$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft File: r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json) Hash identifier: Lscy5qgpad3DuD65bRGpNnV6NEjel5ZXjL1fw1aBghc= Subject key identifier: 9A:DE:76:AF:CD:6A:53:85:CF:80:39:F4:4C:44:B6:A4:98:C2:A5:FF Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D Certificate issuer: /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Certificate serial: 02ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft Manifest number: 02E0 Signing time: Sun 11 May 2025 00:54:41 +0000 Manifest this update: Sun 11 May 2025 00:54:40 +0000 Manifest next update: Sun 18 May 2025 00:54:40 +0000 Files and hashes: 1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: 9HnacdJegBEqnD40qsoikimmZTd7ihRoQY3cvx3Emv0=) 2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: F2rD9DTyJO/8KZY6J1+Hne/amu0UrQKM61Lrb0l7cz8=) 3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:54:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 749 (0x2ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D Validity Not Before: May 11 00:54:40 2025 GMT Not After : May 18 00:54:40 2025 GMT Subject: CN=681ff550-9533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:15:12:cd:2c:1b:61:40:6e:6d:0b:53:cf: e1:b2:45:68:6c:55:cd:1b:e7:c0:29:6a:9f:7b:f2: 1b:34:91:37:fa:b8:60:07:ca:de:e1:b5:87:8f:d0: b2:39:68:59:3e:f9:3b:a3:69:92:61:4b:e6:6c:a2: 26:67:84:4e:62:f2:40:31:15:f2:a2:76:9c:c3:a0: aa:fd:aa:ee:4b:22:bf:95:44:23:20:2d:60:7f:1a: 04:bc:6d:db:63:da:9e:5d:3a:d5:ab:8f:a3:2e:fa: b8:1c:45:ab:dc:e9:15:fd:c6:bb:c1:74:fa:17:a9: 5b:35:2c:d6:34:a8:ff:3b:c7:3a:8e:83:98:2d:5c: dc:88:09:aa:75:64:4e:de:01:ce:20:1b:dc:5c:f8: 6e:a5:bd:46:46:f6:7e:61:92:6f:03:61:35:35:9a: 59:ad:53:40:50:cc:4b:a0:fc:cd:f8:de:4d:42:c2: 40:59:60:77:44:35:c6:91:17:f5:62:9f:03:0b:04: b1:38:7a:7a:4d:de:f7:75:de:12:70:43:cb:5d:2f: d8:07:36:88:9d:9a:f9:c4:e3:0d:0f:f9:a0:5c:9c: 37:32:27:e4:21:ef:0c:0d:7f:d8:7a:c6:d4:dc:cd: 2d:7a:fd:d5:cd:26:21:44:eb:e8:f5:3e:33:1b:cc: 71:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DE:76:AF:CD:6A:53:85:CF:80:39:F4:4C:44:B6:A4:98:C2:A5:FF X509v3 Authority Key Identifier: keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f4:1a:f2:95:79:35:aa:fa:3c:5d:8a:a2:23:86:66:55:a0: 8a:6c:2a:5b:83:17:9a:f3:07:c5:5f:ca:c1:3a:50:46:bd:eb: 33:f1:b1:0d:65:85:99:b0:b6:c6:31:c8:17:7b:8f:66:13:ef: 70:2b:4a:13:12:bd:08:9d:f8:62:7c:71:04:00:40:91:49:bd: c5:21:ed:ac:a9:b3:66:a1:2a:26:99:c7:8e:e5:59:46:96:be: 54:fe:d1:fb:64:55:59:31:f5:51:fd:78:f9:43:1d:af:a9:cf: 01:91:33:df:af:cf:fa:30:a3:e0:6c:dd:16:1c:72:a5:c6:2e: 3e:e2:d9:fb:03:e5:bf:9f:81:58:c7:09:89:fe:72:3b:7a:1b: 0c:6f:10:f6:35:e4:2b:81:00:40:8c:4f:be:61:84:12:2f:02: ce:9c:e4:dc:b3:55:be:0d:43:47:81:54:4d:0b:49:99:c3:7b: 9a:16:93:3f:40:fa:d7:c3:0b:84:0e:63:50:9c:8d:49:bf:f6: 88:80:9a:ba:35:57:25:f6:74:f8:20:0f:ff:f2:17:02:9e:47: c2:3a:bc:3f:a1:8e:56:72:d3:05:da:4d:eb:c1:d8:8f:3a:aa: 56:a8:1c:33:c3:7c:16:93:38:be:dc:11:b5:87:27:a5:b7:a2: 6d:bc:23:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw MUVEOTEwNUQwHhcNMjUwNTExMDA1NDQwWhcNMjUwNTE4MDA1NDQwWjAYMRYwFAYD VQQDEw02ODFmZjU1MC05NTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArUAVEs0sG2FAbm0LU8/hskVobFXNG+fAKWqfe/IbNJE3+rhgB8re4bWHj9Cy OWhZPvk7o2mSYUvmbKImZ4ROYvJAMRXyonacw6Cq/aruSyK/lUQjIC1gfxoEvG3b Y9qeXTrVq4+jLvq4HEWr3OkV/ca7wXT6F6lbNSzWNKj/O8c6joOYLVzciAmqdWRO 3gHOIBvcXPhupb1GRvZ+YZJvA2E1NZpZrVNAUMxLoPzN+N5NQsJAWWB3RDXGkRf1 Yp8DCwSxOHp6Td73dd4ScEPLXS/YBzaInZr5xOMND/mgXJw3MifkIe8MDX/YesbU 3M0tev3VzSYhROvo9T4zG8xx6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJredq/N alOFz4A59ExEtqSYwqX/MB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy X19kM0lubzNKZFlCN1pFRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd9BrylXk1qvo8XYqiI4ZmVaCKbCpbgxea8wfFX8rBOlBGvesz8bEN ZYWZsLbGMcgXe49mE+9wK0oTEr0InfhifHEEAECRSb3FIe2sqbNmoSommceO5VlG lr5U/tH7ZFVZMfVR/Xj5Qx2vqc8BkTPfr8/6MKPgbN0WHHKlxi4+4tn7A+W/n4FY xwmJ/nI7ehsMbxD2NeQrgQBAjE++YYQSLwLOnOTcs1W+DUNHgVRNC0mZw3uaFpM/ QPrXwwuEDmNQnI1Jv/aIgJq6NVcl9nT4IA//8hcCnkfCOrw/oY5WctMF2k3rwdiP OqpWqBwzw3wWkzi+3BG1hyelt6JtvCMR -----END CERTIFICATE-----Generated at Tue May 13 00:00:27 2025 by rpki-client