$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: rMjhnb93ankfNZvUnNyjXRmkFRKsu0NUdvIKcuqRJwg= Subject key identifier: F2:BB:B1:24:66:33:F0:CC:F5:A0:AC:EA:D5:7A:F5:44:5C:49:65:F7 Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 0152 Signing time: Thu 15 May 2025 03:33:26 +0000 Manifest this update: Thu 15 May 2025 03:33:26 +0000 Manifest next update: Thu 22 May 2025 03:33:26 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: WSis3h1GUArPi4fYc4G+tS/6l/rh4Jf8lbFcU/iJjm4=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 03:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: May 15 03:33:26 2025 GMT Not After : May 22 03:33:26 2025 GMT Subject: CN=68256086-6afd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:60:22:4b:6a:ca:b6:fb:22:13:12:67:d0: 21:19:b6:5c:67:d8:2f:5c:d6:91:45:1f:df:87:e6: e3:82:00:ce:5e:e2:88:e6:ef:db:18:91:08:1a:77: 78:22:df:be:dd:e1:b4:b8:f2:44:7d:7e:b7:92:f1: ed:6d:59:1a:78:0c:62:f7:81:27:43:d6:89:f9:86: a2:8e:66:42:dd:4c:4a:08:96:67:a4:53:5b:1b:2d: 12:d0:00:58:0b:55:4c:f1:fa:76:c0:e1:22:77:11: df:7a:82:69:ca:1e:d3:b0:fa:08:89:b6:23:df:89: 70:6a:b6:52:ea:c2:90:7f:bd:7b:80:7b:78:dd:d0: 7a:37:0f:55:d0:16:29:3d:ea:63:cd:3d:f1:0c:88: 25:de:73:3f:a3:08:b7:30:90:27:93:ad:2d:90:a5: 4a:db:75:3d:a9:ea:84:9c:33:09:a8:cd:73:43:51: b4:c8:a4:bb:3e:04:ba:1d:39:00:ce:31:17:6d:52: 3f:e8:2f:b9:f9:fe:34:32:d6:46:8b:5d:df:35:2f: e1:83:d5:9d:3b:69:9c:47:d8:8a:76:5e:fa:b2:45: eb:c3:3b:28:de:83:da:c0:3f:a3:19:65:0f:e8:fd: 77:94:58:f4:bc:3b:17:ec:59:09:43:ab:c7:4d:1f: c4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BB:B1:24:66:33:F0:CC:F5:A0:AC:EA:D5:7A:F5:44:5C:49:65:F7 X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0e:ea:b6:fc:d6:9d:4f:2c:a2:93:d1:ff:4c:72:b1:d1:c9: 50:ba:23:6e:af:e7:59:7b:c6:2f:bd:cf:c7:87:3d:48:f2:28: d7:74:d5:b3:53:47:ef:76:fd:e6:23:49:80:ee:ec:2e:34:ea: ef:55:15:f5:3d:97:c4:3f:99:8d:55:ef:ea:c0:f4:56:b1:9d: ba:37:94:70:0d:5f:c7:4b:a2:a4:a8:af:e5:2e:f5:bb:0b:57: c4:5c:ff:0f:16:05:45:f6:93:8c:a7:78:13:b2:3c:26:bf:fb: ba:c1:9f:20:09:d1:70:87:e2:0a:db:d4:55:6d:f4:42:12:3a: e8:36:4b:79:92:18:b0:93:34:e9:e1:7e:75:0c:89:46:eb:b7: e2:b7:df:68:7f:3a:b4:d8:4d:7a:27:ba:f6:21:d6:94:3d:50: 8c:93:4a:9d:2d:1c:90:05:b4:1d:ac:bb:67:1d:44:14:69:fe: 8a:f8:2b:ba:b7:86:f8:11:0b:13:15:f7:99:a9:40:68:0f:3d: e7:8b:c6:26:30:28:a9:4a:d7:86:ec:00:c2:d1:62:c5:bc:7f: ce:e3:c9:6e:d4:7a:73:e4:5b:df:8f:61:a0:4d:e1:c2:0d:45: 3b:83:6d:6d:5c:b9:48:dd:97:d4:0c:c2:72:4e:4f:7a:ff:41: 36:f6:c6:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwNTE1MDMzMzI2WhcNMjUwNTIyMDMzMzI2WjAYMRYwFAYD VQQDEw02ODI1NjA4Ni02YWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8xgIktqyrb7IhMSZ9AhGbZcZ9gvXNaRRR/fh+bjggDOXuKI5u/bGJEIGnd4 It++3eG0uPJEfX63kvHtbVkaeAxi94EnQ9aJ+YaijmZC3UxKCJZnpFNbGy0S0ABY C1VM8fp2wOEidxHfeoJpyh7TsPoIibYj34lwarZS6sKQf717gHt43dB6Nw9V0BYp PepjzT3xDIgl3nM/owi3MJAnk60tkKVK23U9qeqEnDMJqM1zQ1G0yKS7PgS6HTkA zjEXbVI/6C+5+f40MtZGi13fNS/hg9WdO2mcR9iKdl76skXrwzso3oPawD+jGWUP 6P13lFj0vDsX7FkJQ6vHTR/E0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK7sSRm M/DM9aCs6tV69URcSWX3MB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqDuq2/NadTyyik9H/THKx0clQuiNur+dZe8Yvvc/Hhz1I8ijXdNWz U0fvdv3mI0mA7uwuNOrvVRX1PZfEP5mNVe/qwPRWsZ26N5RwDV/HS6KkqK/lLvW7 C1fEXP8PFgVF9pOMp3gTsjwmv/u6wZ8gCdFwh+IK29RVbfRCEjroNkt5khiwkzTp 4X51DIlG67fit99ofzq02E16J7r2IdaUPVCMk0qdLRyQBbQdrLtnHUQUaf6K+Cu6 t4b4EQsTFfeZqUBoDz3ni8YmMCipSteG7ADC0WLFvH/O48lu1Hpz5Fvfj2GgTeHC DUU7g21tXLlI3ZfUDMJyTk96/0E29sYV -----END CERTIFICATE-----Generated at Thu May 15 19:51:09 2025 by rpki-client