$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft File: 2DkrDZFbmsH00jv5hBlxQG-2GsY.mft (raw, json) Hash identifier: bk/6mqjqzLi19P7fYOcFKbUtdGicTP/qzKFAZ1kKVJU= Subject key identifier: A8:69:18:9A:1B:E5:26:48:4A:CA:58:86:8F:9C:E1:95:0F:99:09:96 Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 Certificate issuer: /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Certificate serial: 0974 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft Manifest number: 0966 Signing time: Mon 12 May 2025 20:02:13 +0000 Manifest this update: Mon 12 May 2025 20:02:13 +0000 Manifest next update: Mon 19 May 2025 20:02:13 +0000 Files and hashes: 1: 2DkrDZFbmsH00jv5hBlxQG-2GsY.crl (hash: LJ865VvSSNvCae9aVR2SJVFaskRwo8Tn4h31gMc/Tms=) 2: 9738F1BAD46611ECA1A27035C4F9AE02.roa (hash: WTrtE83EIPIFAQBP1Rd+6bCGyCXh3/D0h/wvCesMWrU=) 3: 6CEF4F06697C11EEBAF2E544C4F9AE02.roa (hash: Zf62lP/wVBucTVDv//7CsthHyoB46FPVyR5yKdn9a8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2420 (0x974) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6 Validity Not Before: May 12 20:02:13 2025 GMT Not After : May 19 20:02:13 2025 GMT Subject: CN=682253c5-4c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:78:e9:2d:ac:11:e7:03:a6:6d:37:b4:75:c2: 09:01:fd:26:b3:3e:c0:63:27:aa:9b:82:01:14:c9: 89:5f:95:1f:25:5a:3d:e4:63:47:09:86:df:25:a9: d2:d6:6a:d1:13:f9:1c:61:ed:68:c2:ba:c2:2f:3e: e9:c6:a9:74:c3:27:5d:f2:14:1d:8d:b8:82:cf:64: d7:8f:c3:a8:99:47:40:0d:87:dd:39:0c:2d:6d:66: cf:e3:6a:41:99:14:5b:a0:d9:63:e6:63:1b:66:56: a3:81:5f:88:39:3f:47:ee:95:10:e5:b1:2f:7b:40: af:85:89:24:b9:97:8f:f5:26:84:ad:28:0b:2d:f7: 93:5c:86:b7:7b:af:93:b9:ab:2a:d5:97:6d:67:29: e8:5a:5a:09:45:fa:12:31:53:da:ac:6c:e0:0b:89: ef:5d:c9:e1:b6:27:9b:09:89:38:9b:50:b9:94:aa: 1b:2a:a1:ab:42:f2:b2:91:5a:c7:ed:b1:cb:2f:b5: 91:86:9a:cf:9c:95:de:8c:7d:74:7f:1a:f4:67:94: d5:e2:11:c9:81:1e:55:0f:e8:eb:95:77:b8:1b:bb: 13:7b:b4:c5:25:0e:17:40:7b:c2:ad:5c:24:1f:32: 36:da:82:5d:d7:ff:38:b7:9c:95:60:f4:c1:80:b2: 17:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:69:18:9A:1B:E5:26:48:4A:CA:58:86:8F:9C:E1:95:0F:99:09:96 X509v3 Authority Key Identifier: keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:52:d3:3d:19:e9:76:4f:5e:e1:57:e3:05:45:3b:ef:f6:0c: c5:cc:d2:fa:a8:ff:0e:51:84:89:c4:0d:08:a4:0c:f6:f6:27: 0c:39:35:a3:4e:ec:b4:4a:e3:95:34:ac:b7:fe:49:5e:b9:98: 95:27:8f:54:cc:18:00:3a:59:a6:fd:ae:b7:2e:f4:6b:87:33: b0:20:eb:4b:62:c3:e6:93:a2:05:73:5d:03:9a:32:05:31:aa: a9:4c:71:81:d7:c7:52:6d:be:f1:79:f9:f4:c5:97:47:d0:0f: a3:6a:f7:12:26:c9:a5:e3:46:8e:84:44:48:89:eb:a6:f5:77: 3f:55:e0:7b:ac:56:bd:7c:58:d1:cf:9c:1c:0d:ec:a8:91:b4: bc:23:22:6f:c5:2d:76:a2:3d:42:c9:ed:2c:6f:40:0b:cd:c7: c5:34:50:f4:db:3d:d1:4a:ff:a1:80:36:f4:1f:b4:8d:5b:6f: f6:c9:46:99:97:2c:a5:28:4f:fa:b0:46:35:2e:17:52:a0:a9: e8:05:13:4b:7e:c1:e4:8b:76:a3:c1:cb:96:fa:48:65:60:99: a5:22:af:bf:bb:d3:42:00:57:84:f9:26:5e:a7:be:58:40:00: 33:32:fe:66:45:95:43:38:df:d7:82:16:a1:9f:10:62:5c:87: 2b:ed:47:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZERTUxMTAvBgNVBAUTKEQ4MzkyQjBEOTE1QjlBQzFGNEQyM0JGOTg0MTk3MTQw NkZCNjFBQzYwHhcNMjUwNTEyMjAwMjEzWhcNMjUwNTE5MjAwMjEzWjAYMRYwFAYD VQQDEw02ODIyNTNjNS00YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XjpLawR5wOmbTe0dcIJAf0msz7AYyeqm4IBFMmJX5UfJVo95GNHCYbfJanS 1mrRE/kcYe1owrrCLz7pxql0wydd8hQdjbiCz2TXj8OomUdADYfdOQwtbWbP42pB mRRboNlj5mMbZlajgV+IOT9H7pUQ5bEve0CvhYkkuZeP9SaErSgLLfeTXIa3e6+T uasq1ZdtZynoWloJRfoSMVParGzgC4nvXcnhtiebCYk4m1C5lKobKqGrQvKykVrH 7bHLL7WRhprPnJXejH10fxr0Z5TV4hHJgR5VD+jrlXe4G7sTe7TFJQ4XQHvCrVwk HzI22oJd1/84t5yVYPTBgLIXTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhpGJob 5SZISspYho+c4ZUPmQmWMB8GA1UdIwQYMBaAFNg5Kw2RW5rB9NI7+YQZcUBvthrG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkRFNS83MkM1QTlDQzk0 MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1zSDAwanY1aEJseFFHLTJH c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJEa3JEWkZibXNIMDBqdjVoQmx4UUctMkdzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkRFNS83MkM1QTlDQzk0MzAxMUVBQkQ3NUY5ODNDNEY5QUUwMi8yRGtyRFpGYm1z SDAwanY1aEJseFFHLTJHc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbUtM9Gel2T17hV+MFRTvv9gzFzNL6qP8OUYSJxA0IpAz29icMOTWj Tuy0SuOVNKy3/kleuZiVJ49UzBgAOlmm/a63LvRrhzOwIOtLYsPmk6IFc10DmjIF MaqpTHGB18dSbb7xefn0xZdH0A+javcSJsml40aOhERIieum9Xc/VeB7rFa9fFjR z5wcDeyokbS8IyJvxS12oj1Cye0sb0ALzcfFNFD02z3RSv+hgDb0H7SNW2/2yUaZ lyylKE/6sEY1LhdSoKnoBRNLfsHki3ajwcuW+khlYJmlIq+/u9NCAFeE+SZep75Y QAAzMv5mRZVDON/XghahnxBiXIcr7Ufw -----END CERTIFICATE-----Generated at Wed May 14 14:45:09 2025 by rpki-client