$ rpki-client -vvf rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft File: 2VWVxglbTfriy5tFuQicwmI9lKM.mft (raw, json) Hash identifier: mT+VuG7Chssr1joLsg8RZAw9fdWG44lyUejLexBE28M= Subject key identifier: EE:7A:3F:8E:D5:A4:28:6A:6E:B1:D9:11:68:C6:08:0B:5A:A8:18:E6 Authority key identifier: D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 Certificate issuer: /CN=A9144E38/serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Certificate serial: 0E98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft Manifest number: 0E8F Signing time: Fri 30 May 2025 17:52:44 +0000 Manifest this update: Fri 30 May 2025 17:52:43 +0000 Manifest next update: Fri 06 Jun 2025 17:52:43 +0000 Files and hashes: 1: 2VWVxglbTfriy5tFuQicwmI9lKM.crl (hash: uioQHqWF5nuKh1BktGkG9uK8JsK7g8Nj0Zr+KCF3fq4=) 2: D7E41D6A788411EA9186C910C4F9AE02.roa (hash: Lhup7Zk9zUWbpx4YvLoYtp8k4a6DjCWODZVfnB4MNOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3736 (0xe98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144E38, serialNumber=D95595C6095B4DFAE2CB9B45B9089CC2623D94A3 Validity Not Before: May 30 17:52:43 2025 GMT Not After : Jun 6 17:52:43 2025 GMT Subject: CN=6839f06b-9fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:7c:40:5f:4d:b2:ee:e4:d3:99:9e:10:77: 41:86:87:1f:0a:2d:89:86:d3:12:66:a0:e6:46:3d: 8d:ad:d7:fc:a0:18:31:22:30:ff:a8:60:c2:80:ca: 9c:ce:4f:19:22:17:3e:ef:cf:b5:a9:8b:cb:4f:76: 1d:44:a4:40:ae:c7:c1:31:4e:52:63:2c:7f:ff:cf: 3d:4e:cf:0f:10:80:51:68:1d:a3:f6:46:22:66:48: 10:63:6d:c0:5b:bb:95:8b:76:d3:f2:47:84:50:77: 67:f7:60:8d:c1:60:b9:16:cb:dd:4d:0f:81:37:98: 56:15:87:62:a2:4c:e8:ab:62:e2:74:28:bc:80:f7: 40:49:95:14:15:01:27:66:79:42:5d:10:30:37:13: ad:3a:fd:48:68:40:d9:ba:fa:9b:2f:45:69:6d:39: 73:57:10:1a:35:5e:80:d3:7e:90:3b:ab:4d:a5:16: 81:54:a1:7e:42:f0:f6:f4:b7:44:43:bd:ce:a7:92: c2:8a:64:30:cc:de:1a:02:7a:03:4c:02:d6:df:e2: 47:f5:c9:3d:cb:a3:66:96:ff:7f:b8:f3:36:82:16: ce:c2:bb:74:22:83:78:ef:a2:7e:1f:9b:d7:fd:28: 38:86:5f:8e:9b:4c:49:c0:8f:d4:00:9e:8b:a0:a3: 8e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7A:3F:8E:D5:A4:28:6A:6E:B1:D9:11:68:C6:08:0B:5A:A8:18:E6 X509v3 Authority Key Identifier: keyid:D9:55:95:C6:09:5B:4D:FA:E2:CB:9B:45:B9:08:9C:C2:62:3D:94:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2VWVxglbTfriy5tFuQicwmI9lKM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144E38/73331B5E91D111E9B6A9325BC4F9AE02/2VWVxglbTfriy5tFuQicwmI9lKM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ff:76:bd:39:f6:4e:35:fb:75:e5:79:58:d0:2e:d0:20:d2: 62:4d:ef:cc:2c:6c:a8:d9:91:2d:97:b7:c6:a3:63:76:6e:c1: 6b:85:79:04:4c:2a:a6:1f:29:27:50:ac:f0:fd:13:20:9e:5a: 8c:0d:81:66:13:8f:b5:68:35:ba:90:fb:c2:dd:1c:14:ec:f8: f4:ab:66:29:76:0b:ac:d9:4c:3e:21:4e:cb:3f:9e:b9:77:ef: f6:d1:a2:b1:8b:4c:45:a6:9a:fb:7b:84:cf:8b:2b:87:10:b7: f8:24:4c:54:b8:c1:b0:bf:4a:9c:8a:8d:dd:5a:71:01:cf:84: 51:65:70:da:47:77:bc:29:08:da:42:80:c6:cf:fa:1b:5e:c9: b0:ac:5a:ab:ed:30:22:3a:8b:51:05:ae:ea:c6:9f:d6:a4:d1: 0d:be:26:06:76:ec:3d:72:28:b9:bb:e7:d0:7b:38:bc:51:68: 2a:da:5c:d5:2c:31:e9:7e:91:4b:e0:c8:f3:0a:70:59:30:b5: 69:2e:60:a7:6b:6d:36:51:23:76:db:6d:78:96:3d:7a:4a:1a: 78:e6:86:08:16:d2:56:54:a6:fe:8a:7b:3b:87:74:4c:7c:ba: ef:bc:29:62:50:5c:96:bc:e9:4e:50:7a:80:99:bd:f6:eb:67: d2:74:58:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRFMzgxMTAvBgNVBAUTKEQ5NTU5NUM2MDk1QjRERkFFMkNCOUI0NUI5MDg5Q0My NjIzRDk0QTMwHhcNMjUwNTMwMTc1MjQzWhcNMjUwNjA2MTc1MjQzWjAYMRYwFAYD VQQDEw02ODM5ZjA2Yi05ZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD98QF9Nsu7k05meEHdBhocfCi2JhtMSZqDmRj2Nrdf8oBgxIjD/qGDCgMqc zk8ZIhc+78+1qYvLT3YdRKRArsfBMU5SYyx//889Ts8PEIBRaB2j9kYiZkgQY23A W7uVi3bT8keEUHdn92CNwWC5FsvdTQ+BN5hWFYdiokzoq2LidCi8gPdASZUUFQEn ZnlCXRAwNxOtOv1IaEDZuvqbL0VpbTlzVxAaNV6A036QO6tNpRaBVKF+QvD29LdE Q73Op5LCimQwzN4aAnoDTALW3+JH9ck9y6Nmlv9/uPM2ghbOwrt0IoN476J+H5vX /Sg4hl+Om0xJwI/UAJ6LoKOOHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO56P47V pChqbrHZEWjGCAtaqBjmMB8GA1UdIwQYMBaAFNlVlcYJW0364subRbkInMJiPZSj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEUzOC83MzMzMUI1RTkx RDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRmcml5NXRGdVFpY3dtSTls S00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWV1Z4Z2xiVGZyaXk1dEZ1UWljd21JOWxLTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEUzOC83MzMzMUI1RTkxRDExMUU5QjZBOTMyNUJDNEY5QUUwMi8yVldWeGdsYlRm cml5NXRGdVFpY3dtSTlsS00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn/3a9OfZONft15XlY0C7QINJiTe/MLGyo2ZEtl7fGo2N2bsFrhXkE TCqmHyknUKzw/RMgnlqMDYFmE4+1aDW6kPvC3RwU7Pj0q2Ypdgus2Uw+IU7LP565 d+/20aKxi0xFppr7e4TPiyuHELf4JExUuMGwv0qcio3dWnEBz4RRZXDaR3e8KQja QoDGz/obXsmwrFqr7TAiOotRBa7qxp/WpNENviYGduw9cii5u+fQezi8UWgq2lzV LDHpfpFL4MjzCnBZMLVpLmCna202USN22214lj16Shp45oYIFtJWVKb+ins7h3RM fLrvvCliUFyWvOlOUHqAmb3262fSdFgr -----END CERTIFICATE-----Generated at Sat May 31 17:28:52 2025 by rpki-client