$ rpki-client -vvf rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft File: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft (raw, json) Hash identifier: P6gHez8YanfhPqYaVUj2DCCTxlcXdhF7XDwC1bXVh3c= Subject key identifier: C9:A0:F4:E0:5F:52:BD:76:D1:A3:57:B9:73:E1:11:6C:B1:EE:6F:E7 Authority key identifier: D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E Certificate issuer: /CN=A919C19A/serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Certificate serial: 0467 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft Manifest number: 0459 Signing time: Mon 12 May 2025 23:59:30 +0000 Manifest this update: Mon 12 May 2025 23:59:30 +0000 Manifest next update: Mon 19 May 2025 23:59:30 +0000 Files and hashes: 1: 2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl (hash: 4RjbPqxqo6mA5kMAr5W43nPFPbJEdwx7Ofi/IRxyDak=) 2: F943257E12F511EDA9E7C939C4F9AE02.roa (hash: My/AnfHzuVQXYQgSRRC6SAXx84s6nLjdhtAzMmqyjDg=) 3: 4CC86698C4FA11EE86A51C0EC4F9AE02.roa (hash: 1L1EbJoORDKgeElorwmyrU76/atwwCYpeCr4PPGihVE=) 4: D9A7B280C4FA11EEA3AF2932C4F9AE02.roa (hash: D+FMpyZsISfccSz7KiOlQqTZgWE7m1EZKNLzF9fgEyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1127 (0x467) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C19A, serialNumber=D89CFF6D7D9551AE704D93E97553616C8DB13F5E Validity Not Before: May 12 23:59:30 2025 GMT Not After : May 19 23:59:30 2025 GMT Subject: CN=68228b62-388f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:3c:18:82:92:f4:d1:a0:46:60:ff:5f:c4: 38:52:e9:7b:ba:38:47:dd:9e:14:c5:d4:f6:a5:19: bb:98:3c:d1:89:a9:38:33:88:49:32:65:ba:d8:37: 3e:0e:7e:9c:6f:c0:9f:e7:44:8b:77:78:b8:c4:c2: df:01:f4:55:96:2a:89:db:9e:52:3d:69:0f:3e:5b: 95:d5:e4:f0:1c:c8:ac:f3:7a:56:0b:4d:ff:9c:4c: f6:0d:09:77:fd:59:80:5f:19:42:e3:22:8e:34:8d: b4:02:20:b9:7d:b2:b9:91:83:4c:8f:50:1f:39:a9: f1:3f:ea:09:db:91:52:3c:61:74:f9:ce:e9:61:45: e7:d1:3d:03:54:08:60:5c:96:55:63:6a:8e:02:f2: a6:5f:96:80:5c:46:03:b2:40:a0:24:75:90:97:55: 7f:84:2f:68:1a:a7:45:15:ef:e3:77:97:8b:1f:18: 63:ec:f8:65:5b:fe:fc:21:70:80:54:c0:3e:ca:da: bb:be:10:d0:7b:dc:7f:04:bf:75:48:d4:01:65:61: 16:a9:e4:c9:a5:5a:25:1b:af:f9:53:57:77:ad:c8: 28:8b:9e:3b:4f:00:ff:a9:e7:d4:9d:3e:46:d1:24: 67:b2:06:91:ee:83:fa:60:3e:9e:78:4e:7d:b8:f4: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A0:F4:E0:5F:52:BD:76:D1:A3:57:B9:73:E1:11:6C:B1:EE:6F:E7 X509v3 Authority Key Identifier: keyid:D8:9C:FF:6D:7D:95:51:AE:70:4D:93:E9:75:53:61:6C:8D:B1:3F:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Jz_bX2VUa5wTZPpdVNhbI2xP14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C19A/24AB2C3E4F8D11EC8157125FC4F9AE02/2Jz_bX2VUa5wTZPpdVNhbI2xP14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:9f:1b:df:14:5d:63:ef:f5:34:e7:5d:22:9c:65:b7:01:bd: ba:f0:6a:a1:ff:68:f0:4c:61:14:a2:eb:a5:32:8f:73:db:56: 9f:67:0d:6c:c0:86:ad:1d:ac:2d:4e:15:88:4a:af:44:36:6f: 8c:c9:d8:0c:48:fd:1e:67:d4:5f:cd:8d:85:f6:af:1f:99:98: eb:39:23:91:c8:7e:6e:bd:7c:da:de:fa:11:06:1b:48:ac:cb: 28:c3:92:04:e3:06:a1:6b:a4:4f:db:6d:ac:ec:44:a2:c9:18: db:5e:bd:db:35:de:c8:0c:bc:38:14:46:b3:63:4b:a6:2f:d5: 86:e4:16:95:3e:24:8f:e3:db:8e:ee:0f:43:8c:64:ed:16:d3: c5:18:29:35:a6:b7:18:7a:f1:f2:97:eb:09:cc:7b:d3:7e:39: 97:63:bb:52:9c:26:bd:3d:84:a1:cf:d4:b1:97:61:39:63:50: c6:ec:3f:2f:8b:fd:1f:c4:3f:56:4a:16:de:5b:40:5d:be:68: bc:a3:82:37:97:87:29:a9:f7:cc:18:3f:62:7d:7c:b9:d0:ad: f9:84:fa:f8:8d:3a:03:67:4c:84:b3:f6:e5:f8:a1:6e:e2:52: 5f:88:f4:30:45:49:0a:7e:31:f2:6f:11:e3:af:c9:c5:4e:94: 73:49:72:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMxOUExMTAvBgNVBAUTKEQ4OUNGRjZEN0Q5NTUxQUU3MDREOTNFOTc1NTM2MTZD OERCMTNGNUUwHhcNMjUwNTEyMjM1OTMwWhcNMjUwNTE5MjM1OTMwWjAYMRYwFAYD VQQDEw02ODIyOGI2Mi0zODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpw8GIKS9NGgRmD/X8Q4Uul7ujhH3Z4UxdT2pRm7mDzRiak4M4hJMmW62Dc+ Dn6cb8Cf50SLd3i4xMLfAfRVliqJ255SPWkPPluV1eTwHMis83pWC03/nEz2DQl3 /VmAXxlC4yKONI20AiC5fbK5kYNMj1AfOanxP+oJ25FSPGF0+c7pYUXn0T0DVAhg XJZVY2qOAvKmX5aAXEYDskCgJHWQl1V/hC9oGqdFFe/jd5eLHxhj7PhlW/78IXCA VMA+ytq7vhDQe9x/BL91SNQBZWEWqeTJpVolG6/5U1d3rcgoi547TwD/qefUnT5G 0SRnsgaR7oP6YD6eeE59uPSJoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmg9OBf Ur120aNXuXPhEWyx7m/nMB8GA1UdIwQYMBaAFNic/219lVGucE2T6XVTYWyNsT9e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzE5QS8yNEFCMkMzRTRG OEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVhNXdUWlBwZFZOaGJJMnhQ MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJKel9iWDJWVWE1d1RaUHBkVk5oYkkyeFAxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzE5QS8yNEFCMkMzRTRGOEQxMUVDODE1NzEyNUZDNEY5QUUwMi8ySnpfYlgyVlVh NXdUWlBwZFZOaGJJMnhQMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUnxvfFF1j7/U0510inGW3Ab268Gqh/2jwTGEUouulMo9z21afZw1s wIatHawtThWISq9ENm+MydgMSP0eZ9RfzY2F9q8fmZjrOSORyH5uvXza3voRBhtI rMsow5IE4waha6RP222s7ESiyRjbXr3bNd7IDLw4FEazY0umL9WG5BaVPiSP49uO 7g9DjGTtFtPFGCk1prcYevHyl+sJzHvTfjmXY7tSnCa9PYShz9Sxl2E5Y1DG7D8v i/0fxD9WShbeW0Bdvmi8o4I3l4cpqffMGD9ifXy50K35hPr4jToDZ0yEs/bl+KFu 4lJfiPQwRUkKfjHybxHjr8nFTpRzSXLX -----END CERTIFICATE-----Generated at Tue May 13 04:43:23 2025 by rpki-client