$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft File: 2kObzwPK_LW-ftCuezKPafiMGys.mft (raw, json) Hash identifier: VlAqS+FC3EOB1hh4SoX55gz1Qer4my1/i5ppa0OgM/I= Subject key identifier: BE:29:D0:78:C3:DA:BE:4A:69:8F:66:53:B7:10:C9:A9:30:F2:C0:54 Authority key identifier: DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B Certificate issuer: /CN=A9188EB6/serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft Manifest number: 047A Signing time: Sat 10 May 2025 23:39:40 +0000 Manifest this update: Sat 10 May 2025 23:39:40 +0000 Manifest next update: Sat 17 May 2025 23:39:40 +0000 Files and hashes: 1: 2kObzwPK_LW-ftCuezKPafiMGys.crl (hash: OLK6VNk9r5u+mcdt+SswkCm+qZ0z7bSli9vZ7ZSGsqY=) 2: E9E440F2411511ECBC2FB20BC4F9AE02.roa (hash: oCq0GS/e8jzWI+qfCm+Q9EBQNv1mP52MN9gsJPInZfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9188EB6, serialNumber=DA439BCF03CAFCB5BE7ED0AE7B328F69F88C1B2B Validity Not Before: May 10 23:39:40 2025 GMT Not After : May 17 23:39:40 2025 GMT Subject: CN=681fe3bc-6c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:06:70:98:82:e2:9f:2b:f2:cc:28:fc:41:50: 9f:e9:d1:d1:cd:27:bf:08:00:d7:d1:68:ea:01:e0: 45:2d:64:33:12:b4:f0:94:36:d3:e4:27:4c:61:02: 29:69:7c:6c:71:3b:be:94:b2:61:75:b1:aa:69:97: 73:e7:44:40:52:f8:6b:e6:86:77:4c:4f:7f:65:a7: 44:06:ae:46:6d:76:2b:a6:2e:14:6f:a4:7b:1b:66: 8b:6c:fd:65:bf:f9:0a:d4:84:7b:82:0c:bf:c8:8d: bf:c9:1b:37:0c:7f:6f:88:d7:51:e9:03:4e:f8:ff: 8f:ae:ff:63:60:b0:11:77:c2:50:ab:cc:76:9c:e6: 73:70:19:c4:21:d6:ad:4e:86:8a:3a:77:c9:5d:79: 5c:b8:f3:17:cf:53:c1:44:e6:b2:33:be:6c:92:9d: 5f:7d:35:ca:95:2a:83:19:e0:74:36:4b:a8:3d:1e: cb:21:9f:20:d4:bb:f1:96:1d:ab:0b:b2:4a:c7:e0: 0a:ae:2c:00:74:4c:0d:c1:5b:5a:6a:fe:58:17:a1: 70:37:01:51:71:81:35:27:9f:ac:9e:7e:43:61:a9: 76:08:69:22:32:21:3b:a3:43:c7:52:83:38:a2:d2: fb:51:52:c7:40:b5:18:18:d4:02:99:ac:fa:a8:66: 7a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:D0:78:C3:DA:BE:4A:69:8F:66:53:B7:10:C9:A9:30:F2:C0:54 X509v3 Authority Key Identifier: keyid:DA:43:9B:CF:03:CA:FC:B5:BE:7E:D0:AE:7B:32:8F:69:F8:8C:1B:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kObzwPK_LW-ftCuezKPafiMGys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/3EBF479A411411EC8EA96D0BC4F9AE02/2kObzwPK_LW-ftCuezKPafiMGys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:c7:e7:a7:ac:64:03:9a:8c:82:be:0b:fd:37:87:b7:92:80: 5b:af:6f:b9:1a:72:9a:f8:a6:92:12:c1:a5:74:7b:f1:83:32: c5:6d:e9:02:49:90:cf:c0:74:38:71:65:a2:37:fd:4f:59:89: a0:c5:1b:ba:74:7f:5e:55:ff:43:0a:a1:fc:a0:1e:72:d1:66: f5:cc:81:37:90:d9:3c:9a:b6:42:d9:7f:a1:d3:45:e8:b6:e6: c7:22:02:0d:31:4e:93:66:8d:2e:f8:2f:ad:64:a7:e7:7e:aa: 5a:95:e8:85:c0:a9:55:f5:8e:6e:16:aa:fd:48:29:3d:74:d1: c4:6f:aa:96:83:70:b4:89:03:37:29:15:9a:f7:1c:b2:d9:09: fa:7d:42:f0:cb:48:21:91:05:d1:ea:27:ad:3d:6d:18:b4:c3: f0:ab:64:9f:a8:39:4b:57:88:18:8f:0b:74:86:e7:32:b4:13: 42:85:48:c2:3b:84:06:45:aa:f6:93:e9:78:74:dd:5c:8f:4f: c1:7b:cd:71:4c:96:51:d9:1e:43:a1:0f:1b:fc:9f:a4:6c:a6: d0:02:d6:ce:84:24:94:9a:7f:d2:6b:82:e3:b0:12:0b:95:12: cd:0d:42:c1:e5:04:75:21:8f:30:a4:d6:73:c4:3d:db:20:09: c2:c2:67:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODhFQjYxMTAvBgNVBAUTKERBNDM5QkNGMDNDQUZDQjVCRTdFRDBBRTdCMzI4RjY5 Rjg4QzFCMkIwHhcNMjUwNTEwMjMzOTQwWhcNMjUwNTE3MjMzOTQwWjAYMRYwFAYD VQQDEw02ODFmZTNiYy02YzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyAZwmILinyvyzCj8QVCf6dHRzSe/CADX0WjqAeBFLWQzErTwlDbT5CdMYQIp aXxscTu+lLJhdbGqaZdz50RAUvhr5oZ3TE9/ZadEBq5GbXYrpi4Ub6R7G2aLbP1l v/kK1IR7ggy/yI2/yRs3DH9viNdR6QNO+P+Prv9jYLARd8JQq8x2nOZzcBnEIdat ToaKOnfJXXlcuPMXz1PBROayM75skp1ffTXKlSqDGeB0NkuoPR7LIZ8g1Lvxlh2r C7JKx+AKriwAdEwNwVtaav5YF6FwNwFRcYE1J5+snn5DYal2CGkiMiE7o0PHUoM4 otL7UVLHQLUYGNQCmaz6qGZ6fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4p0HjD 2r5KaY9mU7cQyakw8sBUMB8GA1UdIwQYMBaAFNpDm88Dyvy1vn7Qrnsyj2n4jBsr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEVCNi8zRUJGNDc5QTQx MTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19MVy1mdEN1ZXpLUGFmaU1H eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrT2J6d1BLX0xXLWZ0Q3VlektQYWZpTUd5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OEVCNi8zRUJGNDc5QTQxMTQxMUVDOEVBOTZEMEJDNEY5QUUwMi8ya09iendQS19M Vy1mdEN1ZXpLUGFmaU1HeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqx+enrGQDmoyCvgv9N4e3koBbr2+5GnKa+KaSEsGldHvxgzLFbekC SZDPwHQ4cWWiN/1PWYmgxRu6dH9eVf9DCqH8oB5y0Wb1zIE3kNk8mrZC2X+h00Xo tubHIgINMU6TZo0u+C+tZKfnfqpaleiFwKlV9Y5uFqr9SCk9dNHEb6qWg3C0iQM3 KRWa9xyy2Qn6fULwy0ghkQXR6ietPW0YtMPwq2SfqDlLV4gYjwt0hucytBNChUjC O4QGRar2k+l4dN1cj0/Be81xTJZR2R5DoQ8b/J+kbKbQAtbOhCSUmn/Sa4LjsBIL lRLNDULB5QR1IY8wpNZzxD3bIAnCwmdK -----END CERTIFICATE-----Generated at Sun May 11 01:37:38 2025 by rpki-client