$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft File: AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft (raw, json) Hash identifier: 6dgz5Yk+wfRzUhtwiP9QNOf1YWrxSNOZRIrDhnrs8Vc= Subject key identifier: 68:72:32:A5:10:CB:E5:EC:BB:7C:20:15:07:84:FF:23:99:10:0D:F8 Authority key identifier: 01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 Certificate issuer: /CN=A91C2F8C/serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft Manifest number: 6F Signing time: Sun 11 May 2025 05:36:56 +0000 Manifest this update: Sun 11 May 2025 05:36:55 +0000 Manifest next update: Sun 18 May 2025 05:36:55 +0000 Files and hashes: 1: AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl (hash: KZ3ksVCI9if46VrH2OJztRAi5QmdQksrAkuoBExcQ2k=) 2: CEB2CA5686E011EF81BE1A7FC4F9AE02.roa (hash: 6Kn2Tc8nx8bkTt0Gnf962Qu64Px5Cncotr8SgT4Ke8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2F8C, serialNumber=017D8DB8A78874AB2F9AD97DE57AFDE1BE167D44 Validity Not Before: May 11 05:36:55 2025 GMT Not After : May 18 05:36:55 2025 GMT Subject: CN=68203778-4ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:73:92:03:ac:38:53:ce:5f:71:73:40:92:04: 92:6b:6a:f0:19:b8:c5:60:14:96:88:3b:9c:87:14: 37:22:40:9e:ef:89:0d:19:bc:cd:1a:ea:4f:23:02: 68:8b:5a:ea:9a:be:f4:67:87:f6:8b:f9:cf:b5:76: 37:7f:ea:70:28:0c:cf:2f:31:25:d0:71:a4:40:36: ab:24:07:8c:53:51:8d:79:35:07:58:23:b1:f8:fc: b2:af:6b:20:e8:d9:d2:3d:6b:f2:a1:12:15:e9:4e: 32:40:6b:53:d7:78:ed:fd:05:6f:63:a2:b4:bb:01: 1c:d0:ab:e9:1a:7a:44:af:22:a7:82:8e:6c:eb:31: de:97:fa:a5:07:9a:32:7f:5d:17:09:85:90:52:cd: 1a:e6:b6:0b:3d:cd:d6:2f:d5:fe:a4:f5:1a:c1:99: 97:28:c8:b4:10:14:12:5d:8c:ee:c2:ba:b1:5c:6e: 8e:47:c9:df:71:46:e2:a5:02:3a:f0:9e:b2:6a:e2: 64:0d:f2:a5:8c:bb:43:a8:99:1f:81:b9:11:36:8b: 47:b9:75:43:12:2f:e7:a1:6c:b1:02:45:d6:28:2f: db:8f:94:81:f9:2c:65:37:ad:d4:01:33:1d:24:34: 87:a5:99:5e:03:ee:22:3c:02:46:dd:7a:6e:d5:b2: 5a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:72:32:A5:10:CB:E5:EC:BB:7C:20:15:07:84:FF:23:99:10:0D:F8 X509v3 Authority Key Identifier: keyid:01:7D:8D:B8:A7:88:74:AB:2F:9A:D9:7D:E5:7A:FD:E1:BE:16:7D:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AX2NuKeIdKsvmtl95Xr94b4WfUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2F8C/5579B9B086E011EF9B6B177EC4F9AE02/AX2NuKeIdKsvmtl95Xr94b4WfUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:d1:34:7d:51:57:24:40:b0:9b:41:10:75:38:dd:ec:59:81: 6c:ed:ba:bf:64:a1:e7:56:55:38:0d:8e:1d:a6:85:2b:ca:62: e3:20:9d:8d:a8:70:2b:96:4b:89:cf:77:de:31:f8:46:bb:e9: 03:02:7e:80:97:1c:7e:f8:9c:cd:0c:73:43:08:7c:58:93:08: ed:58:a6:e4:89:6a:a1:1f:19:d9:96:e5:ec:11:fb:6d:d3:3f: 8c:03:ef:04:24:39:33:2d:0e:f1:5a:d0:1d:49:98:aa:99:83: 73:af:43:f8:bf:b6:6b:0b:8e:95:9c:45:2a:27:44:84:f0:52: 4c:22:29:37:f2:2e:d2:91:7d:1e:09:63:dd:35:99:97:6f:46: 00:2c:5b:94:45:29:12:fc:0d:86:a6:93:76:22:05:5b:4f:bf: 0b:e5:e6:91:30:0c:0c:6f:4a:e5:5e:b7:72:9e:5d:10:7d:5d: ea:e5:e4:8b:63:f9:f6:55:7e:66:29:42:20:ef:31:fc:e9:8f: 7f:65:d0:b7:0c:73:a9:c9:be:1d:46:e6:5f:06:2d:5e:40:c7: 12:7e:ca:bb:86:26:fb:a2:96:ca:74:53:e0:c8:d4:ad:93:4c: c1:e7:78:d6:f1:a6:fa:e0:ff:2a:c1:f0:95:3a:2e:09:65:30: 41:c9:52:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MkY4QzExMC8GA1UEBRMoMDE3RDhEQjhBNzg4NzRBQjJGOUFEOTdERTU3QUZERTFC RTE2N0Q0NDAeFw0yNTA1MTEwNTM2NTVaFw0yNTA1MTgwNTM2NTVaMBgxFjAUBgNV BAMTDTY4MjAzNzc4LTRlZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfc5IDrDhTzl9xc0CSBJJravAZuMVgFJaIO5yHFDciQJ7viQ0ZvM0a6k8jAmiL WuqavvRnh/aL+c+1djd/6nAoDM8vMSXQcaRANqskB4xTUY15NQdYI7H4/LKvayDo 2dI9a/KhEhXpTjJAa1PXeO39BW9jorS7ARzQq+kaekSvIqeCjmzrMd6X+qUHmjJ/ XRcJhZBSzRrmtgs9zdYv1f6k9RrBmZcoyLQQFBJdjO7CurFcbo5Hyd9xRuKlAjrw nrJq4mQN8qWMu0OomR+BuRE2i0e5dUMSL+ehbLECRdYoL9uPlIH5LGU3rdQBMx0k NIelmV4D7iI8Akbdem7VslpnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaHIypRDL 5ey7fCAVB4T/I5kQDfgwHwYDVR0jBBgwFoAUAX2NuKeIdKsvmtl95Xr94b4WfUQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMyRjhDLzU1NzlCOUIwODZF MDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtzdm10bDk1WHI5NGI0V2ZV US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQVgyTnVLZUlkS3N2bXRsOTVYcjk0YjRXZlVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMy RjhDLzU1NzlCOUIwODZFMDExRUY5QjZCMTc3RUM0RjlBRTAyL0FYMk51S2VJZEtz dm10bDk1WHI5NGI0V2ZVUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJLRNH1RVyRAsJtBEHU43exZgWztur9koedWVTgNjh2mhSvKYuMgnY2o cCuWS4nPd94x+Ea76QMCfoCXHH74nM0Mc0MIfFiTCO1YpuSJaqEfGdmW5ewR+23T P4wD7wQkOTMtDvFa0B1JmKqZg3OvQ/i/tmsLjpWcRSonRITwUkwiKTfyLtKRfR4J Y901mZdvRgAsW5RFKRL8DYamk3YiBVtPvwvl5pEwDAxvSuVet3KeXRB9Xerl5Itj +fZVfmYpQiDvMfzpj39l0LcMc6nJvh1G5l8GLV5AxxJ+yruGJvuilsp0U+DI1K2T TMHneNbxpvrg/yrB8JU6LgllMEHJUjI= -----END CERTIFICATE-----Generated at Mon May 12 19:51:18 2025 by rpki-client