$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: zdRpHbHmi9GhvJk12E7HMbL1IlsMTqeigWXlp7clUbw= Subject key identifier: FA:FA:96:08:80:62:36:EF:79:A6:66:E6:7B:5E:AC:AA:34:3E:4C:2F Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 03AC Signing time: Fri 25 Apr 2025 00:28:44 +0000 Manifest this update: Fri 25 Apr 2025 00:28:43 +0000 Manifest next update: Fri 02 May 2025 00:28:43 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: F84cJMMSbbbyhM3flxEf5wR/dyAfIyXaxUl+Z3f84Co=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 950 (0x3b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833, serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Validity Not Before: Apr 25 00:28:43 2025 GMT Not After : May 2 00:28:43 2025 GMT Subject: CN=680ad73c-2b6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:91:9b:e7:6c:98:87:20:57:35:88:7f:74:bc: c4:14:58:a0:58:48:16:3a:ee:1f:d7:67:d0:eb:86: 62:59:2f:6d:c9:8e:ad:c2:89:3a:b5:ba:1c:fc:90: 80:e7:33:b6:24:0b:ef:c5:63:f3:9d:a0:c3:2b:4d: 78:80:c2:51:ac:14:12:55:77:da:2c:f3:69:52:31: 9c:6b:17:77:55:4c:ea:ca:6f:bd:e7:06:ea:c7:48: 57:25:79:1b:b2:a7:9f:3a:9b:0e:8a:c0:ab:2d:1f: 59:6b:8b:8c:ce:2c:77:eb:cd:f6:cc:6b:0e:0d:02: 23:29:f8:af:25:3f:ad:49:88:06:a9:7b:25:cd:40: 18:ce:96:76:71:7d:e3:af:ee:2a:be:aa:7b:6d:2a: 19:fc:21:a8:a2:f1:2a:0e:c2:77:f4:a2:40:26:44: 4f:af:1f:6d:40:d9:20:b6:d3:2f:31:71:52:a3:17: f4:35:0e:2d:3b:87:6a:cc:92:bb:a0:25:c3:16:24: 3a:45:b9:ef:c4:3c:e5:4c:1d:57:81:e1:64:cd:c0: c3:06:2e:a7:a8:8b:ce:15:ae:44:4b:b7:75:98:08: 6b:99:e6:56:a5:74:cf:94:70:11:d3:4f:9e:07:7e: 11:52:42:eb:a4:49:6c:3c:52:b7:07:e9:e3:84:6b: a1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:FA:96:08:80:62:36:EF:79:A6:66:E6:7B:5E:AC:AA:34:3E:4C:2F X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:60:49:b3:c9:30:9a:0d:56:05:de:97:05:d2:96:75:96:e3: 89:68:25:26:ca:ea:e5:a8:eb:dd:c0:71:2a:1a:6e:65:64:8d: 15:b8:6d:50:ff:de:24:8b:ee:60:59:10:58:57:7e:df:87:11: 93:5e:33:58:e1:6b:11:32:58:b6:b3:17:f2:17:e1:8d:a4:56: 1b:b6:55:9c:80:35:86:c5:a1:63:1c:39:0d:3a:3a:f3:35:b8: e9:5c:74:af:c5:72:6f:cd:ba:cb:34:e6:bf:bb:5d:df:54:70: 1a:c0:3f:00:79:d9:5c:78:d0:8b:eb:55:c9:c9:17:2f:e2:81: 80:18:d1:17:80:3d:6b:21:60:a0:20:59:53:93:b2:c5:bf:c4: 5c:a0:ab:2a:f0:26:8b:3b:a5:c9:18:ec:6d:2e:be:43:47:26: 80:80:3b:18:f4:e1:be:a6:db:e9:24:98:98:4a:4d:2f:42:7c: fe:c3:33:6a:f1:08:a6:cf:83:c9:23:78:38:c5:cc:73:dc:96: f7:f5:1a:af:68:ea:fd:87:1d:09:05:ee:7e:93:7c:03:5b:90: 2b:ff:b3:c6:5e:b0:65:12:2b:bf:b3:1a:a6:72:14:bf:a4:02: b8:51:01:9d:3f:6a:ef:36:7a:aa:9e:20:ad:f2:d9:33:19:f2: 2f:01:c6:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwNDI1MDAyODQzWhcNMjUwNTAyMDAyODQzWjAYMRYwFAYD VQQDEw02ODBhZDczYy0yYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/ZGb52yYhyBXNYh/dLzEFFigWEgWOu4f12fQ64ZiWS9tyY6twok6tboc/JCA 5zO2JAvvxWPznaDDK014gMJRrBQSVXfaLPNpUjGcaxd3VUzqym+95wbqx0hXJXkb sqefOpsOisCrLR9Za4uMzix36832zGsODQIjKfivJT+tSYgGqXslzUAYzpZ2cX3j r+4qvqp7bSoZ/CGoovEqDsJ39KJAJkRPrx9tQNkgttMvMXFSoxf0NQ4tO4dqzJK7 oCXDFiQ6RbnvxDzlTB1XgeFkzcDDBi6nqIvOFa5ES7d1mAhrmeZWpXTPlHAR00+e B34RUkLrpElsPFK3B+njhGuhlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr6lgiA YjbveaZm5nterKo0PkwvMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZYEmzyTCaDVYF3pcF0pZ1luOJaCUmyurlqOvdwHEqGm5lZI0VuG1Q /94ki+5gWRBYV37fhxGTXjNY4WsRMli2sxfyF+GNpFYbtlWcgDWGxaFjHDkNOjrz NbjpXHSvxXJvzbrLNOa/u13fVHAawD8AedlceNCL61XJyRcv4oGAGNEXgD1rIWCg IFlTk7LFv8RcoKsq8CaLO6XJGOxtLr5DRyaAgDsY9OG+ptvpJJiYSk0vQnz+wzNq 8Qimz4PJI3g4xcxz3Jb39RqvaOr9hx0JBe5+k3wDW5Ar/7PGXrBlEiu/sxqmchS/ pAK4UQGdP2rvNnqqniCt8tkzGfIvAcZ+ -----END CERTIFICATE-----Generated at Sat Apr 26 14:28:49 2025 by rpki-client