$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: t2/vpADZDJ4xdsexRBKpmGAM1qD7FNwQypMtC6IH8Dk= Subject key identifier: 72:9A:CA:44:4A:F4:08:D5:89:12:55:A0:53:6B:B0:09:18:F8:AB:74 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0225 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0212 Signing time: Fri 25 Apr 2025 01:48:21 +0000 Manifest this update: Fri 25 Apr 2025 01:48:21 +0000 Manifest next update: Fri 02 May 2025 01:48:21 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: x+CmcKGweKmisyPbpx36fPhiK0HknON1gcdNuXPw/rQ=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 549 (0x225) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: Apr 25 01:48:21 2025 GMT Not After : May 2 01:48:21 2025 GMT Subject: CN=680ae9e5-d425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:80:55:9e:17:5f:ec:b4:70:ad:8f:77:7e:ec: bf:b8:3d:d2:d5:39:3d:a0:8c:78:1f:7e:91:59:ad: 05:c0:1a:6c:99:f2:29:0c:fd:22:dc:7f:96:a0:d5: a4:d6:45:7c:3a:4f:19:2a:f4:62:c0:6a:af:fd:37: 68:78:f7:dc:78:40:0c:2c:4a:fc:fe:65:90:1a:32: 1d:ba:49:21:c7:12:38:83:e4:0e:18:68:26:c4:06: 71:36:13:78:38:bf:e7:b9:55:8f:bc:6e:24:27:93: 7f:b0:5f:1a:1c:d2:6e:37:d0:60:90:37:16:9b:36: 4d:7e:2d:bf:d9:d3:a5:67:73:af:6f:30:43:c5:3e: ad:98:04:1d:d2:19:d5:ef:f3:3c:04:cf:ae:4b:78: 6a:53:a5:1a:24:83:d1:5c:09:c1:9d:79:83:aa:67: 02:d6:b2:26:7f:57:c4:41:ae:d8:04:ad:78:11:96: 2f:d2:92:ee:24:2e:60:2f:2a:46:d1:cd:ff:b1:6a: d2:27:7e:67:f5:b3:14:65:0e:22:91:ab:25:df:ab: e3:db:aa:e9:b4:68:31:bc:8f:b6:05:f5:c9:00:c2: 98:c1:83:2e:bf:4d:d6:13:6f:9e:86:3b:3a:fc:ba: 25:8b:42:fe:98:97:8c:b1:a2:4a:a9:07:c3:42:0e: a5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9A:CA:44:4A:F4:08:D5:89:12:55:A0:53:6B:B0:09:18:F8:AB:74 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:59:a1:c1:95:7e:df:a6:1c:b8:c3:ad:1b:b6:3a:7d:b1:4d: d0:16:22:44:03:7a:c5:e3:1b:78:32:ac:96:5a:9c:97:aa:ba: f3:fc:76:69:cb:2e:61:fa:1c:38:a4:69:85:41:4f:e8:29:af: ea:83:06:3d:b9:f7:b3:44:40:e3:c7:92:ee:c4:33:27:8b:a9: 57:aa:35:18:89:0f:96:92:22:54:8e:28:24:da:76:ca:fc:3e: ec:20:b0:4c:46:06:6f:6e:07:76:70:a8:cd:85:35:8c:5d:2e: 55:2d:fb:b1:cc:84:7f:50:ef:d2:4e:24:5d:5b:c5:21:16:94: cd:b2:97:3c:72:0e:a6:69:53:24:36:0c:49:e5:34:c0:8a:1a: 9f:c8:78:39:db:0c:f7:05:8f:0f:62:b8:4d:17:e4:d5:57:51: 89:83:4e:c2:a1:dd:66:66:d0:59:bf:d6:cd:ed:e6:96:1a:bf: 2d:4b:22:82:ce:86:c9:55:bf:5c:d4:6f:a4:a9:78:27:c3:32: 49:f0:38:ac:c2:7a:4d:84:40:ff:e1:57:b4:1c:76:81:d4:06: 20:8d:bb:e8:16:4b:c5:f7:f2:10:2a:1d:01:96:49:12:b3:f5: 96:b0:21:a5:db:c6:05:0e:d6:7b:40:47:27:d2:53:2c:6e:b9: 4d:a7:c9:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwNDI1MDE0ODIxWhcNMjUwNTAyMDE0ODIxWjAYMRYwFAYD VQQDEw02ODBhZTllNS1kNDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYBVnhdf7LRwrY93fuy/uD3S1Tk9oIx4H36RWa0FwBpsmfIpDP0i3H+WoNWk 1kV8Ok8ZKvRiwGqv/TdoePfceEAMLEr8/mWQGjIdukkhxxI4g+QOGGgmxAZxNhN4 OL/nuVWPvG4kJ5N/sF8aHNJuN9BgkDcWmzZNfi2/2dOlZ3OvbzBDxT6tmAQd0hnV 7/M8BM+uS3hqU6UaJIPRXAnBnXmDqmcC1rImf1fEQa7YBK14EZYv0pLuJC5gLypG 0c3/sWrSJ35n9bMUZQ4ikasl36vj26rptGgxvI+2BfXJAMKYwYMuv03WE2+ehjs6 /Loli0L+mJeMsaJKqQfDQg6l1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHKaykRK 9AjViRJVoFNrsAkY+Kt0MB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMWaHBlX7fphy4w60btjp9sU3QFiJEA3rF4xt4MqyWWpyXqrrz/HZp yy5h+hw4pGmFQU/oKa/qgwY9ufezREDjx5LuxDMni6lXqjUYiQ+WkiJUjigk2nbK /D7sILBMRgZvbgd2cKjNhTWMXS5VLfuxzIR/UO/STiRdW8UhFpTNspc8cg6maVMk NgxJ5TTAihqfyHg52wz3BY8PYrhNF+TVV1GJg07Cod1mZtBZv9bN7eaWGr8tSyKC zobJVb9c1G+kqXgnwzJJ8DiswnpNhED/4Ve0HHaB1AYgjbvoFkvF9/IQKh0BlkkS s/WWsCGl28YFDtZ7QEcn0lMsbrlNp8nU -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:34 2025 by rpki-client