$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: IRFGXEhXwH/VGf+UFj4dwXplah38IUtDg4gMOoV8U3Y= Subject key identifier: EF:5A:8D:B5:E6:12:77:0F:E0:AB:EC:4A:95:80:1D:E8:09:B7:65:BB Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 0112 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 010F Signing time: Sat 03 May 2025 04:19:00 +0000 Manifest this update: Sat 03 May 2025 04:19:00 +0000 Manifest next update: Sat 10 May 2025 04:19:00 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: Da1Ucn8hCSbKQI30rSv33RptBZyDVMvriygKiqlMAG0=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 04:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B, serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Validity Not Before: May 3 04:19:00 2025 GMT Not After : May 10 04:19:00 2025 GMT Subject: CN=68159934-f745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:94:4b:03:f6:1b:bd:82:40:be:5b:0c:b7: 66:84:d0:68:bc:99:66:be:58:a8:58:25:b8:fe:a4: 7e:2c:50:1b:71:06:d4:6a:e0:c2:a3:5c:6d:e7:bb: 4e:c5:f6:7f:6d:11:fb:b5:3b:92:a9:59:07:19:65: 93:ba:2e:51:1e:fe:d6:e2:7d:d6:0b:f1:9c:fd:9a: 6d:77:a6:48:09:72:3c:9b:72:75:29:c4:a8:7b:e8: 14:67:e3:d7:d9:c8:b4:2f:c8:79:d2:d0:67:68:14: 35:00:d3:4a:5a:be:8d:82:24:c6:e2:96:ce:34:37: 2a:a5:50:18:05:ed:1a:b4:7d:bf:5e:77:8d:73:2b: 88:fd:59:2e:69:d5:43:ea:59:8b:94:c2:61:44:5d: 77:24:e9:f7:32:e9:d4:97:82:70:03:b7:d5:34:fa: 3a:85:0e:5d:3d:ce:2b:57:ed:3e:c0:32:8b:bf:a0: 04:9c:be:90:be:4d:e1:cf:82:0b:ef:ee:b1:9a:86: 97:40:cd:65:e9:c0:1a:d4:5f:aa:90:84:5e:fc:6d: 0b:a5:5d:9d:bf:92:56:75:cc:9a:63:94:c9:32:ad: 0e:21:3d:fb:dc:0f:e3:20:f5:57:a4:85:62:01:9a: ff:ab:c1:5f:a5:7e:7e:a4:a0:8f:43:b4:6e:e7:29: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:8D:B5:E6:12:77:0F:E0:AB:EC:4A:95:80:1D:E8:09:B7:65:BB X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:01:14:b0:9d:65:68:a0:5c:2f:fa:e6:66:14:b9:89:50:59: c4:b0:6b:b9:d2:81:67:15:1f:c9:07:bf:14:ce:a7:68:de:8a: 4a:aa:fd:88:16:f4:be:c0:a2:d3:49:b2:07:bb:9b:ef:b9:6b: d5:57:0d:b8:2f:1b:f3:49:1f:1e:1b:d8:1f:a8:04:17:5b:d9: 18:16:4e:7b:99:ec:54:6f:ad:e4:00:3c:75:f9:fd:83:15:d8: e3:dc:2b:3a:c0:0b:ed:30:6f:a9:dd:17:54:ea:3e:0b:8d:63: 1e:25:6c:45:14:23:38:c8:49:22:30:ad:33:7c:a5:2a:e7:34: f8:e1:f3:cc:d1:07:05:b3:a4:db:b1:a3:1b:7f:cd:09:78:da: df:67:d7:01:10:f2:de:bc:e9:75:57:34:be:e4:36:b7:ee:9a: 07:88:e1:da:34:57:06:50:1c:8d:d6:b4:50:e2:f2:20:70:59: 7f:50:a5:9b:2a:ef:0a:09:11:f6:c5:ae:fd:66:5a:b7:d8:3d: 1a:68:2e:61:65:af:46:d6:54:c9:3a:aa:7d:3d:15:15:a3:22: 8a:60:9d:b3:ce:24:7d:e0:b5:11:20:7c:d9:be:43:88:1d:87: 5a:28:31:0d:0c:01:69:89:b1:f4:f3:d4:58:8e:78:ea:61:99: 3a:5c:c0:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUwNTAzMDQxOTAwWhcNMjUwNTEwMDQxOTAwWjAYMRYwFAYD VQQDEw02ODE1OTkzNC1mNzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIqUSwP2G72CQL5bDLdmhNBovJlmvlioWCW4/qR+LFAbcQbUauDCo1xt57tO xfZ/bRH7tTuSqVkHGWWTui5RHv7W4n3WC/Gc/Zptd6ZICXI8m3J1KcSoe+gUZ+PX 2ci0L8h50tBnaBQ1ANNKWr6NgiTG4pbONDcqpVAYBe0atH2/XneNcyuI/VkuadVD 6lmLlMJhRF13JOn3MunUl4JwA7fVNPo6hQ5dPc4rV+0+wDKLv6AEnL6Qvk3hz4IL 7+6xmoaXQM1l6cAa1F+qkIRe/G0LpV2dv5JWdcyaY5TJMq0OIT373A/jIPVXpIVi AZr/q8FfpX5+pKCPQ7Ru5ykhBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9ajbXm EncP4KvsSpWAHegJt2W7MB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCARSwnWVooFwv+uZmFLmJUFnEsGu50oFnFR/JB78Uzqdo3opKqv2I FvS+wKLTSbIHu5vvuWvVVw24LxvzSR8eG9gfqAQXW9kYFk57mexUb63kADx1+f2D Fdjj3Cs6wAvtMG+p3RdU6j4LjWMeJWxFFCM4yEkiMK0zfKUq5zT44fPM0QcFs6Tb saMbf80JeNrfZ9cBEPLevOl1VzS+5Da37poHiOHaNFcGUByN1rRQ4vIgcFl/UKWb Ku8KCRH2xa79Zlq32D0aaC5hZa9G1lTJOqp9PRUVoyKKYJ2zziR94LURIHzZvkOI HYdaKDENDAFpibH089RYjnjqYZk6XMAO -----END CERTIFICATE-----Generated at Mon May 5 02:55:06 2025 by rpki-client