$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft File: s2uXFySjur2JC3VFmJM3IPly_q8.mft (raw, json) Hash identifier: tuJ6jjpL+101fty0GuXowvAB8jkL2v7NSSyq6Wc3SwY= Subject key identifier: 2F:C7:7D:A7:5C:12:AA:8F:6E:19:31:F5:27:47:99:93:03:E5:55:28 Authority key identifier: B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF Certificate issuer: /CN=A91CE558/serialNumber=B36B971724A3BABD890B754598933720F972FEAF Certificate serial: 0B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft Manifest number: 0AF3 Signing time: Thu 24 Apr 2025 19:25:53 +0000 Manifest this update: Thu 24 Apr 2025 19:25:52 +0000 Manifest next update: Thu 01 May 2025 19:25:52 +0000 Files and hashes: 1: s2uXFySjur2JC3VFmJM3IPly_q8.crl (hash: BRqRbr8Ez6zsYVtJPPlXLvdCo2RZvdTPaZp98yhUDPg=) 2: 466891560ADA11ECBFAECB29C4F9AE02.roa (hash: NDMWr6ROve032HDCvpKDnE+3M7NstRNL4WiBRR7Uc9w=) 3: F1EB46D2717F11EEB3FA0A5EC4F9AE02.roa (hash: /I1TFcJCz5aMzQNmIqNgkjKowqxPj9xlaCCXIBXOcD0=) 4: A7470BFC33A711EBA4313B36C4F9AE02.roa (hash: Z21inXGgFSeaHgz7iITM/kziF7zP/P4QOKxWDnYdlJ8=) 5: D992FDD49B4811EFA17EB17FC4F9AE02.roa (hash: 1gtmRzqYdhmA8CchuwScykbthJY4rmebTYSAnt6uzqg=) 6: B66F0C58817111EFB121970CC4F9AE02.roa (hash: lkpsOB7nfXsffwnZ1aU9Jr6eTZNpX/TpTJZNQqUrOs8=) 7: C1ACB1E819EF11EC84DBF462C4F9AE02.roa (hash: dhvSYCoAete6HzssYv/JSdKEV/Z2KYxpkGxKw9YFSAY=) 8: 966FD4648D2411EF9914EF63C4F9AE02.roa (hash: dGWItSoIfDWTw5ONmMmmwGOtu0hUpDaFw6KptrVVUfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2890 (0xb4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE558, serialNumber=B36B971724A3BABD890B754598933720F972FEAF Validity Not Before: Apr 24 19:25:52 2025 GMT Not After : May 1 19:25:52 2025 GMT Subject: CN=680a9040-7217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:c2:a3:42:d5:78:5a:11:b5:4b:6f:96:9e:72: 86:62:29:d9:af:a0:a7:b4:2b:5d:7d:85:57:18:83: 68:a5:c6:0b:d9:d8:85:71:1c:73:c0:9c:97:8a:44: 00:6e:3f:d6:37:b0:1b:1b:ff:4d:5f:c5:69:c8:52: a8:30:43:a1:24:de:68:56:6a:0c:7e:50:bf:23:ae: 50:90:98:bf:3f:c9:8a:71:ae:b1:98:fc:e0:0d:a7: 65:fb:5a:e5:dc:c5:4f:61:c2:bd:45:d6:ed:41:94: 0b:4c:ff:4a:49:bd:17:93:61:c2:49:71:9d:e9:93: 13:75:1e:e1:9a:2b:63:bf:37:c1:d9:bb:00:47:ad: 89:9e:54:23:e3:c2:2d:99:11:18:48:eb:66:d2:08: 55:80:e8:e7:38:c5:90:05:a7:6b:72:21:c7:4d:36: b8:91:76:63:8f:58:3d:5f:f4:c5:d1:e5:3c:cd:8a: a6:ae:54:e4:08:1e:29:1a:f8:6a:ae:30:6d:cd:98: cc:85:50:b0:99:e3:bb:96:a0:8f:69:7c:af:1f:c5: 77:32:15:ea:7c:9f:c8:52:b2:a9:74:28:67:a2:a0: e7:9e:aa:ea:57:49:61:73:9d:e0:ab:48:80:c6:1f: ec:ab:04:b0:10:bf:f4:13:8f:7e:1a:18:2c:75:e3: d4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C7:7D:A7:5C:12:AA:8F:6E:19:31:F5:27:47:99:93:03:E5:55:28 X509v3 Authority Key Identifier: keyid:B3:6B:97:17:24:A3:BA:BD:89:0B:75:45:98:93:37:20:F9:72:FE:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2uXFySjur2JC3VFmJM3IPly_q8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE558/3DF14F08539411EABF6B4F5FC4F9AE02/s2uXFySjur2JC3VFmJM3IPly_q8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:8c:6a:b5:99:02:5c:12:75:32:03:d2:c8:40:c9:dc:41: ac:d8:55:89:9b:3d:38:0a:c1:30:0c:3a:ef:68:32:94:84:8f: d8:c3:65:d7:39:79:f0:d7:8d:30:c1:1c:3a:e6:82:f6:fc:8d: 34:6e:ce:d3:3d:48:95:74:a7:53:0e:15:fc:24:ef:55:3c:c7: 4f:d2:16:d5:5c:57:93:a3:7c:5c:b6:62:05:be:1a:50:9a:e1: b4:ca:79:9a:80:41:88:50:7c:6a:bf:d8:84:ca:60:0e:3b:c6: 76:e7:6d:17:da:bf:f1:c6:32:a7:d1:de:b7:ea:3d:f6:67:61: 3c:fb:51:d9:c1:b2:67:df:53:f0:c8:b8:db:66:c1:7f:cb:9b: 94:b6:4e:f2:46:86:b4:14:39:e4:40:0d:d5:60:49:86:9b:83: b2:5d:05:34:f3:c7:e1:3e:e6:f1:ed:54:ca:34:14:8f:8f:65: 76:22:2a:3a:26:57:5e:8d:5a:0a:8d:93:5f:55:52:42:f0:d5: d7:9d:02:1a:b0:92:d5:cd:f1:76:95:83:f6:af:9a:32:f0:6c: c0:de:44:65:e1:21:58:e6:35:08:e2:d1:5b:5f:0e:80:38:76: db:ba:bc:34:a2:e4:7d:df:f0:ea:b5:99:67:1c:82:a6:b0:6b: 3a:83:3f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1NTgxMTAvBgNVBAUTKEIzNkI5NzE3MjRBM0JBQkQ4OTBCNzU0NTk4OTMzNzIw Rjk3MkZFQUYwHhcNMjUwNDI0MTkyNTUyWhcNMjUwNTAxMTkyNTUyWjAYMRYwFAYD VQQDEw02ODBhOTA0MC03MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+MKjQtV4WhG1S2+WnnKGYinZr6CntCtdfYVXGINopcYL2diFcRxzwJyXikQA bj/WN7AbG/9NX8VpyFKoMEOhJN5oVmoMflC/I65QkJi/P8mKca6xmPzgDadl+1rl 3MVPYcK9RdbtQZQLTP9KSb0Xk2HCSXGd6ZMTdR7hmitjvzfB2bsAR62JnlQj48It mREYSOtm0ghVgOjnOMWQBadrciHHTTa4kXZjj1g9X/TF0eU8zYqmrlTkCB4pGvhq rjBtzZjMhVCwmeO7lqCPaXyvH8V3MhXqfJ/IUrKpdChnoqDnnqrqV0lhc53gq0iA xh/sqwSwEL/0E49+GhgsdePUbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/Hfadc EqqPbhkx9SdHmZMD5VUoMB8GA1UdIwQYMBaAFLNrlxcko7q9iQt1RZiTNyD5cv6v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTU1OC8zREYxNEYwODUz OTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVyMkpDM1ZGbUpNM0lQbHlf cTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3MydVhGeVNqdXIySkMzVkZtSk0zSVBseV9xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTU1OC8zREYxNEYwODUzOTQxMUVBQkY2QjRGNUZDNEY5QUUwMi9zMnVYRnlTanVy MkpDM1ZGbUpNM0lQbHlfcTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADCIxqtZkCXBJ1MgPSyEDJ3EGs2FWJmz04CsEwDDrvaDKUhI/Yw2XX OXnw140wwRw65oL2/I00bs7TPUiVdKdTDhX8JO9VPMdP0hbVXFeTo3xctmIFvhpQ muG0ynmagEGIUHxqv9iEymAOO8Z2520X2r/xxjKn0d636j32Z2E8+1HZwbJn31Pw yLjbZsF/y5uUtk7yRoa0FDnkQA3VYEmGm4OyXQU088fhPubx7VTKNBSPj2V2Iio6 JldejVoKjZNfVVJC8NXXnQIasJLVzfF2lYP2r5oy8GzA3kRl4SFY5jUI4tFbXw6A OHbburw0ouR93/DqtZlnHIKmsGs6gz8g -----END CERTIFICATE-----Generated at Sat Apr 26 03:36:09 2025 by rpki-client