$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft File: ck2EEAslmZMZA4aasFIgd2yLrEI.mft (raw, json) Hash identifier: sxU9tvWV5ZyUN6oYTxQlGbhvH+jFIMoct2H871JoiUs= Subject key identifier: 14:DA:07:00:33:9C:4A:3A:72:7E:DA:5B:AB:F4:4B:F2:DF:5A:FB:17 Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 Certificate issuer: /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft Manifest number: 0184 Signing time: Sat 31 May 2025 03:17:55 +0000 Manifest this update: Sat 31 May 2025 03:17:54 +0000 Manifest next update: Sat 07 Jun 2025 03:17:54 +0000 Files and hashes: 1: ck2EEAslmZMZA4aasFIgd2yLrEI.crl (hash: wQ2gF5txyZFmYD/Jn69zGT4bq7VO4WTfAmjVhQO/zTk=) 2: AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (hash: XG0ognbrHuDFVvw75BGHMdtpiHu/beUvd7TsChbHkCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42 Validity Not Before: May 31 03:17:54 2025 GMT Not After : Jun 7 03:17:54 2025 GMT Subject: CN=683a74e2-5b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:1d:b5:55:62:4e:a2:3e:83:31:e2:34:7c: 92:57:c8:a1:ee:a6:ef:91:e4:bc:da:1e:55:d7:5e: d6:bf:c8:11:66:66:a0:5c:49:70:20:80:82:89:6d: 2a:e1:29:6f:d4:db:50:8c:a1:2e:b6:c3:5b:70:4f: 9a:10:ed:46:d1:5f:93:9b:94:7d:47:b6:75:2d:b2: 95:7c:3f:92:a5:38:65:71:18:12:fa:18:9d:aa:b0: 4f:b2:e3:48:36:31:18:d1:15:09:40:4f:d7:49:0b: 9d:7d:a5:b7:96:d0:bc:55:8d:53:f3:ee:ff:ee:57: c1:3a:c4:d1:fc:2b:5e:71:03:17:b9:67:32:73:fd: 6a:dd:87:66:c6:0e:81:e0:64:10:5f:9d:cb:fd:2e: 5a:b3:91:d5:35:82:7d:c6:9e:59:42:15:0a:be:9a: 72:d6:a9:c9:73:cf:f1:ff:97:0f:e8:68:b5:a7:8f: 98:f6:d2:3d:98:b1:b8:90:71:bf:a7:b6:9b:78:bf: c5:27:76:3a:f6:d5:ed:2c:0d:16:e9:97:dd:a6:e8: d7:c9:d9:6b:44:7c:a4:b5:1e:d8:1b:1a:c9:ff:3b: 6b:ec:40:41:34:8f:b7:c2:15:07:f2:f9:ff:35:bd: 83:a1:fd:6e:ee:6f:1c:35:19:02:a7:01:9e:5c:71: 92:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DA:07:00:33:9C:4A:3A:72:7E:DA:5B:AB:F4:4B:F2:DF:5A:FB:17 X509v3 Authority Key Identifier: keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7c:03:6a:8c:70:cc:28:49:ca:6f:75:a4:c8:66:34:41:32: 8d:45:0e:c7:59:0c:dd:d6:91:c7:2f:74:a6:37:b9:48:cd:31: 6e:db:de:49:62:5d:17:84:f9:24:5b:e1:74:3c:19:d1:8f:61: a3:fc:58:0f:d1:e9:01:b8:6b:88:e8:19:9c:cb:e6:8e:99:40: f2:01:cb:6a:f5:20:2e:c3:85:89:23:c7:07:36:27:0d:a1:2c: 32:54:1b:dd:ea:9e:17:06:cc:76:5f:b6:b9:e7:c9:4c:a7:9a: 7b:41:c3:99:92:4a:09:66:b1:a6:00:07:40:9f:14:65:3c:9d: 06:cb:08:51:3d:f7:88:96:9c:59:21:89:79:6b:82:45:6e:db: ad:45:b4:b3:4f:b9:51:78:c7:85:7e:13:4b:3b:ec:79:09:9c: eb:12:d2:44:62:eb:4e:3e:cc:1a:e5:f6:2a:a4:67:49:ae:b6: ce:2a:22:e0:25:98:fa:6c:b0:14:fd:3d:6d:d7:61:08:26:bf: 27:91:45:d5:d7:c5:e1:54:23:7f:13:78:66:c8:b6:f7:ee:ae: e1:96:2c:8e:a8:d1:c2:56:7c:9b:90:04:4c:05:ec:55:d6:f4: 2d:bc:76:e2:de:5f:36:40:1a:3f:5d:76:20:7f:27:4a:df:e9: b0:8e:c8:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzOUUxMTAvBgNVBAUTKDcyNEQ4NDEwMEIyNTk5OTMxOTAzODY5QUIwNTIyMDc3 NkM4QkFDNDIwHhcNMjUwNTMxMDMxNzU0WhcNMjUwNjA3MDMxNzU0WjAYMRYwFAYD VQQDEw02ODNhNzRlMi01Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudcdtVViTqI+gzHiNHySV8ih7qbvkeS82h5V117Wv8gRZmagXElwIICCiW0q 4Slv1NtQjKEutsNbcE+aEO1G0V+Tm5R9R7Z1LbKVfD+SpThlcRgS+hidqrBPsuNI NjEY0RUJQE/XSQudfaW3ltC8VY1T8+7/7lfBOsTR/CtecQMXuWcyc/1q3Ydmxg6B 4GQQX53L/S5as5HVNYJ9xp5ZQhUKvppy1qnJc8/x/5cP6Gi1p4+Y9tI9mLG4kHG/ p7abeL/FJ3Y69tXtLA0W6ZfdpujXydlrRHyktR7YGxrJ/ztr7EBBNI+3whUH8vn/ Nb2Dof1u7m8cNRkCpwGeXHGS1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTaBwAz nEo6cn7aW6v0S/LfWvsXMB8GA1UdIwQYMBaAFHJNhBALJZmTGQOGmrBSIHdsi6xC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTM5RS9ENjQ0ODFGOEVF NDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1aTVpBNGFhc0ZJZ2QyeUxy RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrMkVFQXNsbVpNWkE0YWFzRklnZDJ5THJFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTM5RS9ENjQ0ODFGOEVFNDExMUVEQjk1NDVBMTZDNEY5QUUwMi9jazJFRUFzbG1a TVpBNGFhc0ZJZ2QyeUxyRUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNfANqjHDMKEnKb3WkyGY0QTKNRQ7HWQzd1pHHL3SmN7lIzTFu295J Yl0XhPkkW+F0PBnRj2Gj/FgP0ekBuGuI6Bmcy+aOmUDyActq9SAuw4WJI8cHNicN oSwyVBvd6p4XBsx2X7a558lMp5p7QcOZkkoJZrGmAAdAnxRlPJ0GywhRPfeIlpxZ IYl5a4JFbtutRbSzT7lReMeFfhNLO+x5CZzrEtJEYutOPswa5fYqpGdJrrbOKiLg JZj6bLAU/T1t12EIJr8nkUXV18XhVCN/E3hmyLb37q7hliyOqNHCVnybkARMBexV 1vQtvHbi3l82QBo/XXYgfydK3+mwjshk -----END CERTIFICATE-----Generated at Sat May 31 17:27:51 2025 by rpki-client