$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft File: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft (raw, json) Hash identifier: M7ZEiiZFyAgT8d5KEdpe+3UklwZG6OCIXP6KtNpke0U= Subject key identifier: AD:CF:EE:86:3E:CD:FC:D5:66:BD:CE:33:F8:54:D3:F7:BD:E8:31:6D Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C Certificate issuer: /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft Manifest number: 0D Signing time: Sat 05 Apr 2025 07:24:30 +0000 Manifest this update: Sat 05 Apr 2025 07:24:30 +0000 Manifest next update: Sat 12 Apr 2025 07:24:30 +0000 Files and hashes: 1: 2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl (hash: 117cw7E+TyaOm13XXq//OgDzsiVEuv1i24qRoiw4cOY=) 2: 69AF571603F211F09BC45354C4F9AE02.roa (hash: nN3j+w7rACDpnsAZEw+b0JxCXf8pA/ucgK4YVC62zqE=) 3: C0FB557E03F211F08D0A9566C4F9AE02.roa (hash: Dlt7c62t0hDVUYoo7gZi00Rxaa3RUeJ2v+Dxv4EEGtE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915201D Validity Not Before: Apr 5 07:24:30 2025 GMT Not After : Apr 12 07:24:30 2025 GMT Subject: CN=67f0daae-64a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:16:24:59:21:80:6b:0a:f7:35:82:88:9f:46: 27:ee:47:0f:44:9c:2e:5d:e8:21:4c:94:4d:78:e7: 5f:5d:3b:a0:49:de:c4:41:e8:14:74:48:8c:ba:17: b8:1c:2c:0f:4f:19:45:8b:5d:ce:11:07:d6:3e:6f: bb:64:8b:76:d8:25:44:a7:17:98:ee:29:31:5f:48: 92:7a:01:d9:d6:e7:16:3b:d9:d2:b2:82:c0:a6:1c: 9a:9b:04:c7:f9:f5:20:a1:58:24:e7:78:e9:82:0f: 60:5a:72:71:cc:2f:31:62:69:77:28:99:a6:12:61: 51:fd:e0:7e:d9:29:05:0b:8f:96:d0:14:d9:86:80: c7:1a:d4:c8:e1:d0:d0:d5:c6:57:2e:ca:13:51:48: 5d:61:48:08:64:28:09:e2:e0:cd:fe:fd:dd:eb:e9: d5:7e:49:4e:22:92:ea:2c:50:e9:90:6f:1b:16:27: bd:46:74:80:16:ba:e6:d4:4b:b0:51:7e:29:b1:55: 5e:bf:da:e6:25:6c:4c:8f:f9:d6:0c:56:94:2c:4c: aa:96:f0:c1:af:0e:4c:c0:21:21:55:ab:dd:c3:9c: 4f:8a:0b:66:67:70:13:10:45:b3:10:ad:6c:59:fe: 3b:ce:25:9d:21:c2:aa:ac:24:f2:a0:38:2f:09:c6: f8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CF:EE:86:3E:CD:FC:D5:66:BD:CE:33:F8:54:D3:F7:BD:E8:31:6D X509v3 Authority Key Identifier: keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:df:0d:d4:58:c4:14:bb:59:ab:3f:7e:8a:01:82:8e:19:cc: 25:cc:92:f2:90:4d:26:b8:a8:15:4a:26:64:cb:3c:92:d1:56: 97:ff:55:88:f4:23:3e:eb:29:c3:e1:61:0f:7c:ca:2d:b5:7e: 81:79:cf:ce:39:a3:e5:25:9c:61:78:25:12:7c:a5:6a:f8:a9: 86:91:5a:c0:b0:26:bd:70:f3:b1:12:b9:d4:e8:b6:ea:a7:12: ff:78:9b:65:9f:37:90:14:76:95:cd:17:8c:ee:17:15:28:fa: 2d:c5:de:3e:9d:2f:62:a0:74:63:d0:d8:2c:c7:9a:e1:37:18: 83:57:98:dc:6d:b8:1e:82:e3:60:84:b9:8a:36:03:9b:9f:26: d7:3f:23:86:04:42:77:d1:0a:4c:b1:4e:02:5c:83:9a:c0:7d: 0d:4d:3f:88:d5:79:4d:b0:75:05:51:69:c0:90:a6:37:f0:13: 8b:40:3f:21:f3:f9:1e:0a:23:ec:fe:c3:f9:6a:fb:da:2c:89: e0:26:5c:65:f9:6c:19:2d:27:fb:ef:cf:d9:ea:78:e4:df:e7: c6:3e:a3:2d:77:b4:f4:04:f2:22:93:f0:36:bf:83:e8:45:57: 84:0d:56:09:8e:fd:87:50:43:a6:0c:1f:7e:d7:58:b6:20:be: a8:a3:94:4a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MjAxRDExMC8GA1UEBRMoREIxQjk2RTA1QTk4RDgyOEJGNTdFQTBBNzE1NUFGMUQz MzIyM0UyQzAeFw0yNTA0MDUwNzI0MzBaFw0yNTA0MTIwNzI0MzBaMBgxFjAUBgNV BAMTDTY3ZjBkYWFlLTY0YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkFiRZIYBrCvc1goifRifuRw9EnC5d6CFMlE14519dO6BJ3sRB6BR0SIy6F7gc LA9PGUWLXc4RB9Y+b7tki3bYJUSnF5juKTFfSJJ6AdnW5xY72dKygsCmHJqbBMf5 9SChWCTneOmCD2BacnHMLzFiaXcomaYSYVH94H7ZKQULj5bQFNmGgMca1Mjh0NDV xlcuyhNRSF1hSAhkKAni4M3+/d3r6dV+SU4ikuosUOmQbxsWJ71GdIAWuubUS7BR fimxVV6/2uYlbEyP+dYMVpQsTKqW8MGvDkzAISFVq93DnE+KC2ZncBMQRbMQrWxZ /jvOJZ0hwqqsJPKgOC8Jxvj9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrc/uhj7N /NVmvc4z+FTT973oMW0wHwYDVR0jBBgwFoAU2xuW4FqY2Ci/V+oKcVWvHTMiPiww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyMDFELzg1QjhDMjkwMDNG MTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNpX1Ytb0tjVld2SFRNaVBp dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnh1VzRGcVkyQ2lfVi1vS2NWV3ZIVE1pUGl3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy MDFELzg1QjhDMjkwMDNGMTExRjBBQjg1RUM1MkM0RjlBRTAyLzJ4dVc0RnFZMkNp X1Ytb0tjVld2SFRNaVBpdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC/fDdRYxBS7Was/fooBgo4ZzCXMkvKQTSa4qBVKJmTLPJLRVpf/VYj0 Iz7rKcPhYQ98yi21foF5z845o+UlnGF4JRJ8pWr4qYaRWsCwJr1w87ESudTotuqn Ev94m2WfN5AUdpXNF4zuFxUo+i3F3j6dL2KgdGPQ2CzHmuE3GINXmNxtuB6C42CE uYo2A5ufJtc/I4YEQnfRCkyxTgJcg5rAfQ1NP4jVeU2wdQVRacCQpjfwE4tAPyHz +R4KI+z+w/lq+9osieAmXGX5bBktJ/vvz9nqeOTf58Y+oy13tPQE8iKT8Da/g+hF V4QNVgmO/YdQQ6YMH37XWLYgvqijlEo= -----END CERTIFICATE-----Generated at Sat Apr 5 13:14:52 2025 by rpki-client