$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: HGCcsE+P7Fu0uvrWEHWT9mfxB2CJGPoSpK12WzNjbOs= Subject key identifier: 0E:FF:25:21:5F:AB:0B:BC:E6:96:A8:73:2D:C2:07:B1:5C:9F:27:8B Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 053E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0524 Signing time: Thu 24 Apr 2025 23:24:13 +0000 Manifest this update: Thu 24 Apr 2025 23:24:12 +0000 Manifest next update: Thu 01 May 2025 23:24:12 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: 9+/DXSfTj4jDIsc+YIlWHVwGQB1XdwT5Hl84QcWAjtk=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 4bP+/xCzlCHzMiPDDeZZu8ryV1WmsI6f+3c5qjtpUM8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: MPM/fDIm7iSq8h5ZOB3ujJWuioyZyPhojtnDvre1LOg=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: 3s0Y71iF/fsJNHbeREVW+BHHh6vRQTKc/vlJskM3cQo=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: DJiem+mJ9guPOqkkTAIozTCpaBw0W78lezIlNh26BC0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: qkcR8ZEDC9+iqlFe5dp0WkDY8PQPtYRvJuQb0n842mU=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1342 (0x53e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: Apr 24 23:24:12 2025 GMT Not After : May 1 23:24:12 2025 GMT Subject: CN=680ac81d-d9a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:84:63:9f:49:c0:85:3d:36:89:80:99:eb: 81:66:0e:ef:ea:f4:09:bf:dd:1e:35:fd:14:87:ea: f5:3d:de:d9:b1:30:d9:c7:0e:6c:17:29:a5:78:aa: fb:4e:00:37:cc:0c:a9:af:4d:68:2e:06:b7:59:01: 6e:10:30:66:d6:d2:eb:2b:84:c4:d6:83:b7:8d:2b: 20:52:ea:2b:49:04:18:d5:57:67:5f:09:0e:fb:06: ac:34:5b:13:35:7c:70:c9:48:05:6a:4b:af:fd:03: 50:e7:49:81:af:a5:b4:41:ae:3f:4e:e0:74:ee:cd: 6f:fa:2e:bd:18:c3:30:9d:28:f7:17:83:a3:bf:cc: 4f:57:11:27:63:71:ca:30:64:e2:2a:2e:b3:8f:ad: e8:55:01:34:d9:2a:0a:d5:7e:00:b0:bb:f8:60:4b: e2:da:8f:9c:b3:fa:46:d6:87:3c:1f:2d:29:40:9c: 29:0d:ec:32:66:fc:2f:20:04:ef:5c:08:3d:1a:b6: 5c:74:ce:1d:c3:4f:96:87:44:a0:39:93:e7:fa:f2: f2:2d:bb:3e:21:53:b6:5d:f2:27:1e:94:06:9d:fc: fd:95:aa:bf:0e:c6:ec:9d:c3:06:7c:7b:cd:5c:da: 7e:86:c0:64:af:6c:f0:a6:c2:62:55:5d:f2:c9:07: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:25:21:5F:AB:0B:BC:E6:96:A8:73:2D:C2:07:B1:5C:9F:27:8B X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:f0:be:51:f8:6e:14:78:28:28:06:21:02:5a:34:8d:99:98: 86:7c:aa:6c:92:1d:20:9d:3d:01:5d:96:e1:59:a1:51:02:28: 94:65:d3:b9:59:d8:cd:c8:3f:46:83:26:dc:da:5a:75:88:30: 53:1c:6a:66:69:ad:84:d4:f5:52:ca:65:7e:c8:fb:a2:70:3c: 68:e5:4c:b9:cb:7b:9a:9b:ae:3c:ea:30:85:e8:76:04:d9:fc: d8:59:5c:55:16:bf:56:4e:f6:a8:20:f9:fc:98:b2:d5:41:90: 03:d3:16:fc:67:57:ad:d3:c3:c8:75:9d:5a:bc:6a:91:d4:6c: af:0e:ae:26:df:e7:22:b1:b6:45:1e:21:a5:29:f5:92:fc:f1: f2:42:d1:5a:e3:7b:25:c4:5f:84:88:65:a1:e1:39:66:08:9e: e4:e2:9d:90:56:41:5e:a3:d2:4b:dd:80:3b:af:ec:d6:7c:f0: 3e:50:64:50:25:95:9a:e5:8d:37:27:85:ed:ef:0b:74:ff:b1: d8:9d:ae:29:12:2a:b9:dd:53:49:9a:2e:ef:88:ae:b3:99:8b: df:20:51:d3:d1:8b:ff:34:78:1c:33:62:f5:5e:90:54:4a:33: b2:9b:59:e9:f6:03:d6:29:46:ec:a2:4f:b8:98:c9:7a:8a:a8: 10:a9:81:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwNDI0MjMyNDEyWhcNMjUwNTAxMjMyNDEyWjAYMRYwFAYD VQQDEw02ODBhYzgxZC1kOWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx96EY59JwIU9NomAmeuBZg7v6vQJv90eNf0Uh+r1Pd7ZsTDZxw5sFymleKr7 TgA3zAypr01oLga3WQFuEDBm1tLrK4TE1oO3jSsgUuorSQQY1VdnXwkO+wasNFsT NXxwyUgFakuv/QNQ50mBr6W0Qa4/TuB07s1v+i69GMMwnSj3F4Ojv8xPVxEnY3HK MGTiKi6zj63oVQE02SoK1X4AsLv4YEvi2o+cs/pG1oc8Hy0pQJwpDewyZvwvIATv XAg9GrZcdM4dw0+Wh0SgOZPn+vLyLbs+IVO2XfInHpQGnfz9laq/DsbsncMGfHvN XNp+hsBkr2zwpsJiVV3yyQcp+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7/JSFf qwu85paocy3CB7FcnyeLMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy8L5R+G4UeCgoBiECWjSNmZiGfKpskh0gnT0BXZbhWaFRAiiUZdO5 WdjNyD9Ggybc2lp1iDBTHGpmaa2E1PVSymV+yPuicDxo5Uy5y3uam6486jCF6HYE 2fzYWVxVFr9WTvaoIPn8mLLVQZAD0xb8Z1et08PIdZ1avGqR1GyvDq4m3+cisbZF HiGlKfWS/PHyQtFa43slxF+EiGWh4TlmCJ7k4p2QVkFeo9JL3YA7r+zWfPA+UGRQ JZWa5Y03J4Xt7wt0/7HYna4pEiq53VNJmi7viK6zmYvfIFHT0Yv/NHgcM2L1XpBU SjOym1np9gPWKUbsok+4mMl6iqgQqYFA -----END CERTIFICATE-----Generated at Sat Apr 26 05:02:05 2025 by rpki-client