$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft File: t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft (raw, json) Hash identifier: n2rV/lu5SB4MJoYfhWnwGt0gsH+hz6ZXWteOjeqVFcc= Subject key identifier: 90:A9:B4:BE:9F:BE:C1:41:3E:A6:17:CE:D8:77:41:BD:62:F2:88:E0 Authority key identifier: B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 Certificate issuer: /CN=A91EEC3B/serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Certificate serial: 0738 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft Manifest number: 2C0C Signing time: Sun 20 Apr 2025 16:23:26 +0000 Manifest this update: Sun 20 Apr 2025 16:23:26 +0000 Manifest next update: Sun 27 Apr 2025 16:23:26 +0000 Files and hashes: 1: t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl (hash: N3A8UoI9eedUi6FJ+tKsaD8gTpCrYEltykSVYNOuk9g=) 2: 4F7B7728DD5D11EF9312601BC4F9AE02.roa (hash: K0pMn3ybPgYAvgYIHKptYZvODgeJgnqA7J5JHWlu6c0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 16:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1848 (0x738) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEC3B, serialNumber=B7667505BB2042E72B62AE05BE2D1A3B41B4D235 Validity Not Before: Apr 20 16:23:26 2025 GMT Not After : Apr 27 16:23:26 2025 GMT Subject: CN=68051f7e-a8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:82:93:a9:ac:a4:8f:57:af:39:5c:47:37:b7: 56:6c:1b:1f:aa:4f:60:cf:d1:06:24:dc:14:68:ee: 88:8f:a3:a5:b3:2f:a7:07:06:1d:b5:8a:2f:5c:05: 41:eb:3f:96:ea:96:0c:b7:63:ca:81:d3:04:a7:98: 27:ff:04:f7:02:5f:85:b6:03:45:e3:78:89:1b:04: a4:d1:a3:7b:a9:41:0d:03:67:e2:5c:b7:42:41:b5: 2a:09:09:74:f4:25:23:81:e9:03:d1:3d:aa:a7:4b: ff:86:d7:67:75:01:b5:79:ce:04:ca:8e:a3:83:6d: 87:be:ca:2a:c5:e8:32:f9:d3:6d:59:c7:37:65:69: db:6e:0c:ff:f6:d8:57:d6:de:5c:03:58:d2:7e:c5: 76:eb:41:aa:e5:9c:f5:41:22:0a:31:ef:f7:7a:bf: fb:92:5c:42:cd:77:ba:21:be:3d:44:54:84:d8:bc: c7:c0:08:c0:07:2b:08:6b:f1:09:8d:0f:2a:44:40: 2d:cb:c7:72:63:6d:6a:5d:aa:dc:d8:cc:c3:43:83: 4f:ab:9f:b6:23:e2:f6:eb:6e:5f:80:c1:65:c5:d6: e5:c7:c8:3b:5e:25:97:e0:98:eb:c5:3a:a7:65:88: e3:2a:d6:77:24:f7:d3:d2:0c:78:eb:93:de:2d:b8: 3f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A9:B4:BE:9F:BE:C1:41:3E:A6:17:CE:D8:77:41:BD:62:F2:88:E0 X509v3 Authority Key Identifier: keyid:B7:66:75:05:BB:20:42:E7:2B:62:AE:05:BE:2D:1A:3B:41:B4:D2:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t2Z1BbsgQucrYq4Fvi0aO0G00jU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/t2Z1BbsgQucrYq4Fvi0aO0G00jU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:a8:9b:8b:5c:f7:fb:6d:d2:b0:f9:46:09:43:26:4b:a8:5f: 6a:79:8c:e6:6e:4d:84:2a:98:93:6d:f0:be:7c:79:d7:08:1b: 55:0e:c7:f1:42:65:c8:88:b9:37:2d:5c:29:66:05:b0:7e:68: 3b:a8:59:c2:72:dd:8c:2a:c4:44:27:d8:13:9d:a2:06:37:c7: 8d:92:bf:0f:94:c5:07:96:f6:56:7d:ef:83:b3:a4:ef:b7:a1: fc:cd:d9:47:96:db:7b:30:c8:0f:12:bc:c0:05:8c:72:53:1f: 2b:2e:9a:12:c4:ec:84:0b:1c:a8:4d:1b:69:6a:f2:e2:c1:34: 0b:ef:cf:92:eb:b2:b7:fb:e1:8e:b6:0f:c8:80:d3:be:89:70: 2a:8e:64:3e:09:90:7d:7a:d9:66:7a:c8:34:8b:91:e4:ae:dd: f2:25:d0:da:85:3c:6f:a3:aa:60:1f:31:b4:da:e5:d1:35:ab: 6e:da:b0:34:c0:94:66:08:d6:0c:08:21:a8:b2:80:ca:48:78: 27:ee:a2:47:03:48:3f:5a:f1:d2:2a:05:8a:90:be:86:db:f4: 92:ba:a7:76:94:3a:15:5c:0e:f8:c3:30:6d:9f:9a:46:0d:b4: bf:f8:47:0c:27:5e:f5:1e:92:df:6e:b0:6a:97:dd:68:ea:6c: a3:0d:35:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVDM0IxMTAvBgNVBAUTKEI3NjY3NTA1QkIyMDQyRTcyQjYyQUUwNUJFMkQxQTNC NDFCNEQyMzUwHhcNMjUwNDIwMTYyMzI2WhcNMjUwNDI3MTYyMzI2WjAYMRYwFAYD VQQDEw02ODA1MWY3ZS1hOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuoKTqaykj1evOVxHN7dWbBsfqk9gz9EGJNwUaO6Ij6Olsy+nBwYdtYovXAVB 6z+W6pYMt2PKgdMEp5gn/wT3Al+FtgNF43iJGwSk0aN7qUENA2fiXLdCQbUqCQl0 9CUjgekD0T2qp0v/htdndQG1ec4Eyo6jg22Hvsoqxegy+dNtWcc3ZWnbbgz/9thX 1t5cA1jSfsV260Gq5Zz1QSIKMe/3er/7klxCzXe6Ib49RFSE2LzHwAjABysIa/EJ jQ8qREAty8dyY21qXarc2MzDQ4NPq5+2I+L2625fgMFlxdblx8g7XiWX4JjrxTqn ZYjjKtZ3JPfT0gx465PeLbg/qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCptL6f vsFBPqYXzth3Qb1i8ojgMB8GA1UdIwQYMBaAFLdmdQW7IELnK2KuBb4tGjtBtNI1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0 MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1Y3JZcTRGdmkwYU8wRzAw alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QyWjFCYnNnUXVjcllxNEZ2aTBhTzBHMDBqVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi90MloxQmJzZ1F1 Y3JZcTRGdmkwYU8wRzAwalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYqJuLXPf7bdKw+UYJQyZLqF9qeYzmbk2EKpiTbfC+fHnXCBtVDsfx QmXIiLk3LVwpZgWwfmg7qFnCct2MKsREJ9gTnaIGN8eNkr8PlMUHlvZWfe+Ds6Tv t6H8zdlHltt7MMgPErzABYxyUx8rLpoSxOyECxyoTRtpavLiwTQL78+S67K3++GO tg/IgNO+iXAqjmQ+CZB9etlmesg0i5Hkrt3yJdDahTxvo6pgHzG02uXRNatu2rA0 wJRmCNYMCCGosoDKSHgn7qJHA0g/WvHSKgWKkL6G2/SSuqd2lDoVXA74wzBtn5pG DbS/+EcMJ171HpLfbrBql91o6myjDTVG -----END CERTIFICATE-----Generated at Tue Apr 22 01:52:27 2025 by rpki-client