$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: v/Le1VtV4IrQ+SGCs4X+s0E1HuAD+nFcBbSZq+nDM9M= Subject key identifier: B6:95:82:4D:8F:46:20:55:9A:09:95:6F:63:92:DC:EB:6D:FA:F8:98 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 019B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 0196 Signing time: Fri 25 Apr 2025 02:35:17 +0000 Manifest this update: Fri 25 Apr 2025 02:35:16 +0000 Manifest next update: Fri 02 May 2025 02:35:16 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: PpJ8E+X2VzF5//KvxUVBhIseEJWreWJ520cB9Whispc=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: Apr 25 02:35:16 2025 GMT Not After : May 2 02:35:16 2025 GMT Subject: CN=680af4e4-86ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7d:a9:9b:32:39:e2:87:85:00:de:0f:b4:03: 38:88:5b:d5:c2:69:32:73:3e:d3:55:e2:9c:c1:5c: 5e:4d:90:c6:b9:95:af:d5:74:cc:28:79:e8:9a:56: 69:ea:ba:b9:65:ae:dd:04:17:99:a2:f4:32:71:d5: a3:90:cf:b4:e4:6a:81:63:27:9f:c5:b3:90:47:6d: 36:6b:61:42:92:24:cd:b6:d4:bd:a2:0d:92:71:af: ca:fb:da:a8:49:29:64:3e:51:cd:46:32:f1:4b:db: 7f:00:0b:d4:40:fe:49:91:56:c9:96:cd:a4:2c:8e: 6f:61:7b:00:98:81:3b:35:13:2d:d8:cf:5c:60:fd: 99:95:2b:26:46:c9:49:e1:8e:61:e9:11:56:ce:bd: d8:64:4b:86:a2:a6:6f:58:29:27:6b:55:89:f4:bb: 06:aa:af:fd:fe:4c:19:e1:c3:77:c1:20:a3:f2:00: 7e:30:ce:7b:35:4f:37:e0:64:c0:8b:85:a9:0f:92: cf:08:86:20:cc:90:0a:3f:80:6b:da:5f:3c:17:ca: 8a:86:9c:96:ad:fe:35:82:46:eb:3b:bf:09:bc:b9: 10:63:1b:03:cb:19:e9:8b:1a:aa:54:27:d1:b5:0b: df:4f:7e:d7:4e:d7:d6:0a:b2:08:79:2e:af:8f:7c: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:95:82:4D:8F:46:20:55:9A:09:95:6F:63:92:DC:EB:6D:FA:F8:98 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:56:b8:f3:50:b2:f5:57:3d:a7:5c:fe:13:c5:7e:03:a5:09: 78:3e:6b:a3:64:c4:7a:df:58:62:e1:33:45:8d:36:9f:06:92: 3a:e6:97:25:91:70:28:4f:44:71:51:56:95:66:4a:48:76:9c: 50:3a:b5:c6:6a:8d:03:ca:c3:bf:91:ca:c3:c9:d5:6c:67:60: f3:5c:a9:59:49:5f:7b:74:9b:44:64:2f:e5:b8:08:21:0a:68: 5a:18:3a:32:a8:70:8e:1e:32:51:01:f5:42:12:9e:23:78:ad: 03:e0:de:ed:ed:50:0c:83:9e:68:a9:81:c3:3f:66:b4:cf:6f: eb:0a:f1:bd:30:dd:62:e6:a2:d4:04:7b:d0:27:5f:6c:67:52: 8e:e1:44:cd:2a:52:59:9a:83:ce:58:ce:f8:99:00:04:92:cd: 20:b6:90:02:d7:57:4b:f3:ee:97:b5:92:3c:44:35:74:6d:ea: 9a:64:88:4e:17:7c:20:65:23:d9:9a:d5:13:0f:29:d9:5b:6b: b2:a7:c8:84:2b:59:68:fe:38:fa:38:e4:f2:8a:dd:3f:9f:61: bc:1e:18:15:f5:67:1a:3c:28:a2:7a:1f:a3:21:10:6d:c7:15: c5:7e:1b:a7:01:16:69:56:fe:3a:32:ba:2d:d2:10:3b:79:17: fe:7c:f9:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwNDI1MDIzNTE2WhcNMjUwNTAyMDIzNTE2WjAYMRYwFAYD VQQDEw02ODBhZjRlNC04NmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH2pmzI54oeFAN4PtAM4iFvVwmkycz7TVeKcwVxeTZDGuZWv1XTMKHnomlZp 6rq5Za7dBBeZovQycdWjkM+05GqBYyefxbOQR202a2FCkiTNttS9og2Sca/K+9qo SSlkPlHNRjLxS9t/AAvUQP5JkVbJls2kLI5vYXsAmIE7NRMt2M9cYP2ZlSsmRslJ 4Y5h6RFWzr3YZEuGoqZvWCkna1WJ9LsGqq/9/kwZ4cN3wSCj8gB+MM57NU834GTA i4WpD5LPCIYgzJAKP4Br2l88F8qKhpyWrf41gkbrO78JvLkQYxsDyxnpixqqVCfR tQvfT37XTtfWCrIIeS6vj3zTdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLaVgk2P RiBVmgmVb2OS3Ott+viYMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAVrjzULL1Vz2nXP4TxX4DpQl4PmujZMR631hi4TNFjTafBpI65pcl kXAoT0RxUVaVZkpIdpxQOrXGao0DysO/kcrDydVsZ2DzXKlZSV97dJtEZC/luAgh CmhaGDoyqHCOHjJRAfVCEp4jeK0D4N7t7VAMg55oqYHDP2a0z2/rCvG9MN1i5qLU BHvQJ19sZ1KO4UTNKlJZmoPOWM74mQAEks0gtpAC11dL8+6XtZI8RDV0beqaZIhO F3wgZSPZmtUTDynZW2uyp8iEK1lo/jj6OOTyit0/n2G8HhgV9WcaPCiieh+jIRBt xxXFfhunARZpVv46Mrot0hA7eRf+fPkO -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:35 2025 by rpki-client