$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: WBBVfPVSgnkL0Fa+YbqiLUZemmz5VJ1tj8t+oscReFY= Subject key identifier: B2:77:81:3B:1F:47:1A:30:E8:AD:E7:0F:48:2A:3A:2A:CE:A0:B6:2D Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C07 Signing time: Thu 24 Apr 2025 18:39:14 +0000 Manifest this update: Thu 24 Apr 2025 18:39:13 +0000 Manifest next update: Thu 01 May 2025 18:39:13 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: YefQm84cLXn48YDEEUItwjMyoQVMIVVaEfSoiHKtbV8=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3100 (0xc1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: Apr 24 18:39:13 2025 GMT Not After : May 1 18:39:13 2025 GMT Subject: CN=680a8551-6e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:c4:a4:97:00:38:9d:61:b8:2b:00:2d:0a: 5f:3c:b2:3e:ef:9e:4b:3d:0a:72:19:b6:a3:52:e6: 79:98:58:37:33:96:db:47:de:e0:a9:55:34:ff:eb: cc:8b:d1:90:f2:92:af:f9:06:4a:cd:61:8f:59:c4: bd:c5:f8:5d:52:f6:dc:44:83:61:b9:61:c3:40:1c: f8:c3:f7:83:17:9a:4e:f3:51:a6:5e:63:ec:e1:3f: 97:91:8c:54:f0:47:ad:7f:48:81:46:6e:0a:56:31: 71:4b:95:ba:15:ac:11:ee:2b:be:f1:cf:46:bf:7e: a2:53:35:91:e4:38:71:b7:03:9a:2c:30:4f:03:20: f7:37:d2:de:0d:32:cb:38:ce:c0:13:9b:c1:fd:e7: b5:39:d8:e2:68:99:32:0a:cd:4c:6c:9a:3c:47:9c: 6a:c8:8a:bf:59:b0:54:6c:4d:99:01:6e:4f:25:f9: ee:f6:88:42:bb:d3:49:11:bc:27:57:4d:92:17:f4: 03:14:da:54:c3:e8:83:54:b7:92:03:36:0d:9c:50: c3:3c:56:51:16:21:3b:84:50:ad:0b:09:32:44:4b: 2f:12:0e:68:e5:e2:cf:12:68:82:c6:bb:e9:4b:14: 8e:e1:31:ed:8e:fe:82:5d:c7:eb:97:c0:59:94:26: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:77:81:3B:1F:47:1A:30:E8:AD:E7:0F:48:2A:3A:2A:CE:A0:B6:2D X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:2c:1a:8c:9a:dc:46:d4:0a:4e:8d:f2:e1:15:ea:04:a9: b7:10:6a:7c:e5:23:7b:44:0b:a2:84:7b:8e:a0:2b:38:95:b3: 81:c5:1b:e6:ad:0d:a8:ab:f6:d5:77:83:f8:03:62:42:b1:10: ec:b2:14:18:55:ac:f1:f3:f8:c6:52:0b:70:32:b7:46:08:48: b2:15:3f:92:6a:99:ed:69:8e:f2:f0:96:ee:23:6c:5f:eb:a9: 32:f1:8a:9f:07:0e:58:f0:30:43:b5:bc:c6:4d:93:85:4c:fd: 96:7e:54:e1:49:32:6a:0b:69:b6:d8:51:0d:d9:95:cd:1b:ac: 5b:57:3e:32:1c:5d:34:c6:58:31:97:21:76:84:ce:75:87:7b: c0:e3:96:ab:c7:06:96:6b:35:de:0b:cc:6d:a0:c3:86:1d:bb: 34:c3:52:3f:1a:f5:cd:24:06:e0:84:4e:3e:32:a4:db:95:25: 49:1b:32:1b:f7:35:4a:ff:dd:63:ba:9e:ca:8b:c9:b2:fc:94: 1c:21:c3:36:b1:75:dd:39:42:25:07:5d:65:19:82:fd:4c:54: 07:aa:3e:8f:6a:45:e0:9a:ea:11:58:2e:d0:fd:26:d7:39:04: 8c:7c:f2:d1:3e:0e:80:25:5c:f0:08:f3:e2:f3:1e:10:b4:6e: 37:ce:e8:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwNDI0MTgzOTEzWhcNMjUwNTAxMTgzOTEzWjAYMRYwFAYD VQQDEw02ODBhODU1MS02ZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzH3EpJcAOJ1huCsALQpfPLI+755LPQpyGbajUuZ5mFg3M5bbR97gqVU0/+vM i9GQ8pKv+QZKzWGPWcS9xfhdUvbcRINhuWHDQBz4w/eDF5pO81GmXmPs4T+XkYxU 8Eetf0iBRm4KVjFxS5W6FawR7iu+8c9Gv36iUzWR5DhxtwOaLDBPAyD3N9LeDTLL OM7AE5vB/ee1OdjiaJkyCs1MbJo8R5xqyIq/WbBUbE2ZAW5PJfnu9ohCu9NJEbwn V02SF/QDFNpUw+iDVLeSAzYNnFDDPFZRFiE7hFCtCwkyREsvEg5o5eLPEmiCxrvp SxSO4THtjv6CXcfrl8BZlCaf4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJ3gTsf Rxow6K3nD0gqOirOoLYtMB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlIiwajJrcRtQKTo3y4RXqBKm3EGp85SN7RAuihHuOoCs4lbOBxRvm rQ2oq/bVd4P4A2JCsRDsshQYVazx8/jGUgtwMrdGCEiyFT+SapntaY7y8JbuI2xf 66ky8YqfBw5Y8DBDtbzGTZOFTP2WflThSTJqC2m22FEN2ZXNG6xbVz4yHF00xlgx lyF2hM51h3vA45arxwaWazXeC8xtoMOGHbs0w1I/GvXNJAbghE4+MqTblSVJGzIb 9zVK/91jup7Ki8my/JQcIcM2sXXdOUIlB11lGYL9TFQHqj6PakXgmuoRWC7Q/SbX OQSMfPLRPg6AJVzwCPPi8x4QtG43zujh -----END CERTIFICATE-----Generated at Sat Apr 26 15:24:18 2025 by rpki-client