$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft File: 2m7mst6yYhOWAXC6ZYdieLLff84.mft (raw, json) Hash identifier: CRJ32aaOU4lRGgTPs33j+27ZmX8THovw2FS8cWPE7Qs= Subject key identifier: 57:7F:AF:78:70:46:9A:7C:3C:BA:6F:19:33:E1:49:50:5E:A2:C3:A2 Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE Certificate issuer: /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Certificate serial: 0397 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft Manifest number: 0392 Signing time: Wed 07 May 2025 00:38:58 +0000 Manifest this update: Wed 07 May 2025 00:38:57 +0000 Manifest next update: Wed 14 May 2025 00:38:57 +0000 Files and hashes: 1: 2m7mst6yYhOWAXC6ZYdieLLff84.crl (hash: xAfOFdzEmebnrErvv4wi6kINDe3oUgT2AGeu/3IoTaY=) 2: E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (hash: 9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 919 (0x397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915429C, serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE Validity Not Before: May 7 00:38:57 2025 GMT Not After : May 14 00:38:57 2025 GMT Subject: CN=681aaba1-1d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bb:3f:6f:07:da:ff:aa:34:27:9b:40:1c:b8: 07:1f:2e:b5:49:bb:97:86:2f:72:7b:ca:6c:e9:32: 02:d6:6f:6b:f6:60:a2:4d:66:fb:4f:2a:e2:e4:e2: b7:c3:3d:da:d7:a0:9d:3d:00:d2:e1:1f:18:ef:7b: e4:b6:28:5c:c1:8c:65:eb:a9:c2:ed:bf:35:a1:7e: d6:10:3a:c6:82:f4:e9:97:0f:49:42:ad:3d:53:e3: 9f:5c:54:c9:ec:1f:47:ec:2c:bf:70:2f:7b:96:9a: d5:40:c6:3d:08:07:e7:75:b9:b1:c9:82:63:be:86: fe:c9:09:ae:d1:99:23:36:85:87:0f:a1:d5:83:fd: ce:a4:17:3c:81:64:7c:85:83:2e:69:98:bc:7a:2d: 38:5c:c1:b2:18:d6:1b:9b:cd:d7:dc:b5:ce:02:6c: 66:fb:4b:55:16:af:08:a1:7d:a1:ad:eb:6d:ab:f9: 0f:a0:b8:60:d0:3d:71:21:86:20:5b:b9:43:24:60: a9:a2:bb:31:9c:88:68:25:0c:65:ff:55:3d:7d:78: ad:22:c9:f8:0c:3c:ba:5d:98:00:12:ea:96:9c:7a: 15:d1:f7:a2:3b:86:2c:5a:ad:3e:83:7b:eb:34:d4: d3:00:7b:e3:59:96:c0:54:21:df:8c:d7:3b:b4:8d: 5b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7F:AF:78:70:46:9A:7C:3C:BA:6F:19:33:E1:49:50:5E:A2:C3:A2 X509v3 Authority Key Identifier: keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:9f:6c:1b:96:51:20:08:10:17:af:d2:06:ce:00:12:5e:5f: 0a:bc:46:d3:b5:b7:cb:52:78:90:d2:8a:3f:cf:f2:e6:3c:23: d9:af:1b:97:1d:ee:10:a0:17:43:cc:a2:06:82:96:21:a5:c2: ca:1b:90:cf:cc:e2:bd:1c:9f:ad:82:7b:87:ca:14:b0:3f:e1: c5:50:d2:9c:d9:31:71:09:ec:27:e4:42:a5:f2:47:32:b7:58: 64:e7:3c:88:76:a4:5c:47:62:29:7d:3e:8c:72:db:03:c1:34: 61:6c:18:79:d1:c1:d9:82:f0:75:b2:bb:eb:0f:3a:fb:d2:f6: 27:60:e2:5a:c3:46:fb:12:34:ce:b3:c5:f4:68:6c:d7:af:6b: 85:7a:e8:1b:e2:71:c9:54:89:fe:a6:12:f0:32:89:ef:66:ca: b1:5c:a1:68:16:79:14:54:5f:ef:bf:7b:1c:f9:51:0e:17:cf: c8:67:ff:36:d9:e1:ce:5a:13:12:47:f5:a8:2f:6a:12:46:02: e4:ca:df:bb:81:ab:56:a4:86:0e:74:da:5d:ee:a8:3e:28:d2: de:e2:6e:39:f8:13:85:c8:2d:12:db:e3:cb:cb:e6:f8:f9:30: 37:ae:8d:dc:2a:fa:19:91:b2:cf:1e:c6:5a:f1:be:5b:69:43: a5:11:c2:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQyOUMxMTAvBgNVBAUTKERBNkVFNkIyREVCMjYyMTM5NjAxNzBCQTY1ODc2Mjc4 QjJERjdGQ0UwHhcNMjUwNTA3MDAzODU3WhcNMjUwNTE0MDAzODU3WjAYMRYwFAYD VQQDEw02ODFhYWJhMS0xZDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurs/bwfa/6o0J5tAHLgHHy61SbuXhi9ye8ps6TIC1m9r9mCiTWb7Tyri5OK3 wz3a16CdPQDS4R8Y73vktihcwYxl66nC7b81oX7WEDrGgvTplw9JQq09U+OfXFTJ 7B9H7Cy/cC97lprVQMY9CAfndbmxyYJjvob+yQmu0ZkjNoWHD6HVg/3OpBc8gWR8 hYMuaZi8ei04XMGyGNYbm83X3LXOAmxm+0tVFq8IoX2hrettq/kPoLhg0D1xIYYg W7lDJGCporsxnIhoJQxl/1U9fXitIsn4DDy6XZgAEuqWnHoV0feiO4YsWq0+g3vr NNTTAHvjWZbAVCHfjNc7tI1b1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFd/r3hw Rpp8PLpvGTPhSVBeosOiMB8GA1UdIwQYMBaAFNpu5rLesmITlgFwumWHYniy33/O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDI5Qy9FNkIyNTRGODlB QTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVloT1dBWEM2WllkaWVMTGZm ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtN21zdDZ5WWhPV0FYQzZaWWRpZUxMZmY4NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDI5Qy9FNkIyNTRGODlBQTkxMUVDOTI0QzZCMjNDNEY5QUUwMi8ybTdtc3Q2eVlo T1dBWEM2WllkaWVMTGZmODQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSn2wbllEgCBAXr9IGzgASXl8KvEbTtbfLUniQ0oo/z/LmPCPZrxuX He4QoBdDzKIGgpYhpcLKG5DPzOK9HJ+tgnuHyhSwP+HFUNKc2TFxCewn5EKl8kcy t1hk5zyIdqRcR2IpfT6MctsDwTRhbBh50cHZgvB1srvrDzr70vYnYOJaw0b7EjTO s8X0aGzXr2uFeugb4nHJVIn+phLwMonvZsqxXKFoFnkUVF/vv3sc+VEOF8/IZ/82 2eHOWhMSR/WoL2oSRgLkyt+7gatWpIYOdNpd7qg+KNLe4m45+BOFyC0S2+PLy+b4 +TA3ro3cKvoZkbLPHsZa8b5baUOlEcKG -----END CERTIFICATE-----Generated at Wed May 7 17:41:13 2025 by rpki-client