$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft File: 2gNU-zgfRSHBCxY-y9IqCD-3omw.mft (raw, json) Hash identifier: H84Mq6MIb00BTssjVWChj1Kp6zRIxjr7sY7v4nOkJxM= Subject key identifier: C2:B2:33:DC:C8:0F:B3:3D:11:D7:A4:94:B7:B2:D7:AE:56:88:AF:46 Authority key identifier: DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C Certificate issuer: /CN=A91B2CDA/serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Certificate serial: 15DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft Manifest number: 15CE Signing time: Sat 10 May 2025 16:41:18 +0000 Manifest this update: Sat 10 May 2025 16:41:18 +0000 Manifest next update: Sat 17 May 2025 16:41:18 +0000 Files and hashes: 1: 2gNU-zgfRSHBCxY-y9IqCD-3omw.crl (hash: RLR6PqgXexFIPelwNogrPO/eehZ2lyHZH8Uq3CwOw+U=) 2: 7F3ED5DE9C4411ECBD85CE4FC4F9AE02.roa (hash: IzneJg8uANhMNifeTA7mpjTNJJeW/3cdEs9nqqZnnZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5599 (0x15df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2CDA, serialNumber=DA0354FB381F4521C10B163ECBD22A083FB7A26C Validity Not Before: May 10 16:41:18 2025 GMT Not After : May 17 16:41:18 2025 GMT Subject: CN=681f81ae-ff3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6a:17:e0:31:86:e0:66:31:7c:ca:5e:17:85: 11:7a:4a:33:b6:97:ea:57:ee:75:72:af:4d:fb:4b: 05:61:f0:b3:7c:2c:0c:db:df:b1:2f:2f:43:90:ce: 6d:bf:8b:91:2d:f7:eb:98:19:0d:73:44:cd:bc:29: 31:8e:29:4c:b8:0d:62:3c:35:0a:d3:90:da:c5:ea: 9e:02:4c:6a:5a:23:ba:d5:78:53:ff:ae:c0:68:9b: 3f:21:40:fd:67:2a:9f:4d:9d:d8:69:94:89:cc:d8: 9b:cb:29:b8:99:a8:d1:46:b2:c7:a7:3c:d6:9b:79: d6:8b:92:57:b7:bc:4d:53:0d:96:9e:c7:eb:c9:ea: 9f:e8:50:68:f9:5d:f8:5c:ff:8d:ec:a5:80:06:85: ad:d9:4d:72:44:fa:fa:6d:86:dc:71:d2:07:8f:30: 7b:cd:7b:be:10:10:45:39:e8:24:21:de:27:c1:ba: 23:48:5c:6b:07:b0:6f:fb:fd:54:47:d4:c8:1f:5d: 68:bd:86:ae:07:2f:8f:8d:3c:51:3b:27:e7:79:3f: 56:82:56:cf:6d:10:23:3e:cf:78:8b:3d:60:0c:e9: 02:fb:12:fd:3a:a7:74:b0:eb:28:e5:4d:5a:72:71: e0:d7:70:66:f6:04:3c:4b:56:4a:e4:89:0c:27:9a: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B2:33:DC:C8:0F:B3:3D:11:D7:A4:94:B7:B2:D7:AE:56:88:AF:46 X509v3 Authority Key Identifier: keyid:DA:03:54:FB:38:1F:45:21:C1:0B:16:3E:CB:D2:2A:08:3F:B7:A2:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gNU-zgfRSHBCxY-y9IqCD-3omw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2CDA/F4E2BAB825C311E8A0714A34C4F9AE02/2gNU-zgfRSHBCxY-y9IqCD-3omw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:d3:11:07:c9:a7:32:45:23:0f:f1:f0:82:bc:83:00:8c: ac:7a:08:94:20:e1:9b:dd:df:db:da:09:9d:a6:f0:a0:e1:54: e0:0b:86:dc:11:f2:ca:6d:77:43:9b:35:7d:0e:32:e0:14:b0: 4c:3e:51:43:4c:42:5e:54:97:fb:2c:2a:1c:20:0e:5c:cc:15: af:23:34:85:de:53:b0:ff:ef:5b:86:78:72:c3:73:b4:cf:5e: db:4d:6d:d4:a2:ee:30:08:cf:1c:48:fe:5a:0f:00:e7:43:f6: ef:d4:d7:14:53:39:a1:38:ca:d0:15:cc:f7:fc:74:65:22:0f: 99:27:2e:1f:b6:74:15:8b:15:81:e1:ea:91:27:ff:e0:1a:bf: 06:7b:83:04:22:16:64:0b:a6:bc:bf:2f:80:88:4d:df:e3:88: 90:6e:c9:99:67:ea:16:50:79:d0:3a:dd:46:cc:be:fd:17:74: 5f:a3:f5:bc:c5:1e:e8:e6:bb:ad:0f:9a:e6:6a:6a:87:df:7a: d1:92:4d:8f:e7:bf:6a:0f:e4:54:77:5b:e6:1b:aa:98:31:64: 47:80:c5:bc:f7:39:1e:36:7a:39:5e:8b:14:ea:18:71:ab:0c: 9f:05:24:28:90:03:5d:cc:d5:8c:f7:b7:35:f8:20:f1:14:1f: 42:c8:d2:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDREExMTAvBgNVBAUTKERBMDM1NEZCMzgxRjQ1MjFDMTBCMTYzRUNCRDIyQTA4 M0ZCN0EyNkMwHhcNMjUwNTEwMTY0MTE4WhcNMjUwNTE3MTY0MTE4WjAYMRYwFAYD VQQDEw02ODFmODFhZS1mZjNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAumoX4DGG4GYxfMpeF4URekoztpfqV+51cq9N+0sFYfCzfCwM29+xLy9DkM5t v4uRLffrmBkNc0TNvCkxjilMuA1iPDUK05DaxeqeAkxqWiO61XhT/67AaJs/IUD9 ZyqfTZ3YaZSJzNibyym4majRRrLHpzzWm3nWi5JXt7xNUw2Wnsfryeqf6FBo+V34 XP+N7KWABoWt2U1yRPr6bYbccdIHjzB7zXu+EBBFOegkId4nwbojSFxrB7Bv+/1U R9TIH11ovYauBy+PjTxROyfneT9WglbPbRAjPs94iz1gDOkC+xL9Oqd0sOso5U1a cnHg13Bm9gQ8S1ZK5IkMJ5pfxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKyM9zI D7M9EdeklLey165WiK9GMB8GA1UdIwQYMBaAFNoDVPs4H0UhwQsWPsvSKgg/t6Js MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkNEQS9GNEUyQkFCODI1 QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJTSEJDeFkteTlJcUNELTNv bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnTlUtemdmUlNIQkN4WS15OUlxQ0QtM29tdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkNEQS9GNEUyQkFCODI1QzMxMUU4QTA3MTRBMzRDNEY5QUUwMi8yZ05VLXpnZlJT SEJDeFkteTlJcUNELTNvbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSG9MRB8mnMkUjD/HwgryDAIysegiUIOGb3d/b2gmdpvCg4VTgC4bc EfLKbXdDmzV9DjLgFLBMPlFDTEJeVJf7LCocIA5czBWvIzSF3lOw/+9bhnhyw3O0 z17bTW3Uou4wCM8cSP5aDwDnQ/bv1NcUUzmhOMrQFcz3/HRlIg+ZJy4ftnQVixWB 4eqRJ//gGr8Ge4MEIhZkC6a8vy+AiE3f44iQbsmZZ+oWUHnQOt1GzL79F3Rfo/W8 xR7o5rutD5rmamqH33rRkk2P579qD+RUd1vmG6qYMWRHgMW89zkeNno5XosU6hhx qwyfBSQokANdzNWM97c1+CDxFB9CyNJa -----END CERTIFICATE-----Generated at Mon May 12 04:29:23 2025 by rpki-client