$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft File: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft (raw, json) Hash identifier: ekO3pTF+924Dou22pEKBtRQzsiy2RKk2GBvzWsD7N7Y= Subject key identifier: C4:27:80:5E:54:8D:B2:FF:16:3D:9A:F1:CA:90:09:AD:8C:13:5C:10 Authority key identifier: DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 Certificate issuer: /CN=A91E6B73/serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Certificate serial: 040E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft Manifest number: 0407 Signing time: Thu 15 May 2025 00:28:56 +0000 Manifest this update: Thu 15 May 2025 00:28:55 +0000 Manifest next update: Thu 22 May 2025 00:28:55 +0000 Files and hashes: 1: 2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl (hash: fjyqDopb2EX8dfQSrKxAj6I3RcyqllQ3ZYtjn746DLM=) 2: 4F12B4886EEB11EC8699607FC4F9AE02.roa (hash: oZqrtJQlT3Kbcps4JCliN7dRzvuckdjDLLEfBNjz0jM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 00:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1038 (0x40e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B73, serialNumber=DAAAB12E92FA0EE043C20EEAF2BE4696A2C37877 Validity Not Before: May 15 00:28:55 2025 GMT Not After : May 22 00:28:55 2025 GMT Subject: CN=68253548-e726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:46:32:8d:39:ef:de:d7:66:e5:c8:ee:38:43: 96:32:5c:26:1b:7a:9b:43:79:29:22:88:d6:2e:96: d2:78:49:a5:5a:f9:7e:0b:00:e4:c7:ed:c5:a5:fc: e9:29:33:3c:ef:39:43:85:9e:f7:7c:13:de:d9:ef: d3:e9:e8:b5:c6:b4:cd:c5:74:2e:88:11:ae:bc:0d: 74:d2:33:59:60:7e:12:d3:77:da:28:81:4d:a3:7c: 1f:b3:36:cc:3a:b3:69:93:60:e6:31:3e:19:be:48: 04:79:ff:92:c0:d4:b6:9f:8e:0b:a5:f6:0d:3e:b0: b4:ed:09:48:21:12:8a:96:f6:19:f7:34:20:d1:18: ac:71:03:62:77:2a:49:e9:b3:6f:b0:b8:10:1e:d6: ee:48:43:fc:68:51:0e:77:6f:6d:be:d5:ce:5f:25: 0d:0d:26:65:89:df:bf:b7:e8:17:6a:29:ee:a9:2d: 04:df:8b:0b:30:11:ed:1b:5b:9d:d5:6d:de:56:a6: 6b:99:84:2d:40:04:57:dc:9b:55:5b:f7:e2:3a:fa: 86:de:03:40:fe:19:61:70:88:54:d0:8a:ea:86:b5: fb:ac:d4:9d:37:de:ce:3a:ef:70:5c:e6:a1:d8:05: c4:b9:4f:10:ef:07:61:9a:07:6d:31:55:c6:56:dc: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:27:80:5E:54:8D:B2:FF:16:3D:9A:F1:CA:90:09:AD:8C:13:5C:10 X509v3 Authority Key Identifier: keyid:DA:AA:B1:2E:92:FA:0E:E0:43:C2:0E:EA:F2:BE:46:96:A2:C3:78:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qqxLpL6DuBDwg7q8r5GlqLDeHc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B73/EA809FF26ED211ECAE2EB829C4F9AE02/2qqxLpL6DuBDwg7q8r5GlqLDeHc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:f4:c3:f1:ac:37:be:db:cd:4f:98:d6:cd:b5:88:54:dc:bf: 33:8c:36:c7:93:e2:4a:bc:1a:70:e3:ac:63:8a:34:92:10:21: 57:c9:5b:79:83:db:d5:9c:65:cf:67:61:0c:69:df:22:7c:b0: f2:03:d7:24:40:b4:83:9b:a3:a9:7b:8b:6b:9e:da:3a:ce:be: 85:77:98:37:3d:24:cb:e7:01:f1:5d:04:fc:4f:56:cf:f9:0c: c9:b2:e0:9a:9e:cb:bb:30:3f:16:bf:c0:aa:23:f8:66:04:2e: ae:71:e2:8c:a4:98:b9:5c:a1:57:c7:46:47:e0:33:fc:47:f4: fa:bf:33:8a:6f:de:1c:40:8d:fa:03:a9:ba:84:c6:8c:ac:3a: 06:8d:da:2f:00:73:d2:dc:8e:05:0f:90:da:73:10:db:23:29: 3c:87:35:fe:94:03:0c:ed:09:38:5f:8f:8a:33:90:ca:41:b5: f4:ec:b7:2f:f5:d8:8e:aa:cd:5a:0f:90:6c:16:5d:fe:80:2d: 70:45:8a:da:dd:c8:06:5e:de:8e:4a:59:55:c6:c0:e2:b7:07: ef:1a:8d:45:47:f0:77:fc:76:86:34:d7:a0:6e:3a:f5:22:61: e7:c8:e8:ee:72:c0:8d:fa:85:53:57:f3:07:92:93:43:40:6f: 7b:7e:a1:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCNzMxMTAvBgNVBAUTKERBQUFCMTJFOTJGQTBFRTA0M0MyMEVFQUYyQkU0Njk2 QTJDMzc4NzcwHhcNMjUwNTE1MDAyODU1WhcNMjUwNTIyMDAyODU1WjAYMRYwFAYD VQQDEw02ODI1MzU0OC1lNzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2UYyjTnv3tdm5cjuOEOWMlwmG3qbQ3kpIojWLpbSeEmlWvl+CwDkx+3Fpfzp KTM87zlDhZ73fBPe2e/T6ei1xrTNxXQuiBGuvA100jNZYH4S03faKIFNo3wfszbM OrNpk2DmMT4ZvkgEef+SwNS2n44LpfYNPrC07QlIIRKKlvYZ9zQg0RiscQNidypJ 6bNvsLgQHtbuSEP8aFEOd29tvtXOXyUNDSZlid+/t+gXainuqS0E34sLMBHtG1ud 1W3eVqZrmYQtQARX3JtVW/fiOvqG3gNA/hlhcIhU0IrqhrX7rNSdN97OOu9wXOah 2AXEuU8Q7wdhmgdtMVXGVtzTKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQngF5U jbL/Fj2a8cqQCa2ME1wQMB8GA1UdIwQYMBaAFNqqsS6S+g7gQ8IO6vK+Rpaiw3h3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI3My9FQTgwOUZGMjZF RDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1QkR3ZzdxOHI1R2xxTERl SGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxcXhMcEw2RHVCRHdnN3E4cjVHbHFMRGVIYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI3My9FQTgwOUZGMjZFRDIxMUVDQUUyRUI4MjlDNEY5QUUwMi8ycXF4THBMNkR1 QkR3ZzdxOHI1R2xxTERlSGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN9MPxrDe+281PmNbNtYhU3L8zjDbHk+JKvBpw46xjijSSECFXyVt5 g9vVnGXPZ2EMad8ifLDyA9ckQLSDm6Ope4trnto6zr6Fd5g3PSTL5wHxXQT8T1bP +QzJsuCansu7MD8Wv8CqI/hmBC6uceKMpJi5XKFXx0ZH4DP8R/T6vzOKb94cQI36 A6m6hMaMrDoGjdovAHPS3I4FD5DacxDbIyk8hzX+lAMM7Qk4X4+KM5DKQbX07Lcv 9diOqs1aD5BsFl3+gC1wRYra3cgGXt6OSllVxsDitwfvGo1FR/B3/HaGNNegbjr1 ImHnyOjucsCN+oVTV/MHkpNDQG97fqH9 -----END CERTIFICATE-----Generated at Fri May 16 08:15:17 2025 by rpki-client