$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: ivsD0lT4C7im5pC7VevbDDfQgmn7poL3gc/q3wGAcOE= Subject key identifier: BC:F4:9E:04:A1:2E:31:29:25:54:D3:64:E7:88:1C:43:C3:EC:E0:BF Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 05F0 Signing time: Thu 24 Apr 2025 22:55:19 +0000 Manifest this update: Thu 24 Apr 2025 22:55:18 +0000 Manifest next update: Thu 01 May 2025 22:55:18 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: ShywrZgjVytR94co+AvqqpGu0imIMk/EK4sjJxy6RkY=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: aiFrMbTQ8pa6qGrU9w8Y+h6k5VVyo8+mDWmigq+L7zE=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1555 (0x613) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Apr 24 22:55:18 2025 GMT Not After : May 1 22:55:18 2025 GMT Subject: CN=680ac156-073b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e2:a3:b3:00:d5:1d:0d:51:3c:fa:93:c8:eb: f5:d6:05:e7:d8:31:1f:8e:43:4d:18:3a:0d:c0:0b: 4c:06:36:50:45:56:f8:60:68:b0:8b:5b:b3:ca:03: c2:05:60:17:0b:38:2b:b6:da:4a:ef:fd:66:65:04: 10:7e:42:09:a3:2b:0c:30:1b:b6:07:6f:e5:48:47: 1a:ca:bb:c3:22:bc:d1:dc:ad:36:bb:6d:62:cc:c8: a7:33:c5:8c:9a:36:2d:cd:4d:69:0a:6b:85:73:0e: bd:4b:c3:61:58:37:00:39:c0:39:e7:92:eb:c5:bf: e5:24:41:21:d4:bc:23:2f:da:63:b1:de:33:b1:cd: db:6e:f1:25:f2:ec:5e:32:d8:25:48:79:d5:38:66: da:fe:d7:49:c7:d7:e1:aa:75:b6:71:5c:30:e0:13: 87:5c:8d:84:b4:2b:cf:09:b2:ea:0a:9d:48:ca:e6: 72:eb:99:5f:de:9b:e7:2b:2d:d8:7b:6c:5f:4c:e4: 73:59:48:c1:12:2d:a6:d6:1d:ba:68:e4:46:1c:9e: 83:95:78:18:ed:37:5f:53:d1:6d:11:56:61:bc:b5: 8b:e7:07:30:52:9c:d1:0f:0f:40:22:99:d7:f6:f7: 9a:67:fb:a9:b0:6b:91:5b:2d:eb:23:5d:ca:db:e3: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F4:9E:04:A1:2E:31:29:25:54:D3:64:E7:88:1C:43:C3:EC:E0:BF X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:ce:3b:5d:00:a2:5d:10:ea:f5:ce:84:c1:d4:4c:f4:46:5d: f2:ee:9f:9a:35:ff:ea:ab:e3:11:0a:12:23:88:96:e3:79:b3: 39:61:b7:ca:af:c3:22:b9:b3:6d:c9:86:8e:28:f0:18:6b:09: c7:73:f4:80:32:1e:96:49:a6:90:aa:2c:80:c4:20:07:72:b8: ed:63:20:2e:79:89:08:29:3a:fe:52:2e:92:b0:f0:ec:32:99: 39:86:d3:0e:ba:b7:52:d2:f8:43:43:8c:e0:34:45:c0:26:5a: 29:c6:cc:69:9b:61:b6:80:fc:6e:04:ec:17:5d:c6:24:42:3f: a3:9c:0f:b2:22:57:43:ee:da:31:2b:ef:e4:e5:c4:84:78:a8: c2:ab:04:04:23:6d:0f:a0:cb:5c:b4:b8:61:61:42:88:27:49: 60:38:24:79:68:c1:71:11:d6:5d:05:70:a3:e8:67:f3:6b:3f: 52:76:04:e3:96:68:20:94:53:8e:c7:b5:87:1a:d5:08:ee:cd: 7b:c2:b0:72:d9:66:96:ea:2c:51:fb:0d:e1:90:64:06:a3:a9: 19:93:b5:b7:cf:26:41:a8:c3:c8:3d:50:3f:79:dc:38:93:8b: 57:69:77:4c:ca:cc:9a:45:bc:bf:f2:49:98:b7:10:74:23:b7: 8b:17:42:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwNDI0MjI1NTE4WhcNMjUwNTAxMjI1NTE4WjAYMRYwFAYD VQQDEw02ODBhYzE1Ni0wNzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArOKjswDVHQ1RPPqTyOv11gXn2DEfjkNNGDoNwAtMBjZQRVb4YGiwi1uzygPC BWAXCzgrttpK7/1mZQQQfkIJoysMMBu2B2/lSEcayrvDIrzR3K02u21izMinM8WM mjYtzU1pCmuFcw69S8NhWDcAOcA555Lrxb/lJEEh1LwjL9pjsd4zsc3bbvEl8uxe MtglSHnVOGba/tdJx9fhqnW2cVww4BOHXI2EtCvPCbLqCp1IyuZy65lf3pvnKy3Y e2xfTORzWUjBEi2m1h26aORGHJ6DlXgY7TdfU9FtEVZhvLWL5wcwUpzRDw9AIpnX 9veaZ/upsGuRWy3rI13K2+MgfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz0ngSh LjEpJVTTZOeIHEPD7OC/MB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzjtdAKJdEOr1zoTB1Ez0Rl3y7p+aNf/qq+MRChIjiJbjebM5YbfK r8MiubNtyYaOKPAYawnHc/SAMh6WSaaQqiyAxCAHcrjtYyAueYkIKTr+Ui6SsPDs Mpk5htMOurdS0vhDQ4zgNEXAJlopxsxpm2G2gPxuBOwXXcYkQj+jnA+yIldD7tox K+/k5cSEeKjCqwQEI20PoMtctLhhYUKIJ0lgOCR5aMFxEdZdBXCj6Gfzaz9SdgTj lmgglFOOx7WHGtUI7s17wrBy2WaW6ixR+w3hkGQGo6kZk7W3zyZBqMPIPVA/edw4 k4tXaXdMysyaRby/8kmYtxB0I7eLF0JD -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:57 2025 by rpki-client