$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: hWUdhlGbaQBB6PwLX8TFaWOSUyegY75Nne2Ab8DopOQ= Subject key identifier: 64:31:C8:16:0F:FF:87:DA:BA:AF:7D:BA:70:52:70:76:34:D8:CD:44 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 061B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 05F8 Signing time: Sat 10 May 2025 22:42:31 +0000 Manifest this update: Sat 10 May 2025 22:42:31 +0000 Manifest next update: Sat 17 May 2025 22:42:31 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: CWUgnDft9Udai8Jl8XsKAp9wyaA/zHoIyAScQ4yu9I4=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: aiFrMbTQ8pa6qGrU9w8Y+h6k5VVyo8+mDWmigq+L7zE=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1563 (0x61b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: May 10 22:42:31 2025 GMT Not After : May 17 22:42:31 2025 GMT Subject: CN=681fd657-6ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:04:f1:31:19:09:3a:9b:f1:fa:f6:a8:58: d4:2f:59:90:32:bb:1c:b9:55:37:05:df:05:5a:52: 9e:18:82:cb:37:b6:9e:ce:53:02:73:6b:7f:0e:e7: 81:6f:c1:b5:f1:83:72:be:de:8f:cf:ae:a4:89:50: 1d:01:e0:7d:32:b1:61:2f:3f:2c:34:4e:ca:da:f7: ca:53:1d:04:8e:a8:6c:e9:21:73:42:ce:1d:0b:7f: a9:7c:6c:f0:70:ff:ae:f5:53:f6:43:d0:45:05:56: e1:1c:68:79:54:c9:6f:af:9b:a8:58:a5:62:51:62: 41:d0:20:2d:c1:66:09:1a:23:97:ea:a6:ba:cf:8c: b1:5d:87:4c:ef:76:42:8a:9c:19:c7:0e:b2:59:74: c8:97:50:ca:33:3e:b9:56:25:08:10:b6:4a:b3:29: d8:45:92:bd:cb:7d:0f:4f:ff:17:32:cd:bd:56:80: 49:08:90:f7:33:40:3a:ed:a2:02:6e:66:25:78:0f: 6b:9c:93:ac:2e:9a:7f:8b:27:c3:e3:36:13:c4:3c: 42:3e:9f:93:2e:e8:3f:43:4c:ba:e6:2a:f3:40:7f: 18:82:37:01:02:46:36:07:ac:c7:c4:67:05:15:f7: 34:79:9d:a5:e5:7c:32:d2:95:cf:c7:bf:01:ef:70: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:31:C8:16:0F:FF:87:DA:BA:AF:7D:BA:70:52:70:76:34:D8:CD:44 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:82:21:f9:a8:e5:4b:f9:5f:84:2a:fb:f4:b5:3d:b1:f9:27: 06:a7:09:87:6f:00:47:18:6d:8c:36:fd:45:bb:32:c5:9b:19: 63:0f:04:2a:b9:da:64:2c:bd:f1:f8:ee:1f:68:54:dc:a9:80: 41:22:90:5a:77:b2:db:dc:ba:af:97:7d:8f:46:a9:6b:15:bb: f5:f8:e7:b5:8f:81:c0:ef:1b:d2:d0:ff:df:82:a7:69:b9:39: d8:bb:41:48:19:06:b7:c2:31:b0:31:fc:f2:ee:65:e2:53:7d: d4:e6:41:14:3a:de:14:cc:9d:03:4d:b4:d9:5b:f9:a2:13:aa: 42:35:3b:5e:25:93:81:b4:75:71:f6:f5:95:8d:70:e4:52:7c: 11:c7:10:e7:45:e0:3b:b9:4e:6a:80:13:6a:be:9c:6b:f3:c5: ff:79:1c:53:77:be:b5:50:a3:9c:ba:62:21:00:83:c4:0e:19: b9:c8:00:5e:75:24:06:c9:ce:e2:2f:74:d4:31:a5:c3:92:ab: ad:cc:32:41:44:d9:1d:ca:6e:be:6e:e1:9c:7d:a6:40:bf:7b: 1f:64:ba:4c:b9:f2:1a:26:c3:34:16:41:0d:58:b3:07:67:cc: 1f:0b:0d:85:bb:eb:8b:b9:d0:c0:2e:68:a5:c0:84:85:ee:a2: 88:5b:40:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwNTEwMjI0MjMxWhcNMjUwNTE3MjI0MjMxWjAYMRYwFAYD VQQDEw02ODFmZDY1Ny02ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rEE8TEZCTqb8fr2qFjUL1mQMrscuVU3Bd8FWlKeGILLN7aezlMCc2t/DueB b8G18YNyvt6Pz66kiVAdAeB9MrFhLz8sNE7K2vfKUx0Ejqhs6SFzQs4dC3+pfGzw cP+u9VP2Q9BFBVbhHGh5VMlvr5uoWKViUWJB0CAtwWYJGiOX6qa6z4yxXYdM73ZC ipwZxw6yWXTIl1DKMz65ViUIELZKsynYRZK9y30PT/8XMs29VoBJCJD3M0A67aIC bmYleA9rnJOsLpp/iyfD4zYTxDxCPp+TLug/Q0y65irzQH8YgjcBAkY2B6zHxGcF Ffc0eZ2l5Xwy0pXPx78B73AN8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQxyBYP /4fauq99unBScHY02M1EMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALgiH5qOVL+V+EKvv0tT2x+ScGpwmHbwBHGG2MNv1FuzLFmxljDwQq udpkLL3x+O4faFTcqYBBIpBad7Lb3Lqvl32PRqlrFbv1+Oe1j4HA7xvS0P/fgqdp uTnYu0FIGQa3wjGwMfzy7mXiU33U5kEUOt4UzJ0DTbTZW/miE6pCNTteJZOBtHVx 9vWVjXDkUnwRxxDnReA7uU5qgBNqvpxr88X/eRxTd761UKOcumIhAIPEDhm5yABe dSQGyc7iL3TUMaXDkqutzDJBRNkdym6+buGcfaZAv3sfZLpMufIaJsM0FkENWLMH Z8wfCw2Fu+uLudDALmilwISF7qKIW0Cr -----END CERTIFICATE-----Generated at Mon May 12 07:53:57 2025 by rpki-client