$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft File: 2Qg5PFuoA1r2i37ACVWOgS7QleA.mft (raw, json) Hash identifier: bwPrBvfDXmeCI9XIleJZMj+gUXgMKXCSOzzV8OeGcWc= Subject key identifier: D0:FD:25:C5:F2:4E:35:C9:06:A2:56:B2:E9:AA:8B:2E:D1:46:E9:3B Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft Manifest number: 64 Signing time: Tue 13 May 2025 06:13:14 +0000 Manifest this update: Tue 13 May 2025 06:13:14 +0000 Manifest next update: Tue 20 May 2025 06:13:14 +0000 Files and hashes: 1: 2Qg5PFuoA1r2i37ACVWOgS7QleA.crl (hash: cdJCAIT9p2g4qLKRKOzm048sgaqwWuD9sTvg88XVFE4=) 2: C62E0568C52811EF9EDAD649C4F9AE02.roa (hash: F5uXTjMiJni5HqVRUwrgZPii2IL1VQzAUq1Dx9Qk/Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:13:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: May 13 06:13:14 2025 GMT Not After : May 20 06:13:14 2025 GMT Subject: CN=6822e2fa-258c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:b0:cb:a6:12:89:13:57:4b:ba:e5:be:0f: 78:3d:a1:83:f2:64:0d:76:ef:2b:a8:b9:30:c3:63: 33:01:05:f4:56:3e:af:d7:00:47:89:96:28:a0:32: d7:7c:61:75:b9:f4:e7:1f:16:9e:b6:fe:6a:bf:87: 57:e7:06:a4:b9:33:6e:bf:29:4d:d0:16:05:c6:19: 3b:70:57:e9:91:4d:db:1a:6e:13:b3:5d:df:1f:35: 01:75:5c:5c:6f:6c:af:74:50:0f:21:04:47:b9:6f: f8:e3:c5:43:66:4a:5a:d0:55:2a:e9:77:94:4a:18: 2f:02:1c:2f:b9:ce:b2:c7:c2:cf:17:06:25:5b:b7: cb:16:3e:34:85:65:c8:3a:42:45:56:1d:75:fb:a4: f4:b9:28:e5:3a:55:4d:f6:1e:da:ac:71:89:82:27: e3:cd:f6:df:05:b3:9e:78:5e:3d:44:70:10:60:6a: be:c9:6c:0a:7a:ee:9b:e0:35:f1:49:b5:c0:53:e4: ce:94:f8:d9:20:47:7d:96:0d:e0:cb:6a:55:a3:e9: 8f:fe:5e:9d:84:7f:a9:f4:fe:0b:02:29:0b:9c:9f: 49:11:ad:b7:a7:7c:e2:59:c1:8f:61:cb:0f:94:6f: bf:58:aa:ff:f4:4a:db:83:2d:8a:7e:e9:3d:b4:f2: 73:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FD:25:C5:F2:4E:35:C9:06:A2:56:B2:E9:AA:8B:2E:D1:46:E9:3B X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3a:08:eb:19:ea:2c:c6:e1:90:80:42:2f:bc:c5:ec:ea:c4: c3:50:17:33:77:49:5c:d4:40:61:09:76:c7:e2:04:c8:1b:4e: ea:b1:3c:6c:c4:9f:2b:13:25:eb:25:8e:14:cb:f4:c8:79:64: b7:10:ba:45:50:6f:0b:0a:43:a2:51:c3:48:dc:f6:20:9c:0b: 28:5e:01:ea:db:f2:02:92:79:4c:b8:f1:fd:12:fb:65:bc:55: 7b:04:f3:6d:04:f7:c4:f0:13:7d:83:19:66:29:4b:03:19:00: 66:1c:89:cb:e7:cd:1a:a4:13:c0:d8:86:c7:5c:03:95:be:b3: bc:73:98:62:28:49:ff:39:f5:69:f5:9b:99:66:65:61:7b:92: c2:33:cf:62:72:34:3e:1e:30:1a:82:b2:86:2e:e2:ee:61:79: dc:77:4e:3b:19:24:48:ec:e2:b8:8b:d7:24:c2:64:d7:a1:12: 6c:32:e9:b8:b8:e2:40:4e:5f:c7:ea:b5:64:6e:9d:64:57:06: 5e:e4:38:6a:9f:ad:26:a6:68:5d:13:1e:9a:5e:1b:0f:e2:2d: c6:45:f1:39:a7:3b:57:b9:16:c0:4b:eb:6e:82:ff:00:69:c0: e2:93:fc:e4:4c:e3:59:ec:f0:1f:32:c4:6a:6e:ab:a7:dd:47: 46:9b:c6:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoRDkwODM5M0M1QkE4MDM1QUY2OEI3RUMwMDk1NThFODEy RUQwOTVFMDAeFw0yNTA1MTMwNjEzMTRaFw0yNTA1MjAwNjEzMTRaMBgxFjAUBgNV BAMTDTY4MjJlMmZhLTI1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk6bDLphKJE1dLuuW+D3g9oYPyZA127yuouTDDYzMBBfRWPq/XAEeJliigMtd8 YXW59OcfFp62/mq/h1fnBqS5M26/KU3QFgXGGTtwV+mRTdsabhOzXd8fNQF1XFxv bK90UA8hBEe5b/jjxUNmSlrQVSrpd5RKGC8CHC+5zrLHws8XBiVbt8sWPjSFZcg6 QkVWHXX7pPS5KOU6VU32HtqscYmCJ+PN9t8Fs554Xj1EcBBgar7JbAp67pvgNfFJ tcBT5M6U+NkgR32WDeDLalWj6Y/+Xp2Ef6n0/gsCKQucn0kRrbenfOJZwY9hyw+U b79Yqv/0StuDLYp+6T208nMFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0P0lxfJO NckGolay6aqLLtFG6TswHwYDVR0jBBgwFoAU2Qg5PFuoA1r2i37ACVWOgS7QleAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzJFQjYwNzk2OUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxl QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMlFnNVBGdW9BMXIyaTM3QUNWV09nUzdRbGVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzJFQjYwNzk2OUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyLzJRZzVQRnVvQTFy MmkzN0FDVldPZ1M3UWxlQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG86COsZ6izG4ZCAQi+8xezqxMNQFzN3SVzUQGEJdsfiBMgbTuqxPGzE nysTJesljhTL9Mh5ZLcQukVQbwsKQ6JRw0jc9iCcCyheAerb8gKSeUy48f0S+2W8 VXsE820E98TwE32DGWYpSwMZAGYcicvnzRqkE8DYhsdcA5W+s7xzmGIoSf859Wn1 m5lmZWF7ksIzz2JyND4eMBqCsoYu4u5hedx3TjsZJEjs4riL1yTCZNehEmwy6bi4 4kBOX8fqtWRunWRXBl7kOGqfrSamaF0THppeGw/iLcZF8TmnO1e5FsBL626C/wBp wOKT/ORM41ns8B8yxGpuq6fdR0abxrI= -----END CERTIFICATE-----Generated at Wed May 14 23:58:53 2025 by rpki-client