$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: eVV8wUueVQzx8M9L/ldfTwkNcTpiuTXug7Wql//f3cs= Subject key identifier: 37:0D:A1:F5:CB:EC:22:F9:CA:EC:43:17:0C:08:CC:F5:89:5C:4F:DC Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 0185 Signing time: Fri 09 May 2025 02:47:28 +0000 Manifest this update: Fri 09 May 2025 02:47:28 +0000 Manifest next update: Fri 16 May 2025 02:47:28 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: 96IrwJ0qyl7dpu8Cw5dR4tMub14b12AdFwidesHvucI=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: T2GxpprBCkLcK8nLanU7+iPRdUPJ3LHSQZhYNBEF7S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: May 9 02:47:28 2025 GMT Not After : May 16 02:47:28 2025 GMT Subject: CN=681d6cc0-9cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:96:f3:fb:fc:77:c3:13:7e:d3:7c:ef:f9:d5: 3f:cb:44:b9:f7:07:b5:a7:48:89:91:a6:38:20:a9: bc:8c:49:7c:4d:59:16:1b:8e:2d:cd:54:97:14:b4: 85:3d:c2:83:51:45:ae:8d:ec:f8:d1:6a:ff:4a:21: f5:60:2a:db:2b:3e:2c:5a:3c:0e:fa:c3:82:da:fb: b8:7b:2c:bf:96:ef:bc:04:5e:e6:69:6e:7b:5a:eb: 3b:8a:24:9f:c2:b0:08:a8:4b:2f:36:f9:77:93:3b: 2b:17:d7:2a:cf:aa:c7:66:ce:0c:ab:06:99:a1:79: a2:a7:7d:cc:2c:c0:0f:9c:78:e1:12:eb:7e:3d:fd: f2:c3:75:8d:48:81:af:e8:46:74:1b:8d:ee:9b:fd: 7a:60:eb:11:92:de:f0:60:38:8c:cd:8c:47:df:c7: f4:5f:06:19:2e:d0:67:8c:4a:25:bb:82:e5:c5:34: 8f:b3:eb:1f:8d:7b:8f:ff:b6:c5:ac:cf:e6:0d:cc: 25:39:47:4c:0f:6c:d3:58:da:5e:b8:a4:ef:86:d0: 50:93:82:14:6e:a3:08:35:1c:f8:37:a9:a2:87:be: 1d:31:5c:44:be:b6:0a:a6:6f:81:f9:d6:bb:35:ac: 5a:2f:06:ff:0f:3d:ec:13:fe:be:09:68:86:33:ce: 55:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0D:A1:F5:CB:EC:22:F9:CA:EC:43:17:0C:08:CC:F5:89:5C:4F:DC X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:63:99:04:c2:54:84:a6:ad:01:54:1d:03:0c:7a:c0:d4:4e: 87:fb:82:e7:b9:0c:9d:62:fb:fc:11:cf:2c:c7:00:30:49:ae: 22:73:cc:b8:c5:ba:c9:3f:55:82:12:ae:6d:ae:32:02:60:26: e8:1a:95:42:35:46:e2:3e:bb:40:dc:2f:68:d9:c0:35:67:c7: 6d:76:c6:0a:10:bd:37:ad:3e:ab:3b:df:27:7d:67:12:8c:2a: 51:29:a6:8a:02:61:31:37:82:d2:97:49:52:a2:c7:96:5b:55: cd:5c:29:98:b3:8a:06:59:47:12:ea:10:e3:d4:59:41:fd:7e: e0:c2:86:c0:3a:83:58:74:f9:8f:1b:39:8e:67:4c:4d:d2:6a: 39:0a:82:ac:8b:aa:ec:dd:82:af:57:7f:9f:ee:c7:ab:2b:10: 9f:e1:58:6e:01:4c:e5:89:57:8c:68:cc:94:58:91:f8:e8:3f: e2:16:0a:b8:83:da:f0:69:21:1b:f9:1e:07:ac:e9:f9:d7:bc: 6e:fb:70:14:1b:c3:8d:91:db:01:69:21:9c:bc:56:58:6e:f1: b2:f4:87:97:f4:9d:4a:7f:1b:d6:5a:cc:92:92:de:2e:70:ba: f4:cf:8d:65:4d:77:95:c3:0a:5b:38:4d:1d:4c:6b:00:fb:9e: 58:27:29:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwNTA5MDI0NzI4WhcNMjUwNTE2MDI0NzI4WjAYMRYwFAYD VQQDEw02ODFkNmNjMC05Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA55bz+/x3wxN+03zv+dU/y0S59we1p0iJkaY4IKm8jEl8TVkWG44tzVSXFLSF PcKDUUWujez40Wr/SiH1YCrbKz4sWjwO+sOC2vu4eyy/lu+8BF7maW57Wus7iiSf wrAIqEsvNvl3kzsrF9cqz6rHZs4MqwaZoXmip33MLMAPnHjhEut+Pf3yw3WNSIGv 6EZ0G43um/16YOsRkt7wYDiMzYxH38f0XwYZLtBnjEolu4LlxTSPs+sfjXuP/7bF rM/mDcwlOUdMD2zTWNpeuKTvhtBQk4IUbqMINRz4N6mih74dMVxEvrYKpm+B+da7 NaxaLwb/Dz3sE/6+CWiGM85VkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcNofXL 7CL5yuxDFwwIzPWJXE/cMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuY5kEwlSEpq0BVB0DDHrA1E6H+4LnuQydYvv8Ec8sxwAwSa4ic8y4 xbrJP1WCEq5trjICYCboGpVCNUbiPrtA3C9o2cA1Z8dtdsYKEL03rT6rO98nfWcS jCpRKaaKAmExN4LSl0lSoseWW1XNXCmYs4oGWUcS6hDj1FlB/X7gwobAOoNYdPmP GzmOZ0xN0mo5CoKsi6rs3YKvV3+f7serKxCf4VhuAUzliVeMaMyUWJH46D/iFgq4 g9rwaSEb+R4HrOn517xu+3AUG8ONkdsBaSGcvFZYbvGy9IeX9J1KfxvWWsySkt4u cLr0z41lTXeVwwpbOE0dTGsA+55YJylS -----END CERTIFICATE-----Generated at Sat May 10 21:59:07 2025 by rpki-client