$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: ok8ICrX4PC8vC41HPh1BGm69UNIjs96geYh/mbspggM= Subject key identifier: 24:7E:A4:BD:36:AB:E1:69:B2:49:F1:EB:2F:96:25:41:F7:2C:76:EB Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 096B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 095D Signing time: Thu 24 Apr 2025 20:05:57 +0000 Manifest this update: Thu 24 Apr 2025 20:05:57 +0000 Manifest next update: Thu 01 May 2025 20:05:57 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: LOeN/3X52wPVaZaIxvBOEyJhcY9S3WAiA32mLUJDC4s=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2411 (0x96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: Apr 24 20:05:57 2025 GMT Not After : May 1 20:05:57 2025 GMT Subject: CN=680a99a5-80f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:d0:c5:82:5e:74:4e:f6:64:6d:68:fd:66: b6:2a:79:e0:72:ea:52:f9:22:92:f3:6d:5e:99:9c: c7:21:cb:01:60:48:4d:ec:ba:74:e2:6b:6c:76:cd: 75:0e:8b:d8:dd:09:c4:2b:60:19:cd:de:92:41:0f: 2f:16:bf:a5:27:b6:bb:bf:de:42:b4:c1:dc:bd:6e: 41:fd:1a:96:a0:e9:5e:de:a6:da:f3:e4:a0:a4:b3: e3:f0:02:9a:c6:b2:4f:2b:c0:09:f9:19:15:92:f9: 90:aa:f4:4d:c1:94:63:a6:e0:ac:e6:4f:d2:ac:94: 57:09:cc:dc:68:62:84:63:6d:10:23:9c:89:6a:d8: e1:45:a4:c7:cd:f1:a4:d7:f9:f7:f7:8e:55:d9:43: 91:7e:7b:7b:34:8d:e1:a8:cf:88:fc:72:9c:9d:ff: 64:99:1a:fb:74:28:f1:76:a4:0e:94:4b:06:52:ec: 2c:9f:51:7e:ad:ab:6e:88:d1:c9:95:bf:54:8a:87: 2b:95:71:bd:0b:2f:68:d9:1e:96:be:85:58:42:7e: 96:e5:b4:7e:f8:d2:49:b8:6f:a8:05:94:9a:5e:df: 6b:55:79:bf:92:7e:5c:1c:2f:f1:39:e9:33:31:ba: f0:b1:75:48:b8:50:1c:03:46:ce:e2:30:88:55:c1: 9a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7E:A4:BD:36:AB:E1:69:B2:49:F1:EB:2F:96:25:41:F7:2C:76:EB X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:4c:4a:2e:a4:b9:2f:91:d8:95:5c:8f:bb:f5:75:ab:f7:a6: f7:ca:7c:d1:db:1f:71:6c:a3:99:1e:08:29:c3:cd:59:cc:4f: 5e:df:fb:e6:06:0d:d8:95:da:ef:4c:73:56:04:36:6d:bc:48: e8:2d:4f:d1:6a:82:a1:02:3d:af:b8:cb:d7:c9:78:a3:6d:21: b8:da:11:ec:10:88:99:34:43:f4:2f:3d:86:31:87:9e:60:47: f7:03:10:7a:f5:40:b9:73:65:b4:dc:67:32:05:c0:1a:74:1a: 8d:2c:36:b9:c8:3d:83:20:f9:ac:c4:49:e3:a4:3c:8d:38:af: b2:69:3a:b2:93:a3:b2:eb:5b:eb:b7:39:4c:90:95:07:32:cc: 76:95:8a:5f:47:7f:7b:97:30:4a:d6:ec:fc:03:88:96:36:ce: f9:8a:ba:1a:0e:51:69:f1:e7:65:b6:f3:e9:e9:e7:dc:bf:85: d8:f3:35:12:c3:6f:25:a9:25:0e:2d:d9:51:4d:67:c7:a1:df: 67:3f:45:2c:4f:09:25:52:0a:51:88:37:7e:3c:1b:d5:08:7e: fe:1d:df:e6:19:2d:51:fa:bf:11:2f:d9:13:fd:2a:8a:d9:dc: 1f:30:ef:6c:c2:c5:e9:ab:34:bf:21:84:72:04:30:38:8c:1d: 2c:b0:9a:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwNDI0MjAwNTU3WhcNMjUwNTAxMjAwNTU3WjAYMRYwFAYD VQQDEw02ODBhOTlhNS04MGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2DfQxYJedE72ZG1o/Wa2KnngcupS+SKS821emZzHIcsBYEhN7Lp04mtsds11 DovY3QnEK2AZzd6SQQ8vFr+lJ7a7v95CtMHcvW5B/RqWoOle3qba8+SgpLPj8AKa xrJPK8AJ+RkVkvmQqvRNwZRjpuCs5k/SrJRXCczcaGKEY20QI5yJatjhRaTHzfGk 1/n3945V2UORfnt7NI3hqM+I/HKcnf9kmRr7dCjxdqQOlEsGUuwsn1F+ratuiNHJ lb9UiocrlXG9Cy9o2R6WvoVYQn6W5bR++NJJuG+oBZSaXt9rVXm/kn5cHC/xOekz MbrwsXVIuFAcA0bO4jCIVcGa7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCR+pL02 q+Fpsknx6y+WJUH3LHbrMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkTEoupLkvkdiVXI+79XWr96b3ynzR2x9xbKOZHggpw81ZzE9e3/vm Bg3YldrvTHNWBDZtvEjoLU/RaoKhAj2vuMvXyXijbSG42hHsEIiZNEP0Lz2GMYee YEf3AxB69UC5c2W03GcyBcAadBqNLDa5yD2DIPmsxEnjpDyNOK+yaTqyk6Oy61vr tzlMkJUHMsx2lYpfR397lzBK1uz8A4iWNs75iroaDlFp8edltvPp6efcv4XY8zUS w28lqSUOLdlRTWfHod9nP0UsTwklUgpRiDd+PBvVCH7+Hd/mGS1R+r8RL9kT/SqK 2dwfMO9swsXpqzS/IYRyBDA4jB0ssJpn -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:36 2025 by rpki-client