$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: 8hAvJdMl3MYHptwnFkADc38fKNFNn55/8Cr4LC/r3BA= Subject key identifier: 4D:F5:87:C9:83:A3:40:5B:F2:E2:B1:26:2E:48:23:70:95:F0:E5:D0 Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 0190 Signing time: Fri 25 Apr 2025 02:42:15 +0000 Manifest this update: Fri 25 Apr 2025 02:42:15 +0000 Manifest next update: Fri 02 May 2025 02:42:15 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: 4tsMZ93+hlgEzLBEMAEYnWmuvUKw2cuo4YN60T6W/8Q=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: YyW2MZscKA/3QJ0o9lXLLeVy1S1F2mX9Ri00sryZxdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Apr 25 02:42:15 2025 GMT Not After : May 2 02:42:15 2025 GMT Subject: CN=680af687-fd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5e:4d:93:d2:91:2c:0e:f1:75:36:26:da:71: d8:a0:66:5f:b7:be:1f:ee:83:8a:a8:ca:f1:54:f4: 61:96:f1:c1:bd:c2:fb:44:e2:c5:5a:a5:66:98:76: ef:40:48:58:6c:cb:53:0b:1e:46:6f:57:94:dc:65: e6:92:b3:2a:18:be:a8:f0:95:60:b5:ce:1c:50:26: 03:4a:24:39:12:18:7b:d2:a8:b8:11:94:4d:8d:1d: 8e:34:d2:7d:60:e4:2f:da:8a:6e:2b:40:14:07:c0: 4d:04:60:65:7f:67:de:fb:c4:84:64:30:dd:6b:33: a2:78:1e:9b:18:77:97:30:0f:7f:fe:d2:ed:d4:cb: 64:e4:84:70:a6:d7:7a:f2:a3:3c:b2:f3:b7:de:6d: 23:f1:44:40:0e:d5:94:f7:b3:15:8c:82:7a:1a:bd: 2b:9e:f8:b6:e0:9d:ce:c2:e9:cd:47:44:af:74:07: 45:47:d5:a8:a1:de:f5:59:89:69:38:96:38:1e:21: f7:39:8a:07:93:89:dc:40:7c:bc:7b:81:ff:2d:c2: 98:8f:bb:dc:d1:07:4e:97:7d:a4:ab:33:8c:b4:44: 25:17:16:99:47:e9:e8:6c:17:30:74:30:82:8d:5c: 03:e5:55:16:cd:8b:d9:5d:f3:6f:3a:a2:b8:0a:a4: 55:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:87:C9:83:A3:40:5B:F2:E2:B1:26:2E:48:23:70:95:F0:E5:D0 X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b2:3a:8a:7e:07:26:09:4e:2a:22:fe:e1:62:f3:f3:38:05: 4d:e4:59:1f:ad:96:05:06:f6:5b:dc:ea:ed:21:a9:85:b7:1a: d8:cb:d2:cc:e0:d1:ce:32:84:15:c6:15:a5:a6:45:65:b7:76: df:bc:8f:f1:31:73:49:65:79:cd:7a:ad:47:a1:ca:8a:69:80: a9:65:ca:1e:18:3c:0c:3a:2f:0c:65:7f:3c:03:ed:47:f6:6f: be:18:4b:1a:fe:e1:a6:e6:df:ec:43:3d:53:62:d0:f1:9a:54: f5:2a:18:f2:27:51:ab:a6:2f:88:9b:5f:13:ef:05:06:2f:49: 5b:6f:40:a3:47:00:6d:7e:c8:f4:2f:92:42:d7:d0:82:1e:3b: b5:2b:f7:8a:48:95:56:7f:fd:09:aa:76:25:83:56:6a:3c:97: e5:13:d9:9a:f3:ed:f0:a8:90:9d:f1:72:0e:87:5a:da:bb:7b: 87:9d:70:3c:1d:cf:47:21:6f:3f:7e:86:ba:78:a6:9d:ec:cd: 27:31:7b:48:dc:bb:3f:b7:e7:28:1c:e1:74:24:9f:02:de:64: 0a:be:d7:e9:6b:a3:4e:6a:37:29:97:78:8a:f6:f6:13:50:91: 32:6c:d9:06:0f:f5:94:ef:1d:d7:1a:64:05:14:ab:09:be:08: 2a:c1:28:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjUwNDI1MDI0MjE1WhcNMjUwNTAyMDI0MjE1WjAYMRYwFAYD VQQDEw02ODBhZjY4Ny1mZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyF5Nk9KRLA7xdTYm2nHYoGZft74f7oOKqMrxVPRhlvHBvcL7ROLFWqVmmHbv QEhYbMtTCx5Gb1eU3GXmkrMqGL6o8JVgtc4cUCYDSiQ5Ehh70qi4EZRNjR2ONNJ9 YOQv2opuK0AUB8BNBGBlf2fe+8SEZDDdazOieB6bGHeXMA9//tLt1Mtk5IRwptd6 8qM8svO33m0j8URADtWU97MVjIJ6Gr0rnvi24J3OwunNR0SvdAdFR9Wood71WYlp OJY4HiH3OYoHk4ncQHy8e4H/LcKYj7vc0QdOl32kqzOMtEQlFxaZR+nobBcwdDCC jVwD5VUWzYvZXfNvOqK4CqRVQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE31h8mD o0Bb8uKxJi5II3CV8OXQMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUsjqKfgcmCU4qIv7hYvPzOAVN5FkfrZYFBvZb3OrtIamFtxrYy9LM 4NHOMoQVxhWlpkVlt3bfvI/xMXNJZXnNeq1HocqKaYCpZcoeGDwMOi8MZX88A+1H 9m++GEsa/uGm5t/sQz1TYtDxmlT1KhjyJ1Grpi+Im18T7wUGL0lbb0CjRwBtfsj0 L5JC19CCHju1K/eKSJVWf/0JqnYlg1ZqPJflE9ma8+3wqJCd8XIOh1rau3uHnXA8 Hc9HIW8/foa6eKad7M0nMXtI3Ls/t+coHOF0JJ8C3mQKvtfpa6NOajcpl3iK9vYT UJEybNkGD/WU7x3XGmQFFKsJvggqwSjs -----END CERTIFICATE-----Generated at Sat Apr 26 13:06:29 2025 by rpki-client