$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: 0IOZDilqTmfHebVUH8yUJO48ehBagkfSwhmJZ0nG7Us= Subject key identifier: 1D:81:0B:8F:04:31:BC:51:90:29:97:E8:29:07:DA:6B:45:B9:DB:6D Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 0126 Signing time: Thu 15 May 2025 04:05:35 +0000 Manifest this update: Thu 15 May 2025 04:05:34 +0000 Manifest next update: Thu 22 May 2025 04:05:34 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: z+sqgTNWpOuuvNfUg2LFTpcFkO3BzbRYD1BEmDXXctc=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: May 15 04:05:34 2025 GMT Not After : May 22 04:05:34 2025 GMT Subject: CN=6825680f-6ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:d0:a4:0f:85:44:45:86:09:c3:51:02:07: 01:26:0c:42:75:f8:ce:c5:a2:14:08:56:b7:9f:d7: 45:f6:e2:02:8e:f1:ec:5d:80:2c:a5:04:53:9b:4a: 15:6b:5d:f2:cb:fc:8a:71:0b:32:04:5a:c8:03:ab: fa:39:24:45:e2:a2:8f:c4:c5:52:e4:ce:c2:cb:87: db:bb:0b:39:15:c3:6b:93:1c:c4:48:f6:1f:ac:36: f7:39:8b:b2:94:b6:9e:9a:a6:5b:5f:b1:a7:8c:b7: c1:51:53:fd:ad:73:71:ec:7b:41:53:b6:71:26:34: 81:b3:fd:cd:81:36:4b:c5:79:80:ed:7e:d9:d6:c0: bf:9e:cc:b6:fe:13:0a:2b:22:64:d1:13:7c:69:4d: ce:bb:b0:c6:c3:6d:11:d8:db:46:c7:4c:4d:ac:36: 5b:80:ad:8a:1e:89:15:d5:6c:f2:e0:fb:8d:85:af: 6d:41:f8:b2:b7:87:62:c9:94:e2:9f:80:db:9d:26: 97:ab:42:7f:2f:83:ba:fe:6a:db:c7:7d:b0:89:ba: 95:5a:89:83:b6:d2:59:e2:3a:7b:16:a6:21:01:19: bf:2b:4d:ec:25:7a:57:35:b4:b2:1d:ee:f8:3c:7f: 3c:ac:0d:d1:e9:18:9f:c4:96:16:23:70:7a:af:97: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:0B:8F:04:31:BC:51:90:29:97:E8:29:07:DA:6B:45:B9:DB:6D X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d9:58:37:a1:27:08:50:b8:32:ca:d2:21:79:0d:f7:fb:93: 60:78:c1:21:ad:26:74:ed:9f:bf:21:65:99:ff:2d:d0:c0:5a: c0:45:08:54:76:0b:02:b2:10:b6:90:1b:d6:c1:62:5a:c1:26: c2:27:ae:46:66:6d:e2:b6:5e:77:82:1a:42:54:51:4b:8d:ad: 12:46:20:8b:98:49:0a:91:ee:c4:9f:2d:1d:10:e2:86:ab:52: 3b:d3:30:21:e6:db:0d:ed:09:96:fa:49:4b:00:c4:22:f3:0d: 1f:ad:9b:68:91:5b:dc:1b:81:c7:ef:e8:aa:43:7c:40:3a:43: 95:c1:18:bc:5e:e0:8c:70:45:f1:ed:a9:fd:76:69:f0:60:5a: 2c:bd:97:3c:35:58:c3:bd:84:ad:2d:3b:26:a7:5c:06:c1:ba: bf:61:14:04:33:2c:bb:63:ee:34:11:a0:6c:a6:82:57:8e:94: e3:ee:4c:bf:80:57:b6:fc:b0:de:c3:65:6d:2c:99:eb:3f:8b: 21:0e:53:a2:54:ed:c5:d9:30:b0:55:7f:c1:eb:bf:bd:c6:60: b1:e3:09:bc:5e:c6:16:c6:1e:16:39:2b:cd:61:a2:36:9d:8b: 88:6f:df:08:e5:a5:6b:c0:1c:fd:14:60:f6:d2:b5:2c:de:55: 50:f6:f4:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUwNTE1MDQwNTM0WhcNMjUwNTIyMDQwNTM0WjAYMRYwFAYD VQQDEw02ODI1NjgwZi02Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpPQpA+FREWGCcNRAgcBJgxCdfjOxaIUCFa3n9dF9uICjvHsXYAspQRTm0oV a13yy/yKcQsyBFrIA6v6OSRF4qKPxMVS5M7Cy4fbuws5FcNrkxzESPYfrDb3OYuy lLaemqZbX7GnjLfBUVP9rXNx7HtBU7ZxJjSBs/3NgTZLxXmA7X7Z1sC/nsy2/hMK KyJk0RN8aU3Ou7DGw20R2NtGx0xNrDZbgK2KHokV1Wzy4PuNha9tQfiyt4diyZTi n4DbnSaXq0J/L4O6/mrbx32wibqVWomDttJZ4jp7FqYhARm/K03sJXpXNbSyHe74 PH88rA3R6RifxJYWI3B6r5enswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2BC48E MbxRkCmX6CkH2mtFudttMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA2Vg3oScIULgyytIheQ33+5NgeMEhrSZ07Z+/IWWZ/y3QwFrARQhU dgsCshC2kBvWwWJawSbCJ65GZm3itl53ghpCVFFLja0SRiCLmEkKke7Eny0dEOKG q1I70zAh5tsN7QmW+klLAMQi8w0frZtokVvcG4HH7+iqQ3xAOkOVwRi8XuCMcEXx 7an9dmnwYFosvZc8NVjDvYStLTsmp1wGwbq/YRQEMyy7Y+40EaBspoJXjpTj7ky/ gFe2/LDew2VtLJnrP4shDlOiVO3F2TCwVX/B67+9xmCx4wm8XsYWxh4WOSvNYaI2 nYuIb98I5aVrwBz9FGD20rUs3lVQ9vQl -----END CERTIFICATE-----Generated at Fri May 16 16:50:12 2025 by rpki-client