$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft File: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft (raw, json) Hash identifier: 7xy7eFibmV/foqDSvIWl4US2iMPUaiyx3CeS5Cwq83I= Subject key identifier: 5F:9D:F5:70:70:74:B8:AD:8A:6D:E2:3D:38:C0:82:F9:95:1F:51:D6 Authority key identifier: DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 Certificate issuer: /CN=A91889B6/serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Certificate serial: 3483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft Manifest number: 3480 Signing time: Mon 12 May 2025 14:48:37 +0000 Manifest this update: Mon 12 May 2025 14:48:36 +0000 Manifest next update: Mon 19 May 2025 14:48:36 +0000 Files and hashes: 1: 2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl (hash: g+FYHQNM4YMwkAq3qROvTWlNKblb6RL8AD/eFEzBG84=) 2: 10E0F1884D0C11EE81002274C4F9AE02.roa (hash: OUXfbXIv2KGUcMt1yzZeYDgmZBLfK/Afrx3klkuMb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:48:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13443 (0x3483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=DB03271443E75D6D195050EDC8B613ED5FFBD838 Validity Not Before: May 12 14:48:36 2025 GMT Not After : May 19 14:48:36 2025 GMT Subject: CN=68220a44-bcc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:86:ab:7b:24:bb:6d:4d:e3:60:14:9b:fd: b8:c1:e2:34:e7:69:8a:b6:73:15:30:70:1f:5f:ac: 2c:1e:d4:5d:e1:25:27:82:8c:f5:0a:91:81:f6:6d: bd:ca:c3:8d:0f:5d:ba:b4:65:23:85:ac:4c:f4:7e: 9f:8d:ad:fb:00:f7:eb:49:48:de:66:41:3a:95:f8: fa:dc:84:ec:e2:84:82:89:4a:f7:d4:07:0c:2d:14: a8:6e:40:a4:86:43:9e:39:24:61:53:54:ab:93:72: 3e:ef:bc:a9:0e:4f:43:07:1b:8d:41:88:8b:ee:42: ec:2e:04:7c:16:42:52:bf:bf:b6:51:be:2b:2e:ef: 95:dc:09:6f:3b:5a:78:17:0d:a1:67:11:ea:b1:a0: d5:e0:07:22:34:db:2c:d6:22:18:a6:53:ab:d3:6f: 0e:3e:ab:f1:81:3f:d5:f5:fb:bd:d0:97:6c:84:2b: 8e:b9:c5:06:61:07:b1:62:6b:12:a7:4d:8e:c8:d4: b4:2e:7c:6a:42:41:1f:c0:60:9b:cf:c8:b1:69:02: a5:79:78:17:1c:a4:dc:dd:14:2f:67:5e:ec:d0:0f: cd:de:0a:b8:ac:46:b5:b8:5b:ed:01:b2:85:3c:13: 3e:b2:3a:a0:a1:f4:f8:44:a6:7a:a2:33:50:9b:13: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9D:F5:70:70:74:B8:AD:8A:6D:E2:3D:38:C0:82:F9:95:1F:51:D6 X509v3 Authority Key Identifier: keyid:DB:03:27:14:43:E7:5D:6D:19:50:50:ED:C8:B6:13:ED:5F:FB:D8:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/39AA0A021D9611E2A6548E7E08B02CD2/2wMnFEPnXW0ZUFDtyLYT7V_72Dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c5:63:8d:96:2c:61:42:ba:62:ee:5d:d5:e1:85:02:70:17: db:7d:92:6f:2d:b1:f7:69:98:77:a5:57:f8:c2:c9:04:82:cc: d7:0b:27:f5:f8:82:98:fd:50:8a:ac:c2:02:1e:e4:04:8d:3c: 60:da:0d:24:34:f0:2d:03:ac:1c:b9:1a:10:3b:a3:02:12:26: 34:59:c5:8d:cc:d4:d1:57:9e:cf:d4:bf:24:dd:3d:83:ea:fb: 1d:a2:91:20:14:93:77:96:4e:b7:4e:62:fc:a2:ca:89:54:b0: c4:64:ca:4f:ab:74:a5:90:74:86:fc:c6:c9:ac:51:56:98:73: 4d:64:f2:61:70:ee:75:96:fe:ee:29:2e:e5:c8:a6:36:38:24: 60:25:3b:d1:a9:a3:55:f9:32:7b:49:c0:01:6e:8d:62:3f:a5: 9c:81:d0:97:45:bc:81:8e:bd:f1:d0:68:1c:ae:89:d5:ef:8a: 2f:4b:f4:a9:44:29:9f:de:a0:fe:db:bc:04:bd:dd:6d:69:95: 53:ba:53:7e:98:29:19:ec:1d:cb:af:04:6e:98:49:1e:53:b6: cc:29:93:db:6e:77:bb:c6:5d:83:10:45:77:9b:d7:9d:5a:a8: 3f:71:cd:df:01:c7:c8:f3:7e:9a:bd:39:b4:43:9c:ad:7d:a1: 24:75:4d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKERCMDMyNzE0NDNFNzVENkQxOTUwNTBFREM4QjYxM0VE NUZGQkQ4MzgwHhcNMjUwNTEyMTQ0ODM2WhcNMjUwNTE5MTQ0ODM2WjAYMRYwFAYD VQQDEw02ODIyMGE0NC1iY2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliuGq3sku21N42AUm/24weI052mKtnMVMHAfX6wsHtRd4SUngoz1CpGB9m29 ysOND126tGUjhaxM9H6fja37APfrSUjeZkE6lfj63ITs4oSCiUr31AcMLRSobkCk hkOeOSRhU1Srk3I+77ypDk9DBxuNQYiL7kLsLgR8FkJSv7+2Ub4rLu+V3AlvO1p4 Fw2hZxHqsaDV4AciNNss1iIYplOr028OPqvxgT/V9fu90JdshCuOucUGYQexYmsS p02OyNS0LnxqQkEfwGCbz8ixaQKleXgXHKTc3RQvZ17s0A/N3gq4rEa1uFvtAbKF PBM+sjqgofT4RKZ6ojNQmxM9iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+d9XBw dLitim3iPTjAgvmVH1HWMB8GA1UdIwQYMBaAFNsDJxRD511tGVBQ7ci2E+1f+9g4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8zOUFBMEEwMjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhXMFpVRkR0eUxZVDdWXzcy RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ3TW5GRVBuWFcwWlVGRHR5TFlUN1ZfNzJEZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8zOUFBMEEwMjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi8yd01uRkVQblhX MFpVRkR0eUxZVDdWXzcyRGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxWONlixhQrpi7l3V4YUCcBfbfZJvLbH3aZh3pVf4wskEgszXCyf1 +IKY/VCKrMICHuQEjTxg2g0kNPAtA6wcuRoQO6MCEiY0WcWNzNTRV57P1L8k3T2D 6vsdopEgFJN3lk63TmL8osqJVLDEZMpPq3SlkHSG/MbJrFFWmHNNZPJhcO51lv7u KS7lyKY2OCRgJTvRqaNV+TJ7ScABbo1iP6WcgdCXRbyBjr3x0GgcronV74ovS/Sp RCmf3qD+27wEvd1taZVTulN+mCkZ7B3LrwRumEkeU7bMKZPbbne7xl2DEEV3m9ed Wqg/cc3fAcfI836avTm0Q5ytfaEkdU3j -----END CERTIFICATE-----Generated at Tue May 13 22:38:00 2025 by rpki-client