$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft File: 2tXg1z0FSml7IoOa8fpKzZT1Cho.mft (raw, json) Hash identifier: ZzR0thXrEz7YI3+Eydd1So22tZTYd5z5xdmgEmeN2tc= Subject key identifier: A0:87:62:53:63:48:D4:91:A6:50:B3:98:42:43:00:A6:70:59:A3:19 Authority key identifier: DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A Certificate issuer: /CN=A9184F65/serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Certificate serial: B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft Manifest number: AD Signing time: Fri 25 Apr 2025 05:10:04 +0000 Manifest this update: Fri 25 Apr 2025 05:10:04 +0000 Manifest next update: Fri 02 May 2025 05:10:04 +0000 Files and hashes: 1: 2tXg1z0FSml7IoOa8fpKzZT1Cho.crl (hash: Sh5/j5O+wQnP2MfRwGeMlXl6g7tyqWIPtieIvfiq4AU=) 2: 6923942E252711EF948A5E18C4F9AE02.roa (hash: 0x0eSzOxBYHAqof1oT5c9wIXASU8irda6T6qsynIr4E=) 3: 9F0B162A252C11EFB58A7552C4F9AE02.roa (hash: recSAfAQrqtQaEHIzSjruotoH+IobzT5ObtgaKvqx8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184F65, serialNumber=DAD5E0D73D054A697B22839AF1FA4ACD94F50A1A Validity Not Before: Apr 25 05:10:04 2025 GMT Not After : May 2 05:10:04 2025 GMT Subject: CN=680b192c-e4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f2:a2:46:cd:be:fd:50:43:36:46:88:db:e5: 65:6e:89:53:80:d9:d7:8d:59:e4:bb:d6:8d:6c:9b: 03:ab:8f:ff:50:3f:32:16:06:fe:b0:a6:3b:09:2e: f8:b3:6a:16:4c:de:ca:6b:37:45:99:ac:64:7c:23: 4d:81:95:d0:53:66:af:b3:50:10:41:45:3d:b9:e3: 4f:84:bf:d9:51:82:50:ed:35:53:19:b8:3d:09:b3: e6:66:77:7f:b4:ad:93:0b:33:25:76:ca:61:fc:c8: 1e:e4:86:f0:d5:41:78:84:10:f9:30:04:53:ff:92: 24:a3:f4:8b:b1:f5:c5:8f:c5:90:26:b3:d9:b2:4a: 93:51:07:8c:86:ad:29:5b:91:2f:7d:86:f7:62:02: a2:1c:ed:de:42:c4:b2:4e:7d:9e:d6:7b:d7:77:69: bf:7f:39:2b:54:a3:df:0c:3f:78:63:a1:ac:ee:aa: 67:ae:d9:d4:2a:95:67:60:bd:89:ef:0f:5a:78:48: 5a:2f:29:28:88:2a:b7:40:9d:0a:55:d2:39:4b:04: bb:41:0d:7c:9d:6d:74:fa:ab:b4:14:67:80:cf:1b: 54:28:d7:14:ba:ea:42:d2:68:c6:c9:3c:56:04:9e: 87:39:5d:ec:8b:2f:98:83:12:fd:fa:90:94:d4:ab: 53:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:87:62:53:63:48:D4:91:A6:50:B3:98:42:43:00:A6:70:59:A3:19 X509v3 Authority Key Identifier: keyid:DA:D5:E0:D7:3D:05:4A:69:7B:22:83:9A:F1:FA:4A:CD:94:F5:0A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2tXg1z0FSml7IoOa8fpKzZT1Cho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F65/AC63ADC6252411EF82A95B74C4F9AE02/2tXg1z0FSml7IoOa8fpKzZT1Cho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:62:2d:e5:5e:f3:25:d4:5b:10:8f:1c:bb:ef:5a:be:ae: cf:bb:c9:fe:87:6f:3f:32:09:7f:c3:21:36:dd:67:17:6d:cd: d5:7f:94:4f:d0:ae:72:e2:a2:ee:23:5c:be:12:f7:51:ef:b6: e2:ad:67:e9:82:18:cc:e9:eb:cd:e5:89:d6:f1:7b:67:f9:05: 47:df:ff:92:8f:bb:8a:bf:21:25:8a:20:04:ba:3e:de:c1:3e: fb:d0:2d:0d:52:b1:c1:71:a0:8e:81:52:21:43:c0:15:bc:14: 39:10:07:bb:60:30:2c:3e:f2:ca:b7:ab:f9:bb:01:c8:ce:ba: f1:62:53:7e:30:2d:b2:cf:13:d6:4d:c4:c4:5a:cb:cf:09:55: 6d:93:20:74:86:db:ca:6c:37:8c:41:79:52:cc:53:68:a7:07: 57:94:f3:7d:b7:4b:64:61:89:e5:9a:b0:79:78:a7:2b:6b:b5: 84:09:06:c3:92:6e:07:8c:5e:86:63:b1:49:8a:eb:6e:18:d5: 3e:21:df:cb:98:2b:fb:8b:ab:31:19:d4:9f:6e:86:64:c6:9c: c8:a9:9c:84:42:da:83:33:20:21:86:e5:e5:0b:c9:7d:25:ae: f4:1b:24:1c:7d:23:1a:f1:b0:58:7d:5c:bc:69:5f:4e:c6:8d: 39:46:8b:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRGNjUxMTAvBgNVBAUTKERBRDVFMEQ3M0QwNTRBNjk3QjIyODM5QUYxRkE0QUNE OTRGNTBBMUEwHhcNMjUwNDI1MDUxMDA0WhcNMjUwNTAyMDUxMDA0WjAYMRYwFAYD VQQDEw02ODBiMTkyYy1lNGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw/KiRs2+/VBDNkaI2+VlbolTgNnXjVnku9aNbJsDq4//UD8yFgb+sKY7CS74 s2oWTN7KazdFmaxkfCNNgZXQU2avs1AQQUU9ueNPhL/ZUYJQ7TVTGbg9CbPmZnd/ tK2TCzMldsph/Mge5Ibw1UF4hBD5MART/5Iko/SLsfXFj8WQJrPZskqTUQeMhq0p W5EvfYb3YgKiHO3eQsSyTn2e1nvXd2m/fzkrVKPfDD94Y6Gs7qpnrtnUKpVnYL2J 7w9aeEhaLykoiCq3QJ0KVdI5SwS7QQ18nW10+qu0FGeAzxtUKNcUuupC0mjGyTxW BJ6HOV3siy+YgxL9+pCU1KtTvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCHYlNj SNSRplCzmEJDAKZwWaMZMB8GA1UdIwQYMBaAFNrV4Nc9BUppeyKDmvH6Ss2U9Qoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEY2NS9BQzYzQURDNjI1 MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNtbDdJb09hOGZwS3paVDFD aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0WGcxejBGU21sN0lvT2E4ZnBLelpUMUNoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEY2NS9BQzYzQURDNjI1MjQxMUVGODJBOTVCNzRDNEY5QUUwMi8ydFhnMXowRlNt bDdJb09hOGZwS3paVDFDaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGx2It5V7zJdRbEI8cu+9avq7Pu8n+h28/Mgl/wyE23WcXbc3Vf5RP 0K5y4qLuI1y+EvdR77birWfpghjM6evN5YnW8Xtn+QVH3/+Sj7uKvyEliiAEuj7e wT770C0NUrHBcaCOgVIhQ8AVvBQ5EAe7YDAsPvLKt6v5uwHIzrrxYlN+MC2yzxPW TcTEWsvPCVVtkyB0htvKbDeMQXlSzFNopwdXlPN9t0tkYYnlmrB5eKcra7WECQbD km4HjF6GY7FJiutuGNU+Id/LmCv7i6sxGdSfboZkxpzIqZyEQtqDMyAhhuXlC8l9 Ja70GyQcfSMa8bBYfVy8aV9Oxo05RovB -----END CERTIFICATE-----Generated at Sat Apr 26 16:56:48 2025 by rpki-client