$ rpki-client -vvf rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft File: 2-ETC8fG27LbfLvxTgH2GG_9vRA.mft (raw, json) Hash identifier: rsXEnvuiZrIZD3fNmjquLcRgisQ5O2DqwvoYyZk8Xs8= Subject key identifier: B7:4A:5C:3C:BE:5B:59:6A:8D:C7:45:E4:28:47:DC:CF:2C:F9:64:B3 Authority key identifier: DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 Certificate issuer: /CN=A9115480/serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft Manifest number: 0266 Signing time: Tue 13 May 2025 01:32:58 +0000 Manifest this update: Tue 13 May 2025 01:32:58 +0000 Manifest next update: Tue 20 May 2025 01:32:58 +0000 Files and hashes: 1: 2-ETC8fG27LbfLvxTgH2GG_9vRA.crl (hash: f4z7yW2nGp7m/YS5b8a/QtgNZeMVrxeLApSHvPbqB4w=) 2: D1D6719A10DD11EDBC7EA35FC4F9AE02.roa (hash: frzjCs+Z/Mi4ZDgqYWFwqblODHyg9lLqa7tObDvQ7CE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115480, serialNumber=DBE1130BC7C6DBB2DB7CBBF14E01F6186FFDBD10 Validity Not Before: May 13 01:32:58 2025 GMT Not After : May 20 01:32:58 2025 GMT Subject: CN=6822a14a-b73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fd:97:69:30:ea:fa:64:70:ae:1e:9e:26:77: 88:4f:f7:09:10:6d:59:a7:a0:0b:e3:62:52:18:ea: 58:50:86:26:3b:a2:08:a2:0c:05:7d:36:fa:0d:ee: ca:cd:2e:24:d5:b2:5e:fe:91:43:cb:00:61:9b:45: cf:b9:64:9f:4f:5f:11:86:45:ff:d9:29:a1:d4:f0: 75:81:93:88:4d:c8:4f:cf:8b:1c:97:58:3d:a5:5a: 78:76:8a:ba:e8:5a:b2:b3:9f:ea:50:a8:17:55:92: 11:1d:05:e8:44:88:36:8c:98:37:b3:74:a3:e0:0d: 11:d3:30:84:08:fd:e6:4c:a2:e4:6a:c7:b8:9e:7a: ff:aa:8d:1b:03:dc:1f:26:bf:05:8a:ea:af:27:d9: c7:b1:45:df:6a:92:cc:a8:3f:aa:95:84:07:c5:fc: 9b:85:0d:6c:2a:3c:57:cb:b7:25:af:54:e9:66:96: e1:d5:fb:21:8a:5f:fe:c9:95:93:7c:94:60:6e:ec: c9:71:2d:75:58:da:01:40:94:02:fd:8a:4d:81:cc: e5:86:fb:68:d2:11:2c:a0:38:38:7f:44:29:14:fa: 6f:a1:ce:f7:d7:36:7b:90:36:f5:87:6e:fa:9a:de: 77:16:93:f2:6c:13:33:0c:6c:ef:11:ce:49:de:3c: c7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:4A:5C:3C:BE:5B:59:6A:8D:C7:45:E4:28:47:DC:CF:2C:F9:64:B3 X509v3 Authority Key Identifier: keyid:DB:E1:13:0B:C7:C6:DB:B2:DB:7C:BB:F1:4E:01:F6:18:6F:FD:BD:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2-ETC8fG27LbfLvxTgH2GG_9vRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115480/96F28AC610DA11ED8A699E32C4F9AE02/2-ETC8fG27LbfLvxTgH2GG_9vRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:38:bc:cb:75:15:a6:95:36:18:de:55:cf:7e:5d:f4:fb:43: fe:7c:46:bf:f9:fe:5b:b5:12:05:46:0f:80:e7:fd:8c:b9:14: 96:85:8d:b4:9a:29:e5:06:97:6b:e8:93:33:a4:7c:48:2b:5f: 1a:b2:57:33:8b:f0:26:39:ae:f4:f1:a6:f3:96:2f:de:fa:d9: b8:56:b1:bd:90:97:48:05:2e:07:71:e3:b7:39:02:76:6b:9b: 0e:3b:b7:c3:0e:bb:aa:f4:84:05:4e:10:81:39:d3:f9:e9:ff: 51:ec:c4:bc:e4:7a:1f:0c:c9:82:3f:f0:3c:5e:4e:15:1f:7b: 5f:46:fa:a5:f4:49:2d:3b:6c:a2:21:35:01:60:8a:fc:8f:22: 4e:23:fa:d9:26:3e:0a:c2:5c:a9:7e:f3:a3:fb:ee:c3:70:fe: 56:2e:3a:5a:2a:3f:22:64:0c:0e:00:8c:e6:f2:91:6e:f6:27: 3a:48:06:20:b3:ed:81:bb:fe:43:f4:fe:d3:6a:a4:2e:55:78: 4e:66:74:ee:84:18:76:3e:a7:39:f1:80:3f:ef:4d:36:36:9e: 45:6c:7f:17:7a:18:18:04:77:27:cd:22:6a:7c:20:04:1c:98: d1:0f:29:fb:b1:c2:db:c9:5d:8f:7c:0a:96:de:57:21:f0:c8: 10:c2:3a:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU0ODAxMTAvBgNVBAUTKERCRTExMzBCQzdDNkRCQjJEQjdDQkJGMTRFMDFGNjE4 NkZGREJEMTAwHhcNMjUwNTEzMDEzMjU4WhcNMjUwNTIwMDEzMjU4WjAYMRYwFAYD VQQDEw02ODIyYTE0YS1iNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7f2XaTDq+mRwrh6eJneIT/cJEG1Zp6AL42JSGOpYUIYmO6IIogwFfTb6De7K zS4k1bJe/pFDywBhm0XPuWSfT18RhkX/2Smh1PB1gZOITchPz4scl1g9pVp4doq6 6Fqys5/qUKgXVZIRHQXoRIg2jJg3s3Sj4A0R0zCECP3mTKLkase4nnr/qo0bA9wf Jr8FiuqvJ9nHsUXfapLMqD+qlYQHxfybhQ1sKjxXy7clr1TpZpbh1fshil/+yZWT fJRgbuzJcS11WNoBQJQC/YpNgczlhvto0hEsoDg4f0QpFPpvoc731zZ7kDb1h276 mt53FpPybBMzDGzvEc5J3jzH1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdKXDy+ W1lqjcdF5ChH3M8s+WSzMB8GA1UdIwQYMBaAFNvhEwvHxtuy23y78U4B9hhv/b0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTQ4MC85NkYyOEFDNjEw REExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3TGJmTHZ4VGdIMkdHXzl2 UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzItRVRDOGZHMjdMYmZMdnhUZ0gyR0dfOXZSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTQ4MC85NkYyOEFDNjEwREExMUVEOEE2OTlFMzJDNEY5QUUwMi8yLUVUQzhmRzI3 TGJmTHZ4VGdIMkdHXzl2UkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsOLzLdRWmlTYY3lXPfl30+0P+fEa/+f5btRIFRg+A5/2MuRSWhY20 minlBpdr6JMzpHxIK18aslczi/AmOa708abzli/e+tm4VrG9kJdIBS4HceO3OQJ2 a5sOO7fDDruq9IQFThCBOdP56f9R7MS85HofDMmCP/A8Xk4VH3tfRvql9EktO2yi ITUBYIr8jyJOI/rZJj4KwlypfvOj++7DcP5WLjpaKj8iZAwOAIzm8pFu9ic6SAYg s+2Bu/5D9P7TaqQuVXhOZnTuhBh2Pqc58YA/7002Np5FbH8XehgYBHcnzSJqfCAE HJjRDyn7scLbyV2PfAqW3lch8MgQwjqy -----END CERTIFICATE-----Generated at Wed May 14 15:12:36 2025 by rpki-client