$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: UK+Q74F6rUhWipIzofVrxHPlg8dsWooa7u999X7wK40= Subject key identifier: 78:7F:21:B6:9B:34:BF:37:A1:1C:84:CD:31:A3:02:67:2A:D8:10:71 Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0212 Signing time: Fri 25 Apr 2025 01:45:41 +0000 Manifest this update: Fri 25 Apr 2025 01:45:41 +0000 Manifest next update: Fri 02 May 2025 01:45:41 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: 0RWY37h9+Iy/kzYsNTYlh5qYn0x7V2GaMTVcE849Z7U=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: Apr 25 01:45:41 2025 GMT Not After : May 2 01:45:41 2025 GMT Subject: CN=680ae945-2bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:42:f1:fb:52:40:7c:01:0f:bf:97:ab:cf: be:8b:ae:65:8f:f7:c0:82:0b:cf:19:14:5a:44:9d: b1:09:04:a6:7f:e7:16:eb:b3:a9:b0:80:b1:52:72: e0:49:e1:09:84:fc:18:c4:1e:80:61:d5:ea:d2:ba: 71:e0:55:fe:77:30:55:ab:ec:44:01:57:5f:59:bc: 79:80:c2:2b:d6:cb:89:5a:94:9b:44:90:e0:d6:6b: 2c:75:b3:e3:2a:b8:72:e7:74:02:c2:0e:39:fd:0e: f0:98:55:07:d5:2c:e7:9a:a4:15:0b:5b:bd:4b:6c: 9c:0e:6d:73:94:34:ef:1a:be:68:04:d5:3e:62:98: dc:76:64:08:45:5f:79:ff:e0:fd:23:5b:eb:4f:5a: 78:be:89:60:69:bb:a3:44:4c:64:7a:e8:38:c5:e0: 66:fa:84:9a:ce:86:e2:e1:c0:f5:7e:57:dc:37:ba: 63:f0:7b:47:84:12:89:b0:7d:9f:d7:bf:22:0d:94: d6:fd:76:c3:13:13:31:16:29:b1:2f:d5:bc:5f:18: b5:81:68:92:56:1d:1c:bf:ab:79:15:25:2c:09:d6: da:7c:0b:d4:b0:2e:a2:0e:76:b1:1e:8e:21:ca:9e: 15:95:b4:4a:ef:d4:3d:d3:dc:1a:98:c6:fb:7e:88: 33:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7F:21:B6:9B:34:BF:37:A1:1C:84:CD:31:A3:02:67:2A:D8:10:71 X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:65:7b:0e:60:1f:a4:5d:6b:60:f2:76:f5:df:a3:d6:2e:11: bc:b8:be:f6:c0:2d:92:79:78:d8:ea:75:0e:8d:ff:0c:2e:26: 47:ac:1c:fb:80:d0:b8:cf:c1:84:a2:82:9b:78:ee:0a:fd:d4: 56:fa:27:54:a1:6f:21:28:26:26:02:e3:db:43:55:e6:1f:c5: f6:46:8f:f5:58:0f:f2:35:ad:15:2b:5a:89:c0:aa:d8:a7:ae: 54:0b:81:1c:0a:d8:2c:e7:4f:5b:d8:3a:c7:8d:a6:69:f2:db: 27:dd:84:18:4a:b0:d1:8e:30:a3:bb:39:38:a1:35:67:c8:a4: 40:a7:7b:89:b7:74:8b:26:ac:f5:21:a7:9f:2f:ce:41:5c:5c: 6b:e1:43:2d:b0:17:b2:65:4f:ad:a1:95:92:a0:8a:75:53:9c: d1:15:50:6c:ad:d0:9b:7d:f6:08:73:83:72:78:61:4d:2f:a0: d0:8f:e6:bb:17:3b:f4:b6:35:fc:4c:59:97:7b:3e:d1:32:9d: bf:83:e5:9c:a3:fc:5d:c2:1f:c3:21:ee:a8:54:0b:e5:b2:34: 99:62:97:a4:49:d0:05:6a:06:65:01:28:f1:81:7d:06:4c:75: 7c:a0:66:b2:28:7f:ca:c5:2b:24:21:8c:5a:43:33:c2:d8:d1: 64:23:ac:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwNDI1MDE0NTQxWhcNMjUwNTAyMDE0NTQxWjAYMRYwFAYD VQQDEw02ODBhZTk0NS0yYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6dC8ftSQHwBD7+Xq8++i65lj/fAggvPGRRaRJ2xCQSmf+cW67OpsICxUnLg SeEJhPwYxB6AYdXq0rpx4FX+dzBVq+xEAVdfWbx5gMIr1suJWpSbRJDg1mssdbPj Krhy53QCwg45/Q7wmFUH1SznmqQVC1u9S2ycDm1zlDTvGr5oBNU+YpjcdmQIRV95 /+D9I1vrT1p4volgabujRExkeug4xeBm+oSazobi4cD1flfcN7pj8HtHhBKJsH2f 178iDZTW/XbDExMxFimxL9W8Xxi1gWiSVh0cv6t5FSUsCdbafAvUsC6iDnaxHo4h yp4VlbRK79Q909wamMb7fogz8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHh/Ibab NL83oRyEzTGjAmcq2BBxMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZZXsOYB+kXWtg8nb136PWLhG8uL72wC2SeXjY6nUOjf8MLiZHrBz7 gNC4z8GEooKbeO4K/dRW+idUoW8hKCYmAuPbQ1XmH8X2Ro/1WA/yNa0VK1qJwKrY p65UC4EcCtgs509b2DrHjaZp8tsn3YQYSrDRjjCjuzk4oTVnyKRAp3uJt3SLJqz1 IaefL85BXFxr4UMtsBeyZU+toZWSoIp1U5zRFVBsrdCbffYIc4NyeGFNL6DQj+a7 Fzv0tjX8TFmXez7RMp2/g+Wco/xdwh/DIe6oVAvlsjSZYpekSdAFagZlASjxgX0G THV8oGayKH/KxSskIYxaQzPC2NFkI6zP -----END CERTIFICATE-----Generated at Sat Apr 26 14:44:15 2025 by rpki-client