$ rpki-client -vvf rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft File: n2T-UJklN_sLQOUvnPrDEMonGRg.mft (raw, json) Hash identifier: 2DX6O5rkB/7i2MRBvvhHd6VJCyjPX0F+r4p85q+9IB4= Subject key identifier: C3:07:CF:84:DA:8C:07:8F:72:3C:0A:23:BB:C0:48:62:51:7C:BC:78 Authority key identifier: 9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 Certificate issuer: /CN=A91A57F8/serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Certificate serial: 01D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft Manifest number: 01C4 Signing time: Tue 13 May 2025 02:37:15 +0000 Manifest this update: Tue 13 May 2025 02:37:14 +0000 Manifest next update: Tue 20 May 2025 02:37:14 +0000 Files and hashes: 1: n2T-UJklN_sLQOUvnPrDEMonGRg.crl (hash: as+dLfbOk+YQXenqsXPjDfULs1yLQ3CyhKrpWIX2cAc=) 2: A508D320BBC711ED8DF23C40C4F9AE02.roa (hash: +L1qHY5R3sGaecxS0ZsJwCFSa4qv+kQF5VrxKLTYgCU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 464 (0x1d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A57F8, serialNumber=9F64FE50992537FB0B40E52F9CFAC310CA271918 Validity Not Before: May 13 02:37:14 2025 GMT Not After : May 20 02:37:14 2025 GMT Subject: CN=6822b05a-b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:84:95:54:41:43:18:f0:9f:8c:84:7b:f5: 3e:34:7c:e7:22:f3:79:aa:f2:98:7e:ff:2b:d5:48: 94:b7:c3:e9:d4:46:54:35:67:8f:f6:8b:2e:8c:6a: 57:ee:3a:d1:a9:5c:2b:51:0b:20:47:a3:51:c8:e7: 10:9f:df:27:d0:6a:67:5e:df:f1:97:03:c2:de:60: 80:75:b7:00:d3:25:26:ed:43:67:b1:b4:86:f3:60: 72:f4:4f:65:cb:d5:9a:d8:df:5a:69:d6:87:ec:7b: 6e:69:a2:8d:1d:ed:b3:0e:1c:38:80:7b:2a:da:84: f2:d5:b0:68:e0:81:60:d3:e7:21:14:bf:07:b9:17: ba:bf:94:3a:6c:27:5d:04:e6:9f:0a:88:3b:08:31: b2:c5:19:ab:d5:bb:78:8c:4a:cc:62:68:fa:94:4c: 73:97:e2:b0:a3:d0:ed:47:94:eb:fa:b7:41:99:96: 36:90:4a:66:8e:10:fc:de:83:72:f1:fa:79:f2:00: f9:06:c4:cf:bb:c8:fa:c7:84:a6:e1:ca:db:1a:c5: c2:52:40:dc:df:17:e3:63:42:60:be:3e:28:60:34: 9f:65:96:ad:7c:38:73:8d:cd:4e:20:55:44:3b:c1: 3a:24:be:3e:98:bb:60:b0:c3:ec:b4:ae:dc:00:ac: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:07:CF:84:DA:8C:07:8F:72:3C:0A:23:BB:C0:48:62:51:7C:BC:78 X509v3 Authority Key Identifier: keyid:9F:64:FE:50:99:25:37:FB:0B:40:E5:2F:9C:FA:C3:10:CA:27:19:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2T-UJklN_sLQOUvnPrDEMonGRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A57F8/34509400B97511ED8040DE22C4F9AE02/n2T-UJklN_sLQOUvnPrDEMonGRg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f4:14:98:35:31:c4:d1:70:4d:97:c3:a3:b0:63:5d:6a:88: 47:96:a5:04:f5:b4:51:5d:d1:15:9b:f9:51:99:57:91:31:cd: 28:15:a3:a9:80:26:bc:58:02:50:c4:2c:69:d6:96:99:35:25: 23:3d:8a:7e:a5:bf:2e:73:1a:ff:f4:67:d0:83:96:bb:a2:be: 2f:07:ca:a9:fc:6c:a7:bd:17:2c:74:9c:d7:f5:22:1b:2a:34: 2d:05:ba:75:31:bb:cb:cf:1e:4f:d7:5d:95:75:b7:22:f0:b1: 04:d7:08:e5:8f:36:56:82:cf:2c:8b:f7:6e:99:7b:c2:bc:c4: 72:d0:53:ca:70:15:bc:bb:ce:5c:3e:1a:26:bb:41:74:78:a2: 36:27:4e:55:bf:0d:8f:63:1e:e7:0d:2e:d4:08:3a:15:71:db: ba:ae:2a:3f:f9:3c:ca:c8:4d:1b:e3:e1:e2:18:13:44:ea:e5: 2b:e2:9d:00:a3:67:83:98:eb:e5:a5:9a:a6:30:a7:dd:db:ef: df:98:37:fc:33:4f:e7:d5:80:f0:50:d4:1c:c4:e5:80:2d:86: a2:87:0d:6b:ba:f8:04:c5:41:04:2a:b1:15:b2:cf:3b:63:4d: c6:2b:74:28:ef:42:3f:b0:dc:5b:ef:fe:0a:6a:ef:c4:c7:88: 6e:94:30:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU3RjgxMTAvBgNVBAUTKDlGNjRGRTUwOTkyNTM3RkIwQjQwRTUyRjlDRkFDMzEw Q0EyNzE5MTgwHhcNMjUwNTEzMDIzNzE0WhcNMjUwNTIwMDIzNzE0WjAYMRYwFAYD VQQDEw02ODIyYjA1YS1iNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu4GElVRBQxjwn4yEe/U+NHznIvN5qvKYfv8r1UiUt8Pp1EZUNWeP9osujGpX 7jrRqVwrUQsgR6NRyOcQn98n0GpnXt/xlwPC3mCAdbcA0yUm7UNnsbSG82By9E9l y9Wa2N9aadaH7HtuaaKNHe2zDhw4gHsq2oTy1bBo4IFg0+chFL8HuRe6v5Q6bCdd BOafCog7CDGyxRmr1bt4jErMYmj6lExzl+Kwo9DtR5Tr+rdBmZY2kEpmjhD83oNy 8fp58gD5BsTPu8j6x4Sm4crbGsXCUkDc3xfjY0Jgvj4oYDSfZZatfDhzjc1OIFVE O8E6JL4+mLtgsMPstK7cAKxPYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMHz4Ta jAePcjwKI7vASGJRfLx4MB8GA1UdIwQYMBaAFJ9k/lCZJTf7C0DlL5z6wxDKJxkY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTdGOC8zNDUwOTQwMEI5 NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5fc0xRT1V2blByREVNb25H UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL24yVC1VSmtsTl9zTFFPVXZuUHJERU1vbkdSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTdGOC8zNDUwOTQwMEI5NzUxMUVEODA0MERFMjJDNEY5QUUwMi9uMlQtVUprbE5f c0xRT1V2blByREVNb25HUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA59BSYNTHE0XBNl8OjsGNdaohHlqUE9bRRXdEVm/lRmVeRMc0oFaOp gCa8WAJQxCxp1paZNSUjPYp+pb8ucxr/9GfQg5a7or4vB8qp/GynvRcsdJzX9SIb KjQtBbp1MbvLzx5P112Vdbci8LEE1wjljzZWgs8si/dumXvCvMRy0FPKcBW8u85c Phomu0F0eKI2J05Vvw2PYx7nDS7UCDoVcdu6rio/+TzKyE0b4+HiGBNE6uUr4p0A o2eDmOvlpZqmMKfd2+/fmDf8M0/n1YDwUNQcxOWALYaihw1ruvgExUEEKrEVss87 Y03GK3Qo70I/sNxb7/4Kau/Ex4hulDC0 -----END CERTIFICATE-----Generated at Wed May 14 11:53:41 2025 by rpki-client