$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: b0yMxVsZ7mXg0kBGDCMwBQMy2NIAyjfjf+GhMlEmeBM= Subject key identifier: 07:D5:B7:53:AF:9E:72:0F:CF:1A:D3:8F:4D:B9:7C:A1:3A:E8:9C:F2 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 0188 Signing time: Fri 25 Apr 2025 03:01:22 +0000 Manifest this update: Fri 25 Apr 2025 03:01:22 +0000 Manifest next update: Fri 02 May 2025 03:01:22 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: GAQ/BWkN1e1zuIPcXfO993LhQSqfEpxOlaZGoNbzM6M=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: fXSIWmh9V9F/x3Hddt6PPXIzX5rLMrps20QQT3eYyH8=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 2uAnojTpBx/p6UzON5W2LUqPsm+IaZARqT6ypFNqC5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: Apr 25 03:01:22 2025 GMT Not After : May 2 03:01:22 2025 GMT Subject: CN=680afb02-b6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:b7:97:a9:83:4c:e5:6e:b8:e9:9a:a6:34: 1a:f2:e9:b3:a6:d9:fd:ed:b0:ed:d5:e7:d4:59:36: 70:d9:b5:69:cf:7f:a2:43:37:7c:00:6c:38:29:5d: 3d:06:e2:e2:94:f3:de:7b:9a:06:c4:8e:52:49:85: 59:5e:10:be:ff:99:f3:82:38:36:3c:96:b4:c1:72: 43:a2:70:e9:00:6c:f5:f4:ed:08:29:83:3e:dc:98: b9:e2:a0:bc:94:b1:22:d6:b3:aa:46:a7:65:6d:4e: e0:8c:89:11:a3:c6:85:e5:5e:f8:87:05:41:55:e7: 48:49:20:d3:4c:36:40:ce:4b:ce:b2:5e:07:ae:c0: 94:98:49:40:6f:a5:97:0a:64:a2:a2:e6:99:e4:59: 7a:51:ed:54:66:e5:95:2e:c5:4d:82:e3:f3:a0:cf: 4b:7f:62:7b:ae:8d:fe:d0:9d:7e:6f:8a:7b:c9:74: 0e:08:6e:8b:64:66:79:73:6c:7d:5e:53:7f:5d:45: a2:2c:2e:c0:8f:3e:30:98:c4:54:a0:ac:41:62:df: 2b:91:74:3a:ca:ea:f8:b9:a4:5e:a7:b7:7a:d8:e8: 02:69:49:21:95:8a:3b:c3:ab:08:53:cd:6f:3d:a5: 47:2b:19:68:4b:c5:08:89:63:7c:ae:91:c2:78:2f: 22:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D5:B7:53:AF:9E:72:0F:CF:1A:D3:8F:4D:B9:7C:A1:3A:E8:9C:F2 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:7a:7c:2b:12:29:84:57:9f:c5:b3:0e:0e:b6:b2:14:30:f2: dc:fa:a5:b3:09:39:0f:28:85:91:7b:0d:5e:5e:77:e1:29:69: be:88:fa:98:ed:91:e7:5b:78:77:7e:9c:2c:7f:5f:3c:83:fd: 8f:ba:c5:33:c3:be:5f:19:1b:af:9c:5e:d4:91:d9:04:9d:24: c2:03:53:70:44:87:6a:e9:55:cb:39:e8:d9:f3:a5:59:0a:90: 7f:f7:b7:8b:23:a1:80:4b:2f:03:7a:bf:6d:38:bb:52:c1:1a: c5:fb:3f:84:46:9d:7d:b2:5a:4b:53:6c:cb:2b:5c:42:d7:b9: f4:b1:7a:7e:64:8c:8b:c3:76:a5:ad:eb:fa:d4:77:4f:49:2b: dd:28:25:81:7f:21:9e:b9:a1:50:7c:00:05:a2:e1:5a:ba:d0: a9:4d:17:6d:4a:98:a1:bf:fd:b1:72:ab:00:0d:91:4a:6b:ce: e9:78:49:02:47:37:4f:95:8d:3a:59:a3:78:c9:ea:0e:84:bb: b2:9f:ca:c4:57:f2:57:2f:36:6d:10:78:3b:e4:01:20:4f:38: c0:24:05:d8:98:0e:e6:b5:12:d0:77:f6:89:66:b6:f8:18:e6: d2:22:ea:6e:bc:8e:d2:f0:cc:14:a4:6e:55:6f:3a:d5:1d:24: ee:cb:26:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwNDI1MDMwMTIyWhcNMjUwNTAyMDMwMTIyWjAYMRYwFAYD VQQDEw02ODBhZmIwMi1iNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6q3l6mDTOVuuOmapjQa8umzptn97bDt1efUWTZw2bVpz3+iQzd8AGw4KV09 BuLilPPee5oGxI5SSYVZXhC+/5nzgjg2PJa0wXJDonDpAGz19O0IKYM+3Ji54qC8 lLEi1rOqRqdlbU7gjIkRo8aF5V74hwVBVedISSDTTDZAzkvOsl4HrsCUmElAb6WX CmSiouaZ5Fl6Ue1UZuWVLsVNguPzoM9Lf2J7ro3+0J1+b4p7yXQOCG6LZGZ5c2x9 XlN/XUWiLC7Ajz4wmMRUoKxBYt8rkXQ6yur4uaRep7d62OgCaUkhlYo7w6sIU81v PaVHKxloS8UIiWN8rpHCeC8iDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAfVt1Ov nnIPzxrTj025fKE66JzyMB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgenwrEimEV5/Fsw4OtrIUMPLc+qWzCTkPKIWRew1eXnfhKWm+iPqY 7ZHnW3h3fpwsf188g/2PusUzw75fGRuvnF7UkdkEnSTCA1NwRIdq6VXLOejZ86VZ CpB/97eLI6GASy8Der9tOLtSwRrF+z+ERp19slpLU2zLK1xC17n0sXp+ZIyLw3al rev61HdPSSvdKCWBfyGeuaFQfAAFouFautCpTRdtSpihv/2xcqsADZFKa87peEkC RzdPlY06WaN4yeoOhLuyn8rEV/JXLzZtEHg75AEgTzjAJAXYmA7mtRLQd/aJZrb4 GObSIupuvI7S8MwUpG5VbzrVHSTuyybn -----END CERTIFICATE-----Generated at Sat Apr 26 13:09:44 2025 by rpki-client