$ rpki-client -vvf rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft File: 2zfNKCxsfbw6kLEDt6I53NFY_2A.mft (raw, json) Hash identifier: QXxbf7C7aDS3D7SpQkyRpXGm5TZPHrharnI9zKTBTJQ= Subject key identifier: E8:04:C9:2E:47:AA:A2:39:DA:C1:09:7D:B7:CC:D5:8F:DC:AC:D5:AC Authority key identifier: DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 Certificate issuer: /CN=A913E652/serialNumber=DB37CD282C6C7DBC3A90B103B7A239DCD158FF60 Certificate serial: 08AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft Manifest number: 08A7 Signing time: Fri 28 Mar 2025 20:48:14 +0000 Manifest this update: Fri 28 Mar 2025 20:48:14 +0000 Manifest next update: Fri 04 Apr 2025 20:48:14 +0000 Files and hashes: 1: 2zfNKCxsfbw6kLEDt6I53NFY_2A.crl (hash: /ywdrMj9v5Y7g1g3l84mf1ElPH4abAEffa4bbIk9f2s=) 2: 6154A3B0B2B611EAA5884016C4F9AE02.roa (hash: v6eXZmLrZttsFYphww5DwQSaxSYNhoXZnZd8akGhwqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 20:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2221 (0x8ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E652 Validity Not Before: Mar 28 20:48:14 2025 GMT Not After : Apr 4 20:48:14 2025 GMT Subject: CN=67e70b0e-87fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bc:87:c8:2f:f9:06:ac:10:a9:fc:b3:e1:00: 0f:45:07:c9:bc:6c:89:da:94:8c:1d:d7:9a:07:35: a3:f7:ad:7e:c4:6b:96:88:a6:cb:42:c5:2d:9a:3a: 07:8a:75:3f:d1:94:f7:8a:f7:be:89:fe:36:fd:7e: a4:4c:be:92:8c:8a:c6:5d:84:85:d2:84:80:68:cf: 8a:5b:67:0b:60:a1:22:24:6c:6a:a1:63:ef:80:e8: 3d:7d:17:ab:e6:da:72:e1:89:ed:01:71:13:d3:6a: a6:5f:85:91:e7:89:9f:94:8b:d5:cf:84:2d:74:aa: 04:60:21:13:51:80:55:72:e7:cc:8d:5c:48:2f:4a: e4:57:78:8d:51:68:89:fb:d1:bf:f9:a6:bd:1b:bc: ff:f0:fa:ba:0e:62:60:af:97:9b:95:84:8a:60:5b: 26:1e:5f:5f:67:fd:12:ab:1f:fd:db:e9:94:00:30: 38:a3:eb:62:53:b1:4e:5d:b7:9b:0b:4d:9d:f4:fc: 58:37:30:d1:51:d9:1e:52:23:1a:50:45:ed:69:28: 8f:83:df:79:31:1b:85:16:2c:6d:ea:f2:ef:f1:ef: 34:34:37:d2:1c:fc:fc:4e:a0:4e:b0:88:e3:78:42: 7c:40:a8:45:55:ba:a8:56:2a:d4:ab:bb:6c:76:f7: 1e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:04:C9:2E:47:AA:A2:39:DA:C1:09:7D:B7:CC:D5:8F:DC:AC:D5:AC X509v3 Authority Key Identifier: keyid:DB:37:CD:28:2C:6C:7D:BC:3A:90:B1:03:B7:A2:39:DC:D1:58:FF:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zfNKCxsfbw6kLEDt6I53NFY_2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E652/600AB464B2B511EA8ADC4415C4F9AE02/2zfNKCxsfbw6kLEDt6I53NFY_2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:99:b4:a9:09:e5:97:28:05:31:89:fe:ba:fe:61:4f:bc:50: 70:1e:ad:7b:79:2a:87:21:5c:ff:a5:74:f8:30:32:7f:64:0b: 16:9c:da:6f:47:a0:41:f7:df:2b:3c:ca:96:71:4d:f9:0a:ba: 08:ed:65:e1:b7:4b:91:0f:dc:48:dc:dc:19:81:16:01:af:65: 6a:be:00:2b:0a:35:5e:d5:21:20:ac:4d:f4:04:aa:a2:89:12: ad:a2:5f:18:c1:70:f4:d5:46:e9:70:9d:ba:e3:92:b1:3c:cf: 06:d1:62:ff:be:00:01:ca:45:b1:ba:b8:c9:93:00:31:5f:b0: 98:d9:d3:66:27:a1:14:50:1d:9b:74:c3:5d:2d:3d:e1:3b:cb: c8:e2:73:6b:1c:e3:5e:68:5d:32:53:8d:74:43:34:f3:2d:7c: 8e:73:be:c6:42:c4:e2:31:9c:5b:2d:38:7c:51:1d:f8:80:6b: 79:45:91:cc:28:b9:98:e8:7b:47:51:e4:03:1f:4d:3d:82:1f: 66:4e:b3:39:40:a7:c9:33:dd:f6:da:65:69:58:f1:78:76:69: 19:25:5f:c6:7b:62:89:2f:60:84:5d:ab:61:42:5e:fb:be:ac: 2f:e0:46:6a:32:9f:32:61:e9:e2:a9:c9:f0:56:4f:8a:ff:71: eb:f4:b9:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U2NTIxMTAvBgNVBAUTKERCMzdDRDI4MkM2QzdEQkMzQTkwQjEwM0I3QTIzOURD RDE1OEZGNjAwHhcNMjUwMzI4MjA0ODE0WhcNMjUwNDA0MjA0ODE0WjAYMRYwFAYD VQQDEw02N2U3MGIwZS04N2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbyHyC/5BqwQqfyz4QAPRQfJvGyJ2pSMHdeaBzWj961+xGuWiKbLQsUtmjoH inU/0ZT3ive+if42/X6kTL6SjIrGXYSF0oSAaM+KW2cLYKEiJGxqoWPvgOg9fRer 5tpy4YntAXET02qmX4WR54mflIvVz4QtdKoEYCETUYBVcufMjVxIL0rkV3iNUWiJ +9G/+aa9G7z/8Pq6DmJgr5eblYSKYFsmHl9fZ/0Sqx/92+mUADA4o+tiU7FOXbeb C02d9PxYNzDRUdkeUiMaUEXtaSiPg995MRuFFixt6vLv8e80NDfSHPz8TqBOsIjj eEJ8QKhFVbqoVirUq7tsdvceKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgEyS5H qqI52sEJfbfM1Y/crNWsMB8GA1UdIwQYMBaAFNs3zSgsbH28OpCxA7eiOdzRWP9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTY1Mi82MDBBQjQ2NEIy QjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2ZidzZrTEVEdDZJNTNORllf MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6Zk5LQ3hzZmJ3NmtMRUR0Nkk1M05GWV8yQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTY1Mi82MDBBQjQ2NEIyQjUxMUVBOEFEQzQ0MTVDNEY5QUUwMi8yemZOS0N4c2Zi dzZrTEVEdDZJNTNORllfMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3mbSpCeWXKAUxif66/mFPvFBwHq17eSqHIVz/pXT4MDJ/ZAsWnNpv R6BB998rPMqWcU35CroI7WXht0uRD9xI3NwZgRYBr2VqvgArCjVe1SEgrE30BKqi iRKtol8YwXD01UbpcJ2645KxPM8G0WL/vgABykWxurjJkwAxX7CY2dNmJ6EUUB2b dMNdLT3hO8vI4nNrHONeaF0yU410QzTzLXyOc77GQsTiMZxbLTh8UR34gGt5RZHM KLmY6HtHUeQDH009gh9mTrM5QKfJM9322mVpWPF4dmkZJV/Ge2KJL2CEXathQl77 vqwv4EZqMp8yYeniqcnwVk+K/3Hr9LlH -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:22 2025 by rpki-client