$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: SojsTtadrQ9R74he435KNXj2C0IE8ZALSPlK+iTU2xE= Subject key identifier: 07:3D:DB:24:00:C3:53:9F:FF:A7:03:85:6A:A6:08:91:41:17:B9:B9 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 0193 Signing time: Sat 17 May 2025 03:24:33 +0000 Manifest this update: Sat 17 May 2025 03:24:32 +0000 Manifest next update: Sat 24 May 2025 03:24:32 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: e+MjjXJvtZOM4zJNyBMkQS1fxkOiBZssqu/jys1ub1A=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: fXSIWmh9V9F/x3Hddt6PPXIzX5rLMrps20QQT3eYyH8=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 2uAnojTpBx/p6UzON5W2LUqPsm+IaZARqT6ypFNqC5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 03:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E, serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Validity Not Before: May 17 03:24:32 2025 GMT Not After : May 24 03:24:32 2025 GMT Subject: CN=68280171-8fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0c:18:67:e1:fc:4a:bb:5e:37:96:7f:b6:d8: c6:23:36:e2:e6:6f:ed:d8:86:16:05:5c:e8:22:3d: d0:a9:f4:08:a8:e9:9a:e0:5c:b7:63:50:8a:b2:55: 19:02:c8:a8:8c:f9:4c:72:21:0b:a2:b2:90:af:73: 21:45:44:35:66:be:fd:07:b6:5b:9c:32:e0:d7:11: f0:28:23:df:19:86:6f:7e:ae:aa:82:9f:f3:d2:89: 26:4f:0a:78:0a:72:79:f0:a0:c1:80:ff:26:db:93: 6c:37:21:fa:02:22:34:3f:c9:a7:82:b4:2c:0d:cb: da:44:16:4e:88:ab:fe:7d:66:93:d1:1e:45:0c:bf: 28:c5:1c:9f:ae:1f:c5:e7:2d:cb:f0:72:a1:49:05: f4:51:a7:7b:57:23:d2:13:da:4f:2d:45:aa:e3:65: da:b4:b7:8e:4a:5b:be:48:bf:79:0a:2c:7d:44:83: 7a:1f:59:35:9f:c4:30:9a:32:c4:93:ee:ca:90:c2: 5d:88:d4:a4:84:5b:f1:a3:fb:e7:e4:33:82:a9:ce: 7b:52:01:0c:f9:24:82:4c:0d:fe:5b:4d:0d:d8:71: e9:21:b4:ca:e9:c5:a5:94:04:45:20:62:1e:f0:84: e8:d9:4b:cb:9e:55:38:25:d3:27:e6:1c:44:58:76: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3D:DB:24:00:C3:53:9F:FF:A7:03:85:6A:A6:08:91:41:17:B9:B9 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:2d:de:b3:3f:98:35:6a:3c:6d:5b:f0:4c:67:4b:cc:94:86: db:e8:f6:98:fb:e9:d5:12:22:f8:74:1e:a5:a8:a0:fb:f0:7a: e2:f1:2b:17:4e:00:2c:45:4a:2d:c6:ec:3b:2d:26:ad:7d:b8: c6:17:87:69:c9:63:92:c4:39:43:0e:4c:ed:55:40:2a:49:28: 5a:0b:18:03:18:d1:fc:31:56:3c:23:b0:b1:39:91:7b:60:87: 79:ed:63:13:0f:dc:b6:2b:1c:30:75:65:15:be:e5:05:5a:0d: f0:96:97:7f:08:db:f7:2f:39:03:f6:13:fa:24:5a:37:69:c3: a9:1f:6f:0e:a3:af:11:fc:64:b5:2e:95:96:c2:8f:78:9d:03: 6d:ad:f3:7d:42:e5:aa:12:04:2f:02:b9:8a:bf:e2:06:b2:6e: cb:4f:ba:a5:5a:51:25:57:12:90:35:dc:e1:0f:d4:86:9c:89: 0c:a8:81:42:94:23:cc:21:ae:93:29:b7:1c:c4:ed:88:b5:dc: 3d:09:22:b8:5d:20:e4:0d:d8:e9:cf:61:23:15:21:84:de:a7: 14:6e:04:39:8f:4a:7e:b4:ac:ad:78:6d:2a:49:11:ba:f4:4e: b3:9f:17:e9:9a:4d:14:8d:4b:f6:38:a5:e4:94:ec:50:38:8a: 4e:69:0a:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwNTE3MDMyNDMyWhcNMjUwNTI0MDMyNDMyWjAYMRYwFAYD VQQDEw02ODI4MDE3MS04ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzgwYZ+H8SrteN5Z/ttjGIzbi5m/t2IYWBVzoIj3QqfQIqOma4Fy3Y1CKslUZ AsiojPlMciELorKQr3MhRUQ1Zr79B7ZbnDLg1xHwKCPfGYZvfq6qgp/z0okmTwp4 CnJ58KDBgP8m25NsNyH6AiI0P8mngrQsDcvaRBZOiKv+fWaT0R5FDL8oxRyfrh/F 5y3L8HKhSQX0Uad7VyPSE9pPLUWq42XatLeOSlu+SL95Cix9RIN6H1k1n8QwmjLE k+7KkMJdiNSkhFvxo/vn5DOCqc57UgEM+SSCTA3+W00N2HHpIbTK6cWllARFIGIe 8ITo2UvLnlU4JdMn5hxEWHb/7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAc92yQA w1Of/6cDhWqmCJFBF7m5MB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYLd6zP5g1ajxtW/BMZ0vMlIbb6PaY++nVEiL4dB6lqKD78Hri8SsX TgAsRUotxuw7LSatfbjGF4dpyWOSxDlDDkztVUAqSShaCxgDGNH8MVY8I7CxOZF7 YId57WMTD9y2KxwwdWUVvuUFWg3wlpd/CNv3LzkD9hP6JFo3acOpH28Oo68R/GS1 LpWWwo94nQNtrfN9QuWqEgQvArmKv+IGsm7LT7qlWlElVxKQNdzhD9SGnIkMqIFC lCPMIa6TKbccxO2Itdw9CSK4XSDkDdjpz2EjFSGE3qcUbgQ5j0p+tKyteG0qSRG6 9E6znxfpmk0UjUv2OKXklOxQOIpOaQos -----END CERTIFICATE-----Generated at Sat May 17 14:08:26 2025 by rpki-client