$ rpki-client -vvf rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft File: 2DvcT6zNnbegvEa0JE6jEHBgS5c.mft (raw, json) Hash identifier: jcwMWKQwlluwqVMPDyEleF+5uvm8gg2BhZkvDoBXuzQ= Subject key identifier: 3A:B4:52:97:03:5E:5D:47:FA:4B:74:98:BA:85:65:A6:92:CE:FC:03 Authority key identifier: D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97 Certificate issuer: /CN=A914F870/serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft Manifest number: 43 Signing time: Sat 31 May 2025 07:00:52 +0000 Manifest this update: Sat 31 May 2025 07:00:51 +0000 Manifest next update: Sat 07 Jun 2025 07:00:51 +0000 Files and hashes: 1: 2DvcT6zNnbegvEa0JE6jEHBgS5c.crl (hash: 6J2N1L+Va1z37RhZXY9aInwBhUvDCcXUoyJ86TCCpwA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914F870, serialNumber=D83BDC4FACCD9DB7A0BC46B4244EA31070604B97 Validity Not Before: May 31 07:00:51 2025 GMT Not After : Jun 7 07:00:51 2025 GMT Subject: CN=683aa924-1b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e6:2c:b2:16:31:4f:41:15:ae:2d:32:cb:75: 1a:e6:75:d2:5c:87:a0:ab:da:b6:65:2b:89:92:4d: c9:41:cb:84:ff:dd:48:89:18:42:94:f1:b5:e5:15: 8e:f2:94:40:38:e0:c3:34:65:76:66:e3:fd:88:06: 21:b2:6f:df:9b:1d:92:e0:06:3d:a9:fa:ca:43:70: ed:0b:e7:c5:a2:57:fc:cc:27:22:57:80:bc:24:75: 50:89:0d:50:da:26:16:67:fb:8d:f7:3a:27:6e:2f: 4d:80:2e:24:3b:27:86:d9:36:34:a1:76:5d:46:93: 19:a4:c8:a1:5b:dc:45:23:43:3d:71:72:5e:bd:8d: 34:95:df:8b:86:60:ba:fa:8e:d6:74:2e:66:32:cf: 36:51:9e:17:e0:76:f8:cb:90:08:25:a8:bf:b7:7e: 7c:89:f2:ed:7d:b9:2f:d9:06:8e:c7:cc:51:41:5f: f6:53:b6:2d:64:07:ae:e6:a3:09:b5:59:e4:d9:7e: 86:df:07:7e:a9:c7:5e:01:98:25:cd:e5:a4:ba:00: f7:62:34:20:80:ba:21:b1:22:2f:51:de:a7:dd:b6: b9:f3:0a:ac:9f:ab:fa:0b:19:fc:7f:a6:a9:78:ab: a8:32:e2:56:e1:98:2d:45:c0:48:53:82:b0:34:b6: 92:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B4:52:97:03:5E:5D:47:FA:4B:74:98:BA:85:65:A6:92:CE:FC:03 X509v3 Authority Key Identifier: keyid:D8:3B:DC:4F:AC:CD:9D:B7:A0:BC:46:B4:24:4E:A3:10:70:60:4B:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DvcT6zNnbegvEa0JE6jEHBgS5c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F870/D2E24C98D7E211EFAF0B3B7DC4F9AE02/2DvcT6zNnbegvEa0JE6jEHBgS5c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a7:ed:aa:c0:ac:70:b1:8d:49:7e:f1:a8:5a:e5:cd:17:15: 43:90:5f:39:b5:b4:37:33:49:5f:8e:8a:23:7a:cb:d5:cd:8c: 0c:e4:47:52:ae:11:a6:16:72:1a:81:f7:95:3c:2c:19:9f:22: d7:27:b1:dd:5e:e2:c8:87:72:e3:db:d1:52:7f:50:0a:9e:48: 4e:9f:f2:04:69:1e:7f:48:34:17:0d:cd:41:4f:ea:66:43:86: 9e:dc:cb:be:42:5f:98:16:dd:1a:ad:9f:b2:ab:a2:83:5e:d2: b4:05:fe:8f:8a:b7:05:f8:b3:6e:38:4d:10:d5:bc:a0:6e:ff: 5b:8a:a2:ed:a8:4f:ae:87:66:65:ab:1b:dd:fc:46:e1:b3:2a: eb:f4:aa:aa:d7:a6:fe:c7:c9:c3:37:38:20:68:52:2e:8a:c3: 64:3b:ef:1d:64:29:0e:f6:b6:75:3a:32:57:9b:d0:77:22:17: 73:33:61:86:0d:46:40:44:e1:53:77:14:a7:d4:a9:6a:eb:95: 03:43:28:73:42:8b:be:61:ac:74:96:46:13:79:c5:f1:df:1f: 4a:57:e4:d6:30:9b:75:ac:05:af:cc:e3:c7:96:83:9e:58:60: 64:c0:d3:77:f6:f2:e4:77:41:56:55:03:9b:ff:82:9a:54:24: 5c:48:cb:90 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Rjg3MDExMC8GA1UEBRMoRDgzQkRDNEZBQ0NEOURCN0EwQkM0NkI0MjQ0RUEzMTA3 MDYwNEI5NzAeFw0yNTA1MzEwNzAwNTFaFw0yNTA2MDcwNzAwNTFaMBgxFjAUBgNV BAMTDTY4M2FhOTI0LTFiMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf5iyyFjFPQRWuLTLLdRrmddJch6Cr2rZlK4mSTclBy4T/3UiJGEKU8bXlFY7y lEA44MM0ZXZm4/2IBiGyb9+bHZLgBj2p+spDcO0L58WiV/zMJyJXgLwkdVCJDVDa JhZn+433OiduL02ALiQ7J4bZNjShdl1GkxmkyKFb3EUjQz1xcl69jTSV34uGYLr6 jtZ0LmYyzzZRnhfgdvjLkAglqL+3fnyJ8u19uS/ZBo7HzFFBX/ZTti1kB67mowm1 WeTZfobfB36px14BmCXN5aS6APdiNCCAuiGxIi9R3qfdtrnzCqyfq/oLGfx/pql4 q6gy4lbhmC1FwEhTgrA0tpLdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOrRSlwNe XUf6S3SYuoVlppLO/AMwHwYDVR0jBBgwFoAU2DvcT6zNnbegvEa0JE6jEHBgS5cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRGODcwL0QyRTI0Qzk4RDdF MjExRUZBRjBCM0I3REM0RjlBRTAyLzJEdmNUNnpObmJlZ3ZFYTBKRTZqRUhCZ1M1 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMkR2Y1Q2ek5uYmVndkVhMEpFNmpFSEJnUzVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRG ODcwL0QyRTI0Qzk4RDdFMjExRUZBRjBCM0I3REM0RjlBRTAyLzJEdmNUNnpObmJl Z3ZFYTBKRTZqRUhCZ1M1Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJun7arArHCxjUl+8aha5c0XFUOQXzm1tDczSV+OiiN6y9XNjAzkR1Ku EaYWchqB95U8LBmfItcnsd1e4siHcuPb0VJ/UAqeSE6f8gRpHn9INBcNzUFP6mZD hp7cy75CX5gW3Rqtn7KrooNe0rQF/o+KtwX4s244TRDVvKBu/1uKou2oT66HZmWr G938RuGzKuv0qqrXpv7HycM3OCBoUi6Kw2Q77x1kKQ72tnU6Mleb0HciF3MzYYYN RkBE4VN3FKfUqWrrlQNDKHNCi75hrHSWRhN5xfHfH0pX5NYwm3WsBa/M48eWg55Y YGTA03f28uR3QVZVA5v/gppUJFxIy5A= -----END CERTIFICATE-----Generated at Sat May 31 16:52:11 2025 by rpki-client