$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft File: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json) Hash identifier: rPpAcDVE7OoPn+k5UZyiKKE+V0DQ9ce4PR7TO2+n9f4= Subject key identifier: EA:A3:6B:DD:75:70:17:38:44:F5:4E:43:2A:8D:09:38:D1:9C:E9:0B Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 Certificate issuer: /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft Manifest number: 012D Signing time: Sat 31 May 2025 04:16:35 +0000 Manifest this update: Sat 31 May 2025 04:16:35 +0000 Manifest next update: Sat 07 Jun 2025 04:16:35 +0000 Files and hashes: 1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: U7M7nyc4N7sEAJ1bHXrei28pfhl0rhq0zayQuHBGtjo=) 2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: EiqR8ceEyotPW7mTenGqOUmU7tOEINSndqPS9QrRxbg=) 3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: QC3Es2zEONKxVGX898XgjJkGnVmiNLJUauLLvYvYOYw=) 4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: XP3+VtULxNMC516dv5hcQ2JtVHA6oyJ/06WzO92KEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A56A, serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1 Validity Not Before: May 31 04:16:35 2025 GMT Not After : Jun 7 04:16:35 2025 GMT Subject: CN=683a82a3-f00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:01:e2:82:6f:58:c5:6e:78:a1:05:33:e7: 32:41:ac:5f:a0:c4:7b:21:07:47:f3:97:b7:12:d0: 52:c7:15:df:0e:52:2a:3b:65:23:c0:fb:49:41:97: a0:d0:98:c0:ee:0c:c2:ee:df:cb:32:1f:65:db:f6: 6c:32:df:64:10:e5:7c:46:fd:69:b7:6b:f5:04:4d: 03:53:88:00:8f:3d:bb:cb:e8:2e:b0:18:7a:f2:19: c7:37:31:9f:db:de:9f:0f:76:fc:a9:a2:c2:9c:de: e3:0d:72:78:44:63:4d:71:55:36:b2:c1:26:f7:77: 6d:d5:9e:d3:87:5b:fe:4f:fe:79:df:fe:f7:9d:a9: 38:24:d7:1e:86:55:42:c1:a3:96:2a:5c:05:bb:85: 5f:a4:59:12:d4:a1:4a:f8:96:51:c2:35:75:dc:23: 73:27:b4:2b:22:b3:07:1f:63:64:95:18:63:d4:7d: 4a:13:8d:6c:d0:61:f2:9e:76:04:a5:48:41:df:93: 24:2a:f2:a0:34:3b:3c:cf:ef:82:fd:e3:5d:b7:d7: 37:8b:46:cd:bc:bf:55:54:1b:81:8e:19:03:ec:53: df:e3:88:fe:e8:e7:8e:b3:e7:8c:e1:9c:90:b8:e0: 07:e1:47:c6:7a:cf:ab:32:89:2b:93:73:ba:1e:05: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A3:6B:DD:75:70:17:38:44:F5:4E:43:2A:8D:09:38:D1:9C:E9:0B X509v3 Authority Key Identifier: keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b2:ea:f4:34:ac:14:e1:84:91:7f:39:42:d4:96:e3:2b:b4: 90:b6:64:a5:55:97:ba:68:38:a3:4e:06:ac:96:7f:74:b1:48: 1c:23:0e:20:cf:66:0d:55:99:83:4d:dd:b2:34:16:c8:f4:96: 92:45:fc:77:9a:aa:c5:57:8b:d4:5c:c0:a0:ba:ae:47:0f:5d: 41:91:8b:67:a0:7c:93:51:6a:be:63:02:ff:0a:12:f6:f5:88: 6e:aa:4f:83:cb:c7:63:3b:b3:49:9c:66:34:44:5d:70:17:f6: 08:b0:c1:cb:aa:46:ca:dd:fc:c1:c3:44:52:55:35:85:de:f3: 17:40:a2:68:7d:f0:3b:b5:0b:65:1b:0f:19:ff:0f:f9:cb:99: 36:90:85:2a:0c:60:39:03:80:6d:8c:be:7d:46:8f:5a:00:ae: 45:5f:8f:ab:17:3a:d3:a0:fa:1d:4b:73:e7:8d:02:c0:b4:d3: f4:a5:5e:92:1e:d8:69:7f:dd:e9:c0:1f:16:be:03:4b:5c:05: 72:2b:2d:87:9c:3d:76:bd:9e:8b:54:43:8a:f5:82:3b:b6:d8: c9:ee:e6:dc:13:cf:c5:ee:38:33:22:a5:c1:0b:e6:f7:cf:13: a2:8a:61:a6:c4:ad:c4:e6:6a:84:68:b7:ce:30:55:b1:6a:c8: a3:7e:d7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC QjZGMUVCRjEwHhcNMjUwNTMxMDQxNjM1WhcNMjUwNjA3MDQxNjM1WjAYMRYwFAYD VQQDEw02ODNhODJhMy1mMDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtSYB4oJvWMVueKEFM+cyQaxfoMR7IQdH85e3EtBSxxXfDlIqO2UjwPtJQZeg 0JjA7gzC7t/LMh9l2/ZsMt9kEOV8Rv1pt2v1BE0DU4gAjz27y+gusBh68hnHNzGf 296fD3b8qaLCnN7jDXJ4RGNNcVU2ssEm93dt1Z7Th1v+T/553/73nak4JNcehlVC waOWKlwFu4VfpFkS1KFK+JZRwjV13CNzJ7QrIrMHH2NklRhj1H1KE41s0GHynnYE pUhB35MkKvKgNDs8z++C/eNdt9c3i0bNvL9VVBuBjhkD7FPf44j+6OeOs+eM4ZyQ uOAH4UfGes+rMokrk3O6HgXZcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqja911 cBc4RPVOQyqNCTjRnOkLMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3 MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfsur0NKwU4YSRfzlC1JbjK7SQtmSlVZe6aDijTgasln90sUgcIw4g z2YNVZmDTd2yNBbI9JaSRfx3mqrFV4vUXMCguq5HD11BkYtnoHyTUWq+YwL/ChL2 9Yhuqk+Dy8djO7NJnGY0RF1wF/YIsMHLqkbK3fzBw0RSVTWF3vMXQKJoffA7tQtl Gw8Z/w/5y5k2kIUqDGA5A4BtjL59Ro9aAK5FX4+rFzrToPodS3PnjQLAtNP0pV6S Hthpf93pwB8WvgNLXAVyKy2HnD12vZ6LVEOK9YI7ttjJ7ubcE8/F7jgzIqXBC+b3 zxOiimGmxK3E5mqEaLfOMFWxasijfteP -----END CERTIFICATE-----Generated at Sat May 31 17:47:39 2025 by rpki-client