$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft File: 2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json) Hash identifier: TDuBL0uZPlA9eoCoSVXJNqp+eARsTZgMdXNg3cdP7hk= Subject key identifier: BD:1A:29:10:2C:28:B4:31:FF:A7:A6:EC:00:9F:12:6C:40:AA:95:7B Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D Certificate issuer: /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft Manifest number: 0145 Signing time: Tue 13 May 2025 03:36:52 +0000 Manifest this update: Tue 13 May 2025 03:36:52 +0000 Manifest next update: Tue 20 May 2025 03:36:52 +0000 Files and hashes: 1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: BR71BoaA2le/ILBTwwekA6dkI6JJhSjztBZxXcayjs4=) 2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: 0VizvwlSvt2Typg26qLoIMnU5PdKIxjIiPdXQB++0ps=) 3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=) 4: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: HsYr8OmdjYIdRArCv8NBd7tL5J9ojAyKHb00KhjW28U=) 5: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D Validity Not Before: May 13 03:36:52 2025 GMT Not After : May 20 03:36:52 2025 GMT Subject: CN=6822be54-b408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:3a:ae:1d:1e:0d:00:10:a3:b9:ae:1d:71:fe: d8:0d:8e:87:78:dc:8d:29:57:12:b0:1b:4a:0c:d8: ce:d8:a7:45:83:a5:5e:49:94:3e:f3:18:8d:62:63: e1:1c:7f:7b:4a:1e:a2:5e:4c:17:90:34:ee:80:c5: 58:94:d2:22:1c:1a:67:98:f9:b7:de:f6:3b:45:81: 35:63:28:e8:cf:cc:1d:66:f1:57:b1:1f:84:78:b5: 2c:60:fb:a3:ff:d2:07:0f:48:75:90:df:ca:f8:0d: 28:a5:a1:ee:fe:74:47:69:00:f3:a4:21:06:2c:ee: bf:7c:51:89:2e:9b:0f:3b:41:0c:ed:6e:97:1e:f6: d3:ac:59:ba:d8:2a:d7:12:f9:7d:79:39:5e:ae:e8: b4:10:5d:12:5b:d3:fc:3b:1e:9e:e6:a2:62:05:b1: dd:72:38:04:39:c4:80:53:9c:e6:df:07:ba:85:c3: 65:43:7f:02:c2:7c:9c:19:47:2b:4e:db:3a:d2:e1: a6:28:a5:5e:20:5f:a2:38:2e:23:72:d0:73:a0:fb: 6c:3c:8c:d9:59:17:45:c5:0d:96:0a:72:26:44:d1: 04:48:3b:af:38:a9:c8:4b:54:a8:d3:72:bc:78:32: ba:5e:94:38:4e:15:d0:f6:db:c3:01:94:68:5e:ab: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:29:10:2C:28:B4:31:FF:A7:A6:EC:00:9F:12:6C:40:AA:95:7B X509v3 Authority Key Identifier: keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:5f:53:e6:7e:a3:29:14:e3:c1:84:d0:f6:bd:02:44:82:c2: 81:60:04:07:44:98:30:47:c4:60:d9:b1:a5:87:9e:6b:fb:a2: 83:6a:54:c1:a0:1a:cd:50:e8:1d:58:c2:81:ac:d6:99:b9:89: 87:d1:2b:15:bb:dc:27:8b:d5:59:ab:84:b4:ef:5c:66:48:c4: b8:25:22:0f:06:3d:ff:2c:42:fb:16:78:40:63:d6:06:2a:dd: fa:5a:e7:73:91:f0:64:37:3d:34:a8:fb:3a:cc:1f:51:81:a0: 23:01:f3:f6:b8:bf:ad:59:4e:f6:1d:5a:3e:e3:99:3c:06:09: 5c:1a:3b:c4:54:8b:79:2e:48:de:a5:b7:a3:5f:0e:39:f6:2c: c3:e7:0f:fb:c6:24:a4:db:b0:e9:a7:6d:62:52:4e:43:76:c0: 5f:a2:ff:cb:58:0d:b2:fa:ff:9c:a0:96:33:b2:4a:4c:b4:e2: a6:20:96:c7:34:1b:c2:27:18:c1:44:71:60:bb:d7:ff:98:9c: 59:f3:14:a1:7b:e0:74:11:15:b7:37:ec:93:e2:59:90:06:31: 68:1d:36:80:6e:75:d3:51:b0:9b:14:57:d8:22:f0:fc:17:3a: b0:32:2f:5e:52:73:0e:50:1c:8f:35:b1:99:90:e1:2b:bf:95: 15:6c:00:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC REJCMzVGM0QwHhcNMjUwNTEzMDMzNjUyWhcNMjUwNTIwMDMzNjUyWjAYMRYwFAYD VQQDEw02ODIyYmU1NC1iNDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TquHR4NABCjua4dcf7YDY6HeNyNKVcSsBtKDNjO2KdFg6VeSZQ+8xiNYmPh HH97Sh6iXkwXkDTugMVYlNIiHBpnmPm33vY7RYE1Yyjoz8wdZvFXsR+EeLUsYPuj /9IHD0h1kN/K+A0opaHu/nRHaQDzpCEGLO6/fFGJLpsPO0EM7W6XHvbTrFm62CrX Evl9eTlerui0EF0SW9P8Ox6e5qJiBbHdcjgEOcSAU5zm3we6hcNlQ38CwnycGUcr Tts60uGmKKVeIF+iOC4jctBzoPtsPIzZWRdFxQ2WCnImRNEESDuvOKnIS1So03K8 eDK6XpQ4ThXQ9tvDAZRoXqvFkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0aKRAs KLQx/6em7ACfEmxAqpV7MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVX1PmfqMpFOPBhND2vQJEgsKBYAQHRJgwR8Rg2bGlh55r+6KDalTB oBrNUOgdWMKBrNaZuYmH0SsVu9wni9VZq4S071xmSMS4JSIPBj3/LEL7FnhAY9YG Kt36WudzkfBkNz00qPs6zB9RgaAjAfP2uL+tWU72HVo+45k8BglcGjvEVIt5Lkje pbejXw459izD5w/7xiSk27Dpp21iUk5DdsBfov/LWA2y+v+coJYzskpMtOKmIJbH NBvCJxjBRHFgu9f/mJxZ8xShe+B0ERW3N+yT4lmQBjFoHTaAbnXTUbCbFFfYIvD8 FzqwMi9eUnMOUByPNbGZkOErv5UVbADS -----END CERTIFICATE-----Generated at Thu May 15 03:56:32 2025 by rpki-client