$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft File: v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft (raw, json) Hash identifier: JI0RfjVlbgAmTEn2Lg0bO0t7hcrYJjzlaeypJ5Erd84= Subject key identifier: FC:7B:F6:22:0D:4A:6A:CF:D7:4D:92:23:BB:9D:9B:03:B3:CA:8E:AF Authority key identifier: BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C Certificate issuer: /CN=A912BE9D/serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft Manifest number: 0670 Signing time: Mon 12 May 2025 22:33:09 +0000 Manifest this update: Mon 12 May 2025 22:33:08 +0000 Manifest next update: Mon 19 May 2025 22:33:08 +0000 Files and hashes: 1: v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl (hash: n4Qt4vtvH3I5Ag9akXAGY1RLOtt5XMrv3vpgPNxfHSg=) 2: CA44DBE09A9811EBAC99AD22C4F9AE02.roa (hash: wfbzZwER+fTgY++pqgXP/OKLLTSGFpByy89x8B47O4E=) 3: E0AAFE389A2411EBA8913944C4F9AE02.roa (hash: 1D7+OCtGjby5tViOYZaur4l4d2dDZ0m3lkkYo/LV9js=) 4: F2AA224A1A1711F09D6D6923C4F9AE02.roa (hash: T0CswBD2KIPNfh8TN7kP5VLd+HEy8GI9WMF69x1b8Qc=) 5: 971C513C022111EFBBBD7C47C4F9AE02.roa (hash: QuMBlcTc7QujQ/SOoXxGFQuUtssnMEkGa1IbX48EXaw=) 6: 671FC40EE29211EE94348874C4F9AE02.roa (hash: zylwlyfQcRU6ehbr04cNoWE1AgSNT1tCrRy3GfEdHx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE9D, serialNumber=BF6AD1ABC9D91619A09287FB6C64F4647B9FD31C Validity Not Before: May 12 22:33:08 2025 GMT Not After : May 19 22:33:08 2025 GMT Subject: CN=68227724-8190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:91:18:f3:77:89:71:4f:1d:03:dd:94:00: 15:97:7e:40:cb:fd:d7:52:3d:8e:0c:3e:7b:22:43: 6a:d0:f3:53:b1:d9:50:5f:af:5a:a0:24:b8:84:b2: cd:a7:29:70:15:81:67:fe:70:29:33:6f:f4:a7:91: 32:8c:55:fb:0b:11:93:c1:c8:f1:d4:12:b4:d5:ce: 87:07:7b:ee:7c:b9:58:d0:0a:25:03:04:4a:0f:86: 80:c0:75:08:81:dd:3d:72:ed:be:f1:c5:53:01:be: 08:6d:b3:56:11:fb:45:1a:1f:3f:4c:96:55:4c:db: ce:d2:20:82:9b:4c:8f:11:c3:a9:5a:f1:3b:52:5e: fa:21:0b:a0:2c:97:83:47:b6:4a:ce:ba:b1:30:3e: e4:2c:48:67:2b:8a:9b:d5:43:f2:a7:0f:9a:3e:53: de:6e:1e:0d:6c:de:0b:c9:11:f5:2c:a9:54:d1:f5: 4d:b0:97:a8:e5:5c:93:df:54:33:d7:f0:2f:91:98: f1:ce:ef:b7:ce:0d:b8:7f:7a:c0:f1:ba:da:0f:71: 1d:83:c4:66:0a:32:d4:31:87:a5:4a:73:62:7b:c7: 76:5c:dd:b4:73:1b:63:58:e7:95:6f:9c:dd:73:06: be:31:b8:74:44:af:b5:87:1a:0e:18:f1:c5:5f:a1: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:F6:22:0D:4A:6A:CF:D7:4D:92:23:BB:9D:9B:03:B3:CA:8E:AF X509v3 Authority Key Identifier: keyid:BF:6A:D1:AB:C9:D9:16:19:A0:92:87:FB:6C:64:F4:64:7B:9F:D3:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v2rRq8nZFhmgkof7bGT0ZHuf0xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE9D/D305E4EE990E11EB89B76D68C4F9AE02/v2rRq8nZFhmgkof7bGT0ZHuf0xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6a:16:0c:1b:a8:81:96:28:c0:b4:e1:5e:f7:0a:5b:32:ab: eb:b7:f9:9b:00:04:d6:65:0b:d9:f7:f3:26:60:eb:a8:e1:f4: 59:db:6d:d6:bc:5b:33:6f:33:96:d0:4d:0f:4a:05:ff:bc:c6: fe:e5:54:1d:22:45:44:d7:f6:b8:2e:92:ea:5f:cb:de:71:4a: de:6c:1b:88:be:15:6f:00:9f:67:32:da:0b:ec:c4:4a:26:86: 2f:61:b0:83:b9:7e:d4:9a:30:f4:21:db:0c:43:67:02:ed:58: ca:c0:db:90:d2:2b:f3:1d:d0:11:d8:8d:16:55:b3:bb:44:25: dd:96:ba:10:d3:ca:01:34:29:eb:76:70:ac:ad:31:f9:4c:5d: 5a:6c:63:c8:ef:0b:14:98:e6:b1:52:17:eb:3c:d1:34:43:50: a2:6e:cb:5d:6e:f8:74:09:83:5a:a6:69:5e:a0:4a:f5:4e:0e: 06:2b:c0:94:17:c6:a5:77:ed:16:b4:8b:0f:8f:e0:eb:ba:c8: b1:19:33:6b:17:9c:b8:a2:ac:86:b4:ce:7d:45:9a:3d:bb:6c: 06:e8:05:99:41:64:51:e2:83:4c:15:85:33:eb:a9:e8:35:88: 3c:83:41:51:43:5b:fa:16:e5:85:5e:ca:8e:34:08:fc:83:d7: 85:92:16:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFOUQxMTAvBgNVBAUTKEJGNkFEMUFCQzlEOTE2MTlBMDkyODdGQjZDNjRGNDY0 N0I5RkQzMUMwHhcNMjUwNTEyMjIzMzA4WhcNMjUwNTE5MjIzMzA4WjAYMRYwFAYD VQQDEw02ODIyNzcyNC04MTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0GCRGPN3iXFPHQPdlAAVl35Ay/3XUj2ODD57IkNq0PNTsdlQX69aoCS4hLLN pylwFYFn/nApM2/0p5EyjFX7CxGTwcjx1BK01c6HB3vufLlY0AolAwRKD4aAwHUI gd09cu2+8cVTAb4IbbNWEftFGh8/TJZVTNvO0iCCm0yPEcOpWvE7Ul76IQugLJeD R7ZKzrqxMD7kLEhnK4qb1UPypw+aPlPebh4NbN4LyRH1LKlU0fVNsJeo5VyT31Qz 1/AvkZjxzu+3zg24f3rA8braD3Edg8RmCjLUMYelSnNie8d2XN20cxtjWOeVb5zd cwa+Mbh0RK+1hxoOGPHFX6EZpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPx79iIN SmrP102SI7udmwOzyo6vMB8GA1UdIwQYMBaAFL9q0avJ2RYZoJKH+2xk9GR7n9Mc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU5RC9EMzA1RTRFRTk5 MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZobWdrb2Y3YkdUMFpIdWYw eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YyclJxOG5aRmhtZ2tvZjdiR1QwWkh1ZjB4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU5RC9EMzA1RTRFRTk5MEUxMUVCODlCNzZENjhDNEY5QUUwMi92MnJScThuWkZo bWdrb2Y3YkdUMFpIdWYweHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVahYMG6iBlijAtOFe9wpbMqvrt/mbAATWZQvZ9/MmYOuo4fRZ223W vFszbzOW0E0PSgX/vMb+5VQdIkVE1/a4LpLqX8vecUrebBuIvhVvAJ9nMtoL7MRK JoYvYbCDuX7UmjD0IdsMQ2cC7VjKwNuQ0ivzHdAR2I0WVbO7RCXdlroQ08oBNCnr dnCsrTH5TF1abGPI7wsUmOaxUhfrPNE0Q1Cibstdbvh0CYNapmleoEr1Tg4GK8CU F8ald+0WtIsPj+DrusixGTNrF5y4oqyGtM59RZo9u2wG6AWZQWRR4oNMFYUz66no NYg8g0FRQ1v6FuWFXsqONAj8g9eFkhb6 -----END CERTIFICATE-----Generated at Tue May 13 14:59:28 2025 by rpki-client