$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft File: 2GEUly4wzpwWBYrVn9v2mI0IORk.mft (raw, json) Hash identifier: BNerMhlnVroHELtZGczP5BeqhhM8CigW5NY/8sCMdR0= Subject key identifier: BE:BC:59:67:6D:39:A9:21:A7:7A:8E:B8:42:19:D1:17:A4:38:FB:30 Authority key identifier: D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 Certificate issuer: /CN=A91B1033/serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft Manifest number: 06C1 Signing time: Thu 24 Apr 2025 21:54:13 +0000 Manifest this update: Thu 24 Apr 2025 21:54:12 +0000 Manifest next update: Thu 01 May 2025 21:54:12 +0000 Files and hashes: 1: 2GEUly4wzpwWBYrVn9v2mI0IORk.crl (hash: LQYzwWq2rR4vq3h2wfC5koNlNXOOVTefqdNVZ79Rds8=) 2: F87F8298554311EBAAB65382C4F9AE02.roa (hash: MAjBjHq25tUzReWQ1rF0NI56VYERQs/LZrZBQC23acU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1033, serialNumber=D86114972E30CE9C16058AD59FDBF6988D083919 Validity Not Before: Apr 24 21:54:12 2025 GMT Not After : May 1 21:54:12 2025 GMT Subject: CN=680ab304-1b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:fc:29:1e:29:44:19:0e:fc:90:d6:0e:82: 29:d8:bb:ab:93:f1:e3:24:aa:dc:ed:a7:7e:c0:0e: 7f:1f:b2:c8:67:b9:a8:fd:1a:f1:63:7a:ef:dc:32: f8:4f:d6:21:f2:8d:f1:07:89:34:dd:1c:33:d9:59: 12:2f:b6:10:18:e1:7e:6a:c8:dc:32:68:b6:0b:10: c8:f3:8a:29:42:fd:b4:46:fd:b5:57:12:52:17:d7: 76:fa:62:49:48:8e:3d:63:cd:98:86:40:a4:36:99: ac:8a:4f:0f:bb:ea:de:41:5e:9d:bd:39:f6:4b:e0: 42:a5:fd:19:77:55:21:52:28:1d:72:49:97:b9:f5: ec:eb:0a:98:4c:6d:e8:ce:31:d8:97:ce:30:7b:cb: 53:c5:3c:86:d1:e9:20:bf:74:c4:81:1d:fb:1b:3c: 8b:c8:04:d2:7f:6a:ae:a7:30:5b:d2:41:3e:ba:90: 4c:98:99:57:c8:11:f3:d5:8b:9f:03:39:2d:6a:05: 9e:e9:e2:58:1a:27:ef:49:a7:03:1d:61:29:8a:3a: 0f:ea:f4:69:c6:41:64:62:62:07:93:14:43:f1:b0: 8b:8f:04:b3:4f:d7:b4:f7:bf:8e:1e:06:90:ae:40: 51:14:f8:d5:b2:09:76:6f:30:f0:17:04:fb:b2:99: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BC:59:67:6D:39:A9:21:A7:7A:8E:B8:42:19:D1:17:A4:38:FB:30 X509v3 Authority Key Identifier: keyid:D8:61:14:97:2E:30:CE:9C:16:05:8A:D5:9F:DB:F6:98:8D:08:39:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2GEUly4wzpwWBYrVn9v2mI0IORk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1033/378FDDAE554211EBA3CC727EC4F9AE02/2GEUly4wzpwWBYrVn9v2mI0IORk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:53:1e:d3:04:aa:7a:36:8d:05:75:79:1d:a0:07:14:2d:b1: af:7c:94:3b:7f:a5:27:85:07:bc:5a:fb:19:41:85:59:98:e3: f1:b2:84:39:56:fa:e7:17:00:0e:81:11:35:8c:d7:4b:32:fd: d8:ba:c0:f6:a1:4f:95:e6:f0:0e:59:b1:3e:f2:5f:ca:33:e7: cc:dd:70:a5:67:96:38:79:a8:53:9a:bc:6e:27:64:a1:41:4b: e8:26:1d:7a:6c:a9:31:b8:79:60:38:52:2d:47:b1:46:5c:e8: 05:9f:79:b3:ff:87:d8:e7:86:d7:1d:f8:d3:48:4d:e7:d4:b7: 2e:c0:14:b7:f7:cf:4d:eb:2a:34:2f:14:e5:53:fb:2a:dd:d2: e3:00:6d:0c:5d:e1:1c:d7:bb:8a:2f:bb:c3:1f:bf:40:e1:03: 15:c6:4d:92:03:85:c7:ff:69:3b:70:6f:9a:68:bb:44:a9:38: 54:96:76:b2:5f:bb:1e:8a:1f:17:49:0e:8d:81:b2:71:76:57: 7f:5d:7f:11:6a:c7:61:5e:ce:0c:e1:68:7b:71:2e:4e:2e:a6: bf:6a:4e:71:6b:e7:5f:96:63:00:bf:53:8f:0d:4e:dd:62:2f: ec:e8:f6:20:f9:66:17:43:f1:4c:6f:cd:07:5e:f4:56:2d:8a: 4e:87:54:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjEwMzMxMTAvBgNVBAUTKEQ4NjExNDk3MkUzMENFOUMxNjA1OEFENTlGREJGNjk4 OEQwODM5MTkwHhcNMjUwNDI0MjE1NDEyWhcNMjUwNTAxMjE1NDEyWjAYMRYwFAYD VQQDEw02ODBhYjMwNC0xYjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFH8KR4pRBkO/JDWDoIp2Lurk/HjJKrc7ad+wA5/H7LIZ7mo/RrxY3rv3DL4 T9Yh8o3xB4k03Rwz2VkSL7YQGOF+asjcMmi2CxDI84opQv20Rv21VxJSF9d2+mJJ SI49Y82YhkCkNpmsik8Pu+reQV6dvTn2S+BCpf0Zd1UhUigdckmXufXs6wqYTG3o zjHYl84we8tTxTyG0ekgv3TEgR37GzyLyATSf2qupzBb0kE+upBMmJlXyBHz1Yuf AzktagWe6eJYGifvSacDHWEpijoP6vRpxkFkYmIHkxRD8bCLjwSzT9e097+OHgaQ rkBRFPjVsgl2bzDwFwT7spnleQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL68WWdt Oakhp3qOuEIZ0RekOPswMB8GA1UdIwQYMBaAFNhhFJcuMM6cFgWK1Z/b9piNCDkZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTAzMy8zNzhGRERBRTU1 NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pwd1dCWXJWbjl2Mm1JMElP UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJHRVVseTR3enB3V0JZclZuOXYybUkwSU9Say5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAzMy8zNzhGRERBRTU1NDIxMUVCQTNDQzcyN0VDNEY5QUUwMi8yR0VVbHk0d3pw d1dCWXJWbjl2Mm1JMElPUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqUx7TBKp6No0FdXkdoAcULbGvfJQ7f6UnhQe8WvsZQYVZmOPxsoQ5 VvrnFwAOgRE1jNdLMv3YusD2oU+V5vAOWbE+8l/KM+fM3XClZ5Y4eahTmrxuJ2Sh QUvoJh16bKkxuHlgOFItR7FGXOgFn3mz/4fY54bXHfjTSE3n1LcuwBS3989N6yo0 LxTlU/sq3dLjAG0MXeEc17uKL7vDH79A4QMVxk2SA4XH/2k7cG+aaLtEqThUlnay X7seih8XSQ6NgbJxdld/XX8RasdhXs4M4Wh7cS5OLqa/ak5xa+dflmMAv1OPDU7d Yi/s6PYg+WYXQ/FMb80HXvRWLYpOh1Rs -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:03 2025 by rpki-client