$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft File: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json) Hash identifier: fbKJQdNqiH7k6b5CJxtL4HeOA6945vGPllgxcQz9kzM= Subject key identifier: 66:E8:31:0E:E1:26:7E:6E:F2:9B:37:CB:A5:54:BB:72:3E:0B:F3:6E Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 Certificate issuer: /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft Manifest number: 0137 Signing time: Sat 17 May 2025 04:04:56 +0000 Manifest this update: Sat 17 May 2025 04:04:56 +0000 Manifest next update: Sat 24 May 2025 04:04:56 +0000 Files and hashes: 1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: HTK75xMIIdiSaetCUoV5bfSBLpUJ4hD62KXa2BeNj1I=) 2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: hNwMkMdjh5wXeGCbclXCuLBfGgwTuq5lN97tlwCY1b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740 Validity Not Before: May 17 04:04:56 2025 GMT Not After : May 24 04:04:56 2025 GMT Subject: CN=68280ae8-8087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:a7:04:d8:93:cd:55:7d:44:1c:c2:3d:8c: 95:79:66:50:75:be:0d:ce:c7:c5:a0:8c:04:72:44: 07:98:33:fc:d6:b8:9f:96:8e:37:ba:d8:ac:93:09: dd:d0:63:4f:96:6b:89:92:84:27:28:b3:e3:a8:d3: 38:b4:7d:7f:d7:18:b4:7f:61:0b:dd:be:ed:7d:5f: cd:09:ae:16:9f:77:7f:e1:83:3e:c0:8f:24:d7:e0: a5:e7:4c:74:bf:90:66:3c:23:bf:b0:fe:11:8f:f6: d8:18:b0:ec:ed:1b:45:b7:41:0a:c4:04:ba:f2:50: 18:b5:8d:e6:aa:cc:a3:1e:47:ad:bc:c9:d8:8a:d0: 8c:dd:26:83:dc:8f:5e:9a:24:06:df:c6:1c:a9:41: 98:6e:31:67:2b:33:bb:60:02:af:8b:a3:23:49:89: 48:a2:e8:40:2a:15:51:a3:15:ba:89:fb:4d:fc:e1: a4:92:2a:70:4b:8d:1a:37:e8:52:3a:43:ca:61:ad: 27:c8:95:9a:7c:29:a8:fe:f7:b0:18:07:51:bf:01: e8:6c:4a:bb:e0:83:27:2f:48:6f:54:87:a7:c7:45: 6e:92:9d:d8:8c:04:f3:e0:3b:3b:af:ab:62:a8:b1: c4:8f:ff:c6:40:74:2d:73:c7:e8:22:8d:c5:94:a0: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E8:31:0E:E1:26:7E:6E:F2:9B:37:CB:A5:54:BB:72:3E:0B:F3:6E X509v3 Authority Key Identifier: keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a7:2a:6b:d1:2e:e9:9d:18:5c:fb:9d:91:9c:83:a5:1a:da: 49:78:82:97:37:b4:f0:93:81:2f:3f:27:86:55:41:1f:2d:3c: 55:0a:d0:fe:9d:79:33:db:fa:b0:ca:2f:2f:f0:75:3a:a8:f1: de:12:fc:7a:74:36:41:b3:81:77:da:3d:dd:35:32:14:40:ed: ff:fa:a5:5c:2d:9b:ce:c5:a2:c0:cf:8a:6c:92:a6:5a:76:8d: b0:65:9f:2b:07:a8:42:c7:ce:33:2f:5d:1b:a8:a1:af:6e:ad: d9:52:03:39:77:7a:eb:10:1b:8d:ce:7f:a8:27:df:84:66:65: 39:78:ac:36:91:2d:cf:22:f4:56:e6:9a:19:ce:a4:a6:f6:10: 0a:2d:de:2e:20:25:a8:bb:3a:4d:f0:da:6a:74:a3:a1:f0:13: f2:79:a6:9e:7b:54:81:f9:11:0b:b2:22:a9:3d:06:9f:b6:d4: 76:2a:bc:21:a3:62:5b:2a:52:38:67:13:88:f1:97:e6:20:ca: 68:16:f3:59:7f:6f:90:e7:75:4e:71:ef:c4:8c:30:5c:c5:0b: 22:0c:38:84:f4:61:14:64:11:13:da:a4:ea:64:fd:da:f3:14: 06:67:a0:b1:a7:36:ee:b9:35:6a:b2:05:9d:93:5b:48:d7:f0: 5a:8b:66:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB MDZFQ0E3NDAwHhcNMjUwNTE3MDQwNDU2WhcNMjUwNTI0MDQwNDU2WjAYMRYwFAYD VQQDEw02ODI4MGFlOC04MDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk6nBNiTzVV9RBzCPYyVeWZQdb4NzsfFoIwEckQHmDP81riflo43utiskwnd 0GNPlmuJkoQnKLPjqNM4tH1/1xi0f2EL3b7tfV/NCa4Wn3d/4YM+wI8k1+Cl50x0 v5BmPCO/sP4Rj/bYGLDs7RtFt0EKxAS68lAYtY3mqsyjHketvMnYitCM3SaD3I9e miQG38YcqUGYbjFnKzO7YAKvi6MjSYlIouhAKhVRoxW6iftN/OGkkipwS40aN+hS OkPKYa0nyJWafCmo/vewGAdRvwHobEq74IMnL0hvVIenx0Vukp3YjATz4Ds7r6ti qLHEj//GQHQtc8foIo3FlKCEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGboMQ7h Jn5u8ps3y6VUu3I+C/NuMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCopypr0S7pnRhc+52RnIOlGtpJeIKXN7Twk4EvPyeGVUEfLTxVCtD+ nXkz2/qwyi8v8HU6qPHeEvx6dDZBs4F32j3dNTIUQO3/+qVcLZvOxaLAz4pskqZa do2wZZ8rB6hCx84zL10bqKGvbq3ZUgM5d3rrEBuNzn+oJ9+EZmU5eKw2kS3PIvRW 5poZzqSm9hAKLd4uICWouzpN8NpqdKOh8BPyeaaee1SB+RELsiKpPQafttR2Krwh o2JbKlI4ZxOI8ZfmIMpoFvNZf2+Q53VOce/EjDBcxQsiDDiE9GEUZBET2qTqZP3a 8xQGZ6CxpzbuuTVqsgWdk1tI1/Bai2ap -----END CERTIFICATE-----Generated at Sat May 17 11:28:28 2025 by rpki-client