$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft File: R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json) Hash identifier: 2aQ/Ra1m2tnsrXZnWHc2ao/exmCe5kkBBq1sNDl7TUQ= Subject key identifier: FF:69:CC:27:06:6F:DF:6A:52:02:AB:B6:4F:71:91:64:CF:42:98:B9 Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 Certificate issuer: /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft Manifest number: 018E Signing time: Mon 21 Apr 2025 02:33:08 +0000 Manifest this update: Mon 21 Apr 2025 02:33:08 +0000 Manifest next update: Mon 28 Apr 2025 02:33:08 +0000 Files and hashes: 1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: kNpTJcTFxUZTKvpCrbbVfSa8TNZLCEo5LH951hi3d/8=) 2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: YyW2MZscKA/3QJ0o9lXLLeVy1S1F2mX9Ri00sryZxdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 02:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123 Validity Not Before: Apr 21 02:33:08 2025 GMT Not After : Apr 28 02:33:08 2025 GMT Subject: CN=6805ae64-acf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:dc:81:25:5d:10:fa:4f:ac:41:bd:aa:6c: 67:e6:ee:e7:ea:e7:4c:73:d0:65:bc:5e:97:22:5a: 7e:df:64:2d:da:34:59:07:6d:6b:af:0b:7b:45:64: 65:41:d7:05:d6:0c:6f:d1:e5:23:ff:bf:25:ef:c7: d9:10:33:be:90:86:82:28:65:0e:9c:b8:73:27:91: 7b:73:34:15:72:d9:e0:98:2b:22:6a:81:72:f3:d2: 8e:1d:06:92:49:ec:3a:d3:6d:8d:95:70:2c:73:ef: 5b:51:e1:a1:aa:bb:8c:df:df:25:3d:21:2c:85:fe: 06:30:57:aa:02:e0:38:74:0d:09:31:44:2b:23:85: c6:cc:94:68:1a:6b:00:c5:f2:83:26:de:44:c1:22: 87:1d:02:2a:19:45:d9:24:e1:c3:24:98:05:df:c3: 7a:24:25:93:af:13:fe:aa:e0:9f:e6:83:e8:e2:40: 1f:49:cd:6f:24:c9:f4:22:78:04:c3:ee:9b:19:cf: b2:17:97:e4:ac:2b:16:b4:ec:af:b5:9c:03:5a:11: a6:af:71:63:ec:bf:49:f2:10:1b:ff:72:6f:7f:b1: 0a:0b:7a:64:cc:36:ac:15:c7:4e:d3:0b:6b:19:ae: fb:23:ea:76:1c:8c:60:b0:75:04:32:24:e0:0c:c8: 64:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:69:CC:27:06:6F:DF:6A:52:02:AB:B6:4F:71:91:64:CF:42:98:B9 X509v3 Authority Key Identifier: keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:10:14:02:cb:70:4f:c2:f7:7b:8b:c2:6e:16:97:45:ff:28: d7:99:75:54:c4:78:aa:3c:db:87:5f:9d:fc:72:1b:ca:7a:3c: 68:58:7d:71:59:43:9c:4f:53:43:1b:9a:5f:b2:3d:18:9c:97: b6:3e:29:d0:36:d1:ae:67:e0:11:9c:1d:0d:02:77:64:71:48: 6b:04:53:ca:7c:cd:d7:7e:b4:5d:40:bd:f8:20:e3:07:11:4c: c9:2c:89:41:91:2b:3b:76:39:63:c4:75:fe:d5:fc:ed:5a:29: ab:a8:7c:e8:d0:00:55:74:da:35:98:b6:ac:e0:04:34:bd:0b: a8:a2:9a:a8:a6:26:d1:14:db:fc:70:75:35:a6:0d:92:10:4c: 82:0e:e9:0a:f8:90:7d:47:16:88:5e:78:ef:63:53:ab:02:84: 93:4c:d9:c4:b2:00:1e:37:8b:02:e9:b4:c2:39:ed:1e:7d:d0: c5:92:76:3f:e3:70:95:b8:70:24:08:b8:2a:ff:75:31:fb:0f: b6:6d:17:1c:82:2d:92:29:3a:28:68:60:d0:0c:32:2e:00:d4: d4:bc:d4:61:73:02:45:71:84:ea:03:5e:90:f6:ff:3e:ff:2e: 37:ad:33:40:e7:48:7d:e5:a1:1c:0c:12:8c:4b:63:d6:ab:87: 93:7e:88:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0 OEJCOUUxMjMwHhcNMjUwNDIxMDIzMzA4WhcNMjUwNDI4MDIzMzA4WjAYMRYwFAYD VQQDEw02ODA1YWU2NC1hY2YyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01ncgSVdEPpPrEG9qmxn5u7n6udMc9BlvF6XIlp+32Qt2jRZB21rrwt7RWRl QdcF1gxv0eUj/78l78fZEDO+kIaCKGUOnLhzJ5F7czQVctngmCsiaoFy89KOHQaS Sew6022NlXAsc+9bUeGhqruM398lPSEshf4GMFeqAuA4dA0JMUQrI4XGzJRoGmsA xfKDJt5EwSKHHQIqGUXZJOHDJJgF38N6JCWTrxP+quCf5oPo4kAfSc1vJMn0IngE w+6bGc+yF5fkrCsWtOyvtZwDWhGmr3Fj7L9J8hAb/3Jvf7EKC3pkzDasFcdO0wtr Ga77I+p2HIxgsHUEMiTgDMhktwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9pzCcG b99qUgKrtk9xkWTPQpi5MB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4 MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPEBQCy3BPwvd7i8JuFpdF/yjXmXVUxHiqPNuHX538chvKejxoWH1x WUOcT1NDG5pfsj0YnJe2PinQNtGuZ+ARnB0NAndkcUhrBFPKfM3XfrRdQL34IOMH EUzJLIlBkSs7djljxHX+1fztWimrqHzo0ABVdNo1mLas4AQ0vQuoopqopibRFNv8 cHU1pg2SEEyCDukK+JB9RxaIXnjvY1OrAoSTTNnEsgAeN4sC6bTCOe0efdDFknY/ 43CVuHAkCLgq/3Ux+w+2bRccgi2SKTooaGDQDDIuANTUvNRhcwJFcYTqA16Q9v8+ /y43rTNA50h95aEcDBKMS2PWq4eTfoiy -----END CERTIFICATE-----Generated at Tue Apr 22 03:28:58 2025 by rpki-client