$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json) Hash identifier: V9JN0cMeXAXAIxBKuGxFRDQUy51TTx3kBUz/LhRzy8o= Subject key identifier: 32:1E:42:66:D5:7B:C2:AB:94:C0:BE:C9:9D:31:4D:E9:3D:F7:86:E6 Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 02E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft Manifest number: 02D8 Signing time: Fri 25 Apr 2025 01:08:55 +0000 Manifest this update: Fri 25 Apr 2025 01:08:55 +0000 Manifest next update: Fri 02 May 2025 01:08:55 +0000 Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: vz1K8VL1QMXDvAm3iB3YSOCXLQa4MOejIFYHkJ++G90=) 2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: F2rD9DTyJO/8KZY6J1+Hne/amu0UrQKM61Lrb0l7cz8=) 3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 741 (0x2e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: Apr 25 01:08:55 2025 GMT Not After : May 2 01:08:55 2025 GMT Subject: CN=680ae0a7-dafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:34:71:f7:2d:82:2e:05:47:19:c6:85:4b:61: f2:c7:40:b0:f8:83:64:e9:dd:62:3e:21:31:68:0a: 66:5a:c3:ca:3d:af:ba:92:16:8c:55:f2:e3:2e:bc: fa:1d:53:4e:f6:d8:b6:6e:e9:76:af:42:a0:43:5b: c1:79:b5:c2:f7:42:4f:41:7a:8e:ea:20:ab:61:bb: f5:f6:05:52:c3:bf:20:91:4d:d5:d7:0d:55:c1:e9: 01:41:67:65:df:4f:9a:93:3e:37:f1:bb:4f:cd:cf: 04:c9:6c:94:15:71:17:79:f9:05:14:0f:51:9d:8a: 36:77:cd:ed:7e:05:a6:11:50:ae:9c:4f:ab:e2:8e: 24:37:4b:0b:04:f0:dc:a6:a4:a0:54:13:a9:99:de: 05:d7:b7:c5:a7:8d:c3:a5:79:dd:0b:62:dc:24:62: 9b:1f:23:b8:0e:79:39:8d:9b:47:01:18:ce:df:af: df:06:d4:3b:db:55:97:06:33:89:dc:97:da:1e:c2: 9a:bd:54:9d:b8:41:ac:bb:b1:c6:63:24:6a:c4:55: 07:23:4d:d5:bd:99:84:43:84:64:41:da:4e:f7:e2: 7c:fb:e9:ae:1c:21:74:7c:f1:a6:61:d4:00:ca:25: cc:0a:4e:a1:23:9a:7a:0f:40:4e:c9:bc:a6:9f:59: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1E:42:66:D5:7B:C2:AB:94:C0:BE:C9:9D:31:4D:E9:3D:F7:86:E6 X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:a0:29:39:19:8f:77:2d:b4:c1:ee:73:64:2e:a8:db:38:5c: ae:bd:a5:86:fb:39:68:77:f8:5a:b5:18:a6:00:b9:b1:f6:1a: b0:ec:96:b0:ed:96:6b:c7:b2:d8:89:2f:21:d4:56:21:86:43: 3f:7a:e5:72:59:bc:ee:ff:c0:4f:cd:4c:a8:bb:2e:88:bc:c4: c5:56:23:d5:67:78:6c:fd:de:96:26:54:59:77:08:10:2e:53: f1:dd:e8:de:e0:83:94:f6:b0:9e:96:6c:87:e6:97:91:b3:96: 76:f0:68:03:94:0f:17:f1:4d:ec:a3:c2:44:c9:4f:ac:0c:26: f1:c6:94:e2:94:6c:14:22:e9:f8:47:2c:51:30:51:bc:1c:d2: b3:9e:7b:1c:e5:3f:b4:da:1f:8a:b7:66:8e:24:69:6e:1b:61: 2e:bf:2d:72:49:ee:ed:0d:57:00:fe:52:fe:7c:d2:6e:f5:91: 9c:90:80:f4:c4:da:5e:bc:28:b7:7a:ad:a0:d3:98:e9:f8:de: 3e:db:8f:a0:dc:11:62:79:4a:0a:6e:d4:1e:c2:02:cd:55:d1: 8a:4b:d3:7d:30:23:49:b2:89:b6:e4:c8:cb:1a:63:45:a6:3a: 99:45:de:42:24:90:e1:69:d7:28:fb:cb:a8:eb:fb:c7:c9:c4: 44:37:05:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjUwNDI1MDEwODU1WhcNMjUwNTAyMDEwODU1WjAYMRYwFAYD VQQDEw02ODBhZTBhNy1kYWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zRx9y2CLgVHGcaFS2Hyx0Cw+INk6d1iPiExaApmWsPKPa+6khaMVfLjLrz6 HVNO9ti2bul2r0KgQ1vBebXC90JPQXqO6iCrYbv19gVSw78gkU3V1w1VwekBQWdl 30+akz438btPzc8EyWyUFXEXefkFFA9RnYo2d83tfgWmEVCunE+r4o4kN0sLBPDc pqSgVBOpmd4F17fFp43DpXndC2LcJGKbHyO4Dnk5jZtHARjO36/fBtQ721WXBjOJ 3JfaHsKavVSduEGsu7HGYyRqxFUHI03VvZmEQ4RkQdpO9+J8++muHCF0fPGmYdQA yiXMCk6hI5p6D0BOybymn1lPQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIeQmbV e8KrlMC+yZ0xTek994bmMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy X19kM0lubzNKZFlCN1pFRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0oCk5GY93LbTB7nNkLqjbOFyuvaWG+zlod/hatRimALmx9hqw7Jaw 7ZZrx7LYiS8h1FYhhkM/euVyWbzu/8BPzUyouy6IvMTFViPVZ3hs/d6WJlRZdwgQ LlPx3eje4IOU9rCelmyH5peRs5Z28GgDlA8X8U3so8JEyU+sDCbxxpTilGwUIun4 RyxRMFG8HNKznnsc5T+02h+Kt2aOJGluG2Euvy1ySe7tDVcA/lL+fNJu9ZGckID0 xNpevCi3eq2g05jp+N4+24+g3BFieUoKbtQewgLNVdGKS9N9MCNJsom25MjLGmNF pjqZRd5CJJDhadco+8uo6/vHycRENwXt -----END CERTIFICATE-----Generated at Sat Apr 26 12:21:52 2025 by rpki-client