$ rpki-client -vvf rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft File: C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft (raw, json) Hash identifier: kRNMoYp9Wv+opkh1NaGI2J7q6Ta6AL/bJV5ELNsO+hw= Subject key identifier: 08:9E:AC:B4:25:5A:06:EE:0A:0C:81:98:E9:0F:39:35:26:B8:6D:BE Authority key identifier: 0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF Certificate issuer: /CN=A91432F2/serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Certificate serial: 0177 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft Manifest number: 0173 Signing time: Sun 11 May 2025 02:46:08 +0000 Manifest this update: Sun 11 May 2025 02:46:08 +0000 Manifest next update: Sun 18 May 2025 02:46:08 +0000 Files and hashes: 1: C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl (hash: s0x/z/s7E2KOxCdJFLNwyd2KtNkpvlhBNynBPM1MGkI=) 2: F276575AA81411EFACD1214BC4F9AE02.roa (hash: HTdqH+rVkV/AtsO/FyEhhxX1Ymy2SFkUhzQ9lJgZ3eM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 375 (0x177) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91432F2, serialNumber=0B61A074F842A4718BAB1D8452A6CB682E6FEDDF Validity Not Before: May 11 02:46:08 2025 GMT Not After : May 18 02:46:08 2025 GMT Subject: CN=68200f70-20f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1c:ea:e6:52:1d:75:a4:bd:5a:ac:78:5b:be: 63:8e:2f:ea:cf:23:07:00:1e:3c:76:3d:6d:67:eb: 9b:5d:33:85:f1:86:93:30:ff:8b:39:6e:a3:44:8d: 7c:b1:f4:0d:37:c0:56:74:aa:55:f0:4a:eb:9a:6a: b3:58:1f:c0:e2:c3:01:a3:7b:9f:25:17:07:e2:61: 20:30:af:f0:70:c2:e6:dd:c1:78:bd:f4:7f:36:95: 9a:14:8c:89:8b:53:c4:61:d1:1c:81:ee:7a:af:6b: d5:43:1d:0b:da:3e:0f:31:61:13:26:3b:41:ce:71: a9:0f:f2:10:06:a6:bb:13:1b:dc:d1:ed:ca:e5:7f: b2:e7:7b:fa:b4:0b:a4:ca:80:4c:4a:c3:b5:bf:4e: 4f:56:a3:d0:b8:44:cb:5e:af:4b:a2:24:b2:9a:5c: 4b:89:50:1e:3b:b8:7f:3e:ec:7f:01:25:7f:87:96: 6c:33:a7:c9:7e:93:ee:53:60:9a:6c:60:b6:6f:7a: 90:aa:48:b5:82:19:65:01:9d:0a:c2:5a:36:67:47: b8:67:f5:20:f3:12:69:45:ac:62:d9:f1:13:e9:0c: 68:57:04:d3:17:8c:d9:41:93:58:48:f9:14:89:a8: b8:bd:96:c1:cb:6f:19:5a:3c:18:0e:dc:59:9c:c0: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9E:AC:B4:25:5A:06:EE:0A:0C:81:98:E9:0F:39:35:26:B8:6D:BE X509v3 Authority Key Identifier: keyid:0B:61:A0:74:F8:42:A4:71:8B:AB:1D:84:52:A6:CB:68:2E:6F:ED:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2GgdPhCpHGLqx2EUqbLaC5v7d8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91432F2/421E05F2FECD11EDAF807852C4F9AE02/C2GgdPhCpHGLqx2EUqbLaC5v7d8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:82:72:73:1d:01:44:88:6e:14:01:88:89:bc:1d:e0:bb:cf: 3a:09:26:d8:d5:c1:a4:bf:a1:09:15:f4:99:ec:c7:01:5b:30: d3:25:2f:f6:07:e6:3e:78:a3:a0:fe:b6:96:b8:50:0b:36:a2: a5:72:aa:d0:67:e2:a3:7c:5c:7f:8f:e1:d5:ed:12:2d:08:f9: e4:5b:27:b8:98:18:92:65:a0:27:6f:39:9b:0d:c6:2c:59:ce: 99:c3:80:a2:b1:a3:8c:13:b2:0e:5f:31:c8:63:57:ab:fa:a0: c6:97:62:0d:12:56:3b:60:b0:84:b4:2f:06:ae:42:de:f0:f1: cf:95:ee:3e:28:9d:d7:55:1e:76:44:c3:3b:48:06:44:47:31: db:ee:5b:1e:e4:e9:da:0c:fa:8e:f6:d5:20:e4:63:b0:05:4c: 3c:e4:dd:ce:d2:22:3a:46:79:80:9d:bf:e1:46:c4:0a:64:76: 96:b4:31:07:17:6d:f8:26:02:0a:5a:b3:fd:9e:eb:47:b1:52: a4:9c:7b:3e:57:12:8c:b4:fb:45:10:90:96:88:b0:eb:78:a4: ef:23:9c:59:b8:07:ae:e5:b7:f2:84:03:bd:3b:f0:09:a0:14: 9e:03:1b:5f:9c:7f:82:f1:ff:d4:a3:43:6a:9d:d9:1f:e7:24: 71:c8:d9:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMyRjIxMTAvBgNVBAUTKDBCNjFBMDc0Rjg0MkE0NzE4QkFCMUQ4NDUyQTZDQjY4 MkU2RkVEREYwHhcNMjUwNTExMDI0NjA4WhcNMjUwNTE4MDI0NjA4WjAYMRYwFAYD VQQDEw02ODIwMGY3MC0yMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xzq5lIddaS9Wqx4W75jji/qzyMHAB48dj1tZ+ubXTOF8YaTMP+LOW6jRI18 sfQNN8BWdKpV8ErrmmqzWB/A4sMBo3ufJRcH4mEgMK/wcMLm3cF4vfR/NpWaFIyJ i1PEYdEcge56r2vVQx0L2j4PMWETJjtBznGpD/IQBqa7Exvc0e3K5X+y53v6tAuk yoBMSsO1v05PVqPQuETLXq9LoiSymlxLiVAeO7h/Pux/ASV/h5ZsM6fJfpPuU2Ca bGC2b3qQqki1ghllAZ0Kwlo2Z0e4Z/Ug8xJpRaxi2fET6QxoVwTTF4zZQZNYSPkU iai4vZbBy28ZWjwYDtxZnMCKEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAierLQl WgbuCgyBmOkPOTUmuG2+MB8GA1UdIwQYMBaAFAthoHT4QqRxi6sdhFKmy2gub+3f MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzJGMi80MjFFMDVGMkZF Q0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BIR0xxeDJFVXFiTGFDNXY3 ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MyR2dkUGhDcEhHTHF4MkVVcWJMYUM1djdkOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MzJGMi80MjFFMDVGMkZFQ0QxMUVEQUY4MDc4NTJDNEY5QUUwMi9DMkdnZFBoQ3BI R0xxeDJFVXFiTGFDNXY3ZDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAugnJzHQFEiG4UAYiJvB3gu886CSbY1cGkv6EJFfSZ7McBWzDTJS/2 B+Y+eKOg/raWuFALNqKlcqrQZ+KjfFx/j+HV7RItCPnkWye4mBiSZaAnbzmbDcYs Wc6Zw4CisaOME7IOXzHIY1er+qDGl2INElY7YLCEtC8GrkLe8PHPle4+KJ3XVR52 RMM7SAZERzHb7lse5OnaDPqO9tUg5GOwBUw85N3O0iI6RnmAnb/hRsQKZHaWtDEH F234JgIKWrP9nutHsVKknHs+VxKMtPtFEJCWiLDreKTvI5xZuAeu5bfyhAO9O/AJ oBSeAxtfnH+C8f/Uo0Nqndkf5yRxyNkV -----END CERTIFICATE-----Generated at Mon May 12 08:39:45 2025 by rpki-client