$ rpki-client -vvf rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft File: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft (raw, json) Hash identifier: ChUlQUtghQbwvguFrzoZ1u+UIf8NUl1RYqFuwpwBHP4= Subject key identifier: 90:F8:69:6F:F4:AF:44:7C:F4:8B:F1:E4:97:D9:71:8A:0C:14:0B:EF Authority key identifier: 29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 Certificate issuer: /CN=A917F241/serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft Manifest number: CE Signing time: Sat 31 May 2025 05:20:36 +0000 Manifest this update: Sat 31 May 2025 05:20:35 +0000 Manifest next update: Sat 07 Jun 2025 05:20:35 +0000 Files and hashes: 1: Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl (hash: yo6t+jRMASVFL3UBnFze1mH0CGASbBqJXTclJd7EguQ=) 2: A0B44D9C60E211EFB1283930C4F9AE02.roa (hash: We+bh/dPouK8NlGju2k+lFoIHBb/HkpPfF89DMkSLSg=) 3: 7434811060E211EFBAE0C52FC4F9AE02.roa (hash: OvtEst3O8Yb7GSI88hSTYs6uncMGZjm+NzSGzxQ2axk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F241, serialNumber=29CD8DF8806E11674CBC5F9DF4DBF8D23E0C2283 Validity Not Before: May 31 05:20:35 2025 GMT Not After : Jun 7 05:20:35 2025 GMT Subject: CN=683a91a3-a3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c9:9d:da:4f:c7:55:04:72:7d:f3:04:38:0e: 8e:0d:8e:cf:5a:6c:2c:ac:ac:24:3c:bb:26:2a:b6: cd:85:cc:05:a7:bf:f3:0a:61:e2:3e:78:39:67:d7: 08:76:7d:74:dd:44:3d:34:c2:ec:01:cf:b2:9f:40: 3f:64:65:53:79:7d:be:f0:42:ad:92:74:62:bb:74: 02:5b:e1:5e:d6:cc:98:7f:7c:ea:bd:0c:e3:c9:9f: 2c:1e:a1:c4:3f:43:2f:7d:ce:97:67:95:f5:66:68: c0:98:0f:c7:27:e1:bb:c7:20:19:7a:d8:78:69:4e: 24:57:03:79:3d:b9:eb:a4:a9:a7:6d:55:78:ce:67: 5e:a3:ad:f7:bb:3a:77:d9:3b:05:6b:f1:82:95:5d: 6f:77:de:c1:ac:0a:4a:65:7e:6b:a6:0b:52:5b:52: dc:8b:a3:17:4d:87:77:7e:de:dd:26:46:15:59:53: 63:da:3c:70:07:0d:2a:9c:51:43:26:f6:69:80:89: 07:14:f5:07:fe:97:19:0e:3e:93:85:63:f1:ff:b7: c9:12:3c:cb:95:ba:75:90:e7:39:ba:66:38:d1:0b: e0:76:bd:46:5f:52:23:50:ba:21:d5:43:19:01:15: 8f:6a:75:89:e5:6f:da:c0:82:6b:69:c7:28:7f:6f: 9b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F8:69:6F:F4:AF:44:7C:F4:8B:F1:E4:97:D9:71:8A:0C:14:0B:EF X509v3 Authority Key Identifier: keyid:29:CD:8D:F8:80:6E:11:67:4C:BC:5F:9D:F4:DB:F8:D2:3E:0C:22:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F241/EB2136880BF611EF9CA9C151C4F9AE02/Kc2N-IBuEWdMvF-d9Nv40j4MIoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:7a:5e:5f:e1:f1:93:f5:f6:1a:3d:b4:4a:14:cb:ba:b7:ff: a2:0c:15:86:ab:84:1a:8c:4a:77:7b:34:cc:82:14:af:a4:e2: 8d:80:e7:da:bf:fb:e0:b7:9a:cb:01:37:27:df:36:52:5e:16: ef:c3:1a:e0:a6:89:09:13:24:80:4b:58:ea:04:19:2e:39:52: a9:3f:a8:59:7c:fc:40:5c:7e:30:1c:3a:9c:ff:00:fc:0c:93: f2:38:79:99:52:57:0d:67:d9:80:8c:b1:f7:76:7b:2d:a5:a1: 10:c2:94:d4:39:8b:8d:06:fd:de:14:e6:ac:af:57:c0:a7:6a: a0:50:96:60:f6:d7:17:84:34:fa:cb:06:4a:8a:cd:f5:3d:eb: cf:62:b9:30:5d:12:38:b0:0b:28:a9:07:3c:80:11:72:60:3d: 31:95:3b:cf:80:ac:5a:32:05:dc:4a:b2:6d:a4:a7:6a:5f:1c: ac:94:d5:84:26:83:70:dd:2d:1d:e7:9d:04:91:ba:f7:5c:0b: a5:e0:2b:bc:47:49:47:4b:5f:62:57:f8:50:f2:4b:6e:59:90: 2a:af:6e:f5:93:4e:9b:f0:34:af:f7:cf:6b:71:63:a3:2a:84: ea:aa:be:84:cc:d4:f0:03:65:89:7a:2f:99:e7:4d:dd:fd:f9: 0a:f6:06:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNDExMTAvBgNVBAUTKDI5Q0Q4REY4ODA2RTExNjc0Q0JDNUY5REY0REJGOEQy M0UwQzIyODMwHhcNMjUwNTMxMDUyMDM1WhcNMjUwNjA3MDUyMDM1WjAYMRYwFAYD VQQDEw02ODNhOTFhMy1hM2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38md2k/HVQRyffMEOA6ODY7PWmwsrKwkPLsmKrbNhcwFp7/zCmHiPng5Z9cI dn103UQ9NMLsAc+yn0A/ZGVTeX2+8EKtknRiu3QCW+Fe1syYf3zqvQzjyZ8sHqHE P0Mvfc6XZ5X1ZmjAmA/HJ+G7xyAZeth4aU4kVwN5PbnrpKmnbVV4zmdeo633uzp3 2TsFa/GClV1vd97BrApKZX5rpgtSW1Lci6MXTYd3ft7dJkYVWVNj2jxwBw0qnFFD JvZpgIkHFPUH/pcZDj6ThWPx/7fJEjzLlbp1kOc5umY40Qvgdr1GX1IjULoh1UMZ ARWPanWJ5W/awIJraccof2+b4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD4aW/0 r0R89Ivx5JfZcYoMFAvvMB8GA1UdIwQYMBaAFCnNjfiAbhFnTLxfnfTb+NI+DCKD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI0MS9FQjIxMzY4ODBC RjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVXZE12Ri1kOU52NDBqNE1J b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tjMk4tSUJ1RVdkTXZGLWQ5TnY0MGo0TUlvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI0MS9FQjIxMzY4ODBCRjYxMUVGOUNBOUMxNTFDNEY5QUUwMi9LYzJOLUlCdUVX ZE12Ri1kOU52NDBqNE1Jb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJel5f4fGT9fYaPbRKFMu6t/+iDBWGq4QajEp3ezTMghSvpOKNgOfa v/vgt5rLATcn3zZSXhbvwxrgpokJEySAS1jqBBkuOVKpP6hZfPxAXH4wHDqc/wD8 DJPyOHmZUlcNZ9mAjLH3dnstpaEQwpTUOYuNBv3eFOasr1fAp2qgUJZg9tcXhDT6 ywZKis31PevPYrkwXRI4sAsoqQc8gBFyYD0xlTvPgKxaMgXcSrJtpKdqXxyslNWE JoNw3S0d550Ekbr3XAul4Cu8R0lHS19iV/hQ8ktuWZAqr271k06b8DSv989rcWOj KoTqqr6EzNTwA2WJei+Z503d/fkK9gZk -----END CERTIFICATE-----Generated at Sat May 31 16:35:01 2025 by rpki-client