$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: Vdeltr5rvOcDJCd0ONW7OlQxXxPD+6w9OY5A4FGBcac= Subject key identifier: 30:C5:9D:58:43:9B:FE:F6:9C:F2:6D:D8:1C:C6:2A:65:8D:F5:91:08 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 0148 Signing time: Fri 25 Apr 2025 03:23:03 +0000 Manifest this update: Fri 25 Apr 2025 03:23:02 +0000 Manifest next update: Fri 02 May 2025 03:23:02 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: oj+S2uvyEsMEqeWh6/GQLaQ3FvomoX7l6NAMV8lHKdY=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Apr 25 03:23:02 2025 GMT Not After : May 2 03:23:02 2025 GMT Subject: CN=680b0017-87dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:4e:82:56:61:05:8a:0d:c0:3e:4f:d9:95: 33:f2:02:25:10:e0:2e:e3:c8:79:6b:6d:da:fd:e1: 9a:41:f5:97:a9:a7:82:96:5e:19:62:d2:98:d4:0e: 2c:61:01:5d:db:24:7a:0e:50:57:94:36:ff:37:fb: 40:ce:6c:34:08:7d:82:18:02:42:47:f8:c3:e1:41: ad:4d:a1:9e:18:5a:f4:d8:11:d1:40:61:ef:02:5b: 8e:d0:77:61:32:3c:6e:02:18:12:6c:84:c3:ac:51: ae:07:43:65:5b:26:eb:cb:2a:5c:63:32:a1:0b:b5: 4c:75:ae:8a:f0:2b:2a:7a:4b:20:fd:2d:93:30:ab: a9:1a:93:0f:35:c1:54:b3:fb:6a:d6:80:51:d6:4d: 53:75:89:e4:02:84:14:b0:43:5e:c6:62:48:80:f1: 0a:7e:13:47:f8:c9:03:5f:6d:a7:38:9a:c5:57:67: d4:5d:eb:d2:ad:31:81:45:9f:2d:1e:1c:db:a5:a4: 9d:fd:b8:d4:d3:a6:2a:20:d3:f3:d1:95:0f:28:e2: 0a:4a:8e:90:31:f5:3e:f1:8d:22:cc:ef:7b:8d:a2: 98:ec:69:1a:0e:65:ad:c2:b8:ec:4b:4e:1f:87:13: c8:79:0b:0a:8a:55:5d:ff:e6:11:08:ac:f0:f1:93: 91:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C5:9D:58:43:9B:FE:F6:9C:F2:6D:D8:1C:C6:2A:65:8D:F5:91:08 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:ec:79:ff:7a:af:d5:99:5d:78:49:f6:58:f9:3f:a6:ac:37: 1c:e2:fb:0e:52:1d:64:4a:3d:03:17:10:14:10:47:04:e1:e1: f4:ce:15:54:b7:be:d7:fa:5c:b7:fa:0e:90:8b:3b:4c:23:5f: 3e:f6:97:e2:e0:10:a7:0b:59:09:d1:cd:9e:7b:b9:bd:0e:f2: ee:f6:c3:6f:b1:de:1d:5e:8d:dd:6f:66:8e:15:72:df:76:29: d1:85:b7:8d:8d:ee:be:f2:fe:51:c4:dc:ed:fa:68:37:26:d3: c9:8c:13:07:07:d6:b5:cc:81:90:e2:77:eb:88:d6:78:b2:48: 00:3a:80:d3:bc:68:2d:54:51:6c:b7:d4:09:3a:37:78:f4:1e: aa:02:f2:6c:1d:10:31:56:08:91:39:e6:d3:47:ce:a8:94:ea: 2e:cd:44:e2:a3:58:bd:0f:ad:ea:11:d2:3f:6e:51:90:4c:01: d5:77:29:ec:ee:26:f1:ca:9f:84:31:95:33:d6:8d:fb:19:ae: 43:de:fa:2f:4f:6f:b3:c0:fe:81:48:c9:10:18:1c:94:69:b4: d5:2a:44:31:bd:95:8e:f9:54:6f:fe:d4:26:96:01:b6:d9:f6: f5:5a:54:fc:fb:3c:65:c6:89:d1:e7:79:d7:ed:55:f2:75:7f: e7:5a:e9:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwNDI1MDMyMzAyWhcNMjUwNTAyMDMyMzAyWjAYMRYwFAYD VQQDEw02ODBiMDAxNy04N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApchOglZhBYoNwD5P2ZUz8gIlEOAu48h5a23a/eGaQfWXqaeCll4ZYtKY1A4s YQFd2yR6DlBXlDb/N/tAzmw0CH2CGAJCR/jD4UGtTaGeGFr02BHRQGHvAluO0Hdh MjxuAhgSbITDrFGuB0NlWybryypcYzKhC7VMda6K8Csqeksg/S2TMKupGpMPNcFU s/tq1oBR1k1TdYnkAoQUsENexmJIgPEKfhNH+MkDX22nOJrFV2fUXevSrTGBRZ8t HhzbpaSd/bjU06YqINPz0ZUPKOIKSo6QMfU+8Y0izO97jaKY7GkaDmWtwrjsS04f hxPIeQsKilVd/+YRCKzw8ZORpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDFnVhD m/72nPJt2BzGKmWN9ZEIMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS7Hn/eq/VmV14SfZY+T+mrDcc4vsOUh1kSj0DFxAUEEcE4eH0zhVU t77X+ly3+g6QiztMI18+9pfi4BCnC1kJ0c2ee7m9DvLu9sNvsd4dXo3db2aOFXLf dinRhbeNje6+8v5RxNzt+mg3JtPJjBMHB9a1zIGQ4nfriNZ4skgAOoDTvGgtVFFs t9QJOjd49B6qAvJsHRAxVgiROebTR86olOouzUTio1i9D63qEdI/blGQTAHVdyns 7ibxyp+EMZUz1o37Ga5D3vovT2+zwP6BSMkQGByUabTVKkQxvZWO+VRv/tQmlgG2 2fb1WlT8+zxlxonR53nX7VXydX/nWuk7 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:06 2025 by rpki-client