$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: ZmjMTYhntLedHZ8msTZ5Yur8X5hqLt0IH2fGYFjjpwI= Subject key identifier: 6F:DE:5E:1E:72:0F:A6:72:58:92:7A:74:01:84:2C:7A:39:4C:D7:B0 Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 011A Signing time: Fri 25 Apr 2025 03:55:07 +0000 Manifest this update: Fri 25 Apr 2025 03:55:06 +0000 Manifest next update: Fri 02 May 2025 03:55:06 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: bZxiYxPNB8jN+XpiFXGgxw+AhEhH1GTiFmyClMqYZas=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: 0mz+0e1i75LjHInfBODtd+9jL2NlY68nRhoEgkLCSZI=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: iSOdJt+BL8ENRxFcv4jaFJ7KNoHUX0Q/WLaLzbaI1bk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: Apr 25 03:55:06 2025 GMT Not After : May 2 03:55:06 2025 GMT Subject: CN=680b079a-55d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:b9:d5:ab:4e:d4:e5:0e:5f:bf:ee:bd:48:29: 8e:0b:76:c6:d5:ed:00:5b:d5:52:0c:bc:2f:b8:26: 6f:9e:81:01:2e:8f:79:5c:e4:19:d1:de:5b:33:90: fb:61:a7:e1:d5:25:9d:49:0d:0a:8f:b0:17:fd:5f: e9:7b:31:ad:86:d9:7d:6c:af:3f:a5:4d:55:b3:5e: 94:ee:9e:c0:bc:d5:e1:ab:74:6b:2a:71:f5:b2:87: 31:6f:07:2e:bf:6d:ce:2a:74:d9:c8:49:f0:ee:85: c7:f7:f6:78:4e:60:de:bf:bd:fa:ee:48:0f:70:2e: 6a:66:ce:2b:ef:48:5d:d0:c4:0f:74:8d:fb:81:88: bf:45:d6:3b:78:0b:90:16:7d:92:38:37:4c:9c:0c: 79:ad:04:07:3f:64:99:6a:bf:19:49:df:85:8b:65: e8:29:b6:10:b3:90:ec:95:9e:20:51:b3:32:61:c9: 78:b3:75:7c:43:b8:e3:70:98:d2:cb:fe:87:1e:e7: 5b:03:55:6d:75:39:ee:21:82:d2:0f:9e:5e:cf:7c: cb:8f:ef:91:eb:66:be:9a:cb:71:14:72:58:0d:a0: 66:5f:d6:4f:21:b3:91:c6:32:b4:38:60:03:73:e7: 90:79:18:38:36:84:02:80:92:04:f2:de:e6:a0:7d: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DE:5E:1E:72:0F:A6:72:58:92:7A:74:01:84:2C:7A:39:4C:D7:B0 X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:9e:21:a2:b2:a5:ed:93:71:0f:30:77:61:91:c7:b3:44:5a: 7f:55:e0:bf:03:6b:56:36:26:75:dc:95:04:62:68:68:1f:ea: 8b:6a:c9:f1:ee:6a:d9:9e:a6:83:e1:7d:fd:47:34:ab:86:13: 53:a0:e3:1f:51:45:8b:43:ac:ab:37:ed:23:b7:c9:31:dd:c4: 3e:6e:f7:b4:68:e1:50:4e:f2:86:d6:fd:a3:7b:e3:af:b7:16: d0:0c:6a:bb:b5:8b:bd:a9:a1:5b:eb:06:6b:83:a6:48:c2:1f: cf:10:7e:0c:fd:ce:f1:d6:f9:d4:d3:09:19:4d:b6:bf:67:5e: 85:68:ab:05:d3:46:30:f5:55:e1:90:43:87:b4:93:02:d9:8a: b2:c1:c5:5e:79:00:2d:fc:63:10:a7:f8:ce:89:8e:5d:ce:e6: 71:47:5d:49:f7:99:0b:78:1f:2a:6f:d5:00:7a:c0:f7:4c:b3: 3d:28:b5:ab:2c:ed:cf:35:fc:da:6b:3f:88:e3:06:7d:13:f8: 28:66:9b:b8:0f:db:36:ba:f3:9a:8e:6b:51:73:f7:16:0c:30: 2a:28:fc:b4:0e:83:a7:e4:0d:c3:a4:fa:59:c6:5f:b3:bc:b1: a6:fd:fd:d1:d6:9f:19:e1:be:e9:6e:90:9e:78:30:58:e4:c2: 85:d6:b2:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUwNDI1MDM1NTA2WhcNMjUwNTAyMDM1NTA2WjAYMRYwFAYD VQQDEw02ODBiMDc5YS01NWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rnVq07U5Q5fv+69SCmOC3bG1e0AW9VSDLwvuCZvnoEBLo95XOQZ0d5bM5D7 Yafh1SWdSQ0Kj7AX/V/pezGthtl9bK8/pU1Vs16U7p7AvNXhq3RrKnH1socxbwcu v23OKnTZyEnw7oXH9/Z4TmDev7367kgPcC5qZs4r70hd0MQPdI37gYi/RdY7eAuQ Fn2SODdMnAx5rQQHP2SZar8ZSd+Fi2XoKbYQs5DslZ4gUbMyYcl4s3V8Q7jjcJjS y/6HHudbA1VtdTnuIYLSD55ez3zLj++R62a+mstxFHJYDaBmX9ZPIbORxjK0OGAD c+eQeRg4NoQCgJIE8t7moH1EHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/eXh5y D6ZyWJJ6dAGELHo5TNewMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8niGisqXtk3EPMHdhkcezRFp/VeC/A2tWNiZ13JUEYmhoH+qLasnx 7mrZnqaD4X39RzSrhhNToOMfUUWLQ6yrN+0jt8kx3cQ+bve0aOFQTvKG1v2je+Ov txbQDGq7tYu9qaFb6wZrg6ZIwh/PEH4M/c7x1vnU0wkZTba/Z16FaKsF00Yw9VXh kEOHtJMC2YqywcVeeQAt/GMQp/jOiY5dzuZxR11J95kLeB8qb9UAesD3TLM9KLWr LO3PNfzaaz+I4wZ9E/goZpu4D9s2uvOajmtRc/cWDDAqKPy0DoOn5A3DpPpZxl+z vLGm/f3R1p8Z4b7pbpCeeDBY5MKF1rJF -----END CERTIFICATE-----Generated at Sat Apr 26 13:08:36 2025 by rpki-client