$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft File: u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json) Hash identifier: YVDBw1BEOACkekiK6WlAh7KqPdut6QnpSwPqH7WiUZ4= Subject key identifier: EB:F0:B7:EA:04:2C:F9:16:5B:0B:04:63:AE:FE:BB:EE:45:66:29:F5 Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 Certificate issuer: /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Certificate serial: 0BBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft Manifest number: 0BB3 Signing time: Fri 16 May 2025 19:09:20 +0000 Manifest this update: Fri 16 May 2025 19:09:19 +0000 Manifest next update: Fri 23 May 2025 19:09:19 +0000 Files and hashes: 1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: T7+DunQZykCCCZhLqHCCPVSBcCLNRA1W4jMWqxwpmLc=) 2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: 6VuhUdY4wX4JtAdDLdZ6VRCxsSJ2dhl5mfVJFdysXwU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 19:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3004 (0xbbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09 Validity Not Before: May 16 19:09:19 2025 GMT Not After : May 23 19:09:19 2025 GMT Subject: CN=68278d60-9e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:31:2b:0f:ec:dc:0d:af:82:ad:35:89:5b:a9: a9:fb:d7:49:0b:af:b6:94:b4:79:82:3c:9c:1b:01: f9:af:97:d5:18:dd:26:a4:cb:de:7d:9f:af:7f:e9: 7d:0f:5d:74:ca:5d:7e:35:29:cb:9b:ee:35:35:96: 03:73:34:64:45:0d:c1:a0:4e:da:bc:3f:3e:b3:45: 72:fc:75:b0:dc:39:fc:27:19:67:5c:6a:56:b8:d5: 1d:12:2e:db:1d:ad:ea:02:f1:c7:93:b2:cf:a9:67: cc:dd:d9:ac:dd:03:80:10:45:13:92:2d:5b:ab:63: cf:81:87:ca:89:2c:bc:2b:e8:ec:02:46:30:e3:c6: ed:ec:9c:e5:e0:e1:5e:b1:ee:e1:6e:48:2f:b8:46: 38:25:39:b9:43:6e:ba:8c:68:e6:88:af:16:7b:31: de:b7:8b:90:c2:d1:06:47:e9:12:c4:82:88:32:75: ee:bd:72:41:b4:1f:ac:ba:a5:b4:f0:ff:2b:bd:af: 3a:50:86:b5:dd:a9:b4:7c:7b:d1:bb:e5:01:b5:08: eb:66:bb:34:47:39:ac:1e:91:0f:0f:e1:cb:65:53: a2:5b:23:c7:e3:08:91:2c:f2:65:76:89:76:d8:26: d8:06:eb:a7:a7:09:bb:1b:ef:33:00:13:1a:17:96: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F0:B7:EA:04:2C:F9:16:5B:0B:04:63:AE:FE:BB:EE:45:66:29:F5 X509v3 Authority Key Identifier: keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1f:e5:5b:f7:ee:e5:3d:67:a9:67:82:86:87:c4:2e:10:82: 72:d6:d5:7e:c3:02:cd:16:e7:de:2c:ef:25:90:56:6e:57:78: c9:d5:06:4e:18:f5:fc:f9:2b:ad:58:9d:62:3a:35:53:c9:4c: cc:3d:e7:c6:8c:b2:56:58:b5:8e:72:70:04:b5:9f:14:34:b4: a3:dc:a9:ff:48:d9:ff:10:9a:1b:ad:21:c7:95:c4:75:e8:3b: 9f:96:93:fb:7c:c1:de:d2:21:45:64:4c:1e:34:10:e2:1d:b8: a8:3c:5b:40:ac:e2:77:2d:85:3a:57:71:a7:f4:a0:5f:00:e6: 8a:4c:1d:5d:bb:81:d3:4e:5f:15:57:d5:a3:6b:c2:d4:da:ea: c8:84:ea:1a:4f:5b:e8:4f:1b:e9:01:8f:cc:1a:31:db:88:77: ce:1a:35:cd:a2:11:d3:d5:b6:13:1b:f5:cb:bf:e2:48:ec:ec: 95:d7:2d:c6:31:b0:de:46:4d:4a:35:65:65:ec:9d:56:c9:7b: 24:89:6c:d5:20:01:d6:79:2c:3e:75:d1:f2:a8:7b:cf:ba:bb: 84:fe:7d:60:37:58:12:8f:03:b5:1e:08:11:fa:9b:eb:1b:c6: 37:a3:9e:3a:56:3b:de:1c:3e:fe:2b:8a:22:82:55:ee:18:0e: 99:57:bc:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB NjA4OTFFMDkwHhcNMjUwNTE2MTkwOTE5WhcNMjUwNTIzMTkwOTE5WjAYMRYwFAYD VQQDEw02ODI3OGQ2MC05ZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTErD+zcDa+CrTWJW6mp+9dJC6+2lLR5gjycGwH5r5fVGN0mpMvefZ+vf+l9 D110yl1+NSnLm+41NZYDczRkRQ3BoE7avD8+s0Vy/HWw3Dn8JxlnXGpWuNUdEi7b Ha3qAvHHk7LPqWfM3dms3QOAEEUTki1bq2PPgYfKiSy8K+jsAkYw48bt7Jzl4OFe se7hbkgvuEY4JTm5Q266jGjmiK8WezHet4uQwtEGR+kSxIKIMnXuvXJBtB+suqW0 8P8rva86UIa13am0fHvRu+UBtQjrZrs0RzmsHpEPD+HLZVOiWyPH4wiRLPJldol2 2CbYBuunpwm7G+8zABMaF5ZiZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOvwt+oE LPkWWwsEY67+u+5FZin1MB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoH+Vb9+7lPWepZ4KGh8QuEIJy1tV+wwLNFufeLO8lkFZuV3jJ1QZO GPX8+SutWJ1iOjVTyUzMPefGjLJWWLWOcnAEtZ8UNLSj3Kn/SNn/EJobrSHHlcR1 6DuflpP7fMHe0iFFZEweNBDiHbioPFtArOJ3LYU6V3Gn9KBfAOaKTB1du4HTTl8V V9Wja8LU2urIhOoaT1voTxvpAY/MGjHbiHfOGjXNohHT1bYTG/XLv+JI7OyV1y3G MbDeRk1KNWVl7J1WyXskiWzVIAHWeSw+ddHyqHvPuruE/n1gN1gSjwO1HggR+pvr G8Y3o546VjveHD7+K4oiglXuGA6ZV7y/ -----END CERTIFICATE-----Generated at Sat May 17 10:27:12 2025 by rpki-client