$ rpki-client -vvf rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft File: 2lA_lyy8k6jIHflfVKLLKjjxPHc.mft (raw, json) Hash identifier: giz9W3eYHiRE/oZV3zvvt8UzerX/DZcWsqDMVeSMR14= Subject key identifier: 0E:E0:D6:A8:BE:79:C9:E7:9D:06:7F:DF:31:AD:4B:CA:94:F7:68:1C Authority key identifier: DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 Certificate issuer: /CN=A9144717/serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Certificate serial: 09B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft Manifest number: 09B0 Signing time: Fri 16 May 2025 20:17:46 +0000 Manifest this update: Fri 16 May 2025 20:17:45 +0000 Manifest next update: Fri 23 May 2025 20:17:45 +0000 Files and hashes: 1: 2lA_lyy8k6jIHflfVKLLKjjxPHc.crl (hash: EdmkQO7R6oWcpmGQwksxXVhkTazAAWJgzOB0gx+ih3M=) 2: F38DEBFC83E911EA993D9515C4F9AE02.roa (hash: jObq5WAnKWNNe1xvn+i1p17e0KpzbzVrnmTwIgH5Dh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 20:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2487 (0x9b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144717, serialNumber=DA503F972CBC93A8C81DF95F54A2CB2A38F13C77 Validity Not Before: May 16 20:17:45 2025 GMT Not After : May 23 20:17:45 2025 GMT Subject: CN=68279d69-0864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:d3:6b:92:85:c9:a4:32:fb:58:8c:e1:06: f4:ba:3f:6e:c8:b4:39:3a:4c:4a:8a:29:0b:61:95: 31:ff:57:d8:c7:bc:80:15:2b:d9:56:60:9b:06:ee: 33:d8:58:c2:99:0c:84:b4:9d:32:96:c3:f4:e5:85: 25:a0:be:a1:fc:3b:6f:b6:06:23:7f:f5:98:ad:a4: 90:2e:9a:fb:ed:a0:eb:af:52:ef:a8:d7:8a:68:45: e2:64:8f:69:00:dd:9d:6f:cb:72:5d:15:67:c0:4e: f5:c3:dc:8c:0b:2c:18:1e:aa:77:97:18:c7:fc:9f: 96:6a:e2:c0:0b:d2:b5:67:9d:40:7f:61:0a:05:8d: 97:57:00:b5:4a:0b:14:f3:8d:34:1d:4a:b9:61:cc: d8:be:5a:94:05:04:b9:ea:b6:8b:04:d5:f2:7a:08: 36:f1:e3:51:22:25:0b:6c:b6:64:8a:13:1d:a8:1c: 1f:81:0f:ea:97:f4:7e:4b:98:19:0c:44:36:84:7d: e6:2c:0b:ab:4d:df:41:d0:bc:4f:7a:72:df:3b:84: b8:29:0d:3a:81:c9:25:0b:d9:35:99:6f:19:ea:4a: 19:a9:c5:c0:f4:bc:a7:11:54:70:4a:88:04:58:8f: 2c:0e:7a:7f:ab:ce:b5:3b:aa:26:ed:38:1c:85:6d: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:D6:A8:BE:79:C9:E7:9D:06:7F:DF:31:AD:4B:CA:94:F7:68:1C X509v3 Authority Key Identifier: keyid:DA:50:3F:97:2C:BC:93:A8:C8:1D:F9:5F:54:A2:CB:2A:38:F1:3C:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2lA_lyy8k6jIHflfVKLLKjjxPHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144717/3988900083E811EAB7700513C4F9AE02/2lA_lyy8k6jIHflfVKLLKjjxPHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c4:94:59:49:61:e9:65:8d:d2:d3:0e:36:8e:76:4c:c2:96: 43:be:14:44:02:f5:9f:1c:fc:03:42:87:08:ea:eb:3d:1e:a6: fc:f6:f4:f1:14:9c:9a:89:ac:dd:d1:ba:58:e8:3e:51:bd:c0: 30:f5:a5:5a:e6:88:61:32:12:cf:30:d6:18:62:42:76:a0:5f: 33:17:2d:31:ec:bf:c6:a2:0d:a4:e0:1d:93:ea:1d:2d:68:54: e2:1f:d5:be:ef:6b:d8:51:b0:f4:7a:72:e0:64:22:f0:55:a4: 3c:df:1a:c3:23:45:a5:9f:73:b7:35:9d:4d:ea:49:86:2f:b8: c8:dc:59:df:dd:c4:a2:bd:e6:42:73:f2:28:15:e4:45:6b:60: 00:07:0e:39:0e:3b:fa:da:69:32:c5:e7:1e:fb:91:e0:5b:da: 6b:63:41:14:c5:60:4e:e4:61:b7:f9:db:70:3b:90:16:e4:6d: 38:5f:7f:e0:ff:08:ab:14:e4:68:8d:0c:92:3b:a9:aa:af:77: 51:39:92:d9:5e:59:e5:d1:63:1d:03:c4:76:ab:c6:2e:24:1c: f8:c7:98:99:14:f6:9d:a3:df:68:e9:97:6f:3c:9f:dc:19:9e: 48:28:21:0c:0f:2a:fa:82:31:3a:b3:35:3e:dd:69:5c:6f:d5: 8b:30:9b:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQ3MTcxMTAvBgNVBAUTKERBNTAzRjk3MkNCQzkzQThDODFERjk1RjU0QTJDQjJB MzhGMTNDNzcwHhcNMjUwNTE2MjAxNzQ1WhcNMjUwNTIzMjAxNzQ1WjAYMRYwFAYD VQQDEw02ODI3OWQ2OS0wODY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAserTa5KFyaQy+1iM4Qb0uj9uyLQ5OkxKiikLYZUx/1fYx7yAFSvZVmCbBu4z 2FjCmQyEtJ0ylsP05YUloL6h/DtvtgYjf/WYraSQLpr77aDrr1LvqNeKaEXiZI9p AN2db8tyXRVnwE71w9yMCywYHqp3lxjH/J+WauLAC9K1Z51Af2EKBY2XVwC1SgsU 8400HUq5YczYvlqUBQS56raLBNXyegg28eNRIiULbLZkihMdqBwfgQ/ql/R+S5gZ DEQ2hH3mLAurTd9B0LxPenLfO4S4KQ06gcklC9k1mW8Z6koZqcXA9LynEVRwSogE WI8sDnp/q861O6om7TgchW0F2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7g1qi+ ecnnnQZ/3zGtS8qU92gcMB8GA1UdIwQYMBaAFNpQP5csvJOoyB35X1Siyyo48Tx3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDcxNy8zOTg4OTAwMDgz RTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2aklIZmxmVktMTEtqanhQ SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsQV9seXk4azZqSUhmbGZWS0xMS2pqeFBIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDcxNy8zOTg4OTAwMDgzRTgxMUVBQjc3MDA1MTNDNEY5QUUwMi8ybEFfbHl5OGs2 aklIZmxmVktMTEtqanhQSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVxJRZSWHpZY3S0w42jnZMwpZDvhREAvWfHPwDQocI6us9Hqb89vTx FJyaiazd0bpY6D5RvcAw9aVa5ohhMhLPMNYYYkJ2oF8zFy0x7L/Gog2k4B2T6h0t aFTiH9W+72vYUbD0enLgZCLwVaQ83xrDI0Wln3O3NZ1N6kmGL7jI3Fnf3cSiveZC c/IoFeRFa2AABw45Djv62mkyxece+5HgW9prY0EUxWBO5GG3+dtwO5AW5G04X3/g /wirFORojQySO6mqr3dROZLZXlnl0WMdA8R2q8YuJBz4x5iZFPado99o6ZdvPJ/c GZ5IKCEMDyr6gjE6szU+3Wlcb9WLMJua -----END CERTIFICATE-----Generated at Sat May 17 04:24:42 2025 by rpki-client