$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft File: 2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json) Hash identifier: QtEFvcmkQNAas3LGs7GCPABka/aRf98BMSqH0U0P6qo= Subject key identifier: 82:D2:10:D9:1A:79:7C:A2:DC:85:3E:E1:BC:7A:BF:1D:2C:56:D6:D5 Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 Certificate issuer: /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft Manifest number: 04 Signing time: Fri 25 Apr 2025 07:12:31 +0000 Manifest this update: Fri 25 Apr 2025 07:12:31 +0000 Manifest next update: Fri 02 May 2025 07:12:31 +0000 Files and hashes: 1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: VAZ188/AZfgH6wDyY4hls7VJkDKL7//nxySn3VC4VBw=) 2: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1 Validity Not Before: Apr 25 07:12:31 2025 GMT Not After : May 2 07:12:31 2025 GMT Subject: CN=680b35df-380b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:fc:05:73:2e:70:39:65:08:d5:1e:ea:01: f4:79:27:b8:96:b0:6d:20:a6:f6:70:d3:47:32:8e: 75:43:64:dd:bd:ad:2a:b9:fb:e7:f3:9d:6d:9e:e2: 2b:fa:65:ad:fd:31:4b:30:43:a8:68:f0:c1:37:00: 98:06:82:19:f4:18:78:3b:d9:ef:a4:32:19:c0:b5: 0a:6a:02:fd:10:37:52:7f:f0:f8:2e:86:c5:b8:81: 55:3d:75:f1:d5:4e:c6:b7:72:16:e9:46:ee:a7:53: b3:7c:3d:db:92:02:33:3f:61:25:ee:25:5e:e9:15: 90:ad:bf:4e:7b:7c:e3:5b:f6:1d:fd:68:ce:a2:0b: d1:54:28:c3:16:be:70:26:a0:2e:91:e1:15:40:06: 30:e9:b1:7e:2b:a5:df:a3:5b:e1:c1:e3:ca:7d:f6: e1:41:60:fc:2a:2a:1d:38:47:7a:a4:01:30:41:9b: 01:c9:7a:bc:f3:1a:43:40:9e:d7:83:aa:70:2a:77: cb:27:4e:09:ec:81:81:a5:46:76:ae:ad:7e:46:17: 32:d4:c1:53:23:91:09:3b:b3:f3:fb:ad:da:8c:73: 1e:e3:28:2e:35:36:8b:15:87:ec:c3:58:b9:9d:38: 8b:9f:23:b8:97:dd:3a:9c:8a:eb:30:be:d7:42:d6: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:10:D9:1A:79:7C:A2:DC:85:3E:E1:BC:7A:BF:1D:2C:56:D6:D5 X509v3 Authority Key Identifier: keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:58:51:d5:24:fe:a4:00:57:7b:4d:22:8d:f0:14:58:93:e6: 7a:a5:50:b7:4e:a6:d6:f7:33:ed:6e:eb:b5:70:0b:20:84:31: 94:23:ff:c0:c6:40:86:d8:e3:a1:c9:4a:d5:30:14:a4:2d:1b: f5:46:b9:7e:ed:5a:bf:64:f0:39:ad:88:8a:e8:6e:89:f4:61: 46:a3:61:72:8a:0b:38:e5:2e:6c:77:21:c4:63:79:2a:e5:51: 5c:10:96:b2:9a:81:1e:e6:1c:02:04:e3:4e:08:73:2c:58:10: 91:e5:5b:7c:4c:89:86:84:bc:6a:ba:50:ff:36:dc:62:b3:93: b6:56:0a:02:a1:9e:cf:74:11:4a:30:93:ea:d1:76:70:34:33: 1c:a1:23:7b:5b:93:3d:2b:7a:69:13:51:2a:cd:d3:fa:5f:a3: ca:11:be:d0:4b:55:22:b1:0a:87:95:44:b8:20:bc:b8:b1:89: 3c:30:af:4c:fc:ef:87:42:cf:24:d7:6b:01:1d:f4:94:b1:2c: 12:56:14:5f:2c:8a:42:29:c7:e6:75:24:2c:c1:83:4b:61:5f: 2c:59:62:7a:c7:92:0d:6a:bd:69:87:db:f1:d1:49:f8:d7:45: 37:9c:0b:d0:79:ce:62:05:7a:91:75:1a:50:a6:63:e1:76:a5: be:f0:99:86 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QjZCQzExMC8GA1UEBRMoRDhCRUU5Njk1RDQzQjMzOUU3NTYzRjI0MTNCNzIzMTlE MTY3NzRCMTAeFw0yNTA0MjUwNzEyMzFaFw0yNTA1MDIwNzEyMzFaMBgxFjAUBgNV BAMTDTY4MGIzNWRmLTM4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCb7PwFcy5wOWUI1R7qAfR5J7iWsG0gpvZw00cyjnVDZN29rSq5++fznW2e4iv6 Za39MUswQ6ho8ME3AJgGghn0GHg72e+kMhnAtQpqAv0QN1J/8PguhsW4gVU9dfHV Tsa3chbpRu6nU7N8PduSAjM/YSXuJV7pFZCtv057fONb9h39aM6iC9FUKMMWvnAm oC6R4RVABjDpsX4rpd+jW+HB48p99uFBYPwqKh04R3qkATBBmwHJerzzGkNAnteD qnAqd8snTgnsgYGlRnaurX5GFzLUwVMjkQk7s/P7rdqMcx7jKC41NosVh+zDWLmd OIufI7iX3TqciuswvtdC1jiJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgtIQ2Rp5 fKLchT7hvHq/HSxW1tUwHwYDVR0jBBgwFoAU2L7paV1DsznnVj8kE7cjGdFndLEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNkJDL0EwMzBDRDMwMjA0 QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRM RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkw3cGFWMURzem5uVmo4a0U3Y2pHZEZuZExFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC NkJDL0EwMzBDRDMwMjA0QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3pu blZqOGtFN2NqR2RGbmRMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG5YUdUk/qQAV3tNIo3wFFiT5nqlULdOptb3M+1u67VwCyCEMZQj/8DG QIbY46HJStUwFKQtG/VGuX7tWr9k8DmtiIrobon0YUajYXKKCzjlLmx3IcRjeSrl UVwQlrKagR7mHAIE404IcyxYEJHlW3xMiYaEvGq6UP823GKzk7ZWCgKhns90EUow k+rRdnA0MxyhI3tbkz0remkTUSrN0/pfo8oRvtBLVSKxCoeVRLggvLixiTwwr0z8 74dCzyTXawEd9JSxLBJWFF8sikIpx+Z1JCzBg0thXyxZYnrHkg1qvWmH2/HRSfjX RTecC9B5zmIFepF1GlCmY+F2pb7wmYY= -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:58 2025 by rpki-client