$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: CyXkohBfQhmlFSaw6kOo25LhosfYLwG+B6Vgp8SrXVw= Subject key identifier: 08:92:FB:4E:03:FF:5E:AB:1E:63:56:6A:A6:70:4F:E1:DD:ED:3C:87 Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 019E Signing time: Sun 11 May 2025 02:18:39 +0000 Manifest this update: Sun 11 May 2025 02:18:38 +0000 Manifest next update: Sun 18 May 2025 02:18:38 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: GgStRGo0VTJrRiApRKKnzT1BRtRTc1jzfeE6pn+B+3k=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: May 11 02:18:38 2025 GMT Not After : May 18 02:18:38 2025 GMT Subject: CN=682008ff-d1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:15:63:94:1d:b1:49:70:aa:5e:ab:dc:13: fe:9d:3b:91:18:b9:04:af:0b:39:f8:e0:a4:97:5b: 74:22:39:fd:c5:77:25:9c:72:4c:b3:ff:76:23:df: a7:2f:3e:e0:91:16:7c:01:53:cf:b9:aa:04:56:03: 14:4f:af:be:da:91:e3:5a:15:b7:d3:09:0c:93:4a: 6b:fc:3e:d5:ce:df:a2:23:de:53:e0:3f:5b:42:cf: e9:db:70:e3:92:4d:cc:86:eb:16:5f:92:61:7c:ff: 05:84:66:ae:bc:59:83:4d:3c:16:ef:62:c9:35:e9: bf:db:39:9e:77:e9:b2:77:ad:38:86:95:47:22:bf: aa:82:71:3b:c5:fb:79:05:40:dc:5d:e9:d5:92:8e: 4d:ed:f5:ca:d0:2f:5c:25:e5:4c:56:19:eb:48:4f: e0:53:57:23:e3:09:e5:79:a2:df:fc:a1:a0:16:fb: 4a:8e:e7:84:46:9c:9c:bc:4a:ae:7f:22:12:a3:87: a0:35:9e:cd:5e:7c:03:25:0c:4b:03:6c:29:ee:d9: 55:ee:5b:d9:30:8c:a2:5a:af:dd:3c:2a:bb:f3:0d: e5:3e:a7:37:33:96:a5:a7:0f:59:94:7a:3f:fe:ae: 31:ae:95:ee:50:f3:11:c4:40:20:63:47:2c:6b:1f: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:92:FB:4E:03:FF:5E:AB:1E:63:56:6A:A6:70:4F:E1:DD:ED:3C:87 X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:d0:fb:15:a0:bd:d6:91:2c:e9:1d:89:bf:fc:d4:56:5f:49: c0:29:f7:d1:10:cf:3e:38:22:42:40:3d:d1:8c:a2:fc:d8:f6: aa:c0:39:83:c0:77:73:67:67:4b:4a:e2:b8:13:81:2d:68:16: fa:4e:e1:88:ee:f7:1c:63:56:72:ec:ac:d9:23:ec:45:c3:fa: ff:12:97:4a:63:97:41:79:9c:a1:10:cd:eb:8e:2a:3a:db:e1: f1:95:cb:fe:63:27:db:db:97:cb:ae:e8:45:49:c0:2c:08:25: 45:95:47:7e:38:bd:9f:bb:db:77:8d:73:f7:00:e4:3a:0a:5a: 1d:e6:5a:33:7a:da:d1:82:70:65:74:56:38:3b:72:58:4b:92: 22:f0:c9:f5:4c:fc:be:c8:b8:0e:6b:9d:0f:ac:c2:4f:36:f8: 6d:68:c8:5e:65:c2:04:da:2d:05:6e:44:b2:73:af:3b:0a:44: a0:27:7f:1d:57:5b:0c:d4:75:44:95:7e:02:b5:00:93:29:64: f0:92:63:36:a8:5e:03:ce:b0:34:96:47:3b:c3:81:65:8b:39: de:e4:42:a2:2f:f3:c6:71:0e:f5:6b:43:55:05:0c:22:78:a2: a9:08:9f:06:9d:86:ec:fb:bc:f8:ca:e8:ba:1e:f8:21:ac:3b: 1d:ae:22:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwNTExMDIxODM4WhcNMjUwNTE4MDIxODM4WjAYMRYwFAYD VQQDEw02ODIwMDhmZi1kMWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA02UVY5QdsUlwql6r3BP+nTuRGLkErws5+OCkl1t0Ijn9xXclnHJMs/92I9+n Lz7gkRZ8AVPPuaoEVgMUT6++2pHjWhW30wkMk0pr/D7Vzt+iI95T4D9bQs/p23Dj kk3MhusWX5JhfP8FhGauvFmDTTwW72LJNem/2zmed+myd604hpVHIr+qgnE7xft5 BUDcXenVko5N7fXK0C9cJeVMVhnrSE/gU1cj4wnleaLf/KGgFvtKjueERpycvEqu fyISo4egNZ7NXnwDJQxLA2wp7tlV7lvZMIyiWq/dPCq78w3lPqc3M5alpw9ZlHo/ /q4xrpXuUPMRxEAgY0csax/MjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAiS+04D /16rHmNWaqZwT+Hd7TyHMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR0PsVoL3WkSzpHYm//NRWX0nAKffREM8+OCJCQD3RjKL82PaqwDmD wHdzZ2dLSuK4E4EtaBb6TuGI7vccY1Zy7KzZI+xFw/r/EpdKY5dBeZyhEM3rjio6 2+Hxlcv+Yyfb25fLruhFScAsCCVFlUd+OL2fu9t3jXP3AOQ6Clod5lozetrRgnBl dFY4O3JYS5Ii8Mn1TPy+yLgOa50PrMJPNvhtaMheZcIE2i0FbkSyc687CkSgJ38d V1sM1HVElX4CtQCTKWTwkmM2qF4DzrA0lkc7w4Flizne5EKiL/PGcQ71a0NVBQwi eKKpCJ8GnYbs+7z4yui6HvghrDsdriIA -----END CERTIFICATE-----Generated at Sun May 11 09:13:28 2025 by rpki-client