$ rpki-client -vvf rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft File: 2fpCBt8OmUfNUB39UlsuRmlv1EI.mft (raw, json) Hash identifier: hH2gan4dg/DF9VA2KtEaCwKSvyMO6JL/3v1n7paZUU4= Subject key identifier: BF:57:EA:9C:4A:3C:C9:97:34:E4:E6:C0:3A:71:85:54:7A:EE:6F:56 Authority key identifier: D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 Certificate issuer: /CN=A911D40B/serialNumber=D9FA4206DF0E9947CD501DFD525B2E46696FD442 Certificate serial: 0103 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft Manifest number: 0100 Signing time: Thu 03 Apr 2025 04:21:01 +0000 Manifest this update: Thu 03 Apr 2025 04:21:01 +0000 Manifest next update: Thu 10 Apr 2025 04:21:01 +0000 Files and hashes: 1: 2fpCBt8OmUfNUB39UlsuRmlv1EI.crl (hash: qV2yr7QXeu9Bbn5mZjO7Gsb4Fi846jwt4gU8YrFJXAg=) 2: 91BCF5D08E0811EE91C7BD62C4F9AE02.roa (hash: 16O4tOIwTKe9KyjFOBLZvUGIgda/sT358bnVtxfjCnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 04:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 259 (0x103) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911D40B Validity Not Before: Apr 3 04:21:01 2025 GMT Not After : Apr 10 04:21:01 2025 GMT Subject: CN=67ee0cad-6af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:22:0d:37:86:46:53:62:fc:dd:5c:0e:96: 23:62:cf:72:9c:7d:6f:30:5f:64:b5:f6:e0:4c:10: 9c:2c:b0:e2:ad:56:b6:4d:57:2e:75:34:53:3e:22: 71:05:4c:cd:9b:24:38:2d:65:11:8a:f3:a9:b1:ab: 85:0f:06:40:d2:3d:c8:22:6b:67:cf:4c:c2:7a:07: 16:44:12:21:58:ab:54:a0:4b:60:53:ba:ca:8d:c1: 32:4e:cc:39:5f:78:84:57:05:15:84:7a:68:08:99: ae:ad:a4:4c:c5:6b:09:2f:37:6f:a8:cf:f1:ed:b6: 0d:08:86:43:6f:b1:1e:fd:fa:5f:eb:b0:3a:86:7b: a0:06:d6:34:65:3d:77:0c:4c:35:9b:35:bd:df:97: 49:79:c9:78:c6:f1:63:a6:2b:3b:9f:07:0e:5c:52: 0a:cd:71:2c:3a:af:67:b8:ce:05:24:b8:2d:c2:ff: ea:c0:30:e3:b9:6d:74:7f:a0:85:f5:53:ab:af:b2: 95:2b:e4:02:6d:b1:f8:8c:d1:da:95:fb:3e:a2:8e: 9d:9b:5b:6a:f7:c2:a2:4e:6c:e4:a8:a7:ba:88:67: 32:87:d5:49:50:bf:88:16:59:fc:bd:e1:14:98:64: fe:78:c7:1b:94:0f:c4:6a:a4:20:9a:d4:8c:fd:0d: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:57:EA:9C:4A:3C:C9:97:34:E4:E6:C0:3A:71:85:54:7A:EE:6F:56 X509v3 Authority Key Identifier: keyid:D9:FA:42:06:DF:0E:99:47:CD:50:1D:FD:52:5B:2E:46:69:6F:D4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2fpCBt8OmUfNUB39UlsuRmlv1EI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D40B/4626BB1A8E0811EE9C9DE461C4F9AE02/2fpCBt8OmUfNUB39UlsuRmlv1EI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:77:3c:c1:57:79:83:29:f7:36:45:90:3a:2f:c0:66:fb:f4: 39:85:6c:9b:c6:8b:e1:84:03:e4:55:81:d4:6c:7a:63:2a:62: 23:56:bd:f7:ec:4e:d7:c9:e2:38:c2:d0:d9:cc:9a:ce:4e:d4: 7d:cc:56:b6:d3:a0:06:81:c1:4d:43:9f:03:86:ea:da:c8:31: d2:aa:95:16:34:5e:89:7d:2d:cc:eb:c9:85:a5:6b:45:1f:b4: 78:c5:6d:7c:ea:04:5d:f2:21:51:03:c1:28:f2:0f:ae:4b:ca: 27:a3:ea:a7:02:88:0d:f2:bf:2e:ac:e2:06:03:ec:75:0e:fe: 57:43:7a:82:f2:40:56:c6:dc:d0:87:5c:bd:40:54:3f:92:73: 1a:49:6e:f1:56:ef:77:cc:8d:a5:85:64:4f:05:56:ef:c8:c0: c8:91:e1:a0:fe:1a:d9:68:b6:40:65:c3:c3:15:1f:a1:ea:f3: 01:69:ea:98:aa:68:99:e6:ae:a4:6e:f6:ef:0b:fc:fa:54:43: d0:34:a2:9b:cb:2d:49:45:42:79:e6:2f:15:14:98:2e:c0:ae: 2e:81:ad:5b:4e:2d:50:47:de:d9:76:15:8d:c8:35:24:d1:d3: 9b:33:ca:65:f3:a5:61:86:74:97:0a:92:a9:f5:3d:c8:3b:65: c3:10:bd:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUQ0MEIxMTAvBgNVBAUTKEQ5RkE0MjA2REYwRTk5NDdDRDUwMURGRDUyNUIyRTQ2 Njk2RkQ0NDIwHhcNMjUwNDAzMDQyMTAxWhcNMjUwNDEwMDQyMTAxWjAYMRYwFAYD VQQDEw02N2VlMGNhZC02YWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtvEiDTeGRlNi/N1cDpYjYs9ynH1vMF9ktfbgTBCcLLDirVa2TVcudTRTPiJx BUzNmyQ4LWURivOpsauFDwZA0j3IImtnz0zCegcWRBIhWKtUoEtgU7rKjcEyTsw5 X3iEVwUVhHpoCJmuraRMxWsJLzdvqM/x7bYNCIZDb7Ee/fpf67A6hnugBtY0ZT13 DEw1mzW935dJecl4xvFjpis7nwcOXFIKzXEsOq9nuM4FJLgtwv/qwDDjuW10f6CF 9VOrr7KVK+QCbbH4jNHalfs+oo6dm1tq98KiTmzkqKe6iGcyh9VJUL+IFln8veEU mGT+eMcblA/EaqQgmtSM/Q0rSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9X6pxK PMmXNOTmwDpxhVR67m9WMB8GA1UdIwQYMBaAFNn6QgbfDplHzVAd/VJbLkZpb9RC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDQwQi80NjI2QkIxQThF MDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21VZk5VQjM5VWxzdVJtbHYx RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJmcENCdDhPbVVmTlVCMzlVbHN1Um1sdjFFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RDQwQi80NjI2QkIxQThFMDgxMUVFOUM5REU0NjFDNEY5QUUwMi8yZnBDQnQ4T21V Zk5VQjM5VWxzdVJtbHYxRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhdzzBV3mDKfc2RZA6L8Bm+/Q5hWybxovhhAPkVYHUbHpjKmIjVr33 7E7XyeI4wtDZzJrOTtR9zFa206AGgcFNQ58DhurayDHSqpUWNF6JfS3M68mFpWtF H7R4xW186gRd8iFRA8Eo8g+uS8ono+qnAogN8r8urOIGA+x1Dv5XQ3qC8kBWxtzQ h1y9QFQ/knMaSW7xVu93zI2lhWRPBVbvyMDIkeGg/hrZaLZAZcPDFR+h6vMBaeqY qmiZ5q6kbvbvC/z6VEPQNKKbyy1JRUJ55i8VFJguwK4uga1bTi1QR97ZdhWNyDUk 0dObM8pl86VhhnSXCpKp9T3IO2XDEL3D -----END CERTIFICATE-----Generated at Sat Apr 5 04:59:37 2025 by rpki-client