$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft File: _2gt-NRIZLNB2ct7bAZZv_qsycc.mft (raw, json) Hash identifier: cCVfxNZrr2+8vGfMOUi3eU+eY/jRHXwx07ARi7gYK50= Subject key identifier: 66:C4:7B:BF:6A:F6:22:C9:87:3D:9C:AD:58:96:84:4B:EE:2D:38:5A Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft Manifest number: 05E6 Signing time: Fri 04 Apr 2025 23:16:34 +0000 Manifest this update: Fri 04 Apr 2025 23:16:33 +0000 Manifest next update: Fri 11 Apr 2025 23:16:33 +0000 Files and hashes: 1: _2gt-NRIZLNB2ct7bAZZv_qsycc.crl (hash: dWDKee4pH4tNnEIw1vXzbrkZ6jyycBkmPmpRXPs1qu8=) 2: 7D58FFA4085511EFA3E44E39C4F9AE02.roa (hash: aiFrMbTQ8pa6qGrU9w8Y+h6k5VVyo8+mDWmigq+L7zE=) 3: 9739E6F4085511EF9BCE8F39C4F9AE02.roa (hash: c0qz4yTXbQVMbv7V1buw7n7Znsl9Aq3P8KISOSVpRBU=) 4: E42A8D9016CB11EF805A073EC4F9AE02.roa (hash: Z9UtxGMywolSmuS7YcA0xeqxqbWLcmS6X+rnBr+0aQk=) 5: 1F642722FE4811EF9909DE6BC4F9AE02.roa (hash: fjRhLXJJ0RIRM6lvLSAGF3CQKnVhdWMlfTQ4/IFRRV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1545 (0x609) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0 Validity Not Before: Apr 4 23:16:33 2025 GMT Not After : Apr 11 23:16:33 2025 GMT Subject: CN=67f06852-57cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:de:5d:4b:b2:e2:69:67:84:fd:03:82:08: 25:c4:5e:d8:9d:e6:39:00:8e:26:34:04:43:50:1d: 5a:91:7d:8f:53:cb:6c:36:6a:ac:c2:ad:33:5b:00: b2:cc:52:c6:30:c6:61:f8:74:a3:b1:00:33:ea:5d: e4:7b:d2:00:9c:d5:97:3d:3e:97:19:e7:32:a2:ed: e0:44:40:7e:62:d0:54:01:f9:35:b3:cb:50:25:93: 1f:ef:a0:27:06:24:d4:6f:40:49:7a:83:cb:d2:f9: cc:92:63:0d:d7:11:70:fa:2c:33:d9:e6:e2:5f:f1: 61:dc:b8:1e:46:d7:22:da:db:8f:0c:b3:69:da:9f: ed:fb:05:f3:cc:cb:c6:9b:29:dc:63:e3:06:96:5f: be:54:3d:91:3f:c2:d4:97:42:ca:df:ee:fe:32:28: 43:a0:20:b9:0e:84:72:7c:c0:33:1a:67:c3:9a:89: d0:19:0e:d2:95:c6:29:1f:76:dd:97:02:a6:0f:b9: 5b:b7:e9:32:8a:a6:e0:fc:14:c8:6a:3e:15:00:0b: 47:63:21:ff:f4:74:fb:dd:57:a9:59:79:d6:11:40: fd:41:06:93:ab:07:dd:ef:77:69:af:0c:4b:85:68: 94:ff:0e:c5:e9:d9:41:81:3c:2b:03:0a:d9:88:59: 60:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C4:7B:BF:6A:F6:22:C9:87:3D:9C:AD:58:96:84:4B:EE:2D:38:5A X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a4:63:dd:b7:fe:5a:70:77:9c:95:b5:68:b8:ac:f5:fd:16: e7:2b:8a:ab:d6:3e:ed:00:31:5f:ab:0b:83:47:d7:ea:f9:dc: 2c:2d:77:e6:77:17:1c:1a:b7:08:11:f2:42:cf:29:d3:05:15: be:e7:b8:77:a3:34:56:d2:01:c3:f2:ec:08:0f:95:df:ea:6a: 35:a6:e4:34:e2:b9:e0:59:29:cf:2d:91:90:21:8c:9c:2c:e9: 54:e9:0a:b0:f8:1c:fc:8b:83:be:ca:ec:f0:c1:75:f9:31:5c: a0:cb:f2:a2:25:e5:82:ad:1c:7e:ce:7f:0e:aa:55:b4:a3:c7: 49:fa:48:a1:2d:7f:a7:df:36:2b:da:29:35:5d:1d:24:80:a6: f0:bc:fd:ed:c6:c2:69:91:f7:61:70:09:34:0a:11:6a:82:2d: bf:bf:a7:ea:70:b4:0c:fe:a0:ec:c9:ea:9c:75:46:be:cd:ff: 55:f4:98:0d:0d:29:d8:34:28:38:ff:b0:1f:a3:5d:3d:62:8f: dd:29:97:4e:d3:a9:2f:39:28:dc:5c:14:4d:0a:02:14:de:9b: f2:11:2a:bd:ab:f4:d9:86:f5:5c:56:f4:85:91:f0:c2:5a:15: e8:ee:c7:a5:16:74:82:53:98:6b:dd:83:92:83:d1:d1:60:76: 0b:b0:44:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwNDA0MjMxNjMzWhcNMjUwNDExMjMxNjMzWjAYMRYwFAYD VQQDEw02N2YwNjg1Mi01N2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7DeXUuy4mlnhP0DggglxF7YneY5AI4mNARDUB1akX2PU8tsNmqswq0zWwCy zFLGMMZh+HSjsQAz6l3ke9IAnNWXPT6XGecyou3gREB+YtBUAfk1s8tQJZMf76An BiTUb0BJeoPL0vnMkmMN1xFw+iwz2ebiX/Fh3LgeRtci2tuPDLNp2p/t+wXzzMvG myncY+MGll++VD2RP8LUl0LK3+7+MihDoCC5DoRyfMAzGmfDmonQGQ7SlcYpH3bd lwKmD7lbt+kyiqbg/BTIaj4VAAtHYyH/9HT73VepWXnWEUD9QQaTqwfd73dprwxL hWiU/w7F6dlBgTwrAwrZiFlgYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbEe79q 9iLJhz2crViWhEvuLThaMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDZCMC8zMkU5ODczQ0JGQzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpM TkIyY3Q3YkFaWnZfcXN5Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBipGPdt/5acHeclbVouKz1/RbnK4qr1j7tADFfqwuDR9fq+dwsLXfm dxccGrcIEfJCzynTBRW+57h3ozRW0gHD8uwID5Xf6mo1puQ04rngWSnPLZGQIYyc LOlU6Qqw+Bz8i4O+yuzwwXX5MVygy/KiJeWCrRx+zn8OqlW0o8dJ+kihLX+n3zYr 2ik1XR0kgKbwvP3txsJpkfdhcAk0ChFqgi2/v6fqcLQM/qDsyeqcdUa+zf9V9JgN DSnYNCg4/7Afo109Yo/dKZdO06kvOSjcXBRNCgIU3pvyESq9q/TZhvVcVvSFkfDC WhXo7selFnSCU5hr3YOSg9HRYHYLsETT -----END CERTIFICATE-----Generated at Sat Apr 5 05:17:25 2025 by rpki-client