$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft File: 2vWZnAdAuMks1UA3tpsETNValVg.mft (raw, json) Hash identifier: GmmIenBR5Hlvsd4wPJiJqYqEwPopBZqHulvexGBxURY= Subject key identifier: 42:7C:F2:82:20:73:3F:12:C0:1F:A1:F8:0C:70:52:53:19:C1:08:63 Authority key identifier: DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 Certificate issuer: /CN=A91C31A2/serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft Manifest number: 020F Signing time: Sat 31 May 2025 02:10:47 +0000 Manifest this update: Sat 31 May 2025 02:10:46 +0000 Manifest next update: Sat 07 Jun 2025 02:10:46 +0000 Files and hashes: 1: 2vWZnAdAuMks1UA3tpsETNValVg.crl (hash: s9L+E1fEmkTW83W4KBYSTrIrfPRgiIakm0/Gh0t4P1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=DAF5999C0740B8C92CD54037B69B044CD55A9558 Validity Not Before: May 31 02:10:46 2025 GMT Not After : Jun 7 02:10:46 2025 GMT Subject: CN=683a6526-0392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:97:fe:bb:7a:83:fc:3d:80:8a:17:b3:39: be:0d:59:3d:a7:fb:bd:2b:aa:7e:75:e4:fc:3e:45: 9e:fc:26:9d:60:a6:fe:75:ff:dc:ea:ad:64:98:77: ff:c2:31:6d:4f:bb:89:f6:de:0c:51:3b:79:5b:e3: aa:79:d0:d3:fa:48:5f:38:9f:2c:45:d4:4e:f1:04: 5c:e8:68:5f:bf:84:b8:99:97:64:38:bb:ee:6d:ed: f6:dc:97:f3:cd:bf:89:73:69:21:8d:fe:5a:e4:fb: 2e:4d:e6:a2:e8:ba:d6:06:0f:e7:b3:54:f0:02:eb: ec:7f:f0:5a:48:ec:16:8a:7b:b3:f4:d1:90:b8:f5: 99:ce:13:65:0d:ed:4b:db:e5:35:e2:d1:10:82:6e: 6d:54:22:d9:78:e9:1e:b7:f9:d7:76:99:04:bd:92: bb:f4:ab:1e:10:aa:02:58:5b:b5:0e:9e:ea:5e:9d: 7f:f6:0d:28:ba:81:fe:b0:17:ea:47:17:84:16:14: e3:2c:39:78:98:27:ca:90:51:d3:f2:6a:25:0e:cc: 4a:fd:a0:6a:7d:c5:40:6a:5c:01:c2:cd:ea:99:09: 12:4b:b2:e0:90:b6:6c:51:bb:46:65:f5:40:ac:db: 14:83:2f:03:e7:68:12:22:11:9a:01:12:9f:2b:6c: 4e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:F2:82:20:73:3F:12:C0:1F:A1:F8:0C:70:52:53:19:C1:08:63 X509v3 Authority Key Identifier: keyid:DA:F5:99:9C:07:40:B8:C9:2C:D5:40:37:B6:9B:04:4C:D5:5A:95:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2vWZnAdAuMks1UA3tpsETNValVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/DE033336357211EDAE977839C4F9AE02/2vWZnAdAuMks1UA3tpsETNValVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:25:35:e1:74:ab:9e:ce:5d:2c:9a:dd:ca:2b:b3:41:65:d8: 55:a2:c6:4a:fd:ab:34:a3:be:e9:fb:a9:7f:80:7a:72:0c:ac: cb:1d:90:14:3d:7c:d1:f1:b8:9e:86:eb:25:b2:ab:9c:9c:48: 6a:f4:05:53:98:63:56:03:a0:df:76:21:ce:4c:dc:dc:cd:52: 9f:ac:76:a8:b4:97:38:96:d8:d0:f8:2f:db:68:db:29:36:e5: a5:a7:09:da:47:c5:91:fc:06:e6:27:ca:26:aa:7a:35:08:32: d1:9a:a5:f9:46:29:a6:4b:bd:45:1f:a9:77:12:9c:7e:88:14: 40:9e:40:0c:92:a3:69:53:0a:a2:05:fb:8b:f3:b4:81:35:eb: 8e:82:39:98:a9:0e:59:19:1b:62:dd:a0:88:fb:de:db:c3:f9: d4:c3:ef:e6:d4:57:f2:b8:13:8e:82:79:e8:4c:84:fc:ea:4c: 40:21:50:80:94:65:98:da:d2:e9:36:ff:76:3a:b1:69:5a:4b: b7:e9:31:93:97:a6:37:c4:c8:ee:00:e0:0f:ba:60:39:ad:ae: 7e:45:db:c5:23:b6:51:62:61:31:c8:cc:9d:29:63:94:c4:e8: bf:2e:e8:74:1b:b2:21:be:73:2c:b9:c3:0d:49:02:25:9a:7b: eb:54:86:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKERBRjU5OTlDMDc0MEI4QzkyQ0Q1NDAzN0I2OUIwNDRD RDU1QTk1NTgwHhcNMjUwNTMxMDIxMDQ2WhcNMjUwNjA3MDIxMDQ2WjAYMRYwFAYD VQQDEw02ODNhNjUyNi0wMzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEqX/rt6g/w9gIoXszm+DVk9p/u9K6p+deT8PkWe/CadYKb+df/c6q1kmHf/ wjFtT7uJ9t4MUTt5W+OqedDT+khfOJ8sRdRO8QRc6Ghfv4S4mZdkOLvube323Jfz zb+Jc2khjf5a5PsuTeai6LrWBg/ns1TwAuvsf/BaSOwWinuz9NGQuPWZzhNlDe1L 2+U14tEQgm5tVCLZeOket/nXdpkEvZK79KseEKoCWFu1Dp7qXp1/9g0ouoH+sBfq RxeEFhTjLDl4mCfKkFHT8molDsxK/aBqfcVAalwBws3qmQkSS7LgkLZsUbtGZfVA rNsUgy8D52gSIhGaARKfK2xO4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJ88oIg cz8SwB+h+AxwUlMZwQhjMB8GA1UdIwQYMBaAFNr1mZwHQLjJLNVAN7abBEzVWpVY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ERTAzMzMzNjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVNa3MxVUEzdHBzRVROVmFs VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJ2V1puQWRBdU1rczFVQTN0cHNFVE5WYWxWZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzFBMi9ERTAzMzMzNjM1NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi8ydldabkFkQXVN a3MxVUEzdHBzRVROVmFsVmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDJTXhdKuezl0smt3KK7NBZdhVosZK/as0o77p+6l/gHpyDKzLHZAU PXzR8biehuslsqucnEhq9AVTmGNWA6DfdiHOTNzczVKfrHaotJc4ltjQ+C/baNsp NuWlpwnaR8WR/AbmJ8omqno1CDLRmqX5RimmS71FH6l3Epx+iBRAnkAMkqNpUwqi BfuL87SBNeuOgjmYqQ5ZGRti3aCI+97bw/nUw+/m1FfyuBOOgnnoTIT86kxAIVCA lGWY2tLpNv92OrFpWku36TGTl6Y3xMjuAOAPumA5ra5+RdvFI7ZRYmExyMydKWOU xOi/Luh0G7IhvnMsucMNSQIlmnvrVIZf -----END CERTIFICATE-----Generated at Sat May 31 17:47:17 2025 by rpki-client