$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft File: 2zxJsbLapmnoFyU5XfcR6D-K09E.mft (raw, json) Hash identifier: XunrC2dNSU6z2hicDMpA0VzRY4C7vd2Nv4DzsTD3EZo= Subject key identifier: 25:A5:95:9D:FF:44:96:26:4C:C1:95:1B:4A:DE:1B:53:A5:73:A8:4C Authority key identifier: DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 Certificate issuer: /CN=A91B1833/serialNumber=DB3C49B1B2DAA669E81725395DF711E83F8AD3D1 Certificate serial: 03A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft Manifest number: 039E Signing time: Sat 29 Mar 2025 01:00:24 +0000 Manifest this update: Sat 29 Mar 2025 01:00:23 +0000 Manifest next update: Sat 05 Apr 2025 01:00:23 +0000 Files and hashes: 1: 2zxJsbLapmnoFyU5XfcR6D-K09E.crl (hash: sxFNd2f0D9TIO++H9s441eWfeCWi95+OKqBfAljCEWc=) 2: 93CBDF448EE111EC9D298C83C4F9AE02.roa (hash: BUnFVKWXS5jIu8y5GkL7bgepdNyRdvPBw8U/+IQhx6g=) 3: 48ECA4C48EE411EC9936A210C4F9AE02.roa (hash: +5J/6WRU15WkYWy0ca5x0funlOBTzCAMAXyUc4i4gAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 936 (0x3a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1833 Validity Not Before: Mar 29 01:00:23 2025 GMT Not After : Apr 5 01:00:23 2025 GMT Subject: CN=67e74628-cee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:b7:70:98:0b:c8:06:94:24:19:32:cb:c5: 6f:56:4e:7e:f1:6b:fe:e4:53:ba:c9:65:4f:3a:a0: 56:c6:1d:ff:67:c7:83:b3:b0:6e:4b:41:71:ea:ab: 0a:40:9c:e3:0d:c8:64:8c:34:32:b1:60:41:1c:a5: 59:11:ed:5f:58:7c:df:68:24:34:68:04:07:9d:15: 42:6d:ff:c5:dc:e2:7f:cb:66:37:d6:bd:95:fb:c4: a7:e2:4d:52:9c:ef:34:33:ed:f5:06:01:93:9b:92: 19:10:6c:67:52:7d:c0:2d:56:74:31:85:f8:06:4f: 1d:b4:84:c1:8c:61:ff:52:37:c6:14:55:70:2b:38: 5d:1d:af:68:de:5d:c1:cc:84:cc:41:c7:7d:61:ee: 2a:ab:fb:c6:10:e3:79:97:c5:c8:cc:46:da:58:1a: 31:93:19:f8:25:b7:93:dc:5a:79:44:1b:dc:6d:b8: b6:2e:d6:8f:23:76:c5:e6:84:bd:37:7d:a5:38:2e: 44:83:9f:ae:b0:36:11:c4:66:94:7f:9f:02:de:ef: b9:2c:7c:c9:1b:21:a4:e8:28:bd:8b:6d:89:1a:99: f4:b1:82:a3:b8:ee:a8:d1:42:9c:5b:19:58:c5:26: 3f:fd:e9:9f:b0:8e:32:87:62:89:8a:6f:7b:2c:fb: 83:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A5:95:9D:FF:44:96:26:4C:C1:95:1B:4A:DE:1B:53:A5:73:A8:4C X509v3 Authority Key Identifier: keyid:DB:3C:49:B1:B2:DA:A6:69:E8:17:25:39:5D:F7:11:E8:3F:8A:D3:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2zxJsbLapmnoFyU5XfcR6D-K09E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1833/FE68E0B28E3311ECAD674675C4F9AE02/2zxJsbLapmnoFyU5XfcR6D-K09E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8f:54:4c:4a:56:5b:2e:43:0f:a0:60:f0:a4:31:50:42:d0: 84:9c:84:b1:01:e4:d3:37:c8:fa:c8:43:9d:b2:32:c9:8c:53: 4d:c7:17:48:f1:1f:02:46:fe:83:d3:a5:2f:bf:81:08:28:ce: 71:61:9c:21:f0:06:37:82:18:9c:c8:e7:e7:97:a7:32:31:df: f8:4e:30:10:7c:de:8c:bb:ff:47:df:7b:04:11:f4:f1:01:3b: 00:9b:35:1b:f4:a5:6e:57:02:98:32:9f:5f:0e:25:c7:5b:47: 9d:6b:57:08:30:bd:9b:5d:c8:0d:af:d2:b7:c7:d6:29:82:70: 02:db:2c:ca:3b:cf:04:85:45:cd:2d:7e:c5:c3:16:b1:bb:3e: 73:7e:8a:3c:43:af:ad:a1:f0:79:52:d6:2a:fb:86:3b:40:f0: 26:72:26:e6:c6:82:74:65:35:82:0d:43:da:5a:05:e4:f7:22: ac:57:4c:b1:73:d3:42:ad:db:ec:9e:a0:bf:15:49:ef:16:89: 52:89:23:40:e3:71:d4:b6:08:fb:71:39:e9:aa:d5:7e:47:a8: d4:e0:9c:03:49:80:49:a5:8b:32:08:af:53:ab:cb:16:ee:c3: 72:3a:cb:3a:3e:5f:b3:2a:42:bf:59:c9:e8:14:68:6c:ca:de: d5:24:98:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE4MzMxMTAvBgNVBAUTKERCM0M0OUIxQjJEQUE2NjlFODE3MjUzOTVERjcxMUU4 M0Y4QUQzRDEwHhcNMjUwMzI5MDEwMDIzWhcNMjUwNDA1MDEwMDIzWjAYMRYwFAYD VQQDEw02N2U3NDYyOC1jZWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5q3cJgLyAaUJBkyy8VvVk5+8Wv+5FO6yWVPOqBWxh3/Z8eDs7BuS0Fx6qsK QJzjDchkjDQysWBBHKVZEe1fWHzfaCQ0aAQHnRVCbf/F3OJ/y2Y31r2V+8Sn4k1S nO80M+31BgGTm5IZEGxnUn3ALVZ0MYX4Bk8dtITBjGH/UjfGFFVwKzhdHa9o3l3B zITMQcd9Ye4qq/vGEON5l8XIzEbaWBoxkxn4JbeT3Fp5RBvcbbi2LtaPI3bF5oS9 N32lOC5Eg5+usDYRxGaUf58C3u+5LHzJGyGk6Ci9i22JGpn0sYKjuO6o0UKcWxlY xSY//emfsI4yh2KJim97LPuD8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWllZ3/ RJYmTMGVG0reG1Olc6hMMB8GA1UdIwQYMBaAFNs8SbGy2qZp6BclOV33Eeg/itPR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTgzMy9GRTY4RTBCMjhF MzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBtbm9GeVU1WGZjUjZELUsw OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ6eEpzYkxhcG1ub0Z5VTVYZmNSNkQtSzA5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTgzMy9GRTY4RTBCMjhFMzMxMUVDQUQ2NzQ2NzVDNEY5QUUwMi8yenhKc2JMYXBt bm9GeVU1WGZjUjZELUswOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMj1RMSlZbLkMPoGDwpDFQQtCEnISxAeTTN8j6yEOdsjLJjFNNxxdI 8R8CRv6D06Uvv4EIKM5xYZwh8AY3ghicyOfnl6cyMd/4TjAQfN6Mu/9H33sEEfTx ATsAmzUb9KVuVwKYMp9fDiXHW0eda1cIML2bXcgNr9K3x9YpgnAC2yzKO88EhUXN LX7Fwxaxuz5zfoo8Q6+tofB5UtYq+4Y7QPAmcibmxoJ0ZTWCDUPaWgXk9yKsV0yx c9NCrdvsnqC/FUnvFolSiSNA43HUtgj7cTnpqtV+R6jU4JwDSYBJpYsyCK9Tq8sW 7sNyOss6Pl+zKkK/WcnoFGhsyt7VJJgm -----END CERTIFICATE-----Generated at Fri Apr 4 18:35:52 2025 by rpki-client