$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft File: 2v3gvG4K06iVvHVtbDGh5httODs.mft (raw, json) Hash identifier: o3jUWgLmu0HpSDt83zj9m2lVEMy7n89deOHu1phpi+c= Subject key identifier: 14:AE:20:D3:05:EE:29:D3:80:5E:08:EE:1F:E1:B2:FB:29:30:79:7B Authority key identifier: DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B Certificate issuer: /CN=A918FCE2/serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft Manifest number: 0840 Signing time: Thu 24 Apr 2025 20:39:43 +0000 Manifest this update: Thu 24 Apr 2025 20:39:42 +0000 Manifest next update: Thu 01 May 2025 20:39:42 +0000 Files and hashes: 1: 2v3gvG4K06iVvHVtbDGh5httODs.crl (hash: 6NXERi2oRqL3fyZI+UD7Uzbz4LUdY161+WpqXIptlqY=) 2: 311DA6AA78F611EFAFD81B5BC4F9AE02.roa (hash: N273KJZBVvsgocX2roxdV3igs8iuW9HGezq7GTon2t0=) 3: 312D1714A6F211EFBD311B19C4F9AE02.roa (hash: 3WiuON+DZCyyzbg9J4hxbgh73YCM3rOmSlSP3M274IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:39:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FCE2, serialNumber=DAFDE0BC6E0AD3A895BC756D6C31A1E61B6D383B Validity Not Before: Apr 24 20:39:42 2025 GMT Not After : May 1 20:39:42 2025 GMT Subject: CN=680aa18e-31f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:c1:e2:04:05:01:2c:5d:dd:e5:da:82:e1: c9:23:83:9e:31:5d:77:ba:f1:99:c7:aa:ba:d8:d4: e4:26:2f:0c:20:65:7e:a5:68:e8:4a:49:40:02:d6: 8a:61:54:2b:06:f9:81:89:1d:d9:6d:7b:e3:0e:d8: ab:08:4e:87:c9:85:0a:45:72:8d:af:55:cb:5e:a5: 8e:92:57:0b:f8:59:f1:fb:e8:f9:4c:0d:44:f7:0c: f5:88:ba:92:32:8d:d3:8b:49:51:6c:26:26:cd:85: 64:53:28:df:f9:d0:d1:61:c7:ba:ee:03:2f:65:58: 05:c2:0d:2b:92:4c:65:6a:bc:08:4e:85:20:3e:22: 9d:b8:00:0a:47:ac:c3:0f:30:b3:6d:5e:de:24:30: d6:04:e7:f9:45:9d:74:68:9b:e3:ba:fc:fd:c2:e0: c2:fd:52:e1:6e:ca:40:36:06:cc:11:ca:54:db:7f: d4:6d:0c:56:89:81:5f:35:b5:fb:3c:4c:c6:e2:03: b2:a8:bf:5a:f1:38:c5:9b:15:ba:67:ac:c7:9a:0a: 9a:81:14:33:7b:27:13:7f:6e:aa:07:bd:17:c3:b1: 48:64:99:8e:15:9c:5b:d2:38:0f:50:38:c5:34:1d: 82:3c:4a:13:f1:9e:ee:00:54:8f:5f:e2:89:80:21: ba:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AE:20:D3:05:EE:29:D3:80:5E:08:EE:1F:E1:B2:FB:29:30:79:7B X509v3 Authority Key Identifier: keyid:DA:FD:E0:BC:6E:0A:D3:A8:95:BC:75:6D:6C:31:A1:E6:1B:6D:38:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2v3gvG4K06iVvHVtbDGh5httODs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCE2/6180C0A2CD6F11EA97548043C4F9AE02/2v3gvG4K06iVvHVtbDGh5httODs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ee:a5:bc:32:87:2c:af:ae:ee:1c:11:00:33:ec:40:da:cc: 44:bf:f7:d4:be:ab:7f:4a:c1:98:fe:13:9e:b6:e8:c5:e8:ea: 02:40:bb:4a:b4:f6:c5:13:a2:4e:a3:44:f2:1a:ed:8e:74:e4: 6f:ef:5f:c1:37:84:02:dc:25:1e:a9:d2:49:2f:e1:8a:74:82: 34:91:8c:1f:5c:57:a5:fc:6e:78:54:65:13:2b:ba:9a:c1:61: 29:82:82:2b:fd:cc:c0:28:ae:94:df:97:3b:3a:c9:2e:31:b5: 76:78:60:84:09:1d:83:41:e1:36:83:c7:02:34:3d:c2:46:f6: 00:47:22:69:b8:8b:c3:83:9e:fd:48:ba:01:78:f4:cc:84:43: 6f:6d:de:da:b4:fa:8a:f1:0f:cd:41:79:d0:64:57:ec:19:47: 4b:6c:55:12:dd:07:5a:ed:25:04:97:6c:00:e8:bf:d8:40:13: 6f:4b:59:9f:0a:e6:3f:c4:85:2b:c2:83:43:6a:60:dd:31:42: 76:9f:6a:51:0d:3f:65:d5:d7:96:c3:9e:b3:c9:45:f4:a6:61: 85:eb:03:9d:03:7f:5a:26:3d:60:42:be:27:e2:62:dc:5e:86: 26:d5:ed:80:80:a6:34:ea:f6:bc:9c:f2:af:62:ab:fa:c1:55: 30:07:00:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZDRTIxMTAvBgNVBAUTKERBRkRFMEJDNkUwQUQzQTg5NUJDNzU2RDZDMzFBMUU2 MUI2RDM4M0IwHhcNMjUwNDI0MjAzOTQyWhcNMjUwNTAxMjAzOTQyWjAYMRYwFAYD VQQDEw02ODBhYTE4ZS0zMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa/B4gQFASxd3eXaguHJI4OeMV13uvGZx6q62NTkJi8MIGV+pWjoSklAAtaK YVQrBvmBiR3ZbXvjDtirCE6HyYUKRXKNr1XLXqWOklcL+Fnx++j5TA1E9wz1iLqS Mo3Ti0lRbCYmzYVkUyjf+dDRYce67gMvZVgFwg0rkkxlarwIToUgPiKduAAKR6zD DzCzbV7eJDDWBOf5RZ10aJvjuvz9wuDC/VLhbspANgbMEcpU23/UbQxWiYFfNbX7 PEzG4gOyqL9a8TjFmxW6Z6zHmgqagRQzeycTf26qB70Xw7FIZJmOFZxb0jgPUDjF NB2CPEoT8Z7uAFSPX+KJgCG6EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBSuINMF 7inTgF4I7h/hsvspMHl7MB8GA1UdIwQYMBaAFNr94LxuCtOolbx1bWwxoeYbbTg7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNFMi82MTgwQzBBMkNE NkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2aVZ2SFZ0YkRHaDVodHRP RHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2M2d2RzRLMDZpVnZIVnRiREdoNWh0dE9Ecy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkNFMi82MTgwQzBBMkNENkYxMUVBOTc1NDgwNDNDNEY5QUUwMi8ydjNndkc0SzA2 aVZ2SFZ0YkRHaDVodHRPRHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn7qW8Mocsr67uHBEAM+xA2sxEv/fUvqt/SsGY/hOetujF6OoCQLtK tPbFE6JOo0TyGu2OdORv71/BN4QC3CUeqdJJL+GKdII0kYwfXFel/G54VGUTK7qa wWEpgoIr/czAKK6U35c7OskuMbV2eGCECR2DQeE2g8cCND3CRvYARyJpuIvDg579 SLoBePTMhENvbd7atPqK8Q/NQXnQZFfsGUdLbFUS3Qda7SUEl2wA6L/YQBNvS1mf CuY/xIUrwoNDamDdMUJ2n2pRDT9l1deWw56zyUX0pmGF6wOdA39aJj1gQr4n4mLc XoYm1e2AgKY06va8nPKvYqv6wVUwBwBv -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:39 2025 by rpki-client