$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json) Hash identifier: TG3nTlVSOsD0ycjwc/i1vxjsEM9+16792im9s3kUl9E= Subject key identifier: AF:2D:25:E3:78:B2:82:82:32:0D:B1:7E:EC:D7:4D:D1:55:BD:FE:CD Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft Manifest number: 0193 Signing time: Sat 31 May 2025 03:13:15 +0000 Manifest this update: Sat 31 May 2025 03:13:15 +0000 Manifest next update: Sat 07 Jun 2025 03:13:15 +0000 Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: jsFWpW9YfBYEpur9oYtGMU9NPWSC0FobGuJ498KJi0Q=) 2: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: pVr+bUV7osuNpKcdEe2SU8B4kCWvORQSGGyqBngWkWY=) 3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: ou5M00utddUa9B9T2ZjIX4AhXtQUSSATyN+Uf1fiHwE=) 4: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: m0+29/xOQkLY0SUQkzyArE5bZt0Gpa6rpxJzQEzTpmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C Validity Not Before: May 31 03:13:15 2025 GMT Not After : Jun 7 03:13:15 2025 GMT Subject: CN=683a73cb-5ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:20:50:dd:80:b7:ff:1e:6d:cf:08:a3:52:04: 51:ee:b2:70:ec:90:6d:4d:29:18:32:00:dd:dd:28: e4:6e:39:f0:fa:e0:fe:73:d8:ea:e0:5e:21:32:20: f0:7e:91:b3:36:c8:25:29:4f:64:11:66:2a:76:69: 2e:82:31:ad:75:35:6b:df:46:cc:09:cc:2c:bd:92: 65:73:f0:23:52:6e:30:5d:61:3e:f0:42:77:c3:fb: 64:75:45:e2:ae:17:d2:72:31:60:88:73:35:f1:b2: 08:c0:39:e4:14:09:de:72:09:c6:7d:ab:d9:36:a2: 81:9b:c8:0f:40:0e:b0:fa:18:2f:db:46:b5:58:6a: 11:d9:51:7d:a1:02:02:28:36:8e:b2:24:3c:7b:81: 35:de:64:16:0c:34:b4:0b:07:85:4e:1f:96:15:79: da:24:ed:b2:87:9b:a2:63:bd:1c:1a:2b:9d:64:3d: 77:cd:ea:93:f0:39:a8:fd:10:7f:bd:12:76:fb:e2: 81:de:0b:1a:c6:59:14:6c:7d:a8:eb:c5:32:f5:4f: d5:bf:dc:40:07:25:0d:4c:fe:4e:a9:d5:bb:9d:d0: 73:d9:d6:1e:6b:41:1f:6c:9a:5f:d3:c3:4f:8d:ba: 43:f9:5a:1d:9e:93:39:11:45:72:80:68:06:e7:7a: 54:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2D:25:E3:78:B2:82:82:32:0D:B1:7E:EC:D7:4D:D1:55:BD:FE:CD X509v3 Authority Key Identifier: keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a3:87:84:21:2d:88:d7:7e:a7:18:19:d4:b3:98:a5:b2:3f: 00:9c:43:33:ec:15:56:81:db:9a:ab:7d:8d:d8:8f:00:d3:ff: 70:de:5f:bf:36:73:83:11:7a:72:ab:84:77:e8:a5:34:22:d3: 0e:a6:ae:3a:1b:40:96:32:a6:d4:45:0a:b0:74:00:50:2c:43: df:3b:51:2d:57:e3:40:71:5a:74:de:c8:e4:d6:29:df:6c:1b: c4:b8:cd:e6:56:df:15:f3:f2:a4:cc:ad:ce:c2:b4:ac:bd:4a: e5:9c:11:0c:29:b4:d0:75:5a:a9:9a:63:97:95:44:78:af:18: 43:47:8e:4f:a9:b0:cb:29:40:20:fa:d3:22:f4:48:e1:07:9a: 23:7b:ff:26:07:69:3f:8a:2c:5c:ee:6c:09:5c:d5:4c:06:2e: e8:28:15:68:df:58:6a:fc:72:5b:23:77:b1:5c:45:62:e8:47: 02:e8:4d:5e:5b:33:21:33:81:b8:06:10:23:ab:20:06:15:07: 8d:53:dc:98:0f:de:7b:4f:f9:88:55:ad:09:ba:f2:62:cc:aa: f0:17:c7:7f:e0:d8:db:05:c7:97:c2:7b:08:93:7b:3e:f7:1e: 5f:f5:c2:8f:c5:19:64:96:e2:4b:57:d6:ee:91:d7:0e:d7:de: 27:04:26:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0 NkFCN0NCOUMwHhcNMjUwNTMxMDMxMzE1WhcNMjUwNjA3MDMxMzE1WjAYMRYwFAYD VQQDEw02ODNhNzNjYi01YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyBQ3YC3/x5tzwijUgRR7rJw7JBtTSkYMgDd3Sjkbjnw+uD+c9jq4F4hMiDw fpGzNsglKU9kEWYqdmkugjGtdTVr30bMCcwsvZJlc/AjUm4wXWE+8EJ3w/tkdUXi rhfScjFgiHM18bIIwDnkFAnecgnGfavZNqKBm8gPQA6w+hgv20a1WGoR2VF9oQIC KDaOsiQ8e4E13mQWDDS0CweFTh+WFXnaJO2yh5uiY70cGiudZD13zeqT8Dmo/RB/ vRJ2++KB3gsaxlkUbH2o68Uy9U/Vv9xAByUNTP5OqdW7ndBz2dYea0EfbJpf08NP jbpD+VodnpM5EUVygGgG53pU7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8tJeN4 soKCMg2xfuzXTdFVvf7NMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5 NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2 MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAo4eEIS2I136nGBnUs5ilsj8AnEMz7BVWgduaq32N2I8A0/9w3l+/ NnODEXpyq4R36KU0ItMOpq46G0CWMqbURQqwdABQLEPfO1EtV+NAcVp03sjk1inf bBvEuM3mVt8V8/KkzK3OwrSsvUrlnBEMKbTQdVqpmmOXlUR4rxhDR45PqbDLKUAg +tMi9EjhB5oje/8mB2k/iixc7mwJXNVMBi7oKBVo31hq/HJbI3exXEVi6EcC6E1e WzMhM4G4BhAjqyAGFQeNU9yYD957T/mIVa0JuvJizKrwF8d/4NjbBceXwnsIk3s+ 9x5f9cKPxRlkluJLV9bukdcO194nBCaQ -----END CERTIFICATE-----Generated at Sat May 31 17:48:40 2025 by rpki-client