$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft File: 2gE-F4NYyzWot2XJvAkK6c8cT74.mft (raw, json) Hash identifier: ZimY+LR+EhNgxhaBde2nnSiP0P7KXGE1rxVVO28adqk= Subject key identifier: F6:58:07:EB:A0:47:D3:07:BA:26:03:E2:14:A1:6C:E6:FE:16:F7:C4 Authority key identifier: DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE Certificate issuer: /CN=A91B2C88/serialNumber=DA013E178358CB35A8B765C9BC090AE9CF1C4FBE Certificate serial: 061E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft Manifest number: 0616 Signing time: Wed 02 Apr 2025 22:48:52 +0000 Manifest this update: Wed 02 Apr 2025 22:48:51 +0000 Manifest next update: Wed 09 Apr 2025 22:48:51 +0000 Files and hashes: 1: 2gE-F4NYyzWot2XJvAkK6c8cT74.crl (hash: xP/fYZXxuqjL9mugPImZr1d0rDZelCRLKwKvvprwLcU=) 2: 3C5E55F041A411ECA73C8C0EC4F9AE02.roa (hash: KMuh5ult9LiAce0tih+7IUcHZQamzlPDZPCJthZ1JAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1566 (0x61e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2C88 Validity Not Before: Apr 2 22:48:51 2025 GMT Not After : Apr 9 22:48:51 2025 GMT Subject: CN=67edbed3-ee5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ac:f2:14:29:78:79:c4:43:07:82:f4:8d:51: 05:fb:20:e5:87:3e:f7:34:49:4f:42:08:04:02:59: 86:0d:aa:35:13:92:d9:71:53:29:8d:0d:73:77:93: 00:0a:54:31:0d:13:d8:91:17:d9:d1:c2:c5:15:b9: 3a:85:25:69:c1:22:6f:58:d9:a0:5f:a5:a4:d7:e3: 70:c9:eb:a7:42:90:56:50:97:59:2b:a1:90:ed:ad: 3e:1a:99:49:d0:67:23:71:07:b7:0e:05:be:b5:de: b2:db:ae:8b:a0:4c:dc:00:94:76:b6:e6:e6:f5:bc: 6f:83:ab:73:35:1e:18:ab:38:3b:26:7d:de:5d:70: d7:68:88:74:ef:a3:3a:2d:6d:13:f4:5d:d3:dd:0f: 15:fb:ff:e4:ac:00:dc:fd:32:ff:16:8d:8c:a1:40: 13:a8:18:49:de:7d:40:1e:7b:5d:3f:26:09:b7:17: 4a:bd:c7:51:c0:1f:c9:9c:3e:ee:b1:05:fb:dd:52: b2:3d:b8:93:57:42:74:01:93:d9:17:d4:f0:e8:40: 81:84:0b:86:90:40:8f:f7:6b:42:bc:04:06:48:54: 35:b6:51:49:cf:c4:96:13:77:74:05:e9:85:6a:ce: 18:df:68:a6:45:c7:d1:fe:f8:06:53:16:a5:ab:13: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:58:07:EB:A0:47:D3:07:BA:26:03:E2:14:A1:6C:E6:FE:16:F7:C4 X509v3 Authority Key Identifier: keyid:DA:01:3E:17:83:58:CB:35:A8:B7:65:C9:BC:09:0A:E9:CF:1C:4F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gE-F4NYyzWot2XJvAkK6c8cT74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C88/24299DCA978E11EBBD81B055C4F9AE02/2gE-F4NYyzWot2XJvAkK6c8cT74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:b2:9b:f8:12:47:ab:2b:d3:59:84:77:3d:a5:67:8a:96:10: 9f:56:32:f5:86:e8:93:ec:07:bd:8c:3c:31:34:d5:73:82:ca: 93:ce:40:1b:c0:aa:ff:c6:85:7c:22:74:81:a1:6e:74:b7:72: 55:1f:4a:ed:68:33:07:c2:fb:3c:e2:fd:20:67:3a:49:40:f5: 7d:df:cf:a8:b4:bb:e3:ba:1c:f7:f2:53:82:00:63:c0:2f:3e: c0:3e:e4:ee:22:ef:f4:4f:9d:92:48:73:5e:27:cb:42:f3:37: 9f:28:f4:f2:64:c9:a5:31:50:e9:42:a7:c0:92:75:75:38:78: 92:ca:e3:be:4b:a7:c9:a6:d0:e1:06:e2:30:bb:c6:b2:8b:56: 81:cb:46:95:33:c3:ca:83:00:22:1e:20:61:03:3b:c2:8a:4b: 5c:de:b3:b0:d7:00:c1:53:bf:df:49:02:9d:1c:67:cf:5a:f9: 55:54:fd:bf:55:85:22:5f:be:53:ef:79:e8:1a:13:eb:f5:a1: 76:89:54:14:0b:a3:bc:34:36:7d:8d:25:90:78:bd:c3:ea:4e: 61:95:c8:22:54:db:40:5a:1d:42:5b:e7:81:52:63:24:52:ac: 00:93:21:d5:70:5d:83:a7:2f:f6:04:9d:de:8d:ae:6c:d6:f9: 8e:f7:54:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJDODgxMTAvBgNVBAUTKERBMDEzRTE3ODM1OENCMzVBOEI3NjVDOUJDMDkwQUU5 Q0YxQzRGQkUwHhcNMjUwNDAyMjI0ODUxWhcNMjUwNDA5MjI0ODUxWjAYMRYwFAYD VQQDEw02N2VkYmVkMy1lZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qzyFCl4ecRDB4L0jVEF+yDlhz73NElPQggEAlmGDao1E5LZcVMpjQ1zd5MA ClQxDRPYkRfZ0cLFFbk6hSVpwSJvWNmgX6Wk1+NwyeunQpBWUJdZK6GQ7a0+GplJ 0GcjcQe3DgW+td6y266LoEzcAJR2tubm9bxvg6tzNR4Yqzg7Jn3eXXDXaIh076M6 LW0T9F3T3Q8V+//krADc/TL/Fo2MoUATqBhJ3n1AHntdPyYJtxdKvcdRwB/JnD7u sQX73VKyPbiTV0J0AZPZF9Tw6ECBhAuGkECP92tCvAQGSFQ1tlFJz8SWE3d0BemF as4Y32imRcfR/vgGUxalqxMIdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZYB+ug R9MHuiYD4hShbOb+FvfEMB8GA1UdIwQYMBaAFNoBPheDWMs1qLdlybwJCunPHE++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkM4OC8yNDI5OURDQTk3 OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6V290MlhKdkFrSzZjOGNU NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJnRS1GNE5ZeXpXb3QyWEp2QWtLNmM4Y1Q3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkM4OC8yNDI5OURDQTk3OEUxMUVCQkQ4MUIwNTVDNEY5QUUwMi8yZ0UtRjROWXl6 V290MlhKdkFrSzZjOGNUNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBspv4EkerK9NZhHc9pWeKlhCfVjL1huiT7Ae9jDwxNNVzgsqTzkAb wKr/xoV8InSBoW50t3JVH0rtaDMHwvs84v0gZzpJQPV938+otLvjuhz38lOCAGPA Lz7APuTuIu/0T52SSHNeJ8tC8zefKPTyZMmlMVDpQqfAknV1OHiSyuO+S6fJptDh BuIwu8ayi1aBy0aVM8PKgwAiHiBhAzvCiktc3rOw1wDBU7/fSQKdHGfPWvlVVP2/ VYUiX75T73noGhPr9aF2iVQUC6O8NDZ9jSWQeL3D6k5hlcgiVNtAWh1CW+eBUmMk UqwAkyHVcF2Dpy/2BJ3eja5s1vmO91QR -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:33 2025 by rpki-client