$ rpki-client -vvf rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft File: 2cYV0QtB5uVphlzKp_4oDRKOMRw.mft (raw, json) Hash identifier: lkWvGrr80E7eXc2phnlMP6EpDDZz/oqonDW11lahuEk= Subject key identifier: 94:B2:0C:CC:71:F9:D4:03:F3:22:19:A7:83:1F:B0:08:50:54:CC:9D Authority key identifier: D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C Certificate issuer: /CN=A91293E9/serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Certificate serial: 0654 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft Manifest number: 0649 Signing time: Sat 10 May 2025 22:12:28 +0000 Manifest this update: Sat 10 May 2025 22:12:28 +0000 Manifest next update: Sat 17 May 2025 22:12:28 +0000 Files and hashes: 1: 2cYV0QtB5uVphlzKp_4oDRKOMRw.crl (hash: 7pFUfnJQAzLRJHNe7BWRjPRTbq9JIeb4XZchyPkqyxo=) 2: 1AC1982A8C6A11EB91832D52C4F9AE02.roa (hash: fSfAPi/bUi9k15IOKds7b6yXEktxoZjFwfG44RAp5IM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91293E9, serialNumber=D9C615D10B41E6E569865CCAA7FE280D128E311C Validity Not Before: May 10 22:12:28 2025 GMT Not After : May 17 22:12:28 2025 GMT Subject: CN=681fcf4c-0c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:02:7d:bf:e8:1c:83:52:cf:e2:58:f0:7c: 12:58:59:05:4f:02:6a:b7:b9:e8:98:59:ed:4d:c3: 73:6d:bc:49:f6:13:14:67:9a:96:99:af:81:82:6c: 7c:a8:90:75:c0:0e:95:d5:43:58:99:0d:68:5d:e6: 07:15:ff:aa:d5:10:8d:6b:61:d5:80:63:48:24:2a: 01:aa:77:4a:e9:d4:1f:40:d8:78:b6:97:14:46:6d: 1c:23:7d:bf:7c:61:25:cf:6f:3c:80:05:8c:55:f2: 5c:72:87:b7:0f:54:c2:62:4b:2a:f7:d0:eb:cf:df: 8b:46:03:46:0c:89:96:f8:89:74:12:77:5d:55:44: f6:ef:01:42:f0:41:69:ce:34:e9:cc:d9:d7:a5:9a: aa:61:69:60:8b:bd:9d:94:62:6a:65:96:53:ce:13: c3:0a:dc:f1:87:74:e5:19:54:0b:8c:c3:25:d8:34: 07:56:f1:ae:9c:ad:b0:31:ae:31:df:9d:05:4e:11: a0:62:84:f6:77:e0:5e:03:08:58:cb:a5:5e:ce:e8: bc:eb:15:d3:83:c6:3c:90:2f:00:21:8d:63:00:03: e0:45:f5:eb:77:89:ff:05:56:f2:01:6c:b5:6f:8b: 09:b6:69:18:4e:10:71:ab:0c:10:7c:b7:00:c5:80: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B2:0C:CC:71:F9:D4:03:F3:22:19:A7:83:1F:B0:08:50:54:CC:9D X509v3 Authority Key Identifier: keyid:D9:C6:15:D1:0B:41:E6:E5:69:86:5C:CA:A7:FE:28:0D:12:8E:31:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2cYV0QtB5uVphlzKp_4oDRKOMRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91293E9/83A174FC8C6811EB981B2542C4F9AE02/2cYV0QtB5uVphlzKp_4oDRKOMRw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:3b:c6:33:a7:c8:c8:61:d8:50:ab:e8:94:fb:97:cf:a8:f7: 10:d9:3c:32:05:96:73:de:b0:93:28:30:17:af:e0:48:1c:89: b2:b8:28:74:e9:28:c9:00:78:f5:12:b8:60:a6:0b:3e:9b:d4: a1:fc:7e:45:f6:be:be:79:43:32:eb:ac:14:71:67:41:9d:8e: 11:cf:25:55:5b:73:30:7e:7d:d0:8c:29:e7:df:dc:06:59:bc: 92:4d:6a:07:83:7f:9f:f4:eb:31:5b:d1:e6:34:4e:f8:fc:f2: a6:27:40:27:19:71:ef:8e:43:2c:6e:1c:6e:81:09:0a:0d:d8: 9c:2b:80:7a:d3:45:2a:76:7a:90:c3:67:a9:c8:b1:3a:41:87: 6e:ac:d7:5e:40:f1:e4:b0:92:88:bd:cd:74:57:c7:37:fc:5d: 42:96:ee:a5:8f:4f:bf:ed:3c:32:39:8f:42:b5:7c:3e:88:59: 2e:ff:48:61:47:34:1e:ab:01:33:66:32:98:77:8c:d6:2e:b1: 9f:8d:05:55:2a:12:91:61:ef:8d:c9:a9:31:84:7b:5b:9b:ca: 5d:2d:6d:2a:3e:7c:1a:47:9d:10:29:f0:f0:29:e2:ae:f6:b2: a8:9e:20:9b:17:c5:1d:52:d9:4a:b1:f3:fa:33:40:51:16:dd: 3d:49:2c:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkzRTkxMTAvBgNVBAUTKEQ5QzYxNUQxMEI0MUU2RTU2OTg2NUNDQUE3RkUyODBE MTI4RTMxMUMwHhcNMjUwNTEwMjIxMjI4WhcNMjUwNTE3MjIxMjI4WjAYMRYwFAYD VQQDEw02ODFmY2Y0Yy0wYzlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+UCfb/oHINSz+JY8HwSWFkFTwJqt7nomFntTcNzbbxJ9hMUZ5qWma+Bgmx8 qJB1wA6V1UNYmQ1oXeYHFf+q1RCNa2HVgGNIJCoBqndK6dQfQNh4tpcURm0cI32/ fGElz288gAWMVfJccoe3D1TCYksq99Drz9+LRgNGDImW+Il0EnddVUT27wFC8EFp zjTpzNnXpZqqYWlgi72dlGJqZZZTzhPDCtzxh3TlGVQLjMMl2DQHVvGunK2wMa4x 350FThGgYoT2d+BeAwhYy6Vezui86xXTg8Y8kC8AIY1jAAPgRfXrd4n/BVbyAWy1 b4sJtmkYThBxqwwQfLcAxYDn2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSyDMxx +dQD8yIZp4MfsAhQVMydMB8GA1UdIwQYMBaAFNnGFdELQeblaYZcyqf+KA0SjjEc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTNFOS84M0ExNzRGQzhD NjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1VnBobHpLcF80b0RSS09N UncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJjWVYwUXRCNXVWcGhsektwXzRvRFJLT01Sdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTNFOS84M0ExNzRGQzhDNjgxMUVCOTgxQjI1NDJDNEY5QUUwMi8yY1lWMFF0QjV1 VnBobHpLcF80b0RSS09NUncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwO8Yzp8jIYdhQq+iU+5fPqPcQ2TwyBZZz3rCTKDAXr+BIHImyuCh0 6SjJAHj1Erhgpgs+m9Sh/H5F9r6+eUMy66wUcWdBnY4RzyVVW3Mwfn3QjCnn39wG WbySTWoHg3+f9OsxW9HmNE74/PKmJ0AnGXHvjkMsbhxugQkKDdicK4B600UqdnqQ w2epyLE6QYdurNdeQPHksJKIvc10V8c3/F1Clu6lj0+/7TwyOY9CtXw+iFku/0hh RzQeqwEzZjKYd4zWLrGfjQVVKhKRYe+NyakxhHtbm8pdLW0qPnwaR50QKfDwKeKu 9rKoniCbF8UdUtlKsfP6M0BRFt09SSzc -----END CERTIFICATE-----Generated at Mon May 12 19:27:18 2025 by rpki-client