$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft File: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft (raw, json) Hash identifier: fjwB7LLJFQoKV7TMYZZNabAEWDJddxJi/x1V5utsa44= Subject key identifier: 72:03:1D:31:B2:3F:29:96:B4:2D:EE:C3:02:99:0B:88:D8:02:DD:59 Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 Certificate issuer: /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Certificate serial: 0194 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft Manifest number: 018F Signing time: Sat 31 May 2025 03:13:08 +0000 Manifest this update: Sat 31 May 2025 03:13:08 +0000 Manifest next update: Sat 07 Jun 2025 03:13:08 +0000 Files and hashes: 1: 2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl (hash: /4Oo6h4PwMvK0jPKLp7jICbPl0j5Na/tT7sGOLc2mHw=) 2: 45F398E6EA6C11EE9C6A0650C4F9AE02.roa (hash: T2GxpprBCkLcK8nLanU7+iPRdUPJ3LHSQZhYNBEF7S4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 404 (0x194) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6 Validity Not Before: May 31 03:13:08 2025 GMT Not After : Jun 7 03:13:08 2025 GMT Subject: CN=683a73c4-e076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8b:2b:88:b6:0e:71:18:0b:37:6e:60:44:f3: e1:e9:d7:b8:52:c2:4b:04:12:7c:a2:b6:69:e7:f2: 4f:8e:2a:28:ad:06:57:ed:2d:9d:ce:f8:eb:e1:fe: 7e:41:ba:e7:08:d2:c7:14:9e:08:b9:cc:92:fe:54: 0b:a3:8a:10:38:94:a8:d4:c5:4b:13:ba:fe:86:71: e4:2a:44:4f:49:75:a6:6f:5c:ad:b0:b0:53:d2:96: 7b:aa:14:1c:85:e5:c8:2d:0b:ee:7e:ee:85:a7:9c: f3:84:f2:69:fd:7e:dc:dc:1c:f6:8f:e4:06:35:2e: 87:b2:f3:5c:20:84:de:49:1b:7a:01:32:fd:15:ab: 4a:7f:87:c4:c0:76:52:e3:94:f7:63:23:af:74:08: 24:ff:7a:9a:4e:5c:b9:12:72:dc:7d:07:c3:24:d6: 83:2e:e1:d0:9b:36:c9:b0:46:00:7a:c3:2f:06:15: c3:08:5d:c5:95:bc:e9:65:73:4c:de:0c:96:2e:e9: b6:62:52:f1:47:d7:4a:fc:16:ee:7a:92:ee:3c:c0: 57:7c:32:78:a9:76:9b:19:ad:cf:7d:7d:08:3b:a4: 0c:0d:0b:05:4d:2d:60:80:03:77:f3:25:f5:f8:2a: c9:da:a8:1c:ff:90:d6:1c:f2:a4:0e:0d:fa:13:8f: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:03:1D:31:B2:3F:29:96:B4:2D:EE:C3:02:99:0B:88:D8:02:DD:59 X509v3 Authority Key Identifier: keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dd:49:6f:0f:3c:03:c9:32:bf:b8:77:3a:e3:e7:12:66:ed: 40:79:21:65:35:a4:58:2b:e6:7b:f8:c9:64:5d:d3:00:76:3e: 71:e1:11:c0:ea:93:ea:89:3a:d4:cb:62:8c:e3:35:fe:37:2c: 52:3b:77:78:e7:8a:42:01:d3:85:c5:16:30:6b:25:75:b8:dc: 2b:e3:7e:ab:c6:87:fa:22:74:08:20:10:fa:af:33:b7:5b:8d: f5:5d:14:23:e7:b4:d8:75:53:e1:b4:83:23:7b:52:35:b8:41: 91:49:4d:56:7b:d0:14:46:fb:1d:85:26:c5:91:36:ae:e8:0b: 57:8b:d6:6d:b5:f8:49:ac:1f:64:fc:9d:03:f6:96:df:94:0e: 54:7f:58:72:c3:b7:9c:6a:3d:05:06:e7:20:ea:74:fb:3c:f2: f4:e2:6f:f5:59:02:76:7a:5c:10:4d:4d:97:27:fb:52:37:90: 61:e8:fe:d2:9d:ef:02:3a:50:d7:c4:5f:c1:01:4b:5b:7e:e6: d9:2e:b7:d1:07:0e:66:11:73:ff:f5:05:4c:d3:76:ed:67:98: 65:7a:fc:9f:6a:d6:39:22:e2:3d:64:c3:0d:99:e7:e7:72:95: d2:b0:1e:48:5e:b7:dc:87:c9:5b:c2:5a:b3:3f:f1:3f:5e:a0: 33:9a:05:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc2NEYxMTAvBgNVBAUTKERBQTEzRkIxNUEwNDU2NkM0QjM1OTM2Mzg2QThCMjVD MDE1NDhDQzYwHhcNMjUwNTMxMDMxMzA4WhcNMjUwNjA3MDMxMzA4WjAYMRYwFAYD VQQDEw02ODNhNzNjNC1lMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvosriLYOcRgLN25gRPPh6de4UsJLBBJ8orZp5/JPjioorQZX7S2dzvjr4f5+ QbrnCNLHFJ4IucyS/lQLo4oQOJSo1MVLE7r+hnHkKkRPSXWmb1ytsLBT0pZ7qhQc heXILQvufu6Fp5zzhPJp/X7c3Bz2j+QGNS6HsvNcIITeSRt6ATL9FatKf4fEwHZS 45T3YyOvdAgk/3qaTly5EnLcfQfDJNaDLuHQmzbJsEYAesMvBhXDCF3FlbzpZXNM 3gyWLum2YlLxR9dK/BbuepLuPMBXfDJ4qXabGa3PfX0IO6QMDQsFTS1ggAN38yX1 +CrJ2qgc/5DWHPKkDg36E493yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIDHTGy PymWtC3uwwKZC4jYAt1ZMB8GA1UdIwQYMBaAFNqhP7FaBFZsSzWTY4aoslwBVIzG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY0Ri9DRUQwRjg3RURE MTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZteExOWk5qaHFpeVhBRlVq TVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJxRV9zVm9FVm14TE5aTmpocWl5WEFGVWpNWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzY0Ri9DRUQwRjg3RUREMTcxMUVEODE0NzQ2MkZDNEY5QUUwMi8ycUVfc1ZvRVZt eExOWk5qaHFpeVhBRlVqTVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd3UlvDzwDyTK/uHc64+cSZu1AeSFlNaRYK+Z7+MlkXdMAdj5x4RHA 6pPqiTrUy2KM4zX+NyxSO3d454pCAdOFxRYwayV1uNwr436rxof6InQIIBD6rzO3 W431XRQj57TYdVPhtIMje1I1uEGRSU1We9AURvsdhSbFkTau6AtXi9ZttfhJrB9k /J0D9pbflA5Uf1hyw7ecaj0FBucg6nT7PPL04m/1WQJ2elwQTU2XJ/tSN5Bh6P7S ne8COlDXxF/BAUtbfubZLrfRBw5mEXP/9QVM03btZ5hlevyfatY5IuI9ZMMNmefn cpXSsB5IXrfch8lbwlqzP/E/XqAzmgWY -----END CERTIFICATE-----Generated at Sat May 31 15:02:52 2025 by rpki-client