$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft File: 2IDvJluUDjHf7RxCrvUUS2RBNxc.mft (raw, json) Hash identifier: vEruOqM+oEZQymbIRF0W46WcY41hG135zSudktKGltk= Subject key identifier: 7C:11:50:B3:93:BE:EF:46:2D:1B:1F:8B:00:8C:46:C7:37:3F:83:34 Authority key identifier: D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 Certificate issuer: /CN=A91CFA8E/serialNumber=D880EF265B940E31DFED1C42AEF5144B64413717 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft Manifest number: 0178 Signing time: Sat 29 Mar 2025 03:30:42 +0000 Manifest this update: Sat 29 Mar 2025 03:30:42 +0000 Manifest next update: Sat 05 Apr 2025 03:30:42 +0000 Files and hashes: 1: 2IDvJluUDjHf7RxCrvUUS2RBNxc.crl (hash: DMLl5biU2LBE3QxAnnaNvj4+JEB4FteX/ihBV7nsc9o=) 2: 61663178F88311EDB1DF555DC4F9AE02.roa (hash: efBSrtkTKEJgNLbcfHg15J9nYDpY9tt/H1QPBO/mZ+U=) 3: 43E961E013E711EE8ECA2D3CC4F9AE02.roa (hash: 2uAnojTpBx/p6UzON5W2LUqPsm+IaZARqT6ypFNqC5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFA8E Validity Not Before: Mar 29 03:30:42 2025 GMT Not After : Apr 5 03:30:42 2025 GMT Subject: CN=67e76962-9c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:66:3c:34:ee:75:70:f4:c3:1d:da:33:f6:e8: 11:87:db:76:58:01:f2:d2:88:c2:70:46:1b:14:d5: 83:b9:fc:a8:d5:a9:4c:4a:05:f3:f5:b6:e7:2b:ef: 4c:c4:7a:01:1c:ea:fb:1f:25:7e:ab:2f:b9:88:98: a6:c6:7d:d8:b0:91:5a:d6:e8:3d:94:9a:b6:ec:ea: 9a:61:58:fa:6b:a2:ad:be:cb:ce:36:94:47:77:5d: 70:66:2d:d6:1d:76:a9:36:04:c2:6a:c7:2f:12:4d: 2f:1a:bb:b2:eb:e3:b8:f7:04:44:6d:a0:0a:77:46: 3f:ff:7c:35:8d:dc:c7:a8:73:73:60:db:98:1a:b3: 7f:b1:0f:2e:bc:e7:44:79:91:54:8e:a2:a9:4b:0c: 6a:2f:26:63:d3:4a:55:26:88:61:ab:7e:e9:6f:81: cb:a4:e5:69:20:0b:af:85:91:3d:96:aa:00:51:77: a3:72:bf:ce:17:c8:f7:49:00:24:43:0e:8d:8b:bf: 36:0c:e2:9a:0c:6e:82:2d:09:87:5e:47:8e:24:35: a8:f3:33:29:19:42:ff:8c:92:c4:0a:ca:c8:96:e0: 95:03:38:3f:42:62:ef:81:d6:af:f2:b6:47:62:a4: 8e:8c:36:80:c5:0e:d8:ed:d9:7d:d5:6a:97:c1:ed: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:11:50:B3:93:BE:EF:46:2D:1B:1F:8B:00:8C:46:C7:37:3F:83:34 X509v3 Authority Key Identifier: keyid:D8:80:EF:26:5B:94:0E:31:DF:ED:1C:42:AE:F5:14:4B:64:41:37:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2IDvJluUDjHf7RxCrvUUS2RBNxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFA8E/61BAD8E0F87E11ED90D8445CC4F9AE02/2IDvJluUDjHf7RxCrvUUS2RBNxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:40:7e:fc:d1:7c:5d:b1:29:99:fd:70:79:b2:be:71:6e:3b: b9:86:d9:2e:8b:05:0f:35:5c:25:af:f5:02:f0:b5:3a:81:4b: e3:b3:74:e0:15:cf:42:01:92:ad:ba:75:10:b7:d6:5a:ad:45: 75:70:b3:8e:24:5b:e7:65:3f:a3:a6:2e:24:06:2f:db:ad:6a: 09:cd:bb:29:ea:0a:44:9f:4b:22:94:ac:4b:70:bf:29:55:56: ba:f9:c5:61:7f:5c:b4:02:43:28:54:8c:ec:9f:c4:4d:17:5b: 99:cc:7b:38:18:b7:47:21:a9:7d:77:59:a2:a6:0a:78:92:a1: a6:7b:9d:81:04:99:96:20:44:69:93:ab:a8:73:36:96:39:b7: 27:5b:73:01:c5:86:3c:07:94:8a:72:7f:1d:81:50:ae:cb:4a: 06:48:a6:d5:10:69:61:75:9d:37:02:8d:52:59:6d:31:99:19: b0:78:77:e8:0e:5d:27:06:79:2c:f4:60:5c:34:e4:93:ed:a8: 75:e4:49:2a:76:a6:e4:19:4a:77:9b:a6:8f:ec:38:5e:49:f1: 7f:62:be:8e:0e:74:98:fd:95:30:b6:20:31:b4:94:6f:7f:18: 03:a2:27:fb:53:b3:2c:d1:b0:e7:bd:96:21:23:05:66:da:2d: 7d:50:82:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZBOEUxMTAvBgNVBAUTKEQ4ODBFRjI2NUI5NDBFMzFERkVEMUM0MkFFRjUxNDRC NjQ0MTM3MTcwHhcNMjUwMzI5MDMzMDQyWhcNMjUwNDA1MDMzMDQyWjAYMRYwFAYD VQQDEw02N2U3Njk2Mi05YzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3WY8NO51cPTDHdoz9ugRh9t2WAHy0ojCcEYbFNWDufyo1alMSgXz9bbnK+9M xHoBHOr7HyV+qy+5iJimxn3YsJFa1ug9lJq27OqaYVj6a6KtvsvONpRHd11wZi3W HXapNgTCascvEk0vGruy6+O49wREbaAKd0Y//3w1jdzHqHNzYNuYGrN/sQ8uvOdE eZFUjqKpSwxqLyZj00pVJohhq37pb4HLpOVpIAuvhZE9lqoAUXejcr/OF8j3SQAk Qw6Ni782DOKaDG6CLQmHXkeOJDWo8zMpGUL/jJLECsrIluCVAzg/QmLvgdav8rZH YqSOjDaAxQ7Y7dl91WqXwe1cWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwRULOT vu9GLRsfiwCMRsc3P4M0MB8GA1UdIwQYMBaAFNiA7yZblA4x3+0cQq71FEtkQTcX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkE4RS82MUJBRDhFMEY4 N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURqSGY3UnhDcnZVVVMyUkJO eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJJRHZKbHVVRGpIZjdSeENydlVVUzJSQk54Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkE4RS82MUJBRDhFMEY4N0UxMUVEOTBEODQ0NUNDNEY5QUUwMi8ySUR2Smx1VURq SGY3UnhDcnZVVVMyUkJOeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLQH780XxdsSmZ/XB5sr5xbju5htkuiwUPNVwlr/UC8LU6gUvjs3Tg Fc9CAZKtunUQt9ZarUV1cLOOJFvnZT+jpi4kBi/brWoJzbsp6gpEn0silKxLcL8p VVa6+cVhf1y0AkMoVIzsn8RNF1uZzHs4GLdHIal9d1mipgp4kqGme52BBJmWIERp k6uoczaWObcnW3MBxYY8B5SKcn8dgVCuy0oGSKbVEGlhdZ03Ao1SWW0xmRmweHfo Dl0nBnks9GBcNOST7ah15EkqdqbkGUp3m6aP7DheSfF/Yr6ODnSY/ZUwtiAxtJRv fxgDoif7U7Ms0bDnvZYhIwVm2i19UIKj -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:41 2025 by rpki-client