$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft File: g2LSOGrBMH7vi7_YdPc45tqjVXI.mft (raw, json) Hash identifier: QqcOtINJwmfSHwqef849aCiGp86W5p0aH4ZfFTz9570= Subject key identifier: 25:9F:F7:2F:9B:33:E4:E8:D0:60:69:1F:30:46:47:E8:A1:AE:DB:B7 Authority key identifier: 83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 Certificate issuer: /CN=A917C0F5/serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Certificate serial: 0D14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft Manifest number: 0D0D Signing time: Sat 10 May 2025 17:54:23 +0000 Manifest this update: Sat 10 May 2025 17:54:22 +0000 Manifest next update: Sat 17 May 2025 17:54:22 +0000 Files and hashes: 1: g2LSOGrBMH7vi7_YdPc45tqjVXI.crl (hash: a6bP6GbI2JSE9P2iMvoXeuh0VcMt8TOo7vUnFWs/YPU=) 2: D11C8B12DB7111E981104A54C4F9AE02.roa (hash: b+YvMULskW1aqcLGiau9z7PDlxuascZM6xtTvuLKH/M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3348 (0xd14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F5, serialNumber=8362D2386AC1307EEF8BBFD874F738E6DAA35572 Validity Not Before: May 10 17:54:22 2025 GMT Not After : May 17 17:54:22 2025 GMT Subject: CN=681f92cf-05c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2c:f3:24:a2:58:39:6f:f6:73:9f:47:8e:53: f9:b5:e5:8d:52:c4:31:70:85:2c:7b:ad:6b:be:ec: ab:74:5f:7f:56:69:59:7c:49:1e:e5:2a:f3:7a:9a: e6:e4:65:2f:15:54:0f:7a:2b:59:5e:37:7b:65:68: 01:50:6d:42:24:25:a6:6e:c0:3c:0d:02:1a:c7:e9: 86:19:94:99:3e:75:44:2d:2a:cc:75:41:82:6e:c1: 22:63:b3:f0:05:dc:ba:02:6b:13:e5:ad:73:da:e4: d2:1f:aa:c8:96:15:f4:19:25:6e:97:35:91:36:19: ea:59:a4:ad:d8:64:44:a7:ab:27:1a:e9:9e:f3:35: 54:70:8e:a7:e5:a8:b6:77:08:e8:23:ab:48:ae:45: 4a:91:18:8a:70:2e:0a:59:e2:a2:a8:6a:5b:15:89: 68:15:04:81:3a:55:5b:5a:b3:04:69:14:02:3a:74: 2d:f4:f8:98:f4:2e:47:8d:61:a9:37:0c:12:89:9e: d5:07:c6:b9:c0:c8:06:3c:07:33:f7:21:ea:c2:8c: ac:1e:11:0b:f8:1f:10:f5:d6:6c:12:86:3b:b2:f5: 8f:14:71:e8:47:6d:e4:ce:3f:8b:8b:21:26:28:c8: 49:b6:8a:78:60:77:49:cf:26:64:6c:60:17:e4:92: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9F:F7:2F:9B:33:E4:E8:D0:60:69:1F:30:46:47:E8:A1:AE:DB:B7 X509v3 Authority Key Identifier: keyid:83:62:D2:38:6A:C1:30:7E:EF:8B:BF:D8:74:F7:38:E6:DA:A3:55:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g2LSOGrBMH7vi7_YdPc45tqjVXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F5/1EC4E09ADB7111E9B6105353C4F9AE02/g2LSOGrBMH7vi7_YdPc45tqjVXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c0:e8:d8:e1:07:4f:f8:28:d4:89:e2:c6:ae:d2:3a:2c:b2: 70:5b:47:75:14:47:61:10:7d:ea:1d:12:1f:fc:bc:27:bc:9a: 1e:00:b2:7c:a4:97:6f:5a:35:ed:62:79:9a:b6:13:68:32:43: 15:3e:92:0f:29:95:01:21:f2:92:7a:36:c5:e0:e2:4b:34:99: 63:e5:a1:9b:f5:90:e0:e8:36:e0:1c:07:a4:25:a6:ac:84:55: f8:f0:aa:5a:9b:ab:f9:6d:65:57:ed:c7:e4:27:61:3e:b5:34: 5f:81:d3:f7:7d:5f:78:14:45:a7:89:77:96:1b:fe:82:8a:39: fa:81:01:52:bf:bc:ea:93:a8:27:ea:d6:fc:2b:bd:aa:1c:57: dd:e6:19:6d:22:df:1f:c3:bd:d3:d6:a7:80:1c:1c:33:40:0b: df:1e:ea:89:16:98:89:60:29:39:c2:e8:dd:d0:6f:01:5e:3d: e9:6b:14:73:2b:6c:83:ec:0b:1c:74:25:50:4a:90:cf:28:26: 70:b7:22:9c:5e:f4:e6:53:f1:62:02:d6:04:d9:34:ac:ab:9a: 8f:71:14:f9:40:e4:32:1c:4e:4d:01:bd:98:9d:65:ef:88:af: 27:ef:88:84:3a:b4:98:c4:25:37:91:87:82:fd:4f:80:23:10: 22:5b:4f:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MwRjUxMTAvBgNVBAUTKDgzNjJEMjM4NkFDMTMwN0VFRjhCQkZEODc0RjczOEU2 REFBMzU1NzIwHhcNMjUwNTEwMTc1NDIyWhcNMjUwNTE3MTc1NDIyWjAYMRYwFAYD VQQDEw02ODFmOTJjZi0wNWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCzzJKJYOW/2c59HjlP5teWNUsQxcIUse61rvuyrdF9/VmlZfEke5Srzeprm 5GUvFVQPeitZXjd7ZWgBUG1CJCWmbsA8DQIax+mGGZSZPnVELSrMdUGCbsEiY7Pw Bdy6AmsT5a1z2uTSH6rIlhX0GSVulzWRNhnqWaSt2GREp6snGume8zVUcI6n5ai2 dwjoI6tIrkVKkRiKcC4KWeKiqGpbFYloFQSBOlVbWrMEaRQCOnQt9PiY9C5HjWGp NwwSiZ7VB8a5wMgGPAcz9yHqwoysHhEL+B8Q9dZsEoY7svWPFHHoR23kzj+LiyEm KMhJtop4YHdJzyZkbGAX5JI2cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWf9y+b M+To0GBpHzBGR+ihrtu3MB8GA1UdIwQYMBaAFINi0jhqwTB+74u/2HT3OObao1Vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzBGNS8xRUM0RTA5QURC NzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1IN3ZpN19ZZFBjNDV0cWpW WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cyTFNPR3JCTUg3dmk3X1lkUGM0NXRxalZYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzBGNS8xRUM0RTA5QURCNzExMUU5QjYxMDUzNTNDNEY5QUUwMi9nMkxTT0dyQk1I N3ZpN19ZZFBjNDV0cWpWWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqwOjY4QdP+CjUieLGrtI6LLJwW0d1FEdhEH3qHRIf/LwnvJoeALJ8 pJdvWjXtYnmathNoMkMVPpIPKZUBIfKSejbF4OJLNJlj5aGb9ZDg6DbgHAekJaas hFX48Kpam6v5bWVX7cfkJ2E+tTRfgdP3fV94FEWniXeWG/6Cijn6gQFSv7zqk6gn 6tb8K72qHFfd5hltIt8fw73T1qeAHBwzQAvfHuqJFpiJYCk5wujd0G8BXj3paxRz K2yD7AscdCVQSpDPKCZwtyKcXvTmU/FiAtYE2TSsq5qPcRT5QOQyHE5NAb2YnWXv iK8n74iEOrSYxCU3kYeC/U+AIxAiW088 -----END CERTIFICATE-----Generated at Sun May 11 22:29:28 2025 by rpki-client