$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: ZWw51mtSVq6ZGZ89Gg7VFb0ZA2Mc4RyJzOufH7ZX9ZA= Subject key identifier: 74:DD:C0:79:31:A8:69:F9:B0:85:BB:66:83:48:48:BA:72:2C:AE:33 Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 0187 Signing time: Fri 25 Apr 2025 02:56:36 +0000 Manifest this update: Fri 25 Apr 2025 02:56:35 +0000 Manifest next update: Fri 02 May 2025 02:56:35 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: Wf/uVBwQzipPlk6dTKyns/O97gUo6wKrk/rmxUS3ANY=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: GMwqHbyGhuMSUm48op4I5mi1ydXZr2Sf2bThmTPQeU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: Apr 25 02:56:35 2025 GMT Not After : May 2 02:56:35 2025 GMT Subject: CN=680af9e4-dafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:74:aa:df:38:b7:c8:28:0f:04:82:1b:44: 64:30:af:ed:96:9d:2a:37:e3:51:d3:d7:a3:b9:d8: c7:16:d5:14:64:6e:57:af:41:ae:16:e1:a8:bf:56: 01:f6:2c:1f:be:ab:3e:fe:09:9f:e9:f3:41:e4:b9: 61:a1:cc:2a:17:45:2e:67:81:3b:1b:35:1a:7c:60: e1:33:9a:5c:2a:fb:46:02:ce:b6:c4:c3:24:81:fa: 44:dc:62:60:52:ca:e6:9f:79:f5:71:af:1d:ef:b9: 35:14:b7:b8:98:8b:b7:2d:94:68:1d:71:ba:60:b0: 79:9a:5d:06:4b:3e:9a:d9:54:f3:96:ae:fe:21:eb: 02:9f:7a:ff:9d:02:b6:8c:04:26:3c:90:17:0c:77: cc:69:87:f2:79:5a:74:2c:54:66:d3:2c:f0:5f:5d: 4e:70:9a:4b:01:4e:b9:4a:07:91:a1:b3:be:b3:0c: 89:64:39:ae:8a:d5:3c:53:79:64:e4:00:f7:51:6b: 2a:63:d0:c3:9c:84:63:df:36:99:60:0d:8a:a4:75: 19:30:a5:62:c6:4f:6f:5a:79:56:89:c3:d9:fd:06: cb:ab:45:7c:97:c0:33:90:cb:c6:a4:ca:c8:e3:57: 55:de:ac:93:bd:fe:5f:df:da:ef:26:d6:cc:65:e4: fc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DD:C0:79:31:A8:69:F9:B0:85:BB:66:83:48:48:BA:72:2C:AE:33 X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a8:a2:ab:09:66:db:32:bc:39:9a:47:91:8d:20:1e:a1:b0: 5f:01:4f:87:19:09:e2:b5:92:2c:50:0d:4b:e2:92:22:87:26: 56:26:3b:7a:01:f3:14:22:2e:a8:62:32:eb:fb:ea:bd:78:9c: da:d5:fd:c3:f1:77:16:78:da:3f:4b:0c:0f:d6:2a:a5:b0:85: a5:58:f9:6e:00:49:a8:be:7f:73:0f:56:af:8f:f1:ca:e7:b2: 62:f2:15:e6:24:4e:1a:94:ca:8b:30:df:9c:4c:3b:b9:07:53: a6:72:18:63:f9:97:68:23:f3:4b:bc:9a:34:86:e1:c9:24:34: ab:5a:f4:d4:39:fa:99:7c:82:6e:14:6e:d1:5b:37:ba:80:f9: dd:08:bb:d6:fc:8c:66:8f:a6:90:3b:31:36:3a:2b:c3:60:7a: c0:9e:65:d4:28:90:74:fd:0d:3a:f0:08:60:16:86:c2:97:8b: f6:9d:d7:2c:2b:bb:50:7b:ea:74:b5:87:c0:17:f5:24:fd:0a: 03:d3:3f:8f:22:89:41:d8:88:74:fe:be:a3:a4:5d:15:8b:df: 34:9c:99:ff:11:f6:ca:f5:d3:92:33:bf:90:9d:08:a5:96:c2: 8d:f0:64:90:3e:8e:4f:3d:ff:31:5c:e0:67:5f:23:5b:e6:19: bf:9c:8a:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUwNDI1MDI1NjM1WhcNMjUwNTAyMDI1NjM1WjAYMRYwFAYD VQQDEw02ODBhZjllNC1kYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4x0qt84t8goDwSCG0RkMK/tlp0qN+NR09ejudjHFtUUZG5Xr0GuFuGov1YB 9iwfvqs+/gmf6fNB5LlhocwqF0UuZ4E7GzUafGDhM5pcKvtGAs62xMMkgfpE3GJg Usrmn3n1ca8d77k1FLe4mIu3LZRoHXG6YLB5ml0GSz6a2VTzlq7+IesCn3r/nQK2 jAQmPJAXDHfMaYfyeVp0LFRm0yzwX11OcJpLAU65SgeRobO+swyJZDmuitU8U3lk 5AD3UWsqY9DDnIRj3zaZYA2KpHUZMKVixk9vWnlWicPZ/QbLq0V8l8AzkMvGpMrI 41dV3qyTvf5f39rvJtbMZeT87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTdwHkx qGn5sIW7ZoNISLpyLK4zMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANqKKrCWbbMrw5mkeRjSAeobBfAU+HGQnitZIsUA1L4pIihyZWJjt6 AfMUIi6oYjLr++q9eJza1f3D8XcWeNo/SwwP1iqlsIWlWPluAEmovn9zD1avj/HK 57Ji8hXmJE4alMqLMN+cTDu5B1Omchhj+ZdoI/NLvJo0huHJJDSrWvTUOfqZfIJu FG7RWze6gPndCLvW/Ixmj6aQOzE2OivDYHrAnmXUKJB0/Q068AhgFobCl4v2ndcs K7tQe+p0tYfAF/Uk/QoD0z+PIolB2Ih0/r6jpF0Vi980nJn/EfbK9dOSM7+QnQil lsKN8GSQPo5PPf8xXOBnXyNb5hm/nIrM -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:36 2025 by rpki-client