$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft File: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft (raw, json) Hash identifier: e6/0q00DQULGwmcQcP1j+L159IB0KAbERVOmSX9HP4s= Subject key identifier: 1F:B4:BA:39:22:52:2F:40:F7:1D:3B:23:E0:08:71:41:A7:84:1E:84 Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E Certificate issuer: /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft Manifest number: 019A Signing time: Fri 25 Apr 2025 02:30:59 +0000 Manifest this update: Fri 25 Apr 2025 02:30:59 +0000 Manifest next update: Fri 02 May 2025 02:30:59 +0000 Files and hashes: 1: 2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl (hash: TX5ZUT3zfR7WPi4c9hSBIkCNMVgDHKC99lirPEzALwY=) 2: A6CBF914AC3411EDB324F037C4F9AE02.roa (hash: mUitWyAia7OYZSrqATEphyypaSxSHUc51lFfEosaW+E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:30:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E Validity Not Before: Apr 25 02:30:59 2025 GMT Not After : May 2 02:30:59 2025 GMT Subject: CN=680af3e3-69ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:02:c2:cf:12:54:d7:93:c4:c2:20:ca:1b:29: 5b:8e:6d:a3:ca:b7:b7:5f:e2:7d:32:f2:e9:41:d4: da:ce:19:aa:70:c2:c4:c0:0a:59:7b:c8:48:bb:35: 73:4b:cf:cb:7c:ff:c9:b4:ec:40:d6:2d:61:48:5b: 63:51:de:c1:84:f8:a2:4c:91:5b:02:ac:95:65:20: 20:3c:0d:15:91:ba:3f:6a:7e:43:79:b1:5e:37:bb: 46:e9:e6:89:5a:f3:c1:a2:e9:45:b5:42:46:44:db: f7:59:01:b5:42:13:05:67:e7:f2:b6:63:a0:86:3d: 1c:c3:91:04:27:76:79:03:8b:14:dc:72:87:f4:ff: d7:0d:18:70:41:fe:c0:59:6b:9f:1b:3e:05:b1:45: 54:64:29:87:77:cc:5d:8a:fd:b8:67:e5:36:ac:42: 91:80:02:c3:a3:3b:23:76:d5:85:9f:b9:4d:fd:c1: a2:80:1f:a6:d1:10:e7:d1:68:e7:86:0b:f3:bf:bb: 1f:00:ce:1a:5a:47:d6:02:a9:37:a6:25:40:06:53: ac:09:9d:6c:a4:90:29:00:fe:6c:e6:2d:9a:15:d3: 98:cc:94:14:44:3b:44:20:e1:3c:95:fa:64:b1:8f: 49:4b:8a:0e:05:a3:7b:2d:8e:a5:46:8f:34:7f:f0: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B4:BA:39:22:52:2F:40:F7:1D:3B:23:E0:08:71:41:A7:84:1E:84 X509v3 Authority Key Identifier: keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:0d:72:e6:4a:27:b6:89:ea:62:36:7c:7e:ff:f6:37:fa:5b: af:c1:91:d5:34:cb:a3:63:32:a5:9a:02:04:ae:f2:85:14:02: c6:49:a0:98:e7:af:fc:d5:f1:94:f0:a5:0d:81:73:4a:9b:ad: e3:cf:96:d6:69:b2:40:44:4a:eb:45:b1:01:14:05:d2:11:d4: f1:ca:e2:e4:66:5c:90:05:fd:2a:f5:7c:c0:7c:c9:7d:d3:49: 0b:df:b5:0a:4e:c5:31:e4:8e:4a:4d:ac:e0:85:c2:4e:a8:d2: 8c:9b:76:6c:81:3a:c5:60:5b:48:86:e5:06:0d:1a:12:03:7a: e3:2a:ab:ca:c8:44:98:d5:09:d5:53:9b:3d:40:23:13:83:34: 66:a2:c9:12:8f:c6:6e:04:d3:60:32:3b:28:c9:90:71:93:c7: 25:5f:66:b9:6b:2a:be:55:43:e5:fa:71:0b:d6:97:5c:72:fa: 7c:0f:24:11:b5:1f:d4:0e:6d:b7:cb:42:d9:e7:33:a7:c1:7b: 78:79:86:02:7a:e1:87:ea:b7:2c:11:95:d1:90:61:39:49:26: d4:74:72:d4:de:13:bd:53:3b:0f:6b:ba:c9:5b:e8:e0:ff:91: 3f:a8:65:8c:a8:a6:df:91:7f:d7:0a:e8:76:3c:e5:a4:b7:c6: c5:14:20:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUzNzQxMTAvBgNVBAUTKEQ4NEJDRDZDNTgwOTI3OUJDQkNDMEE1NkFENEExNjgz MjMwRjQzM0UwHhcNMjUwNDI1MDIzMDU5WhcNMjUwNTAyMDIzMDU5WjAYMRYwFAYD VQQDEw02ODBhZjNlMy02OWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9gLCzxJU15PEwiDKGylbjm2jyre3X+J9MvLpQdTazhmqcMLEwApZe8hIuzVz S8/LfP/JtOxA1i1hSFtjUd7BhPiiTJFbAqyVZSAgPA0Vkbo/an5DebFeN7tG6eaJ WvPBoulFtUJGRNv3WQG1QhMFZ+fytmOghj0cw5EEJ3Z5A4sU3HKH9P/XDRhwQf7A WWufGz4FsUVUZCmHd8xdiv24Z+U2rEKRgALDozsjdtWFn7lN/cGigB+m0RDn0Wjn hgvzv7sfAM4aWkfWAqk3piVABlOsCZ1spJApAP5s5i2aFdOYzJQURDtEIOE8lfpk sY9JS4oOBaN7LY6lRo80f/BWYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+0ujki Ui9A9x07I+AIcUGnhB6EMB8GA1UdIwQYMBaAFNhLzWxYCSeby8wKVq1KFoMjD0M+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTM3NC80MDYwMzU2MkFD MzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1dkx6QXBXclVvV2d5TVBR ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJFdk5iRmdKSjV2THpBcFdyVW9XZ3lNUFF6NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTM3NC80MDYwMzU2MkFDMzExMUVEOTI4QjE5MzZDNEY5QUUwMi8yRXZOYkZnSko1 dkx6QXBXclVvV2d5TVBRejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTDXLmSie2iepiNnx+//Y3+luvwZHVNMujYzKlmgIErvKFFALGSaCY 56/81fGU8KUNgXNKm63jz5bWabJARErrRbEBFAXSEdTxyuLkZlyQBf0q9XzAfMl9 00kL37UKTsUx5I5KTazghcJOqNKMm3ZsgTrFYFtIhuUGDRoSA3rjKqvKyESY1QnV U5s9QCMTgzRmoskSj8ZuBNNgMjsoyZBxk8clX2a5ayq+VUPl+nEL1pdccvp8DyQR tR/UDm23y0LZ5zOnwXt4eYYCeuGH6rcsEZXRkGE5SSbUdHLU3hO9UzsPa7rJW+jg /5E/qGWMqKbfkX/XCuh2POWkt8bFFCDw -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:05 2025 by rpki-client