$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft File: L2E4_i25TvfjPsCDxoJbKjGXrOY.mft (raw, json) Hash identifier: eJ/hUD8ssbwWCq5xfxOrJaTviYuhkg06aOf/pCnYHbQ= Subject key identifier: 99:D9:A7:09:2F:87:69:B1:85:3B:77:91:AE:76:8C:40:E1:75:54:8D Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 01A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft Manifest number: 019B Signing time: Fri 25 Apr 2025 02:35:38 +0000 Manifest this update: Fri 25 Apr 2025 02:35:37 +0000 Manifest next update: Fri 02 May 2025 02:35:37 +0000 Files and hashes: 1: L2E4_i25TvfjPsCDxoJbKjGXrOY.crl (hash: qUYzJl4vZrHtrrzKmVidqP41n9WfRRG3YQpbFt6t5Rw=) 2: D31AE166C92011EDB456FB72C4F9AE02.roa (hash: 9PFfWoEAx34K/EBsgtnvK29zGTSC+viKRrz9B+FgvaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Apr 25 02:35:37 2025 GMT Not After : May 2 02:35:37 2025 GMT Subject: CN=680af4fa-8305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:17:7f:c0:61:9e:f7:23:0d:17:0f:12:0e:e3: 38:79:d6:0d:b7:6d:41:cc:e4:5b:ce:98:a2:65:39: f1:0e:eb:55:b8:4b:35:b1:22:65:f5:5e:ac:92:e4: c6:f5:5d:f8:da:64:ba:a3:22:26:7d:4b:d5:2d:b3: 47:dd:72:5d:52:26:8f:24:be:65:cc:5b:df:18:aa: 74:36:5c:3e:1e:46:68:ee:df:fe:67:8b:d6:3a:9e: 54:73:df:37:98:84:d1:19:4a:b5:c5:47:f1:15:bc: 3b:a9:ab:6d:cd:ae:9d:4d:0b:7b:0e:2e:b1:24:36: 3f:b5:1b:38:08:53:e9:88:f9:99:f6:23:54:42:b4: 23:5a:7d:9c:9e:34:5f:15:d2:7d:3b:13:a2:19:92: 41:7f:00:ae:5e:6e:b2:51:e8:7f:1f:41:57:8e:25: d3:93:cd:ad:67:eb:3a:89:41:f3:9e:5a:09:bc:ee: 96:cd:b3:39:42:0e:11:a6:22:bc:ed:08:09:d7:6f: 0f:ea:88:ef:44:30:8a:cc:11:94:02:07:e8:b6:1d: 8e:de:a2:88:79:17:f4:c9:87:d9:b7:2a:d7:53:b4: 91:06:b4:37:32:2b:93:be:6c:0a:53:1d:d7:0a:f9: 39:ed:1d:27:33:c8:ab:2f:35:49:ed:e5:e1:98:10: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D9:A7:09:2F:87:69:B1:85:3B:77:91:AE:76:8C:40:E1:75:54:8D X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:28:23:22:b2:07:41:38:87:ef:2d:21:e8:f9:eb:78:86:86: df:f3:45:47:e2:d2:e1:4f:fc:96:d9:88:64:87:d9:55:13:70: 40:2e:f0:d7:00:13:f7:c8:73:86:7e:b7:b6:40:4a:dd:25:5d: 0e:1a:92:44:ed:f6:14:b5:72:46:f3:12:aa:8b:c4:00:97:da: bd:df:2c:d7:bc:cb:2c:dc:85:dd:75:f1:6a:cc:e5:68:06:b5: de:a3:b5:6c:4a:b5:6c:32:48:f5:42:7f:7f:d3:27:bd:bf:d3: ad:b6:5c:77:dc:88:4e:83:78:b3:68:2a:3f:20:c5:83:85:5a: dc:c1:93:27:a1:09:be:2a:62:97:1f:84:54:04:38:d2:1c:a2: 7a:8b:96:85:12:a9:da:5f:82:53:b5:58:10:6d:da:16:ab:72: 26:7c:12:86:d6:ac:3e:6b:8b:a5:1d:ed:1f:ed:8b:50:e4:de: 37:f3:27:f7:16:69:59:7a:a0:83:b1:41:2b:62:c6:cb:35:da: 1d:02:b2:8a:81:ce:88:a5:f1:fc:6f:a2:82:93:2b:a0:4b:dc: c3:ee:b3:f5:31:2c:c1:1b:db:73:41:8e:57:eb:dd:4b:95:89: a5:d0:0a:48:74:5e:91:07:50:e5:67:cd:9b:a9:f8:00:d6:db: cd:d7:81:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjUwNDI1MDIzNTM3WhcNMjUwNTAyMDIzNTM3WjAYMRYwFAYD VQQDEw02ODBhZjRmYS04MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhd/wGGe9yMNFw8SDuM4edYNt21BzORbzpiiZTnxDutVuEs1sSJl9V6skuTG 9V342mS6oyImfUvVLbNH3XJdUiaPJL5lzFvfGKp0Nlw+HkZo7t/+Z4vWOp5Uc983 mITRGUq1xUfxFbw7qattza6dTQt7Di6xJDY/tRs4CFPpiPmZ9iNUQrQjWn2cnjRf FdJ9OxOiGZJBfwCuXm6yUeh/H0FXjiXTk82tZ+s6iUHznloJvO6WzbM5Qg4RpiK8 7QgJ128P6ojvRDCKzBGUAgfoth2O3qKIeRf0yYfZtyrXU7SRBrQ3MiuTvmwKUx3X Cvk57R0nM8irLzVJ7eXhmBB5HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnZpwkv h2mxhTt3ka52jEDhdVSNMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTI4RS9EREVBNzI3NEI3M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2 ZmpQc0NEeG9KYktqR1hyT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxKCMisgdBOIfvLSHo+et4hobf80VH4tLhT/yW2Yhkh9lVE3BALvDX ABP3yHOGfre2QErdJV0OGpJE7fYUtXJG8xKqi8QAl9q93yzXvMss3IXddfFqzOVo BrXeo7VsSrVsMkj1Qn9/0ye9v9Ottlx33IhOg3izaCo/IMWDhVrcwZMnoQm+KmKX H4RUBDjSHKJ6i5aFEqnaX4JTtVgQbdoWq3ImfBKG1qw+a4ulHe0f7YtQ5N438yf3 FmlZeqCDsUErYsbLNdodArKKgc6IpfH8b6KCkyugS9zD7rP1MSzBG9tzQY5X691L lYml0ApIdF6RB1DlZ82bqfgA1tvN14FO -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:34 2025 by rpki-client