$ rpki-client -vvf rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft File: 2kdUAUEh0yaH2X05LZBgSagU_MM.mft (raw, json) Hash identifier: mQ1B4o7kCG8N4mpezNaOUr1VB0z8LSnMCnMF2ToAYFI= Subject key identifier: B5:27:41:93:FF:A5:75:24:49:39:28:72:6E:2F:F0:C4:14:F7:A8:D3 Authority key identifier: DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 Certificate issuer: /CN=A91777A6/serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft Manifest number: 022E Signing time: Fri 25 Apr 2025 01:42:08 +0000 Manifest this update: Fri 25 Apr 2025 01:42:08 +0000 Manifest next update: Fri 02 May 2025 01:42:08 +0000 Files and hashes: 1: 2kdUAUEh0yaH2X05LZBgSagU_MM.crl (hash: QAUhL0HOx9XLVtsF18fQDJaiWPHVwqHy193FzXhtksE=) 2: 930770F4244C11ED95AA5569C4F9AE02.roa (hash: DDdOGJKEKYKXbDa5vtjLSsnRV8BgpNNS0rM4LZRyfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777A6, serialNumber=DA4754014121D32687D97D392D906049A814FCC3 Validity Not Before: Apr 25 01:42:08 2025 GMT Not After : May 2 01:42:08 2025 GMT Subject: CN=680ae870-31d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:43:12:a2:93:c2:e0:62:d0:26:8e:92:35:de: 5c:45:d4:2a:9a:8d:3f:f9:9c:c2:da:e8:d1:cb:25: 25:32:2b:fc:30:b7:96:ca:50:d7:5e:9e:9e:6a:a2: e3:59:6a:65:2a:72:46:54:b4:82:bb:f5:9c:8a:7a: f4:0d:fc:7f:41:d4:9a:3b:1e:14:ac:6e:a6:14:7f: 79:62:88:0b:b5:b5:87:ea:51:26:aa:8e:b6:6c:76: 81:0c:42:83:e1:da:ff:45:e2:f1:eb:99:48:83:2d: e2:9f:d4:ef:9f:e4:d8:db:6f:ac:2d:eb:80:e5:d0: 33:8b:02:16:44:93:42:c6:05:9e:1a:a9:28:81:5f: fc:c7:65:c1:2a:64:b6:10:5c:a8:80:6f:18:f7:61: 64:a9:2c:80:ee:43:35:81:50:ee:1f:44:9d:3f:e9: 05:76:ae:5e:1b:bb:3e:80:c2:f2:d2:8a:65:d9:34: 77:89:e6:0b:1a:d6:b5:83:7b:7c:de:f6:f2:52:bc: 87:7a:87:ac:90:2a:67:95:60:ae:30:98:a3:b8:a2: 62:9c:6d:b7:0d:36:78:1a:2c:76:b5:b2:c5:3f:fd: ef:24:b2:c1:ce:0e:3e:5b:04:2c:1f:c2:95:b9:64: 37:01:d6:74:45:23:2b:09:d0:6f:18:02:d4:be:db: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:27:41:93:FF:A5:75:24:49:39:28:72:6E:2F:F0:C4:14:F7:A8:D3 X509v3 Authority Key Identifier: keyid:DA:47:54:01:41:21:D3:26:87:D9:7D:39:2D:90:60:49:A8:14:FC:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kdUAUEh0yaH2X05LZBgSagU_MM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777A6/C8A799D2244711EDB1655053C4F9AE02/2kdUAUEh0yaH2X05LZBgSagU_MM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:a7:34:0b:e0:d0:2e:56:92:72:5f:13:0b:2a:a6:42:c3: 5b:85:9a:6f:d2:41:e8:d3:1a:9a:ae:45:67:f1:ae:40:b4:9c: f7:42:05:fd:48:7e:7a:77:e8:ec:4a:0a:ea:39:11:b7:e4:df: a5:f6:9e:e2:bf:0b:fe:6a:8a:fb:4b:05:22:b0:65:74:07:fd: 7e:d0:d8:af:f1:9e:f3:24:a9:1f:21:32:0b:e3:1f:ae:31:c0: b8:63:81:43:5a:16:4e:1c:15:be:e3:32:77:dd:d3:b0:ed:98: 03:30:3b:67:54:36:56:16:92:75:77:b4:d7:d8:7b:ee:e2:a0: 92:21:dc:e1:0f:f7:97:8e:cc:e9:c9:ef:df:ab:86:d4:36:26: ae:6f:b6:1f:12:2a:90:b7:a9:ee:09:3f:de:3e:03:36:79:c1: 1d:0e:3c:1f:ee:b0:3b:81:c3:c8:16:34:00:9a:7d:20:e8:49: a7:bc:9e:7b:bf:dc:44:da:5a:c7:b1:ea:2c:ed:29:13:48:ec: 54:10:d8:44:54:5a:f1:1a:fa:2c:2b:d9:3d:0d:c7:fc:bf:ee: 46:6c:79:2f:ce:63:1c:18:10:bb:d9:fc:a5:20:2b:c2:fc:cf: db:64:08:fd:2e:d0:5c:00:02:be:44:44:88:22:20:40:89:53: 09:0d:15:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QTYxMTAvBgNVBAUTKERBNDc1NDAxNDEyMUQzMjY4N0Q5N0QzOTJEOTA2MDQ5 QTgxNEZDQzMwHhcNMjUwNDI1MDE0MjA4WhcNMjUwNTAyMDE0MjA4WjAYMRYwFAYD VQQDEw02ODBhZTg3MC0zMWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20MSopPC4GLQJo6SNd5cRdQqmo0/+ZzC2ujRyyUlMiv8MLeWylDXXp6eaqLj WWplKnJGVLSCu/Wcinr0Dfx/QdSaOx4UrG6mFH95YogLtbWH6lEmqo62bHaBDEKD 4dr/ReLx65lIgy3in9Tvn+TY22+sLeuA5dAziwIWRJNCxgWeGqkogV/8x2XBKmS2 EFyogG8Y92FkqSyA7kM1gVDuH0SdP+kFdq5eG7s+gMLy0opl2TR3ieYLGta1g3t8 3vbyUryHeoeskCpnlWCuMJijuKJinG23DTZ4Gix2tbLFP/3vJLLBzg4+WwQsH8KV uWQ3AdZ0RSMrCdBvGALUvttFawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUnQZP/ pXUkSTkocm4v8MQU96jTMB8GA1UdIwQYMBaAFNpHVAFBIdMmh9l9OS2QYEmoFPzD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdBNi9DOEE3OTlEMjI0 NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5YUgyWDA1TFpCZ1NhZ1Vf TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrZFVBVUVoMHlhSDJYMDVMWkJnU2FnVV9NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdBNi9DOEE3OTlEMjI0NDcxMUVEQjE2NTUwNTNDNEY5QUUwMi8ya2RVQVVFaDB5 YUgyWDA1TFpCZ1NhZ1VfTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO36c0C+DQLlaScl8TCyqmQsNbhZpv0kHo0xqarkVn8a5AtJz3QgX9 SH56d+jsSgrqORG35N+l9p7ivwv+aor7SwUisGV0B/1+0Niv8Z7zJKkfITIL4x+u McC4Y4FDWhZOHBW+4zJ33dOw7ZgDMDtnVDZWFpJ1d7TX2Hvu4qCSIdzhD/eXjszp ye/fq4bUNiaub7YfEiqQt6nuCT/ePgM2ecEdDjwf7rA7gcPIFjQAmn0g6EmnvJ57 v9xE2lrHseos7SkTSOxUENhEVFrxGvosK9k9Dcf8v+5GbHkvzmMcGBC72fylICvC /M/bZAj9LtBcAAK+RESIIiBAiVMJDRXX -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:01 2025 by rpki-client