$ rpki-client -vvf rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft File: M2YXmy18l7gmb5tDGASoxtLQkOs.mft (raw, json) Hash identifier: oEfkRYgJFjL3U1iv0ViqEUvrajFpcImAe1ciH97pcrc= Subject key identifier: A7:6F:0F:5F:BA:60:61:89:E8:05:A4:88:77:8E:96:52:23:C0:9F:A7 Authority key identifier: 33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB Certificate issuer: /CN=A91852AB/serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Certificate serial: 019E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft Manifest number: 019B Signing time: Fri 09 May 2025 02:32:51 +0000 Manifest this update: Fri 09 May 2025 02:32:51 +0000 Manifest next update: Fri 16 May 2025 02:32:51 +0000 Files and hashes: 1: M2YXmy18l7gmb5tDGASoxtLQkOs.crl (hash: E2IOtDNClKeP0AUhWez52tYpCkjU4khfts0heTVhqzM=) 2: E90A311AB8BE11ED83994B4AC4F9AE02.roa (hash: fdj786LqemSZiJSQFR5Ny/PwTC9eYDtT9LwHAqxwkRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 02:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 414 (0x19e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91852AB, serialNumber=3366179B2D7C97B8266F9B431804A8C6D2D090EB Validity Not Before: May 9 02:32:51 2025 GMT Not After : May 16 02:32:51 2025 GMT Subject: CN=681d6953-8e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:98:12:3f:45:56:a7:f1:e0:cb:cf:8a:5b:ad: 3a:88:f6:1f:53:b9:bc:b0:fd:dc:76:cd:51:fd:74: 8b:69:0f:1a:c7:b0:2f:81:84:d0:42:75:d5:93:5e: 25:f8:ef:92:98:33:f3:14:6c:c0:66:ed:6d:b4:b2: c0:07:26:aa:75:32:c6:12:d1:01:15:df:6d:c9:e9: e0:97:6b:d1:8d:bc:86:17:d6:30:c2:54:bb:06:84: d6:06:59:48:ae:28:1c:b1:87:c0:3f:fb:a2:da:4c: 93:40:90:60:71:62:a6:46:e0:4d:99:91:72:7c:d0: 80:cd:9d:25:4d:9f:20:3e:81:3f:71:07:b3:91:d7: b2:ff:ba:aa:e8:84:6c:67:53:2f:fd:c9:3f:96:73: cb:c7:5f:3e:d1:34:22:8a:b7:4a:ea:49:3f:53:33: 13:8e:e3:9e:03:09:84:ff:bf:c9:2f:c0:9a:85:a7: a3:a7:b6:02:14:25:e1:ee:23:04:74:b5:7e:8d:db: 2b:b1:d5:db:92:d1:0b:09:5d:fa:da:52:58:c8:df: e2:e8:dd:c1:30:ec:9c:40:66:74:48:dc:c6:6d:79: 17:b2:bb:24:98:8b:0a:61:09:b2:ef:90:8d:86:ee: 8b:a2:4a:de:b3:1f:47:2c:39:52:8d:1f:e3:43:1a: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6F:0F:5F:BA:60:61:89:E8:05:A4:88:77:8E:96:52:23:C0:9F:A7 X509v3 Authority Key Identifier: keyid:33:66:17:9B:2D:7C:97:B8:26:6F:9B:43:18:04:A8:C6:D2:D0:90:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M2YXmy18l7gmb5tDGASoxtLQkOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91852AB/2B99854EB8B011EDB4AFD35EC4F9AE02/M2YXmy18l7gmb5tDGASoxtLQkOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:19:86:8d:36:50:b9:cf:d6:2d:a6:3e:0e:63:b3:66:c4:a2: 5c:5b:02:b3:3e:71:dd:15:e8:9e:ce:88:05:ca:7c:48:ff:fb: 59:5d:f6:05:38:ac:10:68:90:54:18:47:d1:a4:c7:d0:1b:61: fe:e1:0d:9a:76:b2:c3:d0:af:b7:f0:01:c1:7e:63:9b:0c:77: 27:17:3f:f1:89:69:08:7c:25:a1:47:19:22:6a:2e:d3:a9:1b: 37:4c:58:05:90:c1:a2:af:f4:b0:89:11:73:96:52:c0:18:10: ad:af:b5:5d:b6:23:91:04:13:d7:ba:a3:7d:6b:fb:89:04:2c: b2:95:08:03:a2:c9:4e:80:45:ff:79:f5:77:b0:68:f6:06:f2: 2e:89:08:1f:da:f6:1f:70:4b:74:a8:b6:ca:2e:f7:5a:db:db: 16:00:d0:5b:30:64:c2:a2:5d:b3:c3:b2:53:f8:db:a3:14:7e: 88:35:ff:45:54:3b:ff:fc:8a:18:0e:ac:57:9b:02:da:46:a9: 75:c9:0b:ed:5d:68:5f:54:5c:64:13:aa:7d:09:78:cc:ac:45: 3c:61:a8:14:5f:57:ce:3e:73:be:23:ac:cc:f1:53:d9:b2:70: f3:74:fa:9b:3d:e1:b3:97:22:d6:73:28:3a:c3:38:29:59:68: 48:d8:82:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUyQUIxMTAvBgNVBAUTKDMzNjYxNzlCMkQ3Qzk3QjgyNjZGOUI0MzE4MDRBOEM2 RDJEMDkwRUIwHhcNMjUwNTA5MDIzMjUxWhcNMjUwNTE2MDIzMjUxWjAYMRYwFAYD VQQDEw02ODFkNjk1My04ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJgSP0VWp/Hgy8+KW606iPYfU7m8sP3cds1R/XSLaQ8ax7AvgYTQQnXVk14l +O+SmDPzFGzAZu1ttLLAByaqdTLGEtEBFd9tyengl2vRjbyGF9YwwlS7BoTWBllI rigcsYfAP/ui2kyTQJBgcWKmRuBNmZFyfNCAzZ0lTZ8gPoE/cQezkdey/7qq6IRs Z1Mv/ck/lnPLx18+0TQiirdK6kk/UzMTjuOeAwmE/7/JL8Cahaejp7YCFCXh7iME dLV+jdsrsdXbktELCV362lJYyN/i6N3BMOycQGZ0SNzGbXkXsrskmIsKYQmy75CN hu6Lokresx9HLDlSjR/jQxpCOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdvD1+6 YGGJ6AWkiHeOllIjwJ+nMB8GA1UdIwQYMBaAFDNmF5stfJe4Jm+bQxgEqMbS0JDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTJBQi8yQjk5ODU0RUI4 QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3Z21iNXRER0FTb3h0TFFr T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL00yWVhteTE4bDdnbWI1dERHQVNveHRMUWtPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTJBQi8yQjk5ODU0RUI4QjAxMUVEQjRBRkQzNUVDNEY5QUUwMi9NMllYbXkxOGw3 Z21iNXRER0FTb3h0TFFrT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaGYaNNlC5z9Ytpj4OY7NmxKJcWwKzPnHdFeiezogFynxI//tZXfYF OKwQaJBUGEfRpMfQG2H+4Q2adrLD0K+38AHBfmObDHcnFz/xiWkIfCWhRxkiai7T qRs3TFgFkMGir/SwiRFzllLAGBCtr7VdtiORBBPXuqN9a/uJBCyylQgDoslOgEX/ efV3sGj2BvIuiQgf2vYfcEt0qLbKLvda29sWANBbMGTCol2zw7JT+NujFH6INf9F VDv//IoYDqxXmwLaRql1yQvtXWhfVFxkE6p9CXjMrEU8YagUX1fOPnO+I6zM8VPZ snDzdPqbPeGzlyLWcyg6wzgpWWhI2IJS -----END CERTIFICATE-----Generated at Sun May 11 01:26:27 2025 by rpki-client