$ rpki-client -vvf rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft File: 2leiQgcEcAjXOmXWgiSke5oD2qo.mft (raw, json) Hash identifier: sO3h/kRBIQjDl3Rzj3Gw+GLkvpBZ83psacOxd1fV1/8= Subject key identifier: 96:DF:BD:EC:12:9A:01:AA:2F:05:77:EF:44:6C:EC:0C:F9:A9:A8:83 Authority key identifier: DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA Certificate issuer: /CN=A914573E/serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft Manifest number: 0602 Signing time: Thu 08 May 2025 22:43:14 +0000 Manifest this update: Thu 08 May 2025 22:43:13 +0000 Manifest next update: Thu 15 May 2025 22:43:13 +0000 Files and hashes: 1: 2leiQgcEcAjXOmXWgiSke5oD2qo.crl (hash: 87rNeZvWibi7Iq1YS3XgmTEXOk+YwSdY2D1wBWCuK6M=) 2: B67E0BB4A5A511EB94C0DE0FC4F9AE02.roa (hash: abFPv422MLo42yfuvK6GPVX4x/zkpsuvBFUhQvjbtGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:43:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914573E, serialNumber=DA57A24207047008D73A65D68224A47B9A03DAAA Validity Not Before: May 8 22:43:13 2025 GMT Not After : May 15 22:43:13 2025 GMT Subject: CN=681d3381-954c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:9b:be:b1:71:95:01:48:57:19:b2:2d:66: 2c:14:0f:e7:39:8f:09:ab:93:56:a1:70:9f:19:e9: 8f:ee:7e:82:98:ad:85:1a:6d:f0:5c:37:97:04:8c: 69:ef:1d:4f:a8:a6:43:44:4c:6b:11:b3:05:c7:de: 29:d3:7d:7b:61:b0:da:c6:5a:72:7f:61:3c:49:3a: 87:a5:82:f2:46:14:28:2b:21:8a:01:b0:10:4c:d7: 41:99:80:55:19:0e:74:b3:33:74:53:1d:b0:bf:70: 41:b1:eb:2d:66:30:e6:bb:dc:09:f1:b7:71:0c:49: f9:fb:da:4f:df:43:09:34:b4:82:ae:0a:c1:cc:bf: 5b:5e:84:4f:73:92:84:4b:03:f3:07:4d:db:fe:d3: 6e:30:6f:d6:9e:8d:76:44:5f:a3:a1:68:f9:db:15: 3e:3c:ad:91:23:a7:d7:c2:4b:f6:a8:c3:cf:eb:b9: 05:22:07:3e:a8:80:f7:0c:e5:8e:15:25:d9:89:1b: 5c:3c:a4:11:a8:d8:69:91:9e:ea:75:35:94:b5:a3: 9c:70:0c:67:3a:fe:fe:12:09:81:36:2c:d0:7d:c5: 20:72:89:69:05:ff:ce:d3:2b:c2:b3:3d:41:ea:75: df:ba:82:89:84:42:78:ac:a3:29:45:b2:fa:86:0c: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:BD:EC:12:9A:01:AA:2F:05:77:EF:44:6C:EC:0C:F9:A9:A8:83 X509v3 Authority Key Identifier: keyid:DA:57:A2:42:07:04:70:08:D7:3A:65:D6:82:24:A4:7B:9A:03:DA:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2leiQgcEcAjXOmXWgiSke5oD2qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914573E/6768978EA5A411EB98C3290FC4F9AE02/2leiQgcEcAjXOmXWgiSke5oD2qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:ff:60:82:76:39:a7:5c:88:94:4e:8a:09:08:6d:8c:b8:11: b3:c2:7c:a5:55:55:f3:59:05:e2:d3:e8:9a:e2:7b:fc:fb:12: 68:3c:c7:f5:f8:ea:df:14:a3:51:d5:cc:80:18:82:7c:0f:c9: 1a:65:74:74:37:1e:54:67:fe:a0:02:52:09:28:0a:4f:a5:a6: 57:c7:07:03:6b:f4:c3:26:e5:ef:17:1e:a8:db:bf:29:89:ba: ff:44:d5:2c:a2:0f:24:6d:65:67:0c:9d:b3:80:fb:c0:36:1f: e6:53:fd:b5:e3:26:c4:6e:3d:78:37:5b:5a:d6:5d:05:46:70: 37:4c:98:c6:60:43:25:7a:b0:4e:27:6c:a8:86:bf:53:e5:2e: 56:54:c4:b7:27:5b:84:43:67:90:be:b5:f9:27:8d:4b:e1:6e: 04:3b:0e:5b:bc:6f:ec:d4:88:41:08:a3:45:c8:12:5c:9a:e3: 60:ce:62:99:d6:af:e2:38:dd:53:ca:ab:a1:32:55:b6:ce:a5: 9a:51:f2:55:06:a3:24:51:6b:17:cc:ce:f1:07:42:e8:34:ab: 82:51:ba:4b:8f:8f:ef:36:26:37:61:a6:f8:27:02:eb:3d:03: 1c:c4:bf:ce:5a:76:48:c7:3f:a5:a0:02:56:b6:34:46:6c:21: 37:88:9a:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU3M0UxMTAvBgNVBAUTKERBNTdBMjQyMDcwNDcwMDhENzNBNjVENjgyMjRBNDdC OUEwM0RBQUEwHhcNMjUwNTA4MjI0MzEzWhcNMjUwNTE1MjI0MzEzWjAYMRYwFAYD VQQDEw02ODFkMzM4MS05NTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5U2bvrFxlQFIVxmyLWYsFA/nOY8Jq5NWoXCfGemP7n6CmK2FGm3wXDeXBIxp 7x1PqKZDRExrEbMFx94p0317YbDaxlpyf2E8STqHpYLyRhQoKyGKAbAQTNdBmYBV GQ50szN0Ux2wv3BBsestZjDmu9wJ8bdxDEn5+9pP30MJNLSCrgrBzL9bXoRPc5KE SwPzB03b/tNuMG/Wno12RF+joWj52xU+PK2RI6fXwkv2qMPP67kFIgc+qID3DOWO FSXZiRtcPKQRqNhpkZ7qdTWUtaOccAxnOv7+EgmBNizQfcUgcolpBf/O0yvCsz1B 6nXfuoKJhEJ4rKMpRbL6hgxGNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbfvewS mgGqLwV370Rs7Az5qaiDMB8GA1UdIwQYMBaAFNpXokIHBHAI1zpl1oIkpHuaA9qq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTczRS82NzY4OTc4RUE1 QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNBalhPbVhXZ2lTa2U1b0Qy cW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJsZWlRZ2NFY0FqWE9tWFdnaVNrZTVvRDJxby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTczRS82NzY4OTc4RUE1QTQxMUVCOThDMzI5MEZDNEY5QUUwMi8ybGVpUWdjRWNB alhPbVhXZ2lTa2U1b0QycW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/2CCdjmnXIiUTooJCG2MuBGzwnylVVXzWQXi0+ia4nv8+xJoPMf1 +OrfFKNR1cyAGIJ8D8kaZXR0Nx5UZ/6gAlIJKApPpaZXxwcDa/TDJuXvFx6o278p ibr/RNUsog8kbWVnDJ2zgPvANh/mU/214ybEbj14N1ta1l0FRnA3TJjGYEMlerBO J2yohr9T5S5WVMS3J1uEQ2eQvrX5J41L4W4EOw5bvG/s1IhBCKNFyBJcmuNgzmKZ 1q/iON1TyquhMlW2zqWaUfJVBqMkUWsXzM7xB0LoNKuCUbpLj4/vNiY3Yab4JwLr PQMcxL/OWnZIxz+loAJWtjRGbCE3iJqa -----END CERTIFICATE-----Generated at Sat May 10 22:06:30 2025 by rpki-client