$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: 0g71wspctJfWObiS0xD+K43WSNTSThpg0wS0Cj66Xs0= Subject key identifier: B4:A4:8C:01:49:05:04:79:30:7B:A4:57:7A:3C:B8:D0:6B:D4:A4:36 Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 0202 Signing time: Sat 03 May 2025 02:05:21 +0000 Manifest this update: Sat 03 May 2025 02:05:21 +0000 Manifest next update: Sat 10 May 2025 02:05:21 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: AO0gBW4pego4ArAzI0Py5G8jePvBTTeksMEge99hq5k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 02:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: May 3 02:05:21 2025 GMT Not After : May 10 02:05:21 2025 GMT Subject: CN=681579e1-721c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:56:3d:eb:e7:e2:ae:f1:49:03:c5:44:19: 44:36:64:23:96:d5:c0:b4:31:85:1f:3a:85:03:dc: d3:ed:35:3e:57:01:04:93:7a:2a:4d:72:94:1c:ec: 35:04:c3:1b:75:f5:d5:ab:9d:3e:23:a7:70:b9:d6: a5:34:3a:82:dd:e8:2e:d4:8a:48:9f:ab:3a:25:87: ad:3b:b9:c3:2d:1a:da:91:fe:a5:f9:58:f7:46:0d: 68:da:a5:f7:92:5c:0b:10:76:78:37:1a:5d:83:83: 72:4e:c2:25:2e:c2:77:72:78:08:89:d6:c7:d5:02: e8:c8:f0:88:23:7e:a4:6f:2a:62:85:0b:b7:59:bb: d7:70:40:c2:bd:c9:c7:5f:ca:db:35:c5:a3:c6:75: 14:56:a5:80:7f:8c:e5:59:98:c2:2d:7b:e2:6b:97: e7:59:73:04:d7:19:11:18:e5:66:5d:c0:1f:45:73: ff:5d:e2:46:a7:5c:0c:13:30:6b:cc:11:ee:47:ac: 03:c7:be:63:f4:dd:05:a9:6d:84:46:28:22:66:6d: e6:81:8d:fa:f6:eb:96:e9:d0:e6:2a:2f:37:3b:52: 1e:5c:94:b1:f1:0e:0f:40:3a:26:68:21:d4:9c:9b: c8:f2:af:18:dd:cb:37:dd:ac:f4:40:d4:3d:7a:33: 97:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A4:8C:01:49:05:04:79:30:7B:A4:57:7A:3C:B8:D0:6B:D4:A4:36 X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:9e:b1:46:d8:ee:89:1f:8f:a8:d2:68:f1:7a:02:12:47:53: 4f:e1:32:61:f6:59:2c:c3:e5:7a:4c:c3:08:f6:31:df:d8:d0: eb:cd:64:3e:50:64:2c:13:98:ae:55:d3:68:67:83:20:79:67: 56:97:ce:45:cb:27:0b:e1:6d:7d:6e:59:cb:08:9f:64:dc:0e: ab:b0:b5:d4:89:cf:c1:91:ec:0b:54:5a:6b:8f:58:e9:a8:c8: 7d:7c:18:68:21:2c:1e:9c:fa:92:8e:e1:af:66:6c:aa:8c:b3: 5f:da:21:fa:a5:1c:a4:6f:4c:dc:85:f5:b8:18:4d:fa:90:e6: b9:7d:05:4d:5b:18:d3:84:aa:26:91:16:77:d9:d7:0c:74:50: 5d:4e:ac:9e:14:08:22:09:0f:7c:33:14:7e:e9:a6:44:1c:45: 5b:cd:a6:58:87:ba:dc:4f:b4:48:29:de:67:7c:98:ad:87:c0: ee:b1:97:b1:db:39:dd:0e:69:c8:9d:c1:71:cf:59:a0:3b:2f: 01:91:0f:d5:f5:bb:c6:29:4e:b6:c5:06:d9:22:28:2c:c8:c5: e9:d8:30:6f:d7:c3:e1:3d:c1:c7:ff:b0:70:e3:b1:ac:f8:85: e4:a0:cb:da:46:a4:99:5f:b8:34:b1:b9:39:25:88:e7:ba:fb: 7b:7c:1f:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUwNTAzMDIwNTIxWhcNMjUwNTEwMDIwNTIxWjAYMRYwFAYD VQQDEw02ODE1NzllMS03MjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoz9WPevn4q7xSQPFRBlENmQjltXAtDGFHzqFA9zT7TU+VwEEk3oqTXKUHOw1 BMMbdfXVq50+I6dwudalNDqC3egu1IpIn6s6JYetO7nDLRrakf6l+Vj3Rg1o2qX3 klwLEHZ4Nxpdg4NyTsIlLsJ3cngIidbH1QLoyPCII36kbypihQu3WbvXcEDCvcnH X8rbNcWjxnUUVqWAf4zlWZjCLXvia5fnWXME1xkRGOVmXcAfRXP/XeJGp1wMEzBr zBHuR6wDx75j9N0FqW2ERigiZm3mgY369uuW6dDmKi83O1IeXJSx8Q4PQDomaCHU nJvI8q8Y3cs33az0QNQ9ejOXRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSkjAFJ BQR5MHukV3o8uNBr1KQ2MB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAnrFG2O6JH4+o0mjxegISR1NP4TJh9lksw+V6TMMI9jHf2NDrzWQ+ UGQsE5iuVdNoZ4MgeWdWl85FyycL4W19blnLCJ9k3A6rsLXUic/BkewLVFprj1jp qMh9fBhoISwenPqSjuGvZmyqjLNf2iH6pRykb0zchfW4GE36kOa5fQVNWxjThKom kRZ32dcMdFBdTqyeFAgiCQ98MxR+6aZEHEVbzaZYh7rcT7RIKd5nfJith8DusZex 2zndDmnIncFxz1mgOy8BkQ/V9bvGKU62xQbZIigsyMXp2DBv18PhPcHH/7Bw47Gs +IXkoMvaRqSZX7g0sbk5JYjnuvt7fB+R -----END CERTIFICATE-----Generated at Sun May 4 12:07:54 2025 by rpki-client