$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: ZztfccB65EnNPtEGAlE/gblXK1QohRV9y2XizEo0LCY= Subject key identifier: F5:B5:34:C9:94:37:20:4D:87:DA:BD:E9:BC:36:21:BA:2E:25:4C:BA Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 347A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 3477 Signing time: Thu 24 Apr 2025 14:48:59 +0000 Manifest this update: Thu 24 Apr 2025 14:48:58 +0000 Manifest next update: Thu 01 May 2025 14:48:58 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: Fwm+njUh3L5EaI2c6gVxmmYyZ7e4mDRI5zZO7TmSnD0=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 14:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13434 (0x347a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: Apr 24 14:48:58 2025 GMT Not After : May 1 14:48:58 2025 GMT Subject: CN=680a4f5b-7843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:ee:4d:bc:96:a6:a9:59:f4:18:0e:4c:a2: 90:8f:15:bc:63:bc:79:9b:a9:31:c6:47:3d:1e:80: 03:c5:8d:5f:fe:d4:69:00:25:c5:69:0b:49:79:b2: 8c:e8:c5:ae:7d:5b:66:ad:8c:c5:cc:32:d2:06:d9: bd:e3:10:cb:6d:a7:04:15:ee:cc:2d:6b:15:17:cf: 3c:ff:5e:d0:df:f5:25:02:97:87:17:54:ff:e6:ad: 10:a8:1f:c6:a9:fa:ac:9d:d0:94:d9:ee:4e:71:47: d5:ba:4f:16:3f:c3:5b:5e:c3:d1:40:9c:83:b8:04: 8e:1a:5b:80:6d:2b:6a:4b:a3:01:5d:a0:22:bd:d6: df:f6:e1:c7:e6:9a:01:7b:64:96:30:81:29:90:4a: 31:0d:44:b3:39:78:99:a4:69:df:ec:be:39:a4:2a: 79:29:c0:56:5b:c6:f1:1d:c8:9d:63:16:54:66:e6: f4:2f:d0:8b:47:e3:48:60:ae:42:f5:b0:0e:71:13: f7:1d:42:68:62:7d:4c:f6:e9:a9:a4:ba:22:7a:82: 94:1f:0c:2a:af:4c:92:17:50:8f:b6:3e:dd:58:4b: 73:fc:35:7a:05:b4:af:88:66:a2:e2:ef:ea:ad:7f: e8:bc:34:dd:b2:92:f2:0d:cc:26:5d:ce:6a:78:24: 5e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B5:34:C9:94:37:20:4D:87:DA:BD:E9:BC:36:21:BA:2E:25:4C:BA X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b9:7b:bc:3f:43:ba:6b:9b:03:8f:ff:48:72:cf:b3:56:5d: ce:06:1d:f2:c7:53:f4:da:d6:1d:51:2e:c3:64:b0:6d:b1:04: 73:97:1c:af:d1:14:4f:77:22:f2:b6:59:1e:a9:d8:e7:d2:93: 92:a1:3d:ab:a5:3a:7c:21:ca:60:46:c0:93:7c:14:b5:9f:f3: 61:25:66:37:5e:dc:be:1e:be:54:31:e6:8d:e3:3f:01:03:f8: 89:6b:49:83:87:f9:65:74:33:07:19:10:21:bf:61:4e:a8:b6: b2:37:aa:2d:1e:ce:29:8c:e8:f5:e0:2e:30:10:fd:28:da:eb: c0:bf:47:a6:fb:4e:d8:05:bc:6a:14:1a:d9:81:7a:36:96:c3: 0c:5f:b7:06:b1:bf:d2:3f:3b:03:86:81:d0:35:b1:34:b1:f5: 7a:69:c1:69:85:6d:2d:dd:57:a4:04:03:71:c6:0a:8a:5e:fd: 6f:c8:94:d5:41:76:52:72:0f:2b:c5:d0:95:e2:58:ea:e8:7d: 54:af:61:c1:f3:83:96:47:23:a7:0f:bb:20:bc:9f:0f:12:75: fc:27:13:b7:51:de:96:84:8b:52:52:9f:13:4a:85:30:df:88: 84:a0:28:e1:0b:9b:6b:1e:ca:7c:80:2d:c9:c5:e3:d1:62:f7: 8c:4e:44:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUwNDI0MTQ0ODU4WhcNMjUwNTAxMTQ0ODU4WjAYMRYwFAYD VQQDEw02ODBhNGY1Yi03ODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1JbuTbyWpqlZ9BgOTKKQjxW8Y7x5m6kxxkc9HoADxY1f/tRpACXFaQtJebKM 6MWufVtmrYzFzDLSBtm94xDLbacEFe7MLWsVF888/17Q3/UlApeHF1T/5q0QqB/G qfqsndCU2e5OcUfVuk8WP8NbXsPRQJyDuASOGluAbStqS6MBXaAivdbf9uHH5poB e2SWMIEpkEoxDUSzOXiZpGnf7L45pCp5KcBWW8bxHcidYxZUZub0L9CLR+NIYK5C 9bAOcRP3HUJoYn1M9umppLoieoKUHwwqr0ySF1CPtj7dWEtz/DV6BbSviGai4u/q rX/ovDTdspLyDcwmXc5qeCRe8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPW1NMmU NyBNh9q96bw2IbouJUy6MB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtuXu8P0O6a5sDj/9Ics+zVl3OBh3yx1P02tYdUS7DZLBtsQRzlxyv 0RRPdyLytlkeqdjn0pOSoT2rpTp8IcpgRsCTfBS1n/NhJWY3Xty+Hr5UMeaN4z8B A/iJa0mDh/lldDMHGRAhv2FOqLayN6otHs4pjOj14C4wEP0o2uvAv0em+07YBbxq FBrZgXo2lsMMX7cGsb/SPzsDhoHQNbE0sfV6acFphW0t3VekBANxxgqKXv1vyJTV QXZScg8rxdCV4ljq6H1Ur2HB84OWRyOnD7sgvJ8PEnX8JxO3Ud6WhItSUp8TSoUw 34iEoCjhC5trHsp8gC3JxePRYveMTkRk -----END CERTIFICATE-----Generated at Sat Apr 26 14:01:45 2025 by rpki-client