$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft File: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft (raw, json) Hash identifier: rRHwGyZGmIiBckNJKVtAEFFSUq/6A+wRaHfRKQH8Dzs= Subject key identifier: EA:71:FB:18:A9:B8:38:90:5E:18:51:62:1D:BB:A5:12:06:B2:79:CE Authority key identifier: D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D Certificate issuer: /CN=A91C2B93/serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Certificate serial: C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft Manifest number: BF Signing time: Fri 25 Apr 2025 04:55:09 +0000 Manifest this update: Fri 25 Apr 2025 04:55:08 +0000 Manifest next update: Fri 02 May 2025 04:55:08 +0000 Files and hashes: 1: 2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl (hash: DnIhK+VK+7+GfCQOxZccmvLQLg7U9BJkGZFRiw/62MM=) 2: B00A68E6014A11EFA8F03B5BC4F9AE02.roa (hash: F6IB2oLxhpfXXQwj/Kl3IJNncyOBKEOTP7G3C5XwQrk=) 3: E2037F8C019911EFAFFEEC5DC4F9AE02.roa (hash: yyKQJp3Cor943Y25Ya+6ME8Xl4xDZuaYL1jQZ9UiIZI=) 4: B0BE3042014A11EFA8F03B5BC4F9AE02.roa (hash: kGlkPBXGhK2HbK8wICTx12rG9bb9NpN/Iy7FI3DGEGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:55:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2B93, serialNumber=D9D65F7F36090C401BCF20D4BC80C43F0DC5933D Validity Not Before: Apr 25 04:55:08 2025 GMT Not After : May 2 04:55:08 2025 GMT Subject: CN=680b15ac-cb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:72:15:7d:6d:f1:9b:52:8e:53:32:e2:6d: 47:5e:81:d1:14:72:68:83:b7:43:56:29:fd:b5:a0: c0:eb:8a:b7:5e:fd:d2:07:ee:99:95:5d:13:a9:04: 20:41:db:f2:d9:89:05:3a:d4:ba:f2:6d:48:2a:84: 7c:39:85:fb:66:7b:59:5a:59:c9:cd:13:e1:cd:81: 6d:06:24:6f:5a:68:72:e2:f2:79:48:76:9c:1b:42: c1:c0:e2:f4:39:08:ef:f6:7e:98:95:59:b4:fe:70: c3:85:18:a3:e9:04:09:31:d3:c7:8c:ee:a0:ca:7a: 7c:2a:40:ef:87:be:2a:5b:cb:b8:aa:fc:5e:ae:4c: 7e:a2:fc:c0:31:8b:33:7c:91:cd:e2:bb:89:0f:04: 13:56:ad:ea:3c:a5:95:91:75:29:bb:1f:d1:61:36: 2e:df:f9:b1:9b:61:4e:83:c0:fd:26:0c:43:3b:eb: 6e:0b:c4:8d:ba:53:7c:47:6c:2a:be:19:a8:5d:6c: e4:43:6e:0d:3b:cd:9c:63:b0:5b:0a:b6:9f:82:ce: dc:2a:e9:1c:a5:1a:bc:ed:f6:37:85:96:7e:73:2c: 2f:d2:b7:fb:aa:7e:19:b3:b5:77:50:fb:70:76:12: b5:35:54:7d:c9:c9:91:8f:f1:ed:37:74:76:d6:07: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:FB:18:A9:B8:38:90:5E:18:51:62:1D:BB:A5:12:06:B2:79:CE X509v3 Authority Key Identifier: keyid:D9:D6:5F:7F:36:09:0C:40:1B:CF:20:D4:BC:80:C4:3F:0D:C5:93:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2dZffzYJDEAbzyDUvIDEPw3Fkz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2B93/3AC874EE014311EF825A6465C4F9AE02/2dZffzYJDEAbzyDUvIDEPw3Fkz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:22:2f:28:8e:79:3c:37:51:ff:63:da:9f:bd:ce:b4:50:ec: 04:55:6c:0d:36:a0:28:5d:7b:16:f9:87:82:ec:f1:96:76:fa: 0a:c8:9f:50:2f:37:be:88:da:90:7d:03:8f:1d:40:97:22:ca: ff:92:93:df:71:20:e5:dc:e4:a4:0c:74:e1:a2:a8:ed:34:7e: fc:57:9b:13:aa:bd:d2:04:8c:50:63:18:83:7d:ac:10:a4:9a: ca:36:c5:9b:be:9b:71:0c:11:83:41:fa:11:bc:64:ac:d2:82: c4:af:fc:3b:c1:83:68:50:f3:35:97:92:68:23:e9:21:ce:c0: 71:96:af:b7:d5:00:aa:58:75:b0:ee:56:6e:51:aa:d1:bf:2e: 6d:16:62:bf:7f:d9:9e:e2:0f:b2:25:39:2f:d6:e7:9f:d3:22: 64:36:57:a2:13:37:65:b4:be:f7:11:e2:67:f0:2b:77:ee:58: 91:c2:d5:ed:3e:b5:ee:1d:1f:fe:a2:69:21:bd:2a:87:af:3c: a1:70:95:2a:a7:c0:e2:24:19:18:34:89:51:ad:b4:af:53:00: 08:52:90:82:f4:46:71:25:a3:b8:9c:76:e3:f2:53:50:9d:01: 2a:14:65:89:a1:13:fe:67:2d:c0:2d:0c:65:0f:8d:47:f6:79: 18:65:33:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJCOTMxMTAvBgNVBAUTKEQ5RDY1RjdGMzYwOTBDNDAxQkNGMjBENEJDODBDNDNG MERDNTkzM0QwHhcNMjUwNDI1MDQ1NTA4WhcNMjUwNTAyMDQ1NTA4WjAYMRYwFAYD VQQDEw02ODBiMTVhYy1jYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqwJyFX1t8ZtSjlMy4m1HXoHRFHJog7dDVin9taDA64q3Xv3SB+6ZlV0TqQQg Qdvy2YkFOtS68m1IKoR8OYX7ZntZWlnJzRPhzYFtBiRvWmhy4vJ5SHacG0LBwOL0 OQjv9n6YlVm0/nDDhRij6QQJMdPHjO6gynp8KkDvh74qW8u4qvxerkx+ovzAMYsz fJHN4ruJDwQTVq3qPKWVkXUpux/RYTYu3/mxm2FOg8D9JgxDO+tuC8SNulN8R2wq vhmoXWzkQ24NO82cY7BbCrafgs7cKukcpRq87fY3hZZ+cywv0rf7qn4Zs7V3UPtw dhK1NVR9ycmRj/HtN3R21gfRqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpx+xip uDiQXhhRYh27pRIGsnnOMB8GA1UdIwQYMBaAFNnWX382CQxAG88g1LyAxD8NxZM9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkI5My8zQUM4NzRFRTAx NDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRFQWJ6eURVdklERVB3M0Zr ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJkWmZmellKREVBYnp5RFV2SURFUHczRmt6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkI5My8zQUM4NzRFRTAxNDMxMUVGODI1QTY0NjVDNEY5QUUwMi8yZFpmZnpZSkRF QWJ6eURVdklERVB3M0ZrejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPIi8ojnk8N1H/Y9qfvc60UOwEVWwNNqAoXXsW+YeC7PGWdvoKyJ9Q Lze+iNqQfQOPHUCXIsr/kpPfcSDl3OSkDHThoqjtNH78V5sTqr3SBIxQYxiDfawQ pJrKNsWbvptxDBGDQfoRvGSs0oLEr/w7wYNoUPM1l5JoI+khzsBxlq+31QCqWHWw 7lZuUarRvy5tFmK/f9me4g+yJTkv1uef0yJkNleiEzdltL73EeJn8Ct37liRwtXt PrXuHR/+omkhvSqHrzyhcJUqp8DiJBkYNIlRrbSvUwAIUpCC9EZxJaO4nHbj8lNQ nQEqFGWJoRP+Zy3ALQxlD41H9nkYZTPQ -----END CERTIFICATE-----Generated at Sat Apr 26 03:24:58 2025 by rpki-client