$ rpki-client -vvf rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft File: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft (raw, json) Hash identifier: tTOtT0n/hWGAjKwBTs39mOctGBsa9h0xq902ibSWzTs= Subject key identifier: E5:9C:FB:4D:CB:3E:67:1B:07:4E:22:97:FE:F0:59:41:EC:1B:64:12 Authority key identifier: DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 Certificate issuer: /CN=A916D687/serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Certificate serial: 092E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft Manifest number: 0926 Signing time: Mon 12 May 2025 20:07:14 +0000 Manifest this update: Mon 12 May 2025 20:07:14 +0000 Manifest next update: Mon 19 May 2025 20:07:14 +0000 Files and hashes: 1: 2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl (hash: IjGMsiLeNh7Fa5mQA+7hkK5QZ4J8G0vQiUMGOJbh2XM=) 2: 33CDE41E5A4711EFA5ED8487C4F9AE02.roa (hash: E+f0SdnPuYjXdcqeEk9/03VnnRNadS7Ituz6hla4mX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2350 (0x92e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D687, serialNumber=DABB169D9E9D77E6576C018101252CB0B4857F62 Validity Not Before: May 12 20:07:14 2025 GMT Not After : May 19 20:07:14 2025 GMT Subject: CN=682254f2-0685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f5:92:4f:0d:b8:1e:df:7f:7d:33:e5:32:61: 31:a1:dd:f1:a4:62:a5:b0:b2:e1:3b:2f:f1:c8:18: 9e:b7:1c:f6:2d:ca:42:ee:cf:d8:35:3b:da:9a:45: 04:c9:a5:ad:b6:ad:eb:42:78:25:65:f4:95:b8:44: ce:62:36:22:e8:03:29:ee:86:d5:b5:1d:af:7e:2f: e3:a7:54:81:3e:65:bf:4b:b4:91:eb:03:a3:dc:de: 99:87:5c:18:b1:04:dd:6b:6a:b1:19:4b:4c:bb:50: 4d:89:7a:c7:24:80:1c:e7:ad:aa:18:7a:e7:f1:59: 34:c3:ba:a4:76:04:12:f3:7e:08:8b:38:44:dd:0a: 4c:93:a2:9c:b3:ae:34:59:33:c6:fd:95:9e:75:26: 2b:db:43:43:b9:2b:2f:ad:7f:cd:a8:ee:d4:fd:1c: 1b:41:83:ae:0e:75:c7:7f:60:57:5f:fb:ab:09:fa: 95:fc:f7:f1:58:bf:c2:20:39:34:47:00:6f:bb:d7: f6:9f:12:9c:d0:67:92:73:6f:bf:5a:b9:5a:a7:ac: 3d:4e:75:50:78:d1:fa:a3:7e:04:92:f7:30:92:60: 89:9d:92:80:b5:06:a9:ec:9a:22:9f:16:86:66:95: 1f:c1:e1:df:23:c3:84:d6:f6:43:8d:f4:89:83:d8: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9C:FB:4D:CB:3E:67:1B:07:4E:22:97:FE:F0:59:41:EC:1B:64:12 X509v3 Authority Key Identifier: keyid:DA:BB:16:9D:9E:9D:77:E6:57:6C:01:81:01:25:2C:B0:B4:85:7F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2rsWnZ6dd-ZXbAGBASUssLSFf2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D687/76B43B649F4511EA9E523563C4F9AE02/2rsWnZ6dd-ZXbAGBASUssLSFf2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:ae:45:ec:3a:12:b1:f9:64:97:51:8d:28:8f:51:5c:cc:ca: 4c:ad:dc:17:e9:5f:ff:e7:a4:7e:94:07:2e:72:90:36:c5:f6: 46:51:bd:c1:69:9d:f4:2f:9a:ff:e4:50:56:40:76:2f:15:d4: 9b:72:a1:26:ff:e4:58:e5:73:e9:88:f7:4a:aa:0a:1b:37:56: 3d:66:83:f0:13:0f:53:9b:13:6a:e7:7c:38:3c:e7:79:47:22: 2e:fa:7a:39:2d:3b:b8:01:56:b7:9d:e6:c4:d0:b8:a4:0c:0f: 1a:64:7b:3c:0d:bb:17:6d:85:18:9f:dd:19:62:08:58:13:86: 8c:6d:e2:e2:e9:fd:06:c2:42:e2:30:28:de:97:37:fb:53:47: 45:17:7d:04:48:5c:ae:25:11:d4:50:dd:0f:5c:c1:5f:86:ab: d4:36:34:34:f5:d2:e6:f4:3f:f8:4c:29:e8:9c:55:12:0f:90: c0:64:7e:16:86:3c:6d:76:02:fd:52:a5:0a:63:8d:8d:0d:f0: 75:05:4a:df:26:fd:3c:5f:e1:24:86:58:c5:e6:0a:05:05:14: d8:4e:a1:ed:8e:fb:02:b4:c4:e0:e2:f0:07:58:95:a9:65:52: 78:38:45:d7:a2:6c:dd:24:87:90:22:04:1f:27:9c:82:94:b7: fa:d8:72:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ2ODcxMTAvBgNVBAUTKERBQkIxNjlEOUU5RDc3RTY1NzZDMDE4MTAxMjUyQ0Iw QjQ4NTdGNjIwHhcNMjUwNTEyMjAwNzE0WhcNMjUwNTE5MjAwNzE0WjAYMRYwFAYD VQQDEw02ODIyNTRmMi0wNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/WSTw24Ht9/fTPlMmExod3xpGKlsLLhOy/xyBietxz2LcpC7s/YNTvamkUE yaWttq3rQnglZfSVuETOYjYi6AMp7obVtR2vfi/jp1SBPmW/S7SR6wOj3N6Zh1wY sQTda2qxGUtMu1BNiXrHJIAc562qGHrn8Vk0w7qkdgQS834IizhE3QpMk6Kcs640 WTPG/ZWedSYr20NDuSsvrX/NqO7U/RwbQYOuDnXHf2BXX/urCfqV/PfxWL/CIDk0 RwBvu9f2nxKc0GeSc2+/Wrlap6w9TnVQeNH6o34EkvcwkmCJnZKAtQap7JoinxaG ZpUfweHfI8OE1vZDjfSJg9gxmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWc+03L PmcbB04il/7wWUHsG2QSMB8GA1UdIwQYMBaAFNq7Fp2enXfmV2wBgQElLLC0hX9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDY4Ny83NkI0M0I2NDlG NDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQtWlhiQUdCQVNVc3NMU0Zm MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJyc1duWjZkZC1aWGJBR0JBU1Vzc0xTRmYySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDY4Ny83NkI0M0I2NDlGNDUxMUVBOUU1MjM1NjNDNEY5QUUwMi8ycnNXblo2ZGQt WlhiQUdCQVNVc3NMU0ZmMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlrkXsOhKx+WSXUY0oj1FczMpMrdwX6V//56R+lAcucpA2xfZGUb3B aZ30L5r/5FBWQHYvFdSbcqEm/+RY5XPpiPdKqgobN1Y9ZoPwEw9TmxNq53w4POd5 RyIu+no5LTu4AVa3nebE0LikDA8aZHs8DbsXbYUYn90ZYghYE4aMbeLi6f0GwkLi MCjelzf7U0dFF30ESFyuJRHUUN0PXMFfhqvUNjQ09dLm9D/4TCnonFUSD5DAZH4W hjxtdgL9UqUKY42NDfB1BUrfJv08X+EkhljF5goFBRTYTqHtjvsCtMTg4vAHWJWp ZVJ4OEXXomzdJIeQIgQfJ5yClLf62HKn -----END CERTIFICATE-----Generated at Tue May 13 02:36:06 2025 by rpki-client