$ rpki-client -vvf rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft File: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft (raw, json) Hash identifier: FodM7q4j1frAEfMnSmty+07WegxWv8txk8Dj7tG62tI= Subject key identifier: 0E:9B:E1:2C:A1:BA:F0:6F:26:75:DB:FE:48:2B:B0:AF:5E:62:AB:9F Authority key identifier: D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 Certificate issuer: /CN=A91610DD/serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Certificate serial: 9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft Manifest number: 99 Signing time: Tue 15 Apr 2025 05:10:14 +0000 Manifest this update: Tue 15 Apr 2025 05:10:13 +0000 Manifest next update: Tue 22 Apr 2025 05:10:13 +0000 Files and hashes: 1: 2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl (hash: 8Rl08Ek82RLbKe5GBSj4F+Hw4krwnF92VSKrJQWbayQ=) 2: 5E9461285DB711EF8AB66F0EC4F9AE02.roa (hash: CBgoWvrmHvyFdXC0BLyQHHm9awpAM5FPWyknUbzVkgo=) 3: 40BC278038EB11EF9AD66E7FC4F9AE02.roa (hash: r+E4tv3uimhBOzrNZaN5fn8Ync8wrwOD2GgwaX3Fu0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91610DD, serialNumber=D8BD676518366034B888848B3B5718FA9070E192 Validity Not Before: Apr 15 05:10:13 2025 GMT Not After : Apr 22 05:10:13 2025 GMT Subject: CN=67fdea36-3d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7c:6e:61:0f:45:d9:d7:9b:ce:25:3a:40:79: 95:6a:d8:38:88:d7:67:51:af:17:64:74:b2:e1:99: 87:b4:85:87:82:19:3d:4a:31:18:a1:58:12:61:34: 41:64:44:fd:04:53:99:03:16:03:6c:48:7e:a1:00: 9b:58:e3:8a:48:8a:41:41:30:96:0d:e0:03:09:fa: e6:b1:64:1c:76:fd:f0:58:bb:19:1a:cd:f0:63:15: c6:b4:31:8a:44:a6:10:a8:c9:52:65:63:bb:f4:bd: 17:7a:82:d4:9c:9d:da:6f:35:b0:a1:27:93:1c:9f: e4:b3:f6:ef:25:0a:8c:00:cf:12:3a:69:b0:a9:52: 5b:6f:69:a1:70:56:45:aa:13:e0:23:2a:c7:8e:ed: 6f:8a:8b:b1:bc:bf:fd:31:33:fd:ec:32:9b:3f:17: bb:f2:40:b6:64:0b:60:dd:dc:5c:b9:66:dd:ea:2e: f0:fc:60:82:db:54:54:4e:17:12:7e:6d:75:23:88: 7b:48:fd:f0:e2:a0:b3:8e:33:a3:aa:53:11:e4:30: 80:71:45:5e:cc:b6:6c:41:69:08:19:c2:ab:69:62: 3f:57:13:1f:65:3f:b3:96:07:25:a1:e8:a0:ed:d6: b4:4c:dc:c5:8c:8c:cf:4e:84:f3:2c:fc:3b:9a:81: 5f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:9B:E1:2C:A1:BA:F0:6F:26:75:DB:FE:48:2B:B0:AF:5E:62:AB:9F X509v3 Authority Key Identifier: keyid:D8:BD:67:65:18:36:60:34:B8:88:84:8B:3B:57:18:FA:90:70:E1:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L1nZRg2YDS4iISLO1cY-pBw4ZI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91610DD/656324F438EA11EFB0FB217DC4F9AE02/2L1nZRg2YDS4iISLO1cY-pBw4ZI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:a5:6b:66:23:69:da:5a:23:0c:20:0c:86:39:0e:00:3f:96: e7:19:d1:00:1e:d1:7b:e5:d4:94:d5:59:e1:01:35:2d:7d:ea: b4:75:00:be:87:6c:35:5e:f1:65:5c:f8:d9:63:17:79:6f:8b: 46:36:86:f4:01:61:1b:4f:9f:e4:c5:f8:2d:61:bf:62:15:1d: bf:26:ab:be:be:45:e9:06:10:b8:fd:7f:f6:7c:0a:c5:18:94: fc:1c:a5:6b:26:1f:6c:93:0b:bf:6f:00:1e:5c:59:04:c7:d3: 79:12:1f:72:99:34:63:cb:8a:4f:13:6c:ed:b4:8f:91:36:7d: be:19:08:23:b0:c1:30:c8:98:87:7a:33:9b:ab:32:4e:e7:e6: 63:60:ae:af:7c:6d:de:67:24:f6:9d:21:8a:58:a4:66:3b:60: b8:8f:65:9b:41:23:2f:c5:fc:bd:ce:3c:9d:18:27:5e:71:e4: 67:53:be:7b:36:ce:f9:bc:e2:d0:37:6d:b5:fb:db:5f:6d:26: a7:02:34:a0:23:88:fa:9b:12:ac:12:6f:81:15:18:c3:f8:ee: 59:01:22:68:44:d2:50:d8:81:0c:2e:5e:6e:64:86:eb:b0:7c: 48:9a:34:a2:0a:0e:4d:bb:2c:71:1d:f9:ac:06:6e:3c:de:a1: 18:24:fb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEwREQxMTAvBgNVBAUTKEQ4QkQ2NzY1MTgzNjYwMzRCODg4ODQ4QjNCNTcxOEZB OTA3MEUxOTIwHhcNMjUwNDE1MDUxMDEzWhcNMjUwNDIyMDUxMDEzWjAYMRYwFAYD VQQDEw02N2ZkZWEzNi0zZDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7XxuYQ9F2debziU6QHmVatg4iNdnUa8XZHSy4ZmHtIWHghk9SjEYoVgSYTRB ZET9BFOZAxYDbEh+oQCbWOOKSIpBQTCWDeADCfrmsWQcdv3wWLsZGs3wYxXGtDGK RKYQqMlSZWO79L0XeoLUnJ3abzWwoSeTHJ/ks/bvJQqMAM8SOmmwqVJbb2mhcFZF qhPgIyrHju1viouxvL/9MTP97DKbPxe78kC2ZAtg3dxcuWbd6i7w/GCC21RUThcS fm11I4h7SP3w4qCzjjOjqlMR5DCAcUVezLZsQWkIGcKraWI/VxMfZT+zlgcloeig 7da0TNzFjIzPToTzLPw7moFfbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6b4Syh uvBvJnXb/kgrsK9eYqufMB8GA1UdIwQYMBaAFNi9Z2UYNmA0uIiEiztXGPqQcOGS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTBERC82NTYzMjRGNDM4 RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllEUzRpSVNMTzFjWS1wQnc0 WkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJMMW5aUmcyWURTNGlJU0xPMWNZLXBCdzRaSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTBERC82NTYzMjRGNDM4RUExMUVGQjBGQjIxN0RDNEY5QUUwMi8yTDFuWlJnMllE UzRpSVNMTzFjWS1wQnc0WkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3pWtmI2naWiMMIAyGOQ4AP5bnGdEAHtF75dSU1VnhATUtfeq0dQC+ h2w1XvFlXPjZYxd5b4tGNob0AWEbT5/kxfgtYb9iFR2/Jqu+vkXpBhC4/X/2fArF GJT8HKVrJh9skwu/bwAeXFkEx9N5Eh9ymTRjy4pPE2zttI+RNn2+GQgjsMEwyJiH ejObqzJO5+ZjYK6vfG3eZyT2nSGKWKRmO2C4j2WbQSMvxfy9zjydGCdeceRnU757 Ns75vOLQN221+9tfbSanAjSgI4j6mxKsEm+BFRjD+O5ZASJoRNJQ2IEMLl5uZIbr sHxImjSiCg5NuyxxHfmsBm483qEYJPt5 -----END CERTIFICATE-----Generated at Wed Apr 16 17:15:22 2025 by rpki-client