$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft File: mRs2LGa5oYApqN1CgVXZfHbgEgk.mft (raw, json) Hash identifier: ReO3+OZ2VRQrDoJW7CO2LoaBB2AUZLwhxPDziC5lGxo= Subject key identifier: A8:64:A2:37:E2:83:DA:28:92:C5:B4:1F:BC:84:4A:D2:4C:9F:95:46 Authority key identifier: 99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 Certificate issuer: /CN=A9178D2A/serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft Manifest number: 0515 Signing time: Sat 10 May 2025 23:12:50 +0000 Manifest this update: Sat 10 May 2025 23:12:50 +0000 Manifest next update: Sat 17 May 2025 23:12:50 +0000 Files and hashes: 1: mRs2LGa5oYApqN1CgVXZfHbgEgk.crl (hash: 0B4clfdoehggSFBj6cJg5ftm7GpHsExPZl4gvUFPl8g=) 2: DB9C041801B311ECBA0E715CC4F9AE02.roa (hash: POPDOMnD2vV8xWQMiufmv3X0702RYs86sixhHrnG1/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D2A, serialNumber=991B362C66B9A18029A8DD428155D97C76E01209 Validity Not Before: May 10 23:12:50 2025 GMT Not After : May 17 23:12:50 2025 GMT Subject: CN=681fdd72-333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:b4:d9:12:19:93:3c:77:5a:2b:fa:d0:62: 1a:1b:de:c9:ac:2f:4c:d2:9d:04:26:c0:38:2f:02: f0:be:96:88:4c:96:dd:51:22:ae:68:bc:d6:81:8f: 3c:ec:9b:4d:c3:76:70:a3:5e:4e:bf:24:82:35:e2: 5d:16:ac:72:5e:2b:a7:0e:29:63:12:88:7d:ff:3a: 33:e8:b6:06:08:7d:46:8f:06:9c:48:ff:37:99:91: 97:d7:24:60:c0:38:4d:c1:d9:e5:78:55:ac:5a:ed: f8:f7:23:6a:75:63:2e:04:2f:c9:29:3b:30:32:5d: 63:c0:b5:f1:d6:30:21:bd:98:70:e6:ff:dd:72:cd: 9e:6b:68:06:ac:5a:d1:57:e6:3a:46:7b:03:83:2c: 2a:d3:1c:e4:39:0e:f3:83:41:8e:15:a7:1b:af:72: 35:4c:3c:4b:de:6b:c8:4d:d5:29:e0:01:8b:fd:d9: a4:6c:9f:15:0a:ea:17:2c:7a:cb:ca:3e:9d:ae:23: c3:9a:10:68:1f:da:aa:68:83:59:c6:e2:db:35:8d: 72:c2:35:03:8d:80:9e:d1:37:b0:db:1c:aa:d0:5f: 1a:c0:4f:ab:c5:ef:e3:d6:d5:11:4e:e6:16:cb:3d: 53:ac:21:c5:81:7c:18:83:fc:ba:9c:70:b6:8a:69: 79:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:64:A2:37:E2:83:DA:28:92:C5:B4:1F:BC:84:4A:D2:4C:9F:95:46 X509v3 Authority Key Identifier: keyid:99:1B:36:2C:66:B9:A1:80:29:A8:DD:42:81:55:D9:7C:76:E0:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs2LGa5oYApqN1CgVXZfHbgEgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D2A/2D2F826601B211ECA57EF55BC4F9AE02/mRs2LGa5oYApqN1CgVXZfHbgEgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e0:67:c4:63:ca:ca:ea:dd:ea:66:bb:a2:59:ff:22:71:68: 42:55:cb:d2:7f:0b:5c:6f:de:ee:ec:e5:ed:61:36:2d:22:2f: 53:95:de:8b:91:39:1d:ee:d6:c2:e4:e1:e9:b8:77:cf:d6:85: fc:9e:c6:b7:f1:9f:45:7a:76:78:8f:23:fc:35:46:ee:bc:7e: 9a:d6:a8:84:cc:57:af:ca:75:3f:cc:6c:2c:a9:e6:07:2a:a4: fa:02:0b:d9:04:72:a2:1f:4c:ff:91:9b:ad:0a:45:e5:6d:38: 9c:31:50:cf:d5:36:fd:1b:9f:e6:96:27:6a:15:70:8b:c2:63: e2:b3:fc:dc:18:c9:b2:1a:72:7f:1f:b8:45:7c:94:9b:15:56: 8f:cf:0b:45:7e:d4:a9:9c:a0:9c:b8:15:ab:a4:62:10:2c:96: 8e:bf:bd:61:f1:33:a5:e9:5c:31:b9:2a:82:66:30:2d:00:73: e5:e3:1d:96:43:41:22:b6:1d:52:d7:2f:6b:83:af:d3:3f:c6: 07:a2:76:ae:54:33:48:40:08:cc:20:99:10:c4:56:12:73:a3: 95:e2:83:ba:32:09:aa:5b:66:34:75:f5:77:72:ac:6d:fc:a4: 12:b2:f0:a9:0a:4f:3b:b6:72:74:89:cd:8a:58:1d:77:c5:62: 7f:be:38:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMkExMTAvBgNVBAUTKDk5MUIzNjJDNjZCOUExODAyOUE4REQ0MjgxNTVEOTdD NzZFMDEyMDkwHhcNMjUwNTEwMjMxMjUwWhcNMjUwNTE3MjMxMjUwWjAYMRYwFAYD VQQDEw02ODFmZGQ3Mi0zMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOi02RIZkzx3Wiv60GIaG97JrC9M0p0EJsA4LwLwvpaITJbdUSKuaLzWgY88 7JtNw3Zwo15OvySCNeJdFqxyXiunDiljEoh9/zoz6LYGCH1GjwacSP83mZGX1yRg wDhNwdnleFWsWu349yNqdWMuBC/JKTswMl1jwLXx1jAhvZhw5v/dcs2ea2gGrFrR V+Y6RnsDgywq0xzkOQ7zg0GOFacbr3I1TDxL3mvITdUp4AGL/dmkbJ8VCuoXLHrL yj6driPDmhBoH9qqaINZxuLbNY1ywjUDjYCe0Tew2xyq0F8awE+rxe/j1tURTuYW yz1TrCHFgXwYg/y6nHC2iml5SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhkojfi g9ooksW0H7yEStJMn5VGMB8GA1UdIwQYMBaAFJkbNixmuaGAKajdQoFV2Xx24BIJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQyQS8yRDJGODI2NjAx QjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9ZQXBxTjFDZ1ZYWmZIYmdF Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21SczJMR2E1b1lBcHFOMUNnVlhaZkhiZ0Vnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQyQS8yRDJGODI2NjAxQjIxMUVDQTU3RUY1NUJDNEY5QUUwMi9tUnMyTEdhNW9Z QXBxTjFDZ1ZYWmZIYmdFZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt4GfEY8rK6t3qZruiWf8icWhCVcvSfwtcb97u7OXtYTYtIi9Tld6L kTkd7tbC5OHpuHfP1oX8nsa38Z9FenZ4jyP8NUbuvH6a1qiEzFevynU/zGwsqeYH KqT6AgvZBHKiH0z/kZutCkXlbTicMVDP1Tb9G5/mlidqFXCLwmPis/zcGMmyGnJ/ H7hFfJSbFVaPzwtFftSpnKCcuBWrpGIQLJaOv71h8TOl6VwxuSqCZjAtAHPl4x2W Q0Eith1S1y9rg6/TP8YHonauVDNIQAjMIJkQxFYSc6OV4oO6MgmqW2Y0dfV3cqxt /KQSsvCpCk87tnJ0ic2KWB13xWJ/vjih -----END CERTIFICATE-----Generated at Mon May 12 18:15:18 2025 by rpki-client