$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft File: 2CWolzNYl8B-dpODimvyAnZYDwM.mft (raw, json) Hash identifier: ssn2rIwN9Qhcc0+lU9/8mjUsxVeSY26insaS1jFL87I= Subject key identifier: FC:0A:5A:7D:59:C0:FB:82:56:EA:09:0A:FB:94:B2:9A:4C:5D:A2:97 Authority key identifier: D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 Certificate issuer: /CN=A9199DE2/serialNumber=D825A897335897C07E7693838A6BF20276580F03 Certificate serial: 05FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft Manifest number: 05F2 Signing time: Mon 12 May 2025 22:44:16 +0000 Manifest this update: Mon 12 May 2025 22:44:15 +0000 Manifest next update: Mon 19 May 2025 22:44:15 +0000 Files and hashes: 1: 2CWolzNYl8B-dpODimvyAnZYDwM.crl (hash: h4PAd4HRdC05uvMmlkrJhXS2HdrzJyD3J9iFp4ySRJQ=) 2: E6ECE6E6104C11EC9074E586C4F9AE02.roa (hash: gAuID1Fe/PtlP9DGBoTnnUFK6n2WVQEEJLwbWlhbFaE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1532 (0x5fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DE2, serialNumber=D825A897335897C07E7693838A6BF20276580F03 Validity Not Before: May 12 22:44:15 2025 GMT Not After : May 19 22:44:15 2025 GMT Subject: CN=682279c0-0f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:3a:9e:db:62:c8:56:79:d2:ca:87:49:7b: da:ef:2d:4b:6a:a0:70:c5:db:ed:c8:c7:80:1d:df: c8:b2:f8:41:c0:ba:19:b1:79:ff:5b:d3:2b:87:01: 32:5c:b8:cf:1f:9d:e2:b5:3c:fd:a2:d9:de:90:d8: 49:6c:0a:07:62:cf:0f:d1:d3:dd:f4:37:4d:e8:41: c2:a6:49:85:f8:43:c4:c0:28:2d:e0:2c:48:12:68: ce:ca:70:cd:68:db:c6:54:84:f9:c8:94:1d:50:99: 88:aa:a6:49:ed:17:70:d3:b0:1b:8b:c4:31:9f:03: 36:88:cd:0e:e5:05:c7:c4:cd:52:60:25:32:b1:1c: 21:54:d2:15:5a:88:7d:55:78:67:a8:f6:73:5b:42: ae:89:57:eb:37:84:16:49:97:65:b4:73:98:40:69: 6f:bb:da:88:50:e5:f3:c9:bf:01:70:cf:59:fa:52: 25:57:71:e0:11:df:d4:6e:f6:ac:c0:b4:d3:bd:f4: 41:bb:81:21:47:12:a5:62:54:2d:5f:b1:0f:75:7e: 82:19:53:44:90:12:d3:54:ce:7f:cf:45:0a:80:15: 91:24:36:35:09:30:99:05:69:8f:ab:b9:99:ac:86: b8:ed:1d:22:33:4f:33:71:dd:57:1e:d7:b4:d5:26: 18:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0A:5A:7D:59:C0:FB:82:56:EA:09:0A:FB:94:B2:9A:4C:5D:A2:97 X509v3 Authority Key Identifier: keyid:D8:25:A8:97:33:58:97:C0:7E:76:93:83:8A:6B:F2:02:76:58:0F:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2CWolzNYl8B-dpODimvyAnZYDwM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DE2/A3A52106AED011EBBF3FD763C4F9AE02/2CWolzNYl8B-dpODimvyAnZYDwM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:5b:cf:31:8e:c1:44:f6:b0:74:c0:d7:57:80:80:19:c2:04: d5:11:c3:b6:4e:73:14:9d:4b:51:e0:1d:2b:93:52:f0:8f:92: f9:db:f8:60:5f:56:fa:9f:e2:a4:5d:d6:51:6f:a3:52:51:92: f7:95:24:7d:50:e2:92:2a:e8:48:91:07:8b:4e:03:55:c8:88: e2:14:35:c4:50:45:69:cc:1a:57:4b:97:c5:88:e0:76:c8:ae: 4f:51:08:1b:d1:71:fa:44:f0:2d:8d:79:60:9d:22:a7:17:b7: ac:10:b6:b8:ce:17:63:ec:fa:c7:40:85:f8:c6:37:0b:37:06: 53:2e:2b:64:ff:0d:9b:8f:a9:ad:a5:33:fc:6c:d8:42:89:1a: 0f:e6:47:e2:bd:87:8a:6a:21:4c:66:18:b7:62:0c:1e:7c:a3: e1:7d:e9:b5:0f:df:a7:13:32:a8:ad:1e:05:59:ab:a1:e4:dd: 93:22:db:25:6b:81:d4:e4:cb:e8:e5:69:bd:21:18:f7:d3:65: 40:c3:a0:f7:aa:b2:2e:69:6b:8a:d0:c7:96:a1:4b:64:99:56: ac:d4:6a:68:32:75:f0:5b:b8:35:99:9f:80:ac:ee:70:ab:e8: bf:58:61:6d:80:28:7d:f5:8a:29:2b:37:ba:b4:6e:f3:c6:0f: 90:69:1f:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERTIxMTAvBgNVBAUTKEQ4MjVBODk3MzM1ODk3QzA3RTc2OTM4MzhBNkJGMjAy NzY1ODBGMDMwHhcNMjUwNTEyMjI0NDE1WhcNMjUwNTE5MjI0NDE1WjAYMRYwFAYD VQQDEw02ODIyNzljMC0wZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY46nttiyFZ50sqHSXva7y1LaqBwxdvtyMeAHd/IsvhBwLoZsXn/W9MrhwEy XLjPH53itTz9otnekNhJbAoHYs8P0dPd9DdN6EHCpkmF+EPEwCgt4CxIEmjOynDN aNvGVIT5yJQdUJmIqqZJ7Rdw07Abi8QxnwM2iM0O5QXHxM1SYCUysRwhVNIVWoh9 VXhnqPZzW0KuiVfrN4QWSZdltHOYQGlvu9qIUOXzyb8BcM9Z+lIlV3HgEd/Ubvas wLTTvfRBu4EhRxKlYlQtX7EPdX6CGVNEkBLTVM5/z0UKgBWRJDY1CTCZBWmPq7mZ rIa47R0iM08zcd1XHte01SYYQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwKWn1Z wPuCVuoJCvuUsppMXaKXMB8GA1UdIwQYMBaAFNglqJczWJfAfnaTg4pr8gJ2WA8D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURFMi9BM0E1MjEwNkFF RDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4Qi1kcE9EaW12eUFuWllE d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJDV29sek5ZbDhCLWRwT0RpbXZ5QW5aWUR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURFMi9BM0E1MjEwNkFFRDAxMUVCQkYzRkQ3NjNDNEY5QUUwMi8yQ1dvbHpOWWw4 Qi1kcE9EaW12eUFuWllEd00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBW88xjsFE9rB0wNdXgIAZwgTVEcO2TnMUnUtR4B0rk1Lwj5L52/hg X1b6n+KkXdZRb6NSUZL3lSR9UOKSKuhIkQeLTgNVyIjiFDXEUEVpzBpXS5fFiOB2 yK5PUQgb0XH6RPAtjXlgnSKnF7esELa4zhdj7PrHQIX4xjcLNwZTLitk/w2bj6mt pTP8bNhCiRoP5kfivYeKaiFMZhi3YgwefKPhfem1D9+nEzKorR4FWauh5N2TItsl a4HU5Mvo5Wm9IRj302VAw6D3qrIuaWuK0MeWoUtkmVas1GpoMnXwW7g1mZ+ArO5w q+i/WGFtgCh99YopKze6tG7zxg+QaR/q -----END CERTIFICATE-----Generated at Tue May 13 19:56:43 2025 by rpki-client