$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft File: N2A9suBywKj9cROOJUCZ9MrYwW8.mft (raw, json) Hash identifier: zBR6ni6QctUXMA4nt5Z3wpnwCaZwA72gSooW1LKDvuI= Subject key identifier: 8E:12:6D:80:92:27:05:E9:E6:14:06:C5:4A:34:01:92:8E:5F:19:E5 Authority key identifier: 37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F Certificate issuer: /CN=A91FD47F/serialNumber=37603DB2E072C0A8FD71138E254099F4CAD8C16F Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft Manifest number: 0204 Signing time: Sat 29 Mar 2025 02:19:19 +0000 Manifest this update: Sat 29 Mar 2025 02:19:19 +0000 Manifest next update: Sat 05 Apr 2025 02:19:19 +0000 Files and hashes: 1: N2A9suBywKj9cROOJUCZ9MrYwW8.crl (hash: eMpdx+7+N4YmpI25YaARETE/qMRIotDW+WNjrFDEVu0=) 2: AB68CE76346511EDAC41E081C4F9AE02.roa (hash: me5m52MXo4l0JWieAZh5/5JLHzGNaxm9iecnfymMcU4=) 3: 14B312EC3AE711EDBF700472C4F9AE02.roa (hash: jkOQ3dPuDLNPKoML9QUoAglZcGE8mWGDMaT0FDV/Rrk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 02:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD47F Validity Not Before: Mar 29 02:19:19 2025 GMT Not After : Apr 5 02:19:19 2025 GMT Subject: CN=67e758a7-423b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:19:64:5a:09:58:5a:6c:1a:28:bd:ae:65:5b: 6b:e5:58:3a:e9:50:5d:c3:d2:05:1d:21:27:b9:27: 7a:ed:86:06:8e:15:51:8c:fe:97:6b:29:6c:a1:d5: 42:f0:83:6b:41:f2:8d:76:02:7f:95:14:19:07:85: 4d:8f:47:19:26:43:28:a6:12:1c:6e:df:43:f1:06: 86:bd:7a:29:82:af:41:86:bf:cc:9d:6a:d6:70:87: 74:b0:bd:2c:0d:b6:f0:9d:a8:2e:4c:77:1a:b4:6c: d7:67:a3:b6:40:2c:99:20:1f:6c:a4:aa:8c:66:0d: ff:2d:fc:ab:f0:a7:72:85:4e:73:54:f2:76:43:6e: 91:d2:3e:33:b6:fe:2f:42:d3:71:1d:59:1e:cb:23: 0d:37:bb:17:2d:91:31:c3:c2:2c:73:b2:02:8c:a2: 35:1c:73:c8:f6:2e:5e:b6:7d:fb:d4:f7:a4:fb:67: c4:63:b0:6f:28:05:62:95:c0:00:c7:d4:99:1a:2c: 0c:1d:ca:be:ea:ca:59:cd:64:1b:75:6c:69:27:48: a3:b2:7c:fb:db:e7:bb:28:10:5f:cf:d7:30:ce:4d: b2:27:ac:dd:76:36:df:c1:b1:bb:7e:ec:8c:c0:fe: 95:1f:9f:8f:f0:ad:cd:7f:98:2a:03:4f:d2:7e:e4: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:12:6D:80:92:27:05:E9:E6:14:06:C5:4A:34:01:92:8E:5F:19:E5 X509v3 Authority Key Identifier: keyid:37:60:3D:B2:E0:72:C0:A8:FD:71:13:8E:25:40:99:F4:CA:D8:C1:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N2A9suBywKj9cROOJUCZ9MrYwW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD47F/D5CE626A346111ED9DEE8E7AC4F9AE02/N2A9suBywKj9cROOJUCZ9MrYwW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5a:7a:49:f7:ce:0d:af:f5:3c:ac:23:de:ae:e9:ce:a7:b6: 77:f3:6a:a8:d5:8f:c7:6f:78:d8:61:1f:36:85:e1:2e:7e:49: ad:6c:59:1a:1f:3c:2c:45:f3:a0:c9:ad:88:2d:28:b6:b2:bf: 81:ca:49:6d:4e:51:1f:60:9a:05:41:e9:76:bf:9e:9c:95:c6: f1:f5:a4:08:85:d4:79:1c:94:93:e5:d8:b0:8f:07:85:3f:e4: fe:08:97:39:ff:c0:e2:1e:0a:55:a3:1d:f8:bc:e5:4f:18:ce: 18:b5:e1:f3:71:7a:4c:3c:41:e2:3f:fa:dd:2d:c0:b1:11:52: 12:ab:f6:6b:66:7f:05:2a:01:34:22:f6:60:15:d0:af:0d:8d: 03:de:7d:9b:7a:1e:29:59:63:87:c7:84:5d:3e:aa:57:3d:ca: bc:00:a9:19:4b:6e:66:26:18:58:96:bd:76:ed:90:fa:4e:25: ba:4e:5a:1e:78:2e:22:d4:5b:0d:e7:5b:8f:e9:5c:21:cf:34: 07:5b:b6:c8:45:18:b4:f7:a8:08:96:d6:cd:44:47:a3:f3:79: 27:57:29:9a:be:2d:6a:00:12:17:00:1e:35:a9:dc:62:cd:76: 32:03:57:09:45:f3:ae:2a:a9:d2:78:b9:53:60:15:a8:d2:69: a7:d4:50:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ0N0YxMTAvBgNVBAUTKDM3NjAzREIyRTA3MkMwQThGRDcxMTM4RTI1NDA5OUY0 Q0FEOEMxNkYwHhcNMjUwMzI5MDIxOTE5WhcNMjUwNDA1MDIxOTE5WjAYMRYwFAYD VQQDEw02N2U3NThhNy00MjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5RlkWglYWmwaKL2uZVtr5Vg66VBdw9IFHSEnuSd67YYGjhVRjP6XaylsodVC 8INrQfKNdgJ/lRQZB4VNj0cZJkMophIcbt9D8QaGvXopgq9Bhr/MnWrWcId0sL0s DbbwnaguTHcatGzXZ6O2QCyZIB9spKqMZg3/Lfyr8KdyhU5zVPJ2Q26R0j4ztv4v QtNxHVkeyyMNN7sXLZExw8Isc7ICjKI1HHPI9i5etn371Pek+2fEY7BvKAVilcAA x9SZGiwMHcq+6spZzWQbdWxpJ0ijsnz72+e7KBBfz9cwzk2yJ6zddjbfwbG7fuyM wP6VH5+P8K3Nf5gqA0/SfuQO0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4SbYCS JwXp5hQGxUo0AZKOXxnlMB8GA1UdIwQYMBaAFDdgPbLgcsCo/XETjiVAmfTK2MFv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDQ3Ri9ENUNFNjI2QTM0 NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdLajljUk9PSlVDWjlNcll3 VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL04yQTlzdUJ5d0tqOWNST09KVUNaOU1yWXdXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDQ3Ri9ENUNFNjI2QTM0NjExMUVEOURFRThFN0FDNEY5QUUwMi9OMkE5c3VCeXdL ajljUk9PSlVDWjlNcll3VzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjWnpJ984Nr/U8rCPerunOp7Z382qo1Y/Hb3jYYR82heEufkmtbFka HzwsRfOgya2ILSi2sr+BykltTlEfYJoFQel2v56clcbx9aQIhdR5HJST5diwjweF P+T+CJc5/8DiHgpVox34vOVPGM4YteHzcXpMPEHiP/rdLcCxEVISq/ZrZn8FKgE0 IvZgFdCvDY0D3n2beh4pWWOHx4RdPqpXPcq8AKkZS25mJhhYlr127ZD6TiW6Tloe eC4i1FsN51uP6VwhzzQHW7bIRRi096gIltbNREej83knVymavi1qABIXAB41qdxi zXYyA1cJRfOuKqnSeLlTYBWo0mmn1FDy -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:06 2025 by rpki-client