$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json) Hash identifier: z3nnSRgWcLaV+YMR9iKIupi1xykbOpr3ftuRV1nVNMY= Subject key identifier: 9B:CD:74:9A:BB:68:5B:F5:40:05:39:CC:26:BD:D6:75:61:D5:C7:9F Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft Manifest number: 0644 Signing time: Wed 12 Mar 2025 22:10:39 +0000 Manifest this update: Wed 12 Mar 2025 22:10:38 +0000 Manifest next update: Wed 19 Mar 2025 22:10:38 +0000 Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: /C13Yw2oI+3RsJnZdhHARxu3GD3b3n55KfXw/rs5KKg=) 2: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: 6WUJgqskzShx2CRmJsEzW4Lp5E25NIFa3cIFrPQTpQE=) 3: 88A31320809211EB938F4016C4F9AE02.roa (hash: bchSnNZ1JAHUbuS+ZuP7bZtOW8CbMzZJlPlo9vXpT60=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Mar 2025 22:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1 Validity Not Before: Mar 12 22:10:38 2025 GMT Not After : Mar 19 22:10:38 2025 GMT Subject: CN=67d2065e-222c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:31:2f:a4:4e:0b:0d:c2:3e:8a:b9:8e:95:5e: ee:3f:4a:ac:0f:01:8f:88:40:fe:48:bc:a5:e4:26: ea:12:bd:f2:ca:f0:b0:4c:34:b1:ca:9e:23:3e:d7: 26:ce:99:d9:e3:42:c8:b7:c4:28:44:17:fa:bf:df: 2c:02:c3:a4:9e:b1:a6:5a:e6:99:c7:4f:54:35:6a: 21:b6:ee:62:0e:d1:b7:44:89:cf:bb:4e:97:77:bb: 11:c0:21:9c:b9:98:75:b2:01:6c:a4:40:b7:11:1d: 58:30:be:dc:27:49:62:fd:43:28:50:30:92:0a:ca: 99:63:ca:e8:10:8f:cf:9f:89:d4:84:eb:a4:0b:dd: 84:5a:55:29:5b:82:e1:9d:62:1c:16:46:1c:9c:5d: 50:1c:90:4b:b1:26:68:d7:eb:2c:13:4b:16:cb:e5: b7:e1:7b:4b:5c:6e:78:cd:95:4f:80:eb:24:4b:69: 62:c3:2d:d5:fe:05:80:8f:66:71:e3:7f:56:6d:8c: 2d:d1:b5:4f:3c:dd:19:f6:dc:99:e6:06:c6:5a:06: 43:df:3b:88:40:5e:f8:07:3a:71:95:7e:6b:af:d9: 9b:55:36:45:68:6b:83:90:85:49:1d:9d:4b:12:ac: 87:2c:0a:7e:66:52:c2:2d:24:d5:e0:5f:97:bf:7b: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:74:9A:BB:68:5B:F5:40:05:39:CC:26:BD:D6:75:61:D5:C7:9F X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:22:ec:e8:b9:f3:8a:59:c1:27:06:6d:70:29:b0:92:a7:17: ca:15:b9:05:b7:0f:20:05:8f:65:ea:73:4c:da:02:07:1f:f9: ea:01:cb:50:ab:74:5f:4b:20:b9:ac:a1:a8:71:8f:2d:29:de: 46:ce:05:cc:8c:5e:c5:37:2f:82:5a:5b:3e:9d:d8:c2:8e:64: 49:79:00:26:87:11:65:49:a4:09:dc:f9:59:c5:a7:a8:0a:ae: 1c:48:2c:da:fc:17:3e:8c:f6:14:f6:a4:1d:ed:a3:e7:26:ab: a7:39:ab:07:39:f7:8f:f8:70:e4:03:89:2d:3d:76:e5:f9:31: da:7c:b0:7d:c1:a5:66:b1:81:63:52:7b:23:24:cb:6b:ec:fe: 03:7b:77:98:a0:91:cc:13:f3:ba:1d:01:38:fc:e7:f0:81:79: 42:9a:05:a7:f0:50:04:cc:ca:70:06:1c:25:ba:42:22:6c:12: 9f:0c:73:5d:f0:bf:43:b5:cf:b8:44:5a:cb:a8:3c:5d:c0:ba: 1d:67:67:4e:49:a7:77:a5:b0:97:a3:d8:fb:c6:98:a7:08:12: aa:e0:94:b0:a7:ac:8c:1c:0d:97:ef:8f:a8:cb:52:9e:05:fd: df:fd:be:52:b7:26:28:04:9d:2e:fd:be:64:0f:d6:28:3d:f5: af:15:54:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwMzEyMjIxMDM4WhcNMjUwMzE5MjIxMDM4WjAYMRYwFAYD VQQDEw02N2QyMDY1ZS0yMjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6TEvpE4LDcI+irmOlV7uP0qsDwGPiED+SLyl5CbqEr3yyvCwTDSxyp4jPtcm zpnZ40LIt8QoRBf6v98sAsOknrGmWuaZx09UNWohtu5iDtG3RInPu06Xd7sRwCGc uZh1sgFspEC3ER1YML7cJ0li/UMoUDCSCsqZY8roEI/Pn4nUhOukC92EWlUpW4Lh nWIcFkYcnF1QHJBLsSZo1+ssE0sWy+W34XtLXG54zZVPgOskS2liwy3V/gWAj2Zx 439WbYwt0bVPPN0Z9tyZ5gbGWgZD3zuIQF74BzpxlX5rr9mbVTZFaGuDkIVJHZ1L EqyHLAp+ZlLCLSTV4F+Xv3sK1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvNdJq7 aFv1QAU5zCa91nVh1cefMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W REw3QWhsVG1GNEFOWnVVLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdIuzoufOKWcEnBm1wKbCSpxfKFbkFtw8gBY9l6nNM2gIHH/nqActQ q3RfSyC5rKGocY8tKd5GzgXMjF7FNy+CWls+ndjCjmRJeQAmhxFlSaQJ3PlZxaeo Cq4cSCza/Bc+jPYU9qQd7aPnJqunOasHOfeP+HDkA4ktPXbl+THafLB9waVmsYFj UnsjJMtr7P4De3eYoJHME/O6HQE4/OfwgXlCmgWn8FAEzMpwBhwlukIibBKfDHNd 8L9Dtc+4RFrLqDxdwLodZ2dOSad3pbCXo9j7xpinCBKq4JSwp6yMHA2X74+oy1Ke Bf3f/b5StyYoBJ0u/b5kD9YoPfWvFVSd -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:04 2025 by rpki-client