$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: Km2JXK7qVrIoWkfno6nxet5u5Hpgb4AgbinGiCSgRS8= Subject key identifier: 2F:46:E1:BD:FA:0A:17:C7:0A:80:0B:45:87:9A:B4:81:8D:7B:53:85 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 15D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 15C7 Signing time: Wed 30 Apr 2025 16:45:10 +0000 Manifest this update: Wed 30 Apr 2025 16:45:09 +0000 Manifest next update: Wed 07 May 2025 16:45:09 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: KPwq4/ThaAbJGvwqZZXrOT+ei8l8b5odwWin2wMtiQg=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: oNHAY+RH8azs+WtnEjYSGA9lvHIaeiPbqTK24H6N+nw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 16:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5591 (0x15d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: Apr 30 16:45:09 2025 GMT Not After : May 7 16:45:09 2025 GMT Subject: CN=68125396-4253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:58:4b:1d:7b:41:ae:f0:5a:42:54:e2:a6:db: 35:85:09:70:ca:f8:65:35:8f:7b:20:60:65:7e:ab: 75:32:e4:b2:95:29:7a:69:23:89:3a:cb:5a:bb:68: 1d:d4:41:95:f8:b3:f6:37:e4:c5:6d:89:43:17:a9: d3:da:d9:62:26:77:2b:a1:9f:47:e7:31:2d:6d:61: 1e:18:e2:2b:0e:09:fd:fd:20:3f:32:f4:cb:d4:39: d3:ed:52:91:ae:54:00:49:14:4d:0d:a2:23:5b:8c: a5:5f:b1:ab:7c:61:60:ec:7f:b7:52:87:61:37:a2: 19:b0:00:7e:71:d8:04:74:9c:e8:ef:62:6f:3b:54: af:40:90:4b:46:78:fe:f0:7f:03:e2:49:fa:b8:57: 76:47:c3:96:6f:1c:6e:1b:f7:34:ad:c6:86:24:23: 5e:eb:15:0f:27:b3:00:17:da:8c:eb:e0:46:da:7c: a3:5f:bb:9a:fc:95:11:5e:78:38:b1:0b:79:8e:69: d5:18:33:a8:37:83:70:dd:3d:dc:f1:d1:29:c1:14: 31:62:c2:42:4b:cb:5a:8a:de:b9:68:14:0e:3b:f4: 77:49:68:11:ac:fa:ad:78:3b:1d:56:46:00:95:35: c4:cb:81:2b:75:87:c1:3d:11:0c:99:9c:53:26:2f: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:46:E1:BD:FA:0A:17:C7:0A:80:0B:45:87:9A:B4:81:8D:7B:53:85 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:e9:70:93:4a:aa:06:23:0b:d4:51:6e:c0:8b:b5:f3:db:87: 23:56:59:f4:0c:21:e8:1f:68:84:8b:91:24:db:ab:7b:49:2e: 10:b2:12:65:07:80:42:9e:7c:08:eb:7e:0c:b1:4d:cf:35:51: 8e:5d:dc:2f:bc:b5:90:d0:41:88:ec:92:54:7c:b9:24:c2:99: 11:0e:67:ba:22:9a:1b:09:2f:e1:a7:4c:bc:76:59:57:cd:78: ac:49:56:4f:aa:ad:db:a0:f7:3f:f5:0a:0a:1d:46:ab:d4:cb: c3:70:aa:44:39:d2:8b:10:c4:3e:24:ec:a9:db:bd:48:a2:f4: 0b:74:4f:79:fe:02:05:a0:e6:e3:c1:17:fb:97:f9:4b:47:9d: d5:9e:bc:00:64:02:a7:f3:49:8a:c4:67:e0:e3:34:1e:2f:f2: 73:2e:62:14:33:77:39:db:cc:18:78:50:37:f0:8f:c8:61:4b: 3b:94:5e:d4:5b:b9:e8:1b:17:6e:bb:51:b8:76:e1:ca:9b:05: 1c:56:1d:59:b6:45:59:fd:f1:49:a7:4a:29:dc:62:2c:7a:73: 10:10:8e:02:3c:b3:81:63:fe:42:7f:f6:32:79:87:3a:8e:f1: cb:af:18:de:39:22:0e:4a:73:e5:b2:dc:6f:3f:94:f6:a0:42: 5f:fe:37:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUwNDMwMTY0NTA5WhcNMjUwNTA3MTY0NTA5WjAYMRYwFAYD VQQDEw02ODEyNTM5Ni00MjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FhLHXtBrvBaQlTipts1hQlwyvhlNY97IGBlfqt1MuSylSl6aSOJOstau2gd 1EGV+LP2N+TFbYlDF6nT2tliJncroZ9H5zEtbWEeGOIrDgn9/SA/MvTL1DnT7VKR rlQASRRNDaIjW4ylX7GrfGFg7H+3UodhN6IZsAB+cdgEdJzo72JvO1SvQJBLRnj+ 8H8D4kn6uFd2R8OWbxxuG/c0rcaGJCNe6xUPJ7MAF9qM6+BG2nyjX7ua/JURXng4 sQt5jmnVGDOoN4Nw3T3c8dEpwRQxYsJCS8tait65aBQOO/R3SWgRrPqteDsdVkYA lTXEy4ErdYfBPREMmZxTJi+bVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9G4b36 ChfHCoALRYeatIGNe1OFMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB26XCTSqoGIwvUUW7Ai7Xz24cjVln0DCHoH2iEi5Ek26t7SS4QshJl B4BCnnwI634MsU3PNVGOXdwvvLWQ0EGI7JJUfLkkwpkRDme6IpobCS/hp0y8dllX zXisSVZPqq3boPc/9QoKHUar1MvDcKpEOdKLEMQ+JOyp271IovQLdE95/gIFoObj wRf7l/lLR53VnrwAZAKn80mKxGfg4zQeL/JzLmIUM3c528wYeFA38I/IYUs7lF7U W7noGxduu1G4duHKmwUcVh1ZtkVZ/fFJp0op3GIsenMQEI4CPLOBY/5Cf/YyeYc6 jvHLrxjeOSIOSnPlstxvP5T2oEJf/jdh -----END CERTIFICATE-----Generated at Thu May 1 10:05:01 2025 by rpki-client