$ rpki-client -vvf rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft File: 2AV3_jUc7BMvwP-hiIerDHRrFPI.mft (raw, json) Hash identifier: C8Zwo2AOWGtWzlpwv1z6hUsmtW2ZytGfj64wvytbgkQ= Subject key identifier: D8:C4:E1:C2:71:3D:56:02:4F:68:DD:D2:33:3C:D6:37:39:2E:F1:87 Authority key identifier: D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 Certificate issuer: /CN=A9169FA9/serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Certificate serial: 0193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft Manifest number: 0190 Signing time: Sat 31 May 2025 03:11:43 +0000 Manifest this update: Sat 31 May 2025 03:11:42 +0000 Manifest next update: Sat 07 Jun 2025 03:11:42 +0000 Files and hashes: 1: 2AV3_jUc7BMvwP-hiIerDHRrFPI.crl (hash: DD80RUFjQmHV9rpSbF2OigU5l6jSEBI8D0F9loDeuZI=) 2: 732F4132D85E11EDB34ED618C4F9AE02.roa (hash: lrJXxDbusDQNnxZVLvp/KiXpw4drpdRHgf2/ruvhTVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 403 (0x193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169FA9, serialNumber=D80577FE351CEC132FC0FFA18887AB0C746B14F2 Validity Not Before: May 31 03:11:42 2025 GMT Not After : Jun 7 03:11:42 2025 GMT Subject: CN=683a736e-d271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:82:1c:e4:25:c1:f2:c9:d9:c6:df:79:19: 3b:b3:c0:6a:bd:b3:db:5b:7f:54:2e:42:a7:1c:b1: 51:e7:bd:28:2e:04:e3:52:41:3b:49:a4:0b:61:27: 52:5b:80:32:d9:2f:48:3d:70:09:13:84:77:0a:62: 59:52:29:f3:9a:b6:4e:ee:69:cc:54:97:bc:e2:7b: be:29:5b:b2:00:4f:bd:36:29:a2:71:15:82:6a:18: 82:52:ea:55:82:56:0c:29:32:ec:5f:1c:95:51:ec: 19:52:08:67:60:94:38:f5:aa:d3:b9:96:b0:52:ff: 85:f1:d8:fc:38:43:03:fb:56:21:00:f8:09:7f:59: a6:cb:79:36:11:f0:d9:51:4b:4d:16:b8:f1:e8:78: cd:7d:ce:61:e0:6c:2d:ee:d6:63:cd:75:2d:f4:cd: 8e:65:e3:a0:07:ad:4d:f4:0b:64:4f:f8:61:5a:d1: 6e:90:39:f1:cb:37:1a:f0:37:82:91:86:85:9e:ba: 74:60:b3:d0:da:6b:1c:46:90:89:46:9f:89:4d:b7: e5:23:73:e1:cd:19:84:0d:ff:bf:06:40:52:fd:18: 7e:4b:66:9f:6b:39:f4:2a:bb:93:20:26:b1:99:fc: e5:27:09:a9:aa:81:2b:5c:71:8b:b6:39:9c:0a:fb: b8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:C4:E1:C2:71:3D:56:02:4F:68:DD:D2:33:3C:D6:37:39:2E:F1:87 X509v3 Authority Key Identifier: keyid:D8:05:77:FE:35:1C:EC:13:2F:C0:FF:A1:88:87:AB:0C:74:6B:14:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2AV3_jUc7BMvwP-hiIerDHRrFPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169FA9/7C0F4D82D85A11ED881AC812C4F9AE02/2AV3_jUc7BMvwP-hiIerDHRrFPI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:d4:ec:02:47:33:2e:1a:94:2d:9a:83:76:4b:a2:c3:4f:7f: 7f:18:02:d7:5a:f5:2d:e3:9a:99:63:30:93:09:9c:7a:20:0b: d0:ee:92:a5:13:78:ea:84:8d:32:ea:f0:01:13:67:82:1a:26: 04:91:e9:4e:d2:4f:de:aa:cc:93:db:89:3e:0e:3d:12:63:2b: 3c:88:8a:cb:00:cf:4d:71:86:a7:ad:ef:15:cb:ae:d2:e1:41: d4:81:88:86:e8:05:40:92:43:48:8b:69:1d:fc:1c:9f:48:5a: 49:29:8c:53:24:a8:77:09:c4:18:7e:c5:57:aa:dd:96:0a:11: 73:08:0a:f2:65:69:fc:74:65:5d:e1:c8:53:39:e1:d1:9e:d4: 9b:d0:e6:40:60:fe:fe:2b:d3:99:b0:a0:62:99:c4:fc:e9:29: 0b:30:cb:a9:fe:f7:0a:6d:0c:a5:a5:91:68:0e:2c:5d:65:99: 5d:04:ba:43:16:a4:eb:35:e1:90:fa:dd:92:bf:a3:8b:35:7e: 51:6f:ee:c6:25:4f:a9:bd:22:bd:5d:75:07:1a:14:a6:1a:e8: 61:be:04:9b:2e:c5:cf:a0:c1:a3:fd:90:87:6d:78:80:f5:31: e9:7b:13:ab:ae:d1:12:d2:d3:9a:17:4c:da:bc:70:d5:da:5b: 15:ba:ae:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlGQTkxMTAvBgNVBAUTKEQ4MDU3N0ZFMzUxQ0VDMTMyRkMwRkZBMTg4ODdBQjBD NzQ2QjE0RjIwHhcNMjUwNTMxMDMxMTQyWhcNMjUwNjA3MDMxMTQyWjAYMRYwFAYD VQQDEw02ODNhNzM2ZS1kMjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugqCHOQlwfLJ2cbfeRk7s8BqvbPbW39ULkKnHLFR570oLgTjUkE7SaQLYSdS W4Ay2S9IPXAJE4R3CmJZUinzmrZO7mnMVJe84nu+KVuyAE+9NimicRWCahiCUupV glYMKTLsXxyVUewZUghnYJQ49arTuZawUv+F8dj8OEMD+1YhAPgJf1mmy3k2EfDZ UUtNFrjx6HjNfc5h4Gwt7tZjzXUt9M2OZeOgB61N9AtkT/hhWtFukDnxyzca8DeC kYaFnrp0YLPQ2mscRpCJRp+JTbflI3PhzRmEDf+/BkBS/Rh+S2afazn0KruTICax mfzlJwmpqoErXHGLtjmcCvu4ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjE4cJx PVYCT2jd0jM81jc5LvGHMB8GA1UdIwQYMBaAFNgFd/41HOwTL8D/oYiHqwx0axTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUZBOS83QzBGNEQ4MkQ4 NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdCTXZ3UC1oaUllckRIUnJG UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJBVjNfalVjN0JNdndQLWhpSWVyREhSckZQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUZBOS83QzBGNEQ4MkQ4NUExMUVEODgxQUM4MTJDNEY5QUUwMi8yQVYzX2pVYzdC TXZ3UC1oaUllckRIUnJGUEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC71OwCRzMuGpQtmoN2S6LDT39/GALXWvUt45qZYzCTCZx6IAvQ7pKl E3jqhI0y6vABE2eCGiYEkelO0k/eqsyT24k+Dj0SYys8iIrLAM9NcYanre8Vy67S 4UHUgYiG6AVAkkNIi2kd/ByfSFpJKYxTJKh3CcQYfsVXqt2WChFzCAryZWn8dGVd 4chTOeHRntSb0OZAYP7+K9OZsKBimcT86SkLMMup/vcKbQylpZFoDixdZZldBLpD FqTrNeGQ+t2Sv6OLNX5Rb+7GJU+pvSK9XXUHGhSmGuhhvgSbLsXPoMGj/ZCHbXiA 9THpexOrrtES0tOaF0zavHDV2lsVuq5y -----END CERTIFICATE-----Generated at Sat May 31 17:30:24 2025 by rpki-client