$ rpki-client -vvf rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft File: 2m6UHNv-AaruCRs_lVldbUAYMW0.mft (raw, json) Hash identifier: WLCLcvWoh83iihY66vGqH0t4glSlHvruUPTIIdHfv7g= Subject key identifier: 30:22:BC:CF:45:D3:8D:FF:CB:D1:D7:B8:B9:67:0B:69:DC:E5:53:41 Authority key identifier: DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D Certificate issuer: /CN=A9122EBD/serialNumber=DA6E941CDBFE01AAEE091B3F95595D6D4018316D Certificate serial: 05B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft Manifest number: 05B0 Signing time: Fri 28 Mar 2025 23:23:41 +0000 Manifest this update: Fri 28 Mar 2025 23:23:41 +0000 Manifest next update: Fri 04 Apr 2025 23:23:41 +0000 Files and hashes: 1: 2m6UHNv-AaruCRs_lVldbUAYMW0.crl (hash: wX02zJm7fceEbHHwMGXpE94uky0M8Q2z5o18dxlnfbg=) 2: 1576F19ABC5C11EB831EC25AC4F9AE02.roa (hash: N+OLwoylWKY2cx48mF8MRzwF1FMHW/ZLDW5PqvusQ+I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1461 (0x5b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122EBD Validity Not Before: Mar 28 23:23:41 2025 GMT Not After : Apr 4 23:23:41 2025 GMT Subject: CN=67e72f7d-d1f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:45:96:41:73:2a:0c:0b:94:7f:88:e9:b6:c7: cc:6b:2b:00:45:f6:a5:cf:0d:08:ee:f8:a7:ac:45: 2f:67:1b:1d:01:00:8b:15:60:f9:ce:24:11:ac:7f: 40:f5:d3:23:c9:ed:2f:8a:c5:4c:08:f1:29:43:ef: b3:0b:59:00:bf:d6:f9:23:a4:24:59:76:36:4d:5f: 9c:bb:e2:b4:3c:5b:e4:ac:cd:6c:3c:ee:0e:fe:fa: f7:d0:b7:b4:38:b6:4d:e6:d1:ac:12:15:72:9a:74: 86:5b:05:5c:0c:6a:05:10:c3:92:38:af:7c:e4:0b: ca:9a:61:aa:fa:b2:ad:68:8c:a6:db:36:4b:16:1a: 11:99:4f:52:c1:ff:e7:9a:90:f8:d0:be:aa:0b:0b: 72:6a:0e:1a:61:29:44:7a:06:37:18:e8:d3:a9:ee: 61:28:ac:6a:e3:eb:22:30:80:77:53:9e:9e:fe:32: 11:aa:46:8a:69:fd:fd:51:46:0b:26:df:ed:9f:e1: 3a:0e:f4:8b:7a:2e:e9:40:a2:18:cb:77:8e:7e:7d: a7:1d:09:66:84:08:1a:5f:2d:2f:9c:9b:47:bf:23: fe:15:fb:89:ae:10:60:0a:78:d2:a8:2e:b5:e2:46: 52:66:26:c6:51:5f:fb:dd:4d:19:98:25:48:c8:0a: db:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:22:BC:CF:45:D3:8D:FF:CB:D1:D7:B8:B9:67:0B:69:DC:E5:53:41 X509v3 Authority Key Identifier: keyid:DA:6E:94:1C:DB:FE:01:AA:EE:09:1B:3F:95:59:5D:6D:40:18:31:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m6UHNv-AaruCRs_lVldbUAYMW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122EBD/3120065EBC5A11EB8E1D9258C4F9AE02/2m6UHNv-AaruCRs_lVldbUAYMW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:e3:59:be:9a:a4:6c:9c:b1:e5:3b:dd:2c:aa:b5:91:1d:42: 95:47:07:61:fd:61:02:dd:52:2a:fe:1a:ad:35:7b:8c:d7:a1: 49:aa:7e:ce:0b:d0:b2:5b:ba:9c:a9:82:bb:7a:47:77:02:ff: d3:2a:92:cc:01:5f:a8:83:31:6e:c0:f8:c6:6e:1a:2b:53:34: b6:a7:23:ea:25:23:60:ae:47:61:53:b8:d2:f9:8d:02:ca:f0: 6f:18:48:12:ad:b8:9f:43:f2:ed:5b:e1:bc:77:0d:da:b4:70: 49:fa:cd:d6:fd:21:1b:fe:b5:58:67:40:84:d3:47:f8:cc:1f: e3:0d:73:f4:79:9e:e2:4d:ea:08:a1:96:e7:13:1e:1f:9b:c1: 33:08:2d:66:4c:59:1e:cd:2e:a2:85:cf:91:ec:42:d8:41:ca: 62:e4:b1:74:f2:3f:ce:73:5d:f1:ed:1b:1d:38:d7:de:54:41: 83:c8:bd:68:31:cf:40:f6:89:8a:eb:96:b6:e5:ae:7a:2b:f9: aa:16:bd:2d:31:ae:22:fa:4c:32:19:2d:79:d7:b0:c6:ca:15: 50:0c:fc:d0:f2:9c:94:5a:3b:66:39:4c:4a:8b:0d:11:eb:2d: e5:8e:2f:f3:be:46:b7:2e:16:4a:19:57:34:6a:75:6e:1a:ae: 7a:ce:b1:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjJFQkQxMTAvBgNVBAUTKERBNkU5NDFDREJGRTAxQUFFRTA5MUIzRjk1NTk1RDZE NDAxODMxNkQwHhcNMjUwMzI4MjMyMzQxWhcNMjUwNDA0MjMyMzQxWjAYMRYwFAYD VQQDEw02N2U3MmY3ZC1kMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2kWWQXMqDAuUf4jptsfMaysARfalzw0I7vinrEUvZxsdAQCLFWD5ziQRrH9A 9dMjye0visVMCPEpQ++zC1kAv9b5I6QkWXY2TV+cu+K0PFvkrM1sPO4O/vr30Le0 OLZN5tGsEhVymnSGWwVcDGoFEMOSOK985AvKmmGq+rKtaIym2zZLFhoRmU9Swf/n mpD40L6qCwtyag4aYSlEegY3GOjTqe5hKKxq4+siMIB3U56e/jIRqkaKaf39UUYL Jt/tn+E6DvSLei7pQKIYy3eOfn2nHQlmhAgaXy0vnJtHvyP+FfuJrhBgCnjSqC61 4kZSZibGUV/73U0ZmCVIyArbswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAivM9F 043/y9HXuLlnC2nc5VNBMB8GA1UdIwQYMBaAFNpulBzb/gGq7gkbP5VZXW1AGDFt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMkVCRC8zMTIwMDY1RUJD NUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFhcnVDUnNfbFZsZGJVQVlN VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJtNlVITnYtQWFydUNSc19sVmxkYlVBWU1XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MkVCRC8zMTIwMDY1RUJDNUExMUVCOEUxRDkyNThDNEY5QUUwMi8ybTZVSE52LUFh cnVDUnNfbFZsZGJVQVlNVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH41m+mqRsnLHlO90sqrWRHUKVRwdh/WEC3VIq/hqtNXuM16FJqn7O C9CyW7qcqYK7ekd3Av/TKpLMAV+ogzFuwPjGbhorUzS2pyPqJSNgrkdhU7jS+Y0C yvBvGEgSrbifQ/LtW+G8dw3atHBJ+s3W/SEb/rVYZ0CE00f4zB/jDXP0eZ7iTeoI oZbnEx4fm8EzCC1mTFkezS6ihc+R7ELYQcpi5LF08j/Oc13x7RsdONfeVEGDyL1o Mc9A9omK65a25a56K/mqFr0tMa4i+kwyGS1517DGyhVQDPzQ8pyUWjtmOUxKiw0R 6y3lji/zvka3LhZKGVc0anVuGq56zrFu -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:02 2025 by rpki-client