$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: qyfvo3S59xbPZdfoYCSqFkMFxFR7s7XbO1gOCguB4yw= Subject key identifier: 4B:4C:1C:EF:3A:23:1C:85:DF:20:D4:CC:D4:AE:95:9E:A5:1E:35:82 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 0197 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 0194 Signing time: Fri 25 Apr 2025 02:35:59 +0000 Manifest this update: Fri 25 Apr 2025 02:35:58 +0000 Manifest next update: Fri 02 May 2025 02:35:58 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: +unO1AOZanCoc2OCKy6tuww4FNDKbxEjUxkrjk3HY84=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: Apr 25 02:35:58 2025 GMT Not After : May 2 02:35:58 2025 GMT Subject: CN=680af50f-bd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:83:d0:40:44:31:bc:00:93:e7:8c:0f:aa:04: 85:ff:9c:d6:29:d3:ac:36:44:ac:2d:e3:37:49:3c: 3b:b7:54:c9:ae:b0:1b:47:02:47:a3:c2:09:d5:c9: f4:45:8b:42:37:61:5d:bf:ff:be:a1:9a:71:c4:02: 36:63:eb:4a:ed:0e:8b:a0:cb:88:90:ff:de:36:a4: f3:6a:b1:ba:3d:d5:4a:5b:d5:af:68:78:58:c3:d7: f5:8a:02:fd:8c:a3:1f:4d:91:f1:67:ca:c5:30:93: f4:05:42:04:b2:47:a1:9a:63:9c:3f:02:c1:2c:5c: 49:cd:d3:01:d4:d4:20:67:f5:cb:6b:10:28:d2:45: 79:08:d1:33:34:8c:52:9a:4f:9e:b7:97:56:28:97: 34:0a:09:39:83:16:63:0c:68:a1:02:c1:ed:d3:4a: 9f:e2:2a:a8:fa:ad:5d:29:af:95:34:c7:c8:45:a0: 2c:d5:99:04:fe:b6:34:04:8a:4f:e2:88:6e:73:11: 6a:5f:92:6f:7d:ad:8d:f5:67:8e:5c:1d:04:b9:c0: 5b:eb:bf:68:ba:d2:cc:da:66:76:0c:6b:74:99:56: b0:f1:f6:ca:05:a6:92:7c:c5:69:ab:05:fa:0c:12: 47:7d:ec:a9:aa:ca:54:a2:d8:7d:05:77:da:1b:88: 74:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4C:1C:EF:3A:23:1C:85:DF:20:D4:CC:D4:AE:95:9E:A5:1E:35:82 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:19:d3:91:df:be:55:ec:90:c2:28:ad:7e:47:4e:81:13:24: a9:22:f4:c5:3f:42:3a:b0:ef:c2:4d:ce:15:d0:3b:04:8b:c7: e2:9c:25:34:e3:c7:19:08:36:48:96:e7:f0:41:7b:57:c7:ed: 13:98:1a:bd:39:7e:54:dd:ef:8a:88:6e:08:da:fa:5b:54:87: a1:b5:52:6f:60:bd:44:19:87:61:5b:bf:ae:7d:9b:df:4b:39: 92:e8:7b:11:2c:a6:42:23:40:8b:2b:ed:4b:f8:78:37:5a:96: 5b:d4:d1:a8:ff:16:72:7e:12:5e:1f:78:5a:ff:c5:2f:f0:cd: fd:fa:c6:4c:b2:de:35:5f:a1:b0:45:79:47:02:67:31:97:98: c9:d9:a2:4e:3b:dd:e5:14:c0:d5:9f:76:21:1c:84:71:9d:c8: 73:4c:21:55:ec:26:57:47:63:2c:90:6b:67:39:10:2d:67:ea: d6:34:30:fc:8f:1e:3f:dd:1e:a6:40:d8:2e:86:28:8a:21:e6: 76:26:c9:ad:f9:b3:f0:4c:78:71:7c:fc:b4:fc:53:2b:d5:6f: 5f:3e:b9:13:38:52:ce:8b:45:c0:77:fd:f6:05:01:2b:60:87: 3c:4c:28:4d:ce:3e:96:47:80:22:2c:e1:0e:ee:74:3e:6c:45: 2e:db:ed:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUwNDI1MDIzNTU4WhcNMjUwNTAyMDIzNTU4WjAYMRYwFAYD VQQDEw02ODBhZjUwZi1iZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5YPQQEQxvACT54wPqgSF/5zWKdOsNkSsLeM3STw7t1TJrrAbRwJHo8IJ1cn0 RYtCN2Fdv/++oZpxxAI2Y+tK7Q6LoMuIkP/eNqTzarG6PdVKW9WvaHhYw9f1igL9 jKMfTZHxZ8rFMJP0BUIEskehmmOcPwLBLFxJzdMB1NQgZ/XLaxAo0kV5CNEzNIxS mk+et5dWKJc0Cgk5gxZjDGihAsHt00qf4iqo+q1dKa+VNMfIRaAs1ZkE/rY0BIpP 4ohucxFqX5Jvfa2N9WeOXB0EucBb679outLM2mZ2DGt0mVaw8fbKBaaSfMVpqwX6 DBJHfeypqspUoth9BXfaG4h0eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtMHO86 IxyF3yDUzNSulZ6lHjWCMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIGdOR375V7JDCKK1+R06BEySpIvTFP0I6sO/CTc4V0DsEi8finCU0 48cZCDZIlufwQXtXx+0TmBq9OX5U3e+KiG4I2vpbVIehtVJvYL1EGYdhW7+ufZvf SzmS6HsRLKZCI0CLK+1L+Hg3WpZb1NGo/xZyfhJeH3ha/8Uv8M39+sZMst41X6Gw RXlHAmcxl5jJ2aJOO93lFMDVn3YhHIRxnchzTCFV7CZXR2MskGtnORAtZ+rWNDD8 jx4/3R6mQNguhiiKIeZ2Jsmt+bPwTHhxfPy0/FMr1W9fPrkTOFLOi0XAd/32BQEr YIc8TChNzj6WR4AiLOEO7nQ+bEUu2+1S -----END CERTIFICATE-----Generated at Sat Apr 26 14:59:33 2025 by rpki-client