$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: jYZSOHPi7eSazfRXO+jo11EMZvUoBZS0OC0LYVhcryY= Subject key identifier: 48:FF:29:38:61:F0:40:A2:5E:D3:48:50:1E:C6:6D:32:03:00:45:62 Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: BD Signing time: Fri 25 Apr 2025 04:58:46 +0000 Manifest this update: Fri 25 Apr 2025 04:58:46 +0000 Manifest next update: Fri 02 May 2025 04:58:46 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: wB76FZh3AxWgwfoNtnJHVoffqK2SBy/T5WJ6rXyb6yE=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: Apr 25 04:58:46 2025 GMT Not After : May 2 04:58:46 2025 GMT Subject: CN=680b1686-6fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:ac:3e:17:7c:94:f0:06:e1:cf:9a:88:39: 35:3a:59:53:80:69:b1:cc:af:e0:01:b2:c9:8a:c9: 57:40:4b:bc:d9:24:b8:0e:fe:67:2a:3d:d6:84:5e: 45:d0:67:79:47:b6:a5:ea:bb:2f:3a:37:07:8d:1a: 70:13:93:16:11:5d:c9:61:dd:41:2f:13:46:45:0c: 6f:da:65:57:ad:40:2d:8f:f3:95:f0:1e:51:e2:53: 28:93:0f:b7:b6:04:71:07:60:d8:9e:55:3f:bd:25: 1e:23:b8:22:82:29:ca:c3:92:d2:c8:5f:f9:73:83: f9:9d:05:27:78:bf:5a:79:1d:64:fe:00:51:3d:17: 79:a1:f3:e6:36:69:f8:f0:41:b9:dc:e0:84:c3:43: 49:cb:c2:42:14:72:31:c6:62:1d:b4:08:70:f4:ea: 81:4e:16:51:2e:42:60:b1:32:4a:ce:ee:1f:5d:2a: 00:7c:4d:5d:ef:d8:7c:14:9b:e9:05:1a:8b:04:dd: 63:a1:87:de:4a:3b:23:04:72:71:8b:7c:3e:fe:1c: 55:a0:c1:be:80:7e:9d:ab:f8:1e:bd:c0:0c:1f:50: bb:7b:15:09:74:22:87:d4:57:8e:82:6f:c0:d3:0e: f1:d2:a5:1e:df:2b:df:88:ce:8e:98:a3:69:0e:f4: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FF:29:38:61:F0:40:A2:5E:D3:48:50:1E:C6:6D:32:03:00:45:62 X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:95:99:a9:62:21:e5:70:6b:7b:3a:79:36:35:3f:0d:d9:e5: 8d:e0:64:f8:70:1d:eb:49:73:e8:89:99:7d:f1:8a:1d:d6:33: 4e:62:f1:c0:d8:6a:21:3e:5d:ef:69:5d:b1:33:a6:4f:cc:34: 4d:0a:ce:81:0c:56:7d:4f:87:05:a0:3c:aa:28:f6:d2:af:8a: 27:fd:91:b3:65:1c:33:30:df:84:e9:b0:2a:74:21:2a:2b:e2: 37:b6:c2:f6:ed:03:3b:6b:b7:76:4b:ef:96:a1:aa:d9:00:96: 3d:0f:cc:0a:10:1f:23:da:0d:70:b9:15:d5:ae:09:96:8e:d6: af:69:63:47:b0:91:3a:a8:4b:7a:8a:84:34:b2:97:34:bc:08: 60:61:98:35:a2:ac:ef:3d:2c:70:d1:ef:5d:e8:48:c0:a5:71: 62:4d:e5:8d:ea:3b:1f:fb:b7:61:f8:02:10:0b:51:90:ba:c9: 86:42:b4:ae:f4:9d:fc:4e:55:9c:c8:37:a2:5d:7d:c8:a5:d3: ac:e4:db:03:af:d4:69:04:c4:50:42:b8:59:94:b6:72:be:6e: 68:1f:a4:9f:df:d0:8e:2d:bf:c9:ff:d5:23:94:d6:f1:54:99: 5b:2f:c2:bb:f7:e8:08:dc:db:a5:c4:98:6d:b2:4a:48:0d:bd: d0:1a:04:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwNDI1MDQ1ODQ2WhcNMjUwNTAyMDQ1ODQ2WjAYMRYwFAYD VQQDEw02ODBiMTY4Ni02ZmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1USsPhd8lPAG4c+aiDk1OllTgGmxzK/gAbLJislXQEu82SS4Dv5nKj3WhF5F 0Gd5R7al6rsvOjcHjRpwE5MWEV3JYd1BLxNGRQxv2mVXrUAtj/OV8B5R4lMokw+3 tgRxB2DYnlU/vSUeI7giginKw5LSyF/5c4P5nQUneL9aeR1k/gBRPRd5ofPmNmn4 8EG53OCEw0NJy8JCFHIxxmIdtAhw9OqBThZRLkJgsTJKzu4fXSoAfE1d79h8FJvp BRqLBN1joYfeSjsjBHJxi3w+/hxVoMG+gH6dq/gevcAMH1C7exUJdCKH1FeOgm/A 0w7x0qUe3yvfiM6OmKNpDvRWjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEj/KThh 8ECiXtNIUB7GbTIDAEViMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAplZmpYiHlcGt7Onk2NT8N2eWN4GT4cB3rSXPoiZl98Yod1jNOYvHA 2GohPl3vaV2xM6ZPzDRNCs6BDFZ9T4cFoDyqKPbSr4on/ZGzZRwzMN+E6bAqdCEq K+I3tsL27QM7a7d2S++WoarZAJY9D8wKEB8j2g1wuRXVrgmWjtavaWNHsJE6qEt6 ioQ0spc0vAhgYZg1oqzvPSxw0e9d6EjApXFiTeWN6jsf+7dh+AIQC1GQusmGQrSu 9J38TlWcyDeiXX3IpdOs5NsDr9RpBMRQQrhZlLZyvm5oH6Sf39COLb/J/9UjlNbx VJlbL8K79+gI3NulxJhtskpIDb3QGgS4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:22:02 2025 by rpki-client