$ rpki-client -vvf rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft File: r2rjJbT4gONiBR58Pf3xuLKlqBU.mft (raw, json) Hash identifier: pNsyZmS10IiUhvGgyxdzmdwOrSXBM91C0JwUzUV4j+8= Subject key identifier: C6:C9:AB:7A:55:42:7E:0D:D1:3C:BE:77:EE:8C:90:F4:69:FD:63:DB Authority key identifier: AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 Certificate issuer: /CN=A91620ED/serialNumber=AF6AE325B4F880E362051E7C3DFDF1B8B2A5A815 Certificate serial: 2A20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft Manifest number: 29F5 Signing time: Sun 06 Apr 2025 15:33:26 +0000 Manifest this update: Sun 06 Apr 2025 15:33:26 +0000 Manifest next update: Sun 13 Apr 2025 15:33:26 +0000 Files and hashes: 1: r2rjJbT4gONiBR58Pf3xuLKlqBU.crl (hash: jLHT8ihgSa4Vp4CamkK4vQPvu2RXtxtpFuW2M9oiYd8=) 2: 2F70E1E0D4C711EB84791C0BC4F9AE02.roa (hash: WdR6tzxVJlgQPWFzda+lW5cSfxGnhLk6o3CvLl1F4hI=) 3: CDF2E51A092B11F08557BF1AC4F9AE02.roa (hash: tEdT0gGOO30e19uTOBLmJQuwtJcH3PIS/7KF3GqW/j0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 15:33:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10784 (0x2a20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91620ED Validity Not Before: Apr 6 15:33:26 2025 GMT Not After : Apr 13 15:33:26 2025 GMT Subject: CN=67f29ec6-a0e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:38:a3:12:37:e1:ae:f6:c7:64:d3:34:f7:89: 07:5b:88:2f:f8:f8:85:a0:8e:1f:c6:9c:72:30:74: 88:5e:39:ad:8c:47:e0:79:32:8c:52:5c:f5:fc:5c: 8e:74:6d:a4:ee:11:bc:71:29:f0:da:64:b0:15:a0: 6f:22:55:e6:6b:bc:ec:d6:bb:ed:c5:f0:ae:76:52: 05:8c:fc:ef:10:ec:45:a1:de:67:a3:15:42:6b:fd: eb:f0:16:d3:90:15:75:ad:58:5f:66:2b:70:5a:63: 5d:0a:04:3b:70:f6:03:17:a6:df:73:96:22:af:15: 3e:51:44:60:63:44:69:14:d5:32:8e:ef:43:0a:99: 25:69:fe:f8:bc:8a:4d:20:b7:69:0f:66:57:ec:32: 49:cd:cd:50:fc:8b:f8:7d:d9:fe:8d:99:49:02:f1: a5:b1:2b:05:62:48:cb:cb:37:c1:96:c1:94:72:9a: 23:f1:fa:ef:75:cd:f6:7b:31:bf:e9:e1:2f:31:74: af:01:fe:b0:8f:d6:30:cc:35:da:39:b3:f1:85:f2: 9f:1c:a1:a0:72:26:b6:dc:fc:f4:48:39:fb:ed:6a: 80:9f:37:a1:86:9c:28:c3:86:9f:4a:24:8e:c6:7f: c6:67:1d:81:d1:13:73:31:f6:3e:63:b5:2c:75:27: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C9:AB:7A:55:42:7E:0D:D1:3C:BE:77:EE:8C:90:F4:69:FD:63:DB X509v3 Authority Key Identifier: keyid:AF:6A:E3:25:B4:F8:80:E3:62:05:1E:7C:3D:FD:F1:B8:B2:A5:A8:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2rjJbT4gONiBR58Pf3xuLKlqBU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91620ED/E7E231E6370011E4B32BD06BC4F9AE02/r2rjJbT4gONiBR58Pf3xuLKlqBU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:c2:a3:0f:c5:ea:74:be:3f:fa:de:8e:cd:a8:59:fd:30:de: b5:2f:e0:0a:13:a6:a5:fc:f5:4f:b3:d7:05:11:c5:29:3c:cf: f7:8c:74:2e:2c:60:12:75:f5:29:e1:bf:e9:d5:9b:db:58:a9: e0:72:77:fb:f9:6f:29:a9:0e:df:5a:4b:b9:e8:55:7b:9d:ad: b0:03:f5:45:7a:38:d4:6e:e2:68:a2:4b:93:79:63:95:02:18: 38:93:28:a8:53:4b:b5:d1:53:19:02:7d:70:df:b5:ec:fe:33: e3:bd:73:45:91:71:23:aa:98:08:59:40:dd:89:16:af:e0:13: 34:40:f8:f1:59:3c:d2:b3:d6:09:7f:72:9e:56:48:36:88:f6: 40:29:66:d6:57:4d:eb:7c:40:ea:fc:3c:10:1f:99:f1:bf:c4: 8b:40:90:00:b2:ea:16:4c:fb:82:7d:f0:12:c0:36:d2:0e:5e: 4c:37:02:b3:5e:45:6c:7b:b9:c9:48:27:39:22:b5:ae:5f:24: 3b:90:30:a9:75:14:45:8b:8f:7b:86:a6:cc:7d:d5:04:59:44: 8b:9e:36:b1:ee:40:52:24:17:a8:d1:6b:ba:13:cf:a3:e6:a1: 66:14:8f:ab:76:c3:e4:5b:35:66:55:54:49:94:a9:6a:2f:49: 6a:db:61:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjIwRUQxMTAvBgNVBAUTKEFGNkFFMzI1QjRGODgwRTM2MjA1MUU3QzNERkRGMUI4 QjJBNUE4MTUwHhcNMjUwNDA2MTUzMzI2WhcNMjUwNDEzMTUzMzI2WjAYMRYwFAYD VQQDEw02N2YyOWVjNi1hMGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zijEjfhrvbHZNM094kHW4gv+PiFoI4fxpxyMHSIXjmtjEfgeTKMUlz1/FyO dG2k7hG8cSnw2mSwFaBvIlXma7zs1rvtxfCudlIFjPzvEOxFod5noxVCa/3r8BbT kBV1rVhfZitwWmNdCgQ7cPYDF6bfc5YirxU+UURgY0RpFNUyju9DCpklaf74vIpN ILdpD2ZX7DJJzc1Q/Iv4fdn+jZlJAvGlsSsFYkjLyzfBlsGUcpoj8frvdc32ezG/ 6eEvMXSvAf6wj9YwzDXaObPxhfKfHKGgcia23Pz0SDn77WqAnzehhpwow4afSiSO xn/GZx2B0RNzMfY+Y7UsdSeiXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbJq3pV Qn4N0Ty+d+6MkPRp/WPbMB8GA1UdIwQYMBaAFK9q4yW0+IDjYgUefD398biypagV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjBFRC9FN0UyMzFFNjM3 MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdPTmlCUjU4UGYzeHVMS2xx QlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3IycmpKYlQ0Z09OaUJSNThQZjN4dUxLbHFCVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjBFRC9FN0UyMzFFNjM3MDAxMUU0QjMyQkQwNkJDNEY5QUUwMi9yMnJqSmJUNGdP TmlCUjU4UGYzeHVMS2xxQlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBwqMPxep0vj/63o7NqFn9MN61L+AKE6al/PVPs9cFEcUpPM/3jHQu LGASdfUp4b/p1ZvbWKngcnf7+W8pqQ7fWku56FV7na2wA/VFejjUbuJookuTeWOV Ahg4kyioU0u10VMZAn1w37Xs/jPjvXNFkXEjqpgIWUDdiRav4BM0QPjxWTzSs9YJ f3KeVkg2iPZAKWbWV03rfEDq/DwQH5nxv8SLQJAAsuoWTPuCffASwDbSDl5MNwKz XkVse7nJSCc5IrWuXyQ7kDCpdRRFi497hqbMfdUEWUSLnjax7kBSJBeo0Wu6E8+j 5qFmFI+rdsPkWzVmVVRJlKlqL0lq22Gx -----END CERTIFICATE-----Generated at Mon Apr 7 09:02:48 2025 by rpki-client