$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft File: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft (raw, json) Hash identifier: olxcAlmI64EALJ0dQ1L8gHwGk+wvBmVXD2lbEmWsZ4Q= Subject key identifier: D5:67:B5:77:E9:B4:E4:9D:6E:B0:5B:0E:70:24:EE:F7:C4:0F:C0:DC Authority key identifier: DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 Certificate issuer: /CN=A91CF848/serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft Manifest number: 0217 Signing time: Mon 05 May 2025 01:32:25 +0000 Manifest this update: Mon 05 May 2025 01:32:24 +0000 Manifest next update: Mon 12 May 2025 01:32:24 +0000 Files and hashes: 1: 2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl (hash: koHrXjv2vUOPVj/NyaL0S3gTHBeoxBWEOMZY5QDHqu4=) 2: E9399E722E7211EDAE100C3DC4F9AE02.roa (hash: D0U/04LVw+4iZc1LWZSDtE7FA2UlXVxHf7VWpO51OsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 01:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF848, serialNumber=DB353F96C0D02CDD4C1F08DA1BC169FEE58D7321 Validity Not Before: May 5 01:32:24 2025 GMT Not After : May 12 01:32:24 2025 GMT Subject: CN=68181528-bd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7d:c3:ff:f1:04:08:0a:28:cf:88:ba:37:d7: 73:18:23:87:76:9e:eb:70:b7:5b:5d:a3:03:41:af: 91:1f:f1:0b:50:d9:26:17:22:ea:bb:03:34:07:28: 78:f4:8e:c5:1a:92:3e:36:eb:95:fc:be:c5:70:36: 4f:8a:46:53:0a:54:2f:5e:2b:d7:39:99:31:86:a1: b1:86:0c:a9:06:e2:94:14:98:d9:2b:8a:7f:97:39: f4:e2:2f:92:23:1b:e3:5a:f0:f1:b6:4f:db:2d:83: bc:fd:db:57:e0:b7:ba:9e:d7:ee:fc:aa:e8:b3:af: ae:45:be:5f:4d:2b:ed:90:7c:fc:7e:49:76:27:3b: 24:ed:21:d7:59:59:cf:18:61:e3:2b:4b:23:63:50: 35:ac:be:fd:61:8e:e9:e2:6a:20:2e:81:d7:b0:51: 5c:cb:e1:04:01:f0:50:9c:ab:56:43:e4:cf:ca:9e: 2e:94:bb:5f:23:d9:7f:17:66:00:21:fe:ba:e6:c4: 7e:52:f4:dd:68:5a:06:f2:eb:d4:db:56:1f:69:2f: ce:a2:f6:a0:96:26:22:c8:9b:d7:56:b6:5b:c5:34: 9f:a2:44:ed:b5:eb:83:86:2d:71:93:33:e2:30:35: 5d:2b:f4:2b:00:dc:dc:78:cc:0c:a6:ee:57:e8:4a: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:67:B5:77:E9:B4:E4:9D:6E:B0:5B:0E:70:24:EE:F7:C4:0F:C0:DC X509v3 Authority Key Identifier: keyid:DB:35:3F:96:C0:D0:2C:DD:4C:1F:08:DA:1B:C1:69:FE:E5:8D:73:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF848/CADAB7B22E6E11EDAEAB3E36C4F9AE02/2zU_lsDQLN1MHwjaG8Fp_uWNcyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:d6:b9:bb:d5:ff:f5:4f:02:85:5b:5f:0b:66:9e:e3:16:f5: cc:01:36:88:07:f7:6b:a6:ab:ca:b3:b1:6a:f1:c7:d5:98:a2: 83:77:4a:2e:0e:e7:6c:59:16:33:54:2b:43:22:58:c2:0d:58: 0d:2f:01:e3:18:c0:f5:29:03:ac:5c:ae:3f:3f:b6:fd:91:e6: 12:cd:be:f5:26:ae:48:02:9b:b2:03:1c:b8:78:a3:33:08:40: cd:97:10:44:06:4c:ce:56:1d:09:4e:e5:91:86:b4:69:04:1a: 94:a0:6b:df:30:fa:8a:ab:80:e6:77:82:a2:da:f4:fc:d4:4d: d5:4f:8d:a4:97:78:33:15:ba:b4:2c:2b:8c:86:1c:89:d4:e6: 2a:ef:e8:0a:2c:7f:97:4d:92:fc:ce:d6:d5:da:91:02:ed:e1: 19:a6:1b:7b:7c:06:2d:fe:18:f1:d3:9c:44:41:1b:0d:a3:ac: 02:b3:42:6a:6b:7a:0b:3d:ff:a7:2d:b3:5e:17:44:d7:c4:a5: f1:74:e4:3e:30:1c:77:39:65:55:17:ce:4d:02:78:a0:8f:60: c3:f3:33:cf:09:9c:b4:b1:1d:be:f4:cf:4d:c2:2e:4e:e9:d6: 13:ea:43:a1:3a:5b:e0:68:bc:ab:4a:2a:38:26:f6:e9:4d:46: e3:73:09:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Y4NDgxMTAvBgNVBAUTKERCMzUzRjk2QzBEMDJDREQ0QzFGMDhEQTFCQzE2OUZF RTU4RDczMjEwHhcNMjUwNTA1MDEzMjI0WhcNMjUwNTEyMDEzMjI0WjAYMRYwFAYD VQQDEw02ODE4MTUyOC1iZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqH3D//EECAooz4i6N9dzGCOHdp7rcLdbXaMDQa+RH/ELUNkmFyLquwM0Byh4 9I7FGpI+NuuV/L7FcDZPikZTClQvXivXOZkxhqGxhgypBuKUFJjZK4p/lzn04i+S IxvjWvDxtk/bLYO8/dtX4Le6ntfu/Kros6+uRb5fTSvtkHz8fkl2Jzsk7SHXWVnP GGHjK0sjY1A1rL79YY7p4mogLoHXsFFcy+EEAfBQnKtWQ+TPyp4ulLtfI9l/F2YA If665sR+UvTdaFoG8uvU21YfaS/OovagliYiyJvXVrZbxTSfokTtteuDhi1xkzPi MDVdK/QrANzceMwMpu5X6ErUjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVntXfp tOSdbrBbDnAk7vfED8DcMB8GA1UdIwQYMBaAFNs1P5bA0CzdTB8I2hvBaf7ljXMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjg0OC9DQURBQjdCMjJF NkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxOMU1Id2phRzhGcF91V05j eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6VV9sc0RRTE4xTUh3amFHOEZwX3VXTmN5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Rjg0OC9DQURBQjdCMjJFNkUxMUVEQUVBQjNFMzZDNEY5QUUwMi8yelVfbHNEUUxO MU1Id2phRzhGcF91V05jeUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY1rm71f/1TwKFW18LZp7jFvXMATaIB/drpqvKs7Fq8cfVmKKDd0ou DudsWRYzVCtDIljCDVgNLwHjGMD1KQOsXK4/P7b9keYSzb71Jq5IApuyAxy4eKMz CEDNlxBEBkzOVh0JTuWRhrRpBBqUoGvfMPqKq4Dmd4Ki2vT81E3VT42kl3gzFbq0 LCuMhhyJ1OYq7+gKLH+XTZL8ztbV2pEC7eEZpht7fAYt/hjx05xEQRsNo6wCs0Jq a3oLPf+nLbNeF0TXxKXxdOQ+MBx3OWVVF85NAnigj2DD8zPPCZy0sR2+9M9Nwi5O 6dYT6kOhOlvgaLyrSio4JvbpTUbjcwkR -----END CERTIFICATE-----Generated at Mon May 5 13:28:28 2025 by rpki-client