d1IYC68ZwFWJtq7ATSsU23 wyZzo401E/rJDjjgrVcAkmMpuuGAFvtMDX1SY3El2Ge0shZ4C3zdDPHZ+N/rAI/z doOSFpN3KeCpSe64phdluMfoCYNL+grz37EPuz+bgg+bKBtUy+v304ZBUj54Z06c hLSJ6zJFWTwy+Aau9pFdtq4m2INV081WGvW8YpjRADX5oeB+JNUXtjQEZgPbFMy2 XiZQz6xc880JYGma2tlTzOX0Bi3kpUo= -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:51 2025 by rpki-client