$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft File: Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft (raw, json) Hash identifier: k6dnO2X2ilm9TEBrehKBc/ObQj70wnl+3HS2Z8dsARY= Subject key identifier: AB:6D:22:95:57:C4:3F:13:14:AF:A1:17:54:FF:8F:EE:43:CC:4B:6E Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32 Certificate serial: 0FBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft Manifest number: 0F9C Signing time: Fri 04 Apr 2025 17:40:15 +0000 Manifest this update: Fri 04 Apr 2025 17:40:14 +0000 Manifest next update: Fri 11 Apr 2025 17:40:14 +0000 Files and hashes: 1: Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl (hash: 6A9SWin/t51s4bGm0lR1EBAVV74n4dt+Nqnvx1Y/TxU=) 2: 3F711060480611EE85A1BA0AC4F9AE02.roa (hash: lYO2r5iWYbPTGOu5MIGcMgAx1AviAoJ2otKYHZWrBDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4029 (0xfbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C432 Validity Not Before: Apr 4 17:40:14 2025 GMT Not After : Apr 11 17:40:14 2025 GMT Subject: CN=67f0197e-a39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:58:20:ad:90:ed:bc:c9:24:1d:d5:bd:1b:4a: fa:73:5d:95:24:46:7c:37:1e:e3:44:2e:14:9d:27: 38:b7:64:a8:b0:81:91:05:85:2f:61:3b:44:92:ae: 6c:6b:d8:6b:ad:71:c3:3c:e1:30:ee:0b:cf:be:38: 29:41:b6:d6:9e:63:b5:41:45:f9:8d:7c:3e:c4:68: e3:b0:9d:56:16:a6:f5:7e:f3:b2:37:a1:33:cf:71: a4:79:3e:23:4a:18:58:0b:da:93:ec:45:80:3e:0a: 0e:e7:a8:78:33:62:c4:2d:7a:bb:42:c7:d0:76:b4: b6:89:26:7c:e5:b3:bb:c2:c1:9a:9d:e6:e6:1f:59: c8:71:78:54:96:57:3b:01:99:40:78:53:fa:16:fd: c1:46:f9:80:be:ec:9f:e9:06:70:33:1b:c8:f3:d6: 59:3e:45:8a:e8:d5:f0:1f:3b:0e:e2:f5:77:2b:fd: 25:a2:06:00:2d:62:38:4c:8b:4a:48:70:76:a0:31: 0e:3b:41:43:63:a2:8e:68:29:88:83:79:2c:ca:82: cf:3f:07:1f:fd:94:ab:3e:cc:b9:59:b5:1a:76:bf: a2:53:9f:4e:f1:78:82:c7:d4:ab:d7:5c:81:41:9e: 2f:af:1d:24:8d:84:c3:2c:12:02:a4:14:b7:ba:18: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6D:22:95:57:C4:3F:13:14:AF:A1:17:54:FF:8F:EE:43:CC:4B:6E X509v3 Authority Key Identifier: keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:43:4f:61:ba:cd:69:b4:43:40:39:d9:71:9e:e7:b9:82:f9: 6a:08:8e:6e:43:84:91:a4:cf:37:f7:22:0e:d1:75:ab:cd:0a: 6b:6a:36:a7:d6:80:1b:47:68:4d:c5:7f:02:2b:a8:27:af:18: cd:1b:9f:b4:9c:58:b9:ec:72:41:31:6c:62:54:f2:35:c3:90: be:7a:e2:5f:0d:d9:38:56:41:0e:36:fb:e7:57:0a:92:6b:1c: 55:9a:c6:9e:ad:26:1b:3d:cb:bf:c5:bf:a4:f4:52:19:04:72: f7:a1:00:e2:1f:70:06:03:46:6c:de:87:4e:55:42:c5:ec:58: 5e:03:27:4d:f7:4c:b6:80:97:d1:07:03:15:5f:13:0e:35:d5: ee:ac:59:a6:64:78:0e:11:88:2e:6d:44:6d:5d:55:b9:c6:5d: 1b:28:6c:09:05:ee:f4:77:66:32:c0:08:9f:3c:0d:4b:0e:41: 25:cf:13:fe:17:33:5f:4f:98:f1:c5:00:da:84:e7:b5:d5:52: cc:23:ee:3e:ec:44:b1:27:ac:52:09:a7:6a:2e:77:3c:37:4b: be:d9:f1:fd:7b:95:8a:6f:11:a3:64:04:d7:55:3c:1a:22:50: ea:4a:d7:f3:f6:92:bd:5b:77:d2:6b:8c:fa:05:ad:e9:6f:29: 5a:fe:ca:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB NjBDQjlBMzIwHhcNMjUwNDA0MTc0MDE0WhcNMjUwNDExMTc0MDE0WjAYMRYwFAYD VQQDEw02N2YwMTk3ZS1hMzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1ggrZDtvMkkHdW9G0r6c12VJEZ8Nx7jRC4UnSc4t2SosIGRBYUvYTtEkq5s a9hrrXHDPOEw7gvPvjgpQbbWnmO1QUX5jXw+xGjjsJ1WFqb1fvOyN6Ezz3GkeT4j ShhYC9qT7EWAPgoO56h4M2LELXq7QsfQdrS2iSZ85bO7wsGanebmH1nIcXhUllc7 AZlAeFP6Fv3BRvmAvuyf6QZwMxvI89ZZPkWK6NXwHzsO4vV3K/0logYALWI4TItK SHB2oDEOO0FDY6KOaCmIg3ksyoLPPwcf/ZSrPsy5WbUadr+iU59O8XiCx9Sr11yB QZ4vrx0kjYTDLBICpBS3uhg87QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKttIpVX xD8TFK+hF1T/j+5DzEtuMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzQzMi8yRENBQkE2ODVDRjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIx RkppbF9LVThoZHFtRExtakkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyQ09hus1ptENAOdlxnue5gvlqCI5uQ4SRpM839yIO0XWrzQprajan 1oAbR2hNxX8CK6gnrxjNG5+0nFi57HJBMWxiVPI1w5C+euJfDdk4VkEONvvnVwqS axxVmsaerSYbPcu/xb+k9FIZBHL3oQDiH3AGA0Zs3odOVULF7FheAydN90y2gJfR BwMVXxMONdXurFmmZHgOEYgubURtXVW5xl0bKGwJBe70d2YywAifPA1LDkElzxP+ FzNfT5jxxQDahOe11VLMI+4+7ESxJ6xSCadqLnc8N0u+2fH9e5WKbxGjZATXVTwa IlDqStfz9pK9W3fSa4z6Ba3pbyla/sqn -----END CERTIFICATE-----Generated at Fri Apr 4 22:24:56 2025 by rpki-client