$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft File: 2spjaZboGaoflR3Gb_Ka0JecBcg.mft (raw, json) Hash identifier: eBO0G0lnOSY+YacHbhbr4/8FS0buFwDjhNvwQWrZzLk= Subject key identifier: CD:5F:A3:1D:E4:FB:AF:C7:91:66:D2:53:CA:80:CB:6B:B3:F5:E5:FB Authority key identifier: DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 Certificate issuer: /CN=A91A9E0E/serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Certificate serial: 0C27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft Manifest number: 0C12 Signing time: Fri 16 May 2025 18:56:14 +0000 Manifest this update: Fri 16 May 2025 18:56:14 +0000 Manifest next update: Fri 23 May 2025 18:56:14 +0000 Files and hashes: 1: 2spjaZboGaoflR3Gb_Ka0JecBcg.crl (hash: KEhLxYMY2G4xQn7V0tUqGNmpjNdi6GMQfjLsti7VKMw=) 2: 15FB452EE46E11EABA2FD316C4F9AE02.roa (hash: Dj1n5Ws5ZOwUHxV0iXhdVuXnGHZDTpjS0z8ntITqHGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3111 (0xc27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E0E, serialNumber=DACA636996E819AA1F951DC66FF29AD0979C05C8 Validity Not Before: May 16 18:56:14 2025 GMT Not After : May 23 18:56:14 2025 GMT Subject: CN=68278a4e-cd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:88:0c:1d:97:35:1a:5b:4b:89:db:8c:40: 5f:33:82:39:a0:01:9f:c3:83:f4:dc:e0:00:45:d5: 53:f6:37:f1:b2:32:ce:9a:05:f1:5b:4e:71:8d:2b: 90:04:f9:d9:be:40:be:89:a5:ba:74:8d:c1:f3:9b: 46:ee:84:31:ec:ac:5a:8a:16:26:fc:15:ed:e1:a8: 0a:75:33:2f:40:5a:00:93:52:71:65:40:dc:08:41: f6:dc:69:c9:66:a4:c6:9e:18:6a:7e:29:25:c4:40: 27:0c:cb:0f:7e:a5:58:f8:d8:80:eb:1c:36:64:47: df:67:74:02:42:ec:47:2f:97:25:06:1d:a8:f0:64: 03:e1:e6:fb:71:64:0f:04:8e:69:f3:15:a4:fb:f0: b2:bd:98:e0:c2:9b:18:1a:8c:de:78:92:a4:db:6f: 95:66:39:5f:41:a8:2e:2c:e7:d0:f7:03:38:55:94: ad:ae:aa:4e:2a:bf:0a:55:79:2c:5b:ad:26:c7:02: 11:86:5d:d2:e8:2c:4c:46:d2:95:ce:22:09:eb:b2: 06:6c:37:ab:3f:ce:80:b8:02:29:23:16:26:ca:2f: bb:15:c8:bb:ff:40:0a:74:8e:53:a9:6e:d7:9d:c0: fa:23:e6:fe:5f:3c:96:cf:84:a9:63:67:e1:97:87: 24:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:A3:1D:E4:FB:AF:C7:91:66:D2:53:CA:80:CB:6B:B3:F5:E5:FB X509v3 Authority Key Identifier: keyid:DA:CA:63:69:96:E8:19:AA:1F:95:1D:C6:6F:F2:9A:D0:97:9C:05:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2spjaZboGaoflR3Gb_Ka0JecBcg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E0E/472C392210EE11EA9852957FC4F9AE02/2spjaZboGaoflR3Gb_Ka0JecBcg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:18:95:e1:6d:50:42:3f:f9:e3:3d:dc:f7:c5:48:1a:8f:df: e4:9c:b3:bc:c4:f0:a2:70:06:3a:3b:e8:91:98:e5:a5:db:f1: 8a:99:3e:3f:3c:88:41:8f:74:a8:f8:ad:06:2b:c3:7d:12:55: e3:e2:9f:ea:63:7a:6d:f7:f6:b9:53:bb:dd:54:97:da:9f:d0: a1:3b:d8:5a:38:29:29:bf:f0:58:18:91:a6:55:41:b3:a2:bb: 9e:24:2d:0c:c2:3f:5a:66:c8:ae:4a:42:43:37:95:b1:71:d6: 7e:11:d2:86:9d:1c:32:3c:5a:62:c3:7c:60:48:df:fe:47:53: 51:2c:1a:c1:7d:41:34:e6:c5:be:8c:bb:71:e3:e3:81:2a:a0: 58:de:19:00:38:a1:68:62:65:30:ca:7f:ef:f6:55:38:49:ae: 31:cb:25:02:8d:d8:11:47:ea:ea:dc:9f:c7:c0:50:2f:8e:c0: a2:da:30:fd:d0:4a:11:26:0a:60:92:fd:23:2a:27:24:88:8f: b9:6d:b5:21:d1:44:7e:eb:76:39:34:c2:27:5a:45:25:a9:43: 10:66:1b:e7:48:71:bc:8f:2d:6c:27:7c:91:76:82:b3:71:1e: 09:a2:d9:0b:22:aa:d2:7b:5d:5e:f9:5a:6f:8f:8e:3e:2a:70: fd:e8:69:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlFMEUxMTAvBgNVBAUTKERBQ0E2MzY5OTZFODE5QUExRjk1MURDNjZGRjI5QUQw OTc5QzA1QzgwHhcNMjUwNTE2MTg1NjE0WhcNMjUwNTIzMTg1NjE0WjAYMRYwFAYD VQQDEw02ODI3OGE0ZS1jZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdiIDB2XNRpbS4nbjEBfM4I5oAGfw4P03OAARdVT9jfxsjLOmgXxW05xjSuQ BPnZvkC+iaW6dI3B85tG7oQx7KxaihYm/BXt4agKdTMvQFoAk1JxZUDcCEH23GnJ ZqTGnhhqfiklxEAnDMsPfqVY+NiA6xw2ZEffZ3QCQuxHL5clBh2o8GQD4eb7cWQP BI5p8xWk+/CyvZjgwpsYGozeeJKk22+VZjlfQaguLOfQ9wM4VZStrqpOKr8KVXks W60mxwIRhl3S6CxMRtKVziIJ67IGbDerP86AuAIpIxYmyi+7Fci7/0AKdI5TqW7X ncD6I+b+XzyWz4SpY2fhl4ckMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1fox3k +6/HkWbSU8qAy2uz9eX7MB8GA1UdIwQYMBaAFNrKY2mW6BmqH5Udxm/ymtCXnAXI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUUwRS80NzJDMzkyMjEw RUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dhb2ZsUjNHYl9LYTBKZWNC Y2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJzcGphWmJvR2FvZmxSM0diX0thMEplY0JjZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUUwRS80NzJDMzkyMjEwRUUxMUVBOTg1Mjk1N0ZDNEY5QUUwMi8yc3BqYVpib0dh b2ZsUjNHYl9LYTBKZWNCY2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAGJXhbVBCP/njPdz3xUgaj9/knLO8xPCicAY6O+iRmOWl2/GKmT4/ PIhBj3So+K0GK8N9ElXj4p/qY3pt9/a5U7vdVJfan9ChO9haOCkpv/BYGJGmVUGz orueJC0Mwj9aZsiuSkJDN5WxcdZ+EdKGnRwyPFpiw3xgSN/+R1NRLBrBfUE05sW+ jLtx4+OBKqBY3hkAOKFoYmUwyn/v9lU4Sa4xyyUCjdgRR+rq3J/HwFAvjsCi2jD9 0EoRJgpgkv0jKickiI+5bbUh0UR+63Y5NMInWkUlqUMQZhvnSHG8jy1sJ3yRdoKz cR4JotkLIqrSe11e+Vpvj44+KnD96GnW -----END CERTIFICATE-----Generated at Sat May 17 19:02:13 2025 by rpki-client