$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: Pdu0GI6aCMdiJfnyVUiCd6F0yvNRFnNSG7VtacHIGQE= Subject key identifier: 05:99:0E:2A:2D:9F:29:40:48:7B:A2:BA:C8:EB:F3:F9:17:02:33:E5 Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: A6 Signing time: Sun 11 May 2025 04:58:58 +0000 Manifest this update: Sun 11 May 2025 04:58:57 +0000 Manifest next update: Sun 18 May 2025 04:58:57 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: xFg8Mdu/a3nkQnBjmtRRVI7R8/B/vGiZ4SD2Wg+lnyE=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: May 11 04:58:57 2025 GMT Not After : May 18 04:58:57 2025 GMT Subject: CN=68202e91-71da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:5c:cb:c6:d1:9e:0b:c6:f2:54:36:a1:05: 14:7c:7c:42:c4:f0:56:cb:04:1c:3f:de:6a:99:ca: a5:40:ef:bd:57:5f:07:86:fc:36:8d:87:4a:5b:c8: 23:06:9f:a7:c7:69:f1:78:1e:5c:f8:8d:01:72:87: 11:2c:88:3d:16:da:2c:3f:d1:8b:8a:c7:2f:1f:06: c6:53:16:d9:57:0c:19:78:26:3c:98:cc:80:2c:81: 50:64:77:59:75:67:c8:7f:d6:8f:4a:7d:87:54:0c: 7d:3c:b3:37:21:59:41:c8:7a:24:9d:f8:2c:dd:9a: a6:16:b9:09:e1:8a:77:66:1e:52:b9:e9:e7:db:55: 26:7c:40:b0:e4:2b:d3:9a:87:0c:6c:2c:55:cf:69: 0c:a1:8a:56:18:1b:ee:37:6f:43:39:e6:f3:2b:e4: bc:9f:ba:91:d0:7a:41:8a:cc:b2:3c:20:66:65:d1: 49:8d:31:81:7d:06:f1:31:c0:41:40:a0:20:15:7a: bf:5b:1a:7d:1f:25:ac:37:b0:b1:28:b9:d7:b6:79: dd:b9:d8:2e:70:a7:0e:30:8d:d9:34:96:2e:d1:e4: ac:de:9c:63:7c:a0:c3:f2:00:08:d5:ff:67:9a:36: 11:f3:62:43:e3:75:41:de:ad:34:18:c8:74:0b:5e: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:99:0E:2A:2D:9F:29:40:48:7B:A2:BA:C8:EB:F3:F9:17:02:33:E5 X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:69:7a:9f:ea:86:0c:cf:e7:c8:c8:7a:c3:3e:f5:2c:54:aa: 32:7e:75:6b:8f:d1:0c:04:89:05:bd:e3:54:d3:ff:3b:17:04: 51:df:e2:91:d4:68:70:66:3c:e8:e6:d3:9f:62:24:b8:00:7c: bd:20:dc:ba:84:4c:39:ab:70:e4:36:5d:5d:5d:00:6f:af:0f: 36:10:47:98:20:51:01:ee:50:91:9d:87:7d:62:80:a0:6a:8c: a1:57:d7:3b:47:fb:54:af:49:59:c7:27:53:ec:5e:5a:c4:30: 2a:27:29:9b:07:57:1f:b7:b2:6a:76:2d:02:96:e8:24:a1:06: 07:c0:35:94:87:33:52:6f:91:3e:fe:0b:c2:8d:22:cb:6f:69: e0:f2:5c:ea:e0:cc:75:e9:05:50:1b:12:95:58:f3:5f:34:d4: 2f:60:93:7d:7b:7d:ac:bf:d5:6e:27:9e:67:00:bb:eb:d7:92: f2:87:18:f0:d3:0f:f0:a6:61:51:46:c5:7d:6e:93:88:e2:7f: 28:1c:e5:b8:d9:23:46:3b:b9:d9:50:52:25:0f:33:7f:8d:85: ae:0b:7f:e0:f4:3c:1e:a3:ce:6d:00:e5:9b:de:77:7b:75:60: b5:b6:fd:65:7f:1f:15:45:05:1f:dc:f8:c3:3d:b0:ef:12:90: 95:83:c0:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwNTExMDQ1ODU3WhcNMjUwNTE4MDQ1ODU3WjAYMRYwFAYD VQQDEw02ODIwMmU5MS03MWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyd5cy8bRngvG8lQ2oQUUfHxCxPBWywQcP95qmcqlQO+9V18Hhvw2jYdKW8gj Bp+nx2nxeB5c+I0BcocRLIg9FtosP9GLiscvHwbGUxbZVwwZeCY8mMyALIFQZHdZ dWfIf9aPSn2HVAx9PLM3IVlByHoknfgs3ZqmFrkJ4Yp3Zh5Suenn21UmfECw5CvT mocMbCxVz2kMoYpWGBvuN29DOebzK+S8n7qR0HpBisyyPCBmZdFJjTGBfQbxMcBB QKAgFXq/Wxp9HyWsN7CxKLnXtnndudgucKcOMI3ZNJYu0eSs3pxjfKDD8gAI1f9n mjYR82JD43VB3q00GMh0C17mcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAWZDiot nylASHuiusjr8/kXAjPlMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKaXqf6oYMz+fIyHrDPvUsVKoyfnVrj9EMBIkFveNU0/87FwRR3+KR 1GhwZjzo5tOfYiS4AHy9INy6hEw5q3DkNl1dXQBvrw82EEeYIFEB7lCRnYd9YoCg aoyhV9c7R/tUr0lZxydT7F5axDAqJymbB1cft7Jqdi0ClugkoQYHwDWUhzNSb5E+ /gvCjSLLb2ng8lzq4Mx16QVQGxKVWPNfNNQvYJN9e32sv9VuJ55nALvr15Lyhxjw 0w/wpmFRRsV9bpOI4n8oHOW42SNGO7nZUFIlDzN/jYWuC3/g9Dweo85tAOWb3nd7 dWC1tv1lfx8VRQUf3PjDPbDvEpCVg8AG -----END CERTIFICATE-----Generated at Mon May 12 07:26:57 2025 by rpki-client