$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: pdyx2J0IQ9G5p8IJuTb+FJGWhzvizVXNNi/VqXmCS2A= Subject key identifier: 6F:42:81:F6:0C:A4:9A:4D:0D:10:E7:35:7A:08:88:C7:E4:99:1A:DD Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 0671 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 0665 Signing time: Fri 16 May 2025 22:42:40 +0000 Manifest this update: Fri 16 May 2025 22:42:39 +0000 Manifest next update: Fri 23 May 2025 22:42:39 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: uDoZJVkv/A6XxfcYpI5RtzvwRFAZDdehLtMT/FALExc=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: 6WUJgqskzShx2CRmJsEzW4Lp5E25NIFa3cIFrPQTpQE=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: bchSnNZ1JAHUbuS+ZuP7bZtOW8CbMzZJlPlo9vXpT60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1649 (0x671) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: May 16 22:42:39 2025 GMT Not After : May 23 22:42:39 2025 GMT Subject: CN=6827bf5f-c76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:a6:83:42:95:ec:0c:58:cf:60:68:71:e2: 82:24:a1:b4:76:60:d0:5d:f9:02:9d:70:48:4b:9a: 11:b9:d6:9e:2e:51:2b:16:8a:8c:c8:7e:11:99:41: a4:02:7b:ae:0b:94:7d:a9:74:51:0d:c9:6a:8e:37: 45:e3:ce:03:03:0e:21:f4:16:cb:17:16:90:3c:d9: 0a:4e:91:f7:82:df:e7:ce:11:fe:5a:ac:ef:8b:23: 32:bc:9c:fd:23:1b:2b:5c:a0:75:97:4f:27:f1:10: 9e:72:70:73:2b:db:2c:b9:91:a4:97:23:a5:e9:48: 3e:df:d5:32:a7:8a:72:17:50:13:3d:ed:0b:c7:7c: 61:a8:a7:6b:2f:b4:0b:fa:97:86:41:a4:57:a1:87: 24:7c:e5:1d:c9:be:5b:ee:fe:7c:93:8b:6e:6e:0f: 50:9a:38:52:06:2a:8a:11:b5:8b:1e:6a:b6:56:73: f0:e1:b2:1b:dc:5e:4f:5b:8b:b4:63:d6:1a:27:6f: cb:b0:47:4f:f6:a0:47:c6:84:6c:db:a6:69:f0:8b: 14:45:4c:f4:da:d9:28:1b:af:8e:16:14:2b:bc:1d: 10:ec:80:d5:b1:bd:cc:ff:cf:96:6c:6b:92:e9:d1: 92:80:c6:fc:2a:56:50:80:d5:ea:31:b1:f7:1d:88: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:42:81:F6:0C:A4:9A:4D:0D:10:E7:35:7A:08:88:C7:E4:99:1A:DD X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:ab:96:fd:ac:67:95:a9:bb:24:f9:52:0c:97:f6:9d:11: 04:9f:94:aa:fd:b4:7f:89:14:2d:33:29:47:86:b0:d5:48:d7: a9:1d:84:8c:85:b4:a4:fa:4c:15:db:75:d5:06:d3:d6:48:ac: 25:b7:24:e3:b8:d9:76:3b:12:b0:70:d6:59:c3:cb:80:48:fb: 4d:01:80:d6:be:cb:5a:a7:cc:a9:3e:7a:3b:2f:be:76:e0:ea: 6c:51:54:16:40:ca:7b:b5:40:1b:29:74:43:ca:05:f5:62:1f: bb:bc:e2:4e:05:79:45:0a:96:e5:6d:40:00:d6:8d:e8:1c:01: bd:48:fa:38:8d:8e:f5:fa:9e:04:81:24:da:c6:32:10:cc:ce: ac:5d:f7:9e:90:29:77:24:65:c2:37:b7:6f:61:6e:5b:d8:80: d8:3d:38:3a:70:86:b3:e5:4b:a1:5e:ca:77:b2:d4:18:fd:ff: 15:ae:a4:df:c1:5a:fc:68:a7:9e:ae:45:30:80:4c:05:0d:cc: 19:6d:25:63:de:a2:65:e8:ac:e9:05:e0:25:9c:ba:af:ec:45: 9c:e0:ae:fb:ea:57:72:f5:7c:4a:88:55:90:52:2d:ac:91:aa: 6f:49:9d:5e:63:78:2f:1b:65:4f:17:64:ca:63:ca:c5:31:5b: 3b:01:6b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwNTE2MjI0MjM5WhcNMjUwNTIzMjI0MjM5WjAYMRYwFAYD VQQDEw02ODI3YmY1Zi1jNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0SSmg0KV7AxYz2BoceKCJKG0dmDQXfkCnXBIS5oRudaeLlErFoqMyH4RmUGk AnuuC5R9qXRRDclqjjdF484DAw4h9BbLFxaQPNkKTpH3gt/nzhH+WqzviyMyvJz9 IxsrXKB1l08n8RCecnBzK9ssuZGklyOl6Ug+39Uyp4pyF1ATPe0Lx3xhqKdrL7QL +peGQaRXoYckfOUdyb5b7v58k4tubg9QmjhSBiqKEbWLHmq2VnPw4bIb3F5PW4u0 Y9YaJ2/LsEdP9qBHxoRs26Zp8IsURUz02tkoG6+OFhQrvB0Q7IDVsb3M/8+WbGuS 6dGSgMb8KlZQgNXqMbH3HYjv/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9CgfYM pJpNDRDnNXoIiMfkmRrdMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs86uW/axnlam7JPlSDJf2nREEn5Sq/bR/iRQtMylHhrDVSNepHYSM hbSk+kwV23XVBtPWSKwltyTjuNl2OxKwcNZZw8uASPtNAYDWvstap8ypPno7L752 4OpsUVQWQMp7tUAbKXRDygX1Yh+7vOJOBXlFCpblbUAA1o3oHAG9SPo4jY71+p4E gSTaxjIQzM6sXfeekCl3JGXCN7dvYW5b2IDYPTg6cIaz5UuhXsp3stQY/f8VrqTf wVr8aKeerkUwgEwFDcwZbSVj3qJl6KzpBeAlnLqv7EWc4K776ldy9XxKiFWQUi2s kapvSZ1eY3gvG2VPF2TKY8rFMVs7AWvl -----END CERTIFICATE-----Generated at Sat May 17 09:30:53 2025 by rpki-client