$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft File: n2xg5qKluzMFUknUcjhHf4nhOnA.mft (raw, json) Hash identifier: 2rti2kcSfYxn5L9vskJlDxrZ+qCg0mDSFasP1M5UHK4= Subject key identifier: BB:BE:86:84:5F:AA:5C:34:6F:9C:4C:82:EA:67:42:4C:9C:45:EB:C7 Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 Certificate issuer: /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft Manifest number: 0188 Signing time: Fri 25 Apr 2025 02:43:27 +0000 Manifest this update: Fri 25 Apr 2025 02:43:26 +0000 Manifest next update: Fri 02 May 2025 02:43:26 +0000 Files and hashes: 1: n2xg5qKluzMFUknUcjhHf4nhOnA.crl (hash: 4Jlhv5JPM2AB3xMPRRj0ZJyov6nKAOehsHFkkyrtNtc=) 2: 51C204DAEA9011EFB8B82081C4F9AE02.roa (hash: 3+A2ANkp0TI4iEFiuxaHkbdXUeiNj96UO23AWbpZWqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70 Validity Not Before: Apr 25 02:43:26 2025 GMT Not After : May 2 02:43:26 2025 GMT Subject: CN=680af6ce-3ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:a8:b8:e8:71:e4:9f:19:b8:42:24:6c:a5: 0a:9c:4c:18:74:a8:eb:60:75:38:f4:99:fa:29:91: 33:63:3c:f0:74:3c:a9:2e:50:91:bd:5d:e0:04:56: 09:4c:83:39:6f:88:da:c2:5a:58:72:77:10:fa:23: 5d:52:a8:b3:90:48:fb:66:e0:24:cc:f1:ec:34:ea: 41:94:5b:8e:b0:09:66:10:e2:0c:3b:b0:ad:b5:8c: bb:c4:0b:4b:04:dd:ee:ed:0f:14:35:15:4f:b5:3b: 69:ff:fd:25:1f:dc:93:63:14:25:c7:54:55:c9:99: fe:0b:e3:1a:dc:c5:40:e0:cc:3a:9f:3b:38:4b:ae: c2:be:67:b3:30:f3:a4:79:e3:74:8e:d7:1d:bb:c8: ee:6c:f5:7f:c2:ce:e3:29:f8:56:28:73:30:f9:75: e4:e5:da:16:e2:48:97:ff:1f:cb:85:c0:76:62:49: 6a:d0:53:6e:11:16:ed:3a:e7:27:e7:c5:72:29:c3: 15:1a:18:09:df:65:c6:9e:c2:d3:84:aa:26:4e:fc: 01:f7:3a:10:fa:7e:52:a1:80:4d:77:1c:50:12:d2: db:e5:85:d2:15:3a:c2:1e:f9:36:89:68:6f:42:aa: d4:ff:58:ae:59:1d:20:c7:87:c9:fb:ee:3a:13:14: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:BE:86:84:5F:AA:5C:34:6F:9C:4C:82:EA:67:42:4C:9C:45:EB:C7 X509v3 Authority Key Identifier: keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e1:06:64:6e:71:9e:bb:53:f3:26:74:b0:74:58:0a:88:a7: 48:ba:3a:61:97:39:00:4e:cf:6c:8f:2c:25:1c:47:f3:5b:2f: 4f:40:5a:b1:92:e9:de:a7:dc:8d:e4:20:34:69:55:28:b1:1b: 76:b8:c0:b5:2a:3a:23:cc:f7:0c:bb:26:66:18:39:46:bf:d0: 14:9e:41:df:ec:4d:e9:cb:ce:4e:31:14:0e:c7:7c:03:7e:0b: 3b:ae:37:01:b4:8c:6a:7c:b5:d8:1b:22:ea:a5:88:03:ae:86: df:58:a0:a2:ee:06:9e:23:01:91:54:98:a3:71:93:4e:5d:30: b2:f1:15:b9:49:99:79:46:b6:53:8d:23:23:7e:16:8d:1e:0a: e5:4f:50:8b:e9:ab:cf:9f:ce:9d:46:68:9e:c6:37:97:9d:6f: 65:81:b3:99:09:a4:7e:3d:fa:c3:ef:32:46:d0:3a:58:b6:ce: 25:e3:2b:e9:4e:2c:d6:1e:c7:58:73:0d:7f:11:48:02:ae:1e: 8e:ff:49:b3:9b:89:71:e9:99:92:fe:98:b1:ed:39:cd:5a:66: 62:ab:bb:c2:07:a9:72:6a:1a:4f:6c:a0:c5:64:d6:08:24:ab: 27:68:d8:a9:8c:de:ea:e9:7e:e1:96:34:7d:98:5e:d0:f6:ec: c7:e5:d1:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFMzAxMTAvBgNVBAUTKDlGNkM2MEU2QTJBNUJCMzMwNTUyNDlENDcyMzg0NzdG ODlFMTNBNzAwHhcNMjUwNDI1MDI0MzI2WhcNMjUwNTAyMDI0MzI2WjAYMRYwFAYD VQQDEw02ODBhZjZjZS0zZWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PmouOhx5J8ZuEIkbKUKnEwYdKjrYHU49Jn6KZEzYzzwdDypLlCRvV3gBFYJ TIM5b4jawlpYcncQ+iNdUqizkEj7ZuAkzPHsNOpBlFuOsAlmEOIMO7CttYy7xAtL BN3u7Q8UNRVPtTtp//0lH9yTYxQlx1RVyZn+C+Ma3MVA4Mw6nzs4S67CvmezMPOk eeN0jtcdu8jubPV/ws7jKfhWKHMw+XXk5doW4kiX/x/LhcB2Yklq0FNuERbtOucn 58VyKcMVGhgJ32XGnsLThKomTvwB9zoQ+n5SoYBNdxxQEtLb5YXSFTrCHvk2iWhv QqrU/1iuWR0gx4fJ++46ExQkXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLu+hoRf qlw0b5xMgupnQkycRevHMB8GA1UdIwQYMBaAFJ9sYOaipbszBVJJ1HI4R3+J4Tpw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUUzMC81Q0E1MDUyQ0M5 RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6TUZVa25VY2poSGY0bmhP bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yeGc1cUtsdXpNRlVrblVjamhIZjRuaE9uQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUUzMC81Q0E1MDUyQ0M5RDcxMUVEOTJBMTM4MkNDNEY5QUUwMi9uMnhnNXFLbHV6 TUZVa25VY2poSGY0bmhPbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ4QZkbnGeu1PzJnSwdFgKiKdIujphlzkATs9sjywlHEfzWy9PQFqx kunep9yN5CA0aVUosRt2uMC1KjojzPcMuyZmGDlGv9AUnkHf7E3py85OMRQOx3wD fgs7rjcBtIxqfLXYGyLqpYgDrobfWKCi7gaeIwGRVJijcZNOXTCy8RW5SZl5RrZT jSMjfhaNHgrlT1CL6avPn86dRmiexjeXnW9lgbOZCaR+PfrD7zJG0DpYts4l4yvp TizWHsdYcw1/EUgCrh6O/0mzm4lx6ZmS/pix7TnNWmZiq7vCB6lyahpPbKDFZNYI JKsnaNipjN7q6X7hljR9mF7Q9uzH5dEN -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:16 2025 by rpki-client