$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: bUF0H3Gp0KOh4w2t2wn1xKfnyJLoJOif8ZpdwVHPSQE= Subject key identifier: E2:A5:BB:6C:C9:87:32:4E:B1:C2:78:F0:A4:DB:3B:70:90:93:0A:55 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 021C Signing time: Thu 15 May 2025 02:00:11 +0000 Manifest this update: Thu 15 May 2025 02:00:10 +0000 Manifest next update: Thu 22 May 2025 02:00:10 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: fzxDMVMMbISkFcvsrFdqwu/nYDaNyOoHPHVClVaYyDM=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 02:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F, serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Validity Not Before: May 15 02:00:10 2025 GMT Not After : May 22 02:00:10 2025 GMT Subject: CN=68254aaa-2c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0a:02:a8:88:08:45:b2:aa:a9:f0:b1:2c:83: 6e:95:1f:3f:95:a3:73:d5:2c:29:b2:ef:1a:ef:e5: ff:e0:ce:2f:ca:c7:0c:1d:46:8e:29:26:86:bd:94: 5c:f3:9a:0c:32:38:69:ef:4f:79:24:2e:78:e9:89: b7:45:98:13:e5:e8:6d:15:c9:55:fc:5c:78:d1:d8: 87:25:03:30:68:91:1c:1c:5a:1f:2c:e9:75:fc:75: 67:b9:65:eb:fe:19:34:19:af:7c:39:44:66:f0:be: 68:eb:a2:79:44:97:77:7c:93:78:fa:78:32:5d:bc: ca:45:8d:a0:a3:4e:a3:87:96:8c:94:1d:fc:27:f8: a8:56:f8:53:a2:50:13:06:37:36:ee:e3:76:61:d8: d8:4b:01:48:10:51:f2:08:3a:9f:94:fe:43:bf:8e: 0a:f4:da:af:28:4d:92:3c:d0:88:59:1e:0b:7c:3a: f0:de:63:17:0b:eb:68:93:96:b5:7e:d1:68:42:07: 59:1b:ca:73:65:8c:f1:8e:b3:43:19:ea:4e:7a:67: c5:25:cf:23:c4:29:04:73:3f:bb:65:c3:77:10:c1: 44:3e:9d:ec:f8:b9:3b:ce:6e:7d:8e:fc:16:6a:c5: e5:19:94:2c:ab:17:53:99:e1:b0:5f:c3:b7:91:33: 5d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A5:BB:6C:C9:87:32:4E:B1:C2:78:F0:A4:DB:3B:70:90:93:0A:55 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:74:30:46:e1:f6:90:5c:f2:03:47:84:c5:fc:16:25:86:2e: e1:31:a5:c3:cd:09:d6:0e:8a:ae:87:9b:db:b0:b3:a2:27:78: 9e:a5:76:c2:e5:60:bf:44:75:a8:32:8e:4a:28:72:20:c2:b2: 25:86:e5:6b:3b:d1:d2:a5:80:ed:1e:3d:d7:0a:47:d0:6a:2a: f1:29:dd:0c:44:1e:31:ec:63:05:63:1a:07:28:cd:16:57:9b: e9:90:3c:ac:e3:eb:23:22:c3:86:b4:16:8c:84:19:ab:14:09: ac:ae:d2:c8:34:02:00:8c:60:00:8e:94:34:d5:51:f8:d5:65: fa:c1:31:dd:87:80:17:f6:bb:47:00:13:ab:9b:bb:3a:e8:d1: fc:95:3c:08:94:56:07:bb:1e:9e:cb:f4:61:81:90:3b:3f:3d: 8f:6f:25:f0:af:db:92:f2:c7:97:ed:19:4d:a2:e3:d0:75:31: 04:89:97:2a:4c:c7:d4:dd:fe:47:ed:71:e9:ed:ab:58:10:e5: 5d:46:05:b9:16:00:0f:00:b9:9c:99:2e:6c:0f:50:b7:5d:3c: e2:aa:9b:9d:5d:82:eb:3b:cd:e6:5a:f9:be:a8:ee:48:7e:8a: 23:33:6d:83:1e:e8:77:8e:36:b3:8a:e8:ef:03:e8:2b:b9:54: 05:46:24:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwNTE1MDIwMDEwWhcNMjUwNTIyMDIwMDEwWjAYMRYwFAYD VQQDEw02ODI1NGFhYS0yYzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7AoCqIgIRbKqqfCxLINulR8/laNz1Swpsu8a7+X/4M4vyscMHUaOKSaGvZRc 85oMMjhp7095JC546Ym3RZgT5ehtFclV/Fx40diHJQMwaJEcHFofLOl1/HVnuWXr /hk0Ga98OURm8L5o66J5RJd3fJN4+ngyXbzKRY2go06jh5aMlB38J/ioVvhTolAT Bjc27uN2YdjYSwFIEFHyCDqflP5Dv44K9NqvKE2SPNCIWR4LfDrw3mMXC+tok5a1 ftFoQgdZG8pzZYzxjrNDGepOemfFJc8jxCkEcz+7ZcN3EMFEPp3s+Lk7zm59jvwW asXlGZQsqxdTmeGwX8O3kTNdGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOKlu2zJ hzJOscJ48KTbO3CQkwpVMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGdDBG4faQXPIDR4TF/BYlhi7hMaXDzQnWDoquh5vbsLOiJ3iepXbC 5WC/RHWoMo5KKHIgwrIlhuVrO9HSpYDtHj3XCkfQairxKd0MRB4x7GMFYxoHKM0W V5vpkDys4+sjIsOGtBaMhBmrFAmsrtLINAIAjGAAjpQ01VH41WX6wTHdh4AX9rtH ABOrm7s66NH8lTwIlFYHux6ey/RhgZA7Pz2PbyXwr9uS8seX7RlNouPQdTEEiZcq TMfU3f5H7XHp7atYEOVdRgW5FgAPALmcmS5sD1C3XTziqpudXYLrO83mWvm+qO5I foojM22DHuh3jjaziujvA+gruVQFRiR2 -----END CERTIFICATE-----Generated at Thu May 15 03:53:20 2025 by rpki-client