$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft File: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft (raw, json) Hash identifier: /87y7PUX9mXwSvZj0sKn80CwJ1KMcULiv4owcV5WpdM= Subject key identifier: 82:83:09:57:D6:C6:57:C2:CE:8A:1E:A1:8F:13:AA:96:74:59:FC:AE Authority key identifier: D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B Certificate issuer: /CN=A91A5A57/serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft Manifest number: 86 Signing time: Fri 25 Apr 2025 05:31:12 +0000 Manifest this update: Fri 25 Apr 2025 05:31:11 +0000 Manifest next update: Fri 02 May 2025 05:31:11 +0000 Files and hashes: 1: 2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl (hash: /JBawqtWBMffRXLMSqCUwSiYvR7Y3PzUw5G5mZIM/hY=) 2: F6382C7A56EC11EF85879C50C4F9AE02.roa (hash: FxzQ/fIjW3ehlt8HpKRH7n5BfwlAuKegJIAFiGlOhTE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:31:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5A57, serialNumber=D9C5D82ABD30FDD20FA9CAF3D1ED867DB076956B Validity Not Before: Apr 25 05:31:11 2025 GMT Not After : May 2 05:31:11 2025 GMT Subject: CN=680b1e1f-4334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:70:c4:69:ba:49:ef:95:ff:af:18:79:4b: 4c:89:b7:49:e5:70:76:8c:e8:fb:8e:60:2b:68:68: d8:e1:f4:e1:bb:28:84:04:3c:11:c2:c0:02:8c:cd: 80:8d:eb:69:81:ff:90:d2:fa:d4:e4:35:59:a8:e4: ab:e7:cf:b1:9b:9c:6d:33:65:39:3a:1a:11:08:8b: 3b:ea:59:6c:88:ca:af:7f:fc:99:6c:f4:de:d9:4d: 3a:3a:11:7c:b6:c4:f4:c3:8d:f6:d7:35:53:6b:af: bd:87:1a:6b:da:92:3c:c6:49:bf:e9:b8:cf:64:70: b6:9f:77:4c:13:ba:89:df:6c:81:47:32:1b:0c:c6: 81:8c:94:cc:58:bd:cb:0b:cc:9b:35:c3:39:b1:d5: fc:56:71:1b:42:79:fa:66:fd:f9:4e:aa:e2:67:09: ff:4c:4e:84:00:36:12:98:f0:4c:06:13:e9:f7:70: 74:54:76:38:23:6d:8e:1a:e5:b2:1b:4d:34:f3:eb: 5a:5a:c7:81:54:01:ac:d8:c3:80:f0:8b:c8:32:ec: 9e:f6:9e:6f:2c:4b:83:58:29:83:26:bb:82:99:0a: 6c:bb:90:03:91:d4:a5:1c:14:76:db:44:e0:3e:9f: 65:e9:70:e0:81:dc:8d:2d:66:6e:87:9f:aa:de:4c: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:83:09:57:D6:C6:57:C2:CE:8A:1E:A1:8F:13:AA:96:74:59:FC:AE X509v3 Authority Key Identifier: keyid:D9:C5:D8:2A:BD:30:FD:D2:0F:A9:CA:F3:D1:ED:86:7D:B0:76:95:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2cXYKr0w_dIPqcrz0e2GfbB2lWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5A57/6E74831056EC11EF8A0CB24FC4F9AE02/2cXYKr0w_dIPqcrz0e2GfbB2lWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:8d:2a:ff:fd:e6:b4:4c:1d:02:8b:fb:68:66:a9:73:6e:9d: 7b:3f:8e:07:74:35:6d:df:6a:3d:8e:af:70:99:2f:08:3f:1f: 6b:f7:f6:8d:ff:8a:4c:34:f0:e5:96:76:ea:9a:42:6e:8d:f6: ec:df:6d:3a:74:8b:95:2a:fd:5a:33:63:bd:36:08:1f:44:34: 6e:36:4e:df:cd:cf:c9:de:62:64:0f:d2:9c:75:27:28:a7:29: 8d:5c:9f:0b:d2:8b:2c:56:20:7e:18:36:b8:09:3e:a6:a8:33: 40:7e:b4:f2:5e:da:0f:29:3d:ac:41:13:9e:7e:6c:bf:45:6c: be:04:11:d4:f7:8a:d5:49:13:7a:3f:68:8f:1f:88:bc:eb:50: 4d:49:24:77:a8:6b:a8:32:fd:d5:7e:9e:2b:7d:ad:c3:67:07: d1:68:09:d6:a4:1c:50:c6:44:17:5e:d6:dc:64:85:41:d4:b7: 21:d2:d4:fb:89:c9:d8:ab:2c:49:c6:4d:51:9c:f9:88:45:54: 6c:13:ae:6a:c8:89:12:85:92:71:1c:08:8e:e1:ae:f6:14:61: 19:7f:02:85:1b:88:02:21:8e:72:82:de:75:fd:48:e3:67:53: f6:44:57:a7:7f:ed:2f:a2:61:4c:e7:7b:63:01:a0:83:3c:d7: 29:57:1e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVBNTcxMTAvBgNVBAUTKEQ5QzVEODJBQkQzMEZERDIwRkE5Q0FGM0QxRUQ4NjdE QjA3Njk1NkIwHhcNMjUwNDI1MDUzMTExWhcNMjUwNTAyMDUzMTExWjAYMRYwFAYD VQQDEw02ODBiMWUxZi00MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHpwxGm6Se+V/68YeUtMibdJ5XB2jOj7jmAraGjY4fThuyiEBDwRwsACjM2A jetpgf+Q0vrU5DVZqOSr58+xm5xtM2U5OhoRCIs76llsiMqvf/yZbPTe2U06OhF8 tsT0w4321zVTa6+9hxpr2pI8xkm/6bjPZHC2n3dME7qJ32yBRzIbDMaBjJTMWL3L C8ybNcM5sdX8VnEbQnn6Zv35TqriZwn/TE6EADYSmPBMBhPp93B0VHY4I22OGuWy G0008+taWseBVAGs2MOA8IvIMuye9p5vLEuDWCmDJruCmQpsu5ADkdSlHBR220Tg Pp9l6XDggdyNLWZuh5+q3kwa1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKDCVfW xlfCzooeoY8TqpZ0WfyuMB8GA1UdIwQYMBaAFNnF2Cq9MP3SD6nK89Hthn2wdpVr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUE1Ny82RTc0ODMxMDU2 RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19kSVBxY3J6MGUyR2ZiQjJs V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJjWFlLcjB3X2RJUHFjcnowZTJHZmJCMmxXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUE1Ny82RTc0ODMxMDU2RUMxMUVGOEEwQ0IyNEZDNEY5QUUwMi8yY1hZS3Iwd19k SVBxY3J6MGUyR2ZiQjJsV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNjSr//ea0TB0Ci/toZqlzbp17P44HdDVt32o9jq9wmS8IPx9r9/aN /4pMNPDllnbqmkJujfbs3206dIuVKv1aM2O9NggfRDRuNk7fzc/J3mJkD9KcdSco pymNXJ8L0ossViB+GDa4CT6mqDNAfrTyXtoPKT2sQROefmy/RWy+BBHU94rVSRN6 P2iPH4i861BNSSR3qGuoMv3Vfp4rfa3DZwfRaAnWpBxQxkQXXtbcZIVB1Lch0tT7 icnYqyxJxk1RnPmIRVRsE65qyIkShZJxHAiO4a72FGEZfwKFG4gCIY5ygt51/Ujj Z1P2RFenf+0vomFM53tjAaCDPNcpVx5T -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:27 2025 by rpki-client