$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: 5A+LzCG6FMElJ4hhHc4xroE5NspvPsh0zFTdS5c8O8A= Subject key identifier: A8:14:3B:28:54:47:10:08:80:B4:FD:55:46:DC:5B:C2:D3:5A:1B:51 Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 0307 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 0301 Signing time: Fri 25 Apr 2025 01:02:25 +0000 Manifest this update: Fri 25 Apr 2025 01:02:24 +0000 Manifest next update: Fri 02 May 2025 01:02:24 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: 8Tjer7jTeEwX4NtF8okVPaYQs+CumN0WJgvXKrjzBbI=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: IGdzlLmujAALpavxxSo45P0YFLMJKzqyXolkwQqyBjo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 775 (0x307) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Apr 25 01:02:24 2025 GMT Not After : May 2 01:02:24 2025 GMT Subject: CN=680adf21-ede4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:df:b3:ee:12:11:b7:ec:07:f7:ca:9c:70: b7:4f:a0:0a:27:a6:f8:5b:7c:ac:0e:a3:6e:f3:ae: 36:e4:cc:fb:39:f5:67:31:61:b4:a1:1f:12:de:72: ee:2a:53:cd:c0:11:da:7d:8a:67:3f:79:83:9b:bc: fb:79:92:e3:92:eb:05:9f:64:ae:4e:28:47:7f:a1: 00:30:76:ee:90:fb:e8:94:dd:1e:17:c6:06:89:97: 6e:b6:e8:af:ff:d0:aa:f3:5e:11:77:18:16:1b:0e: 1f:c3:a5:fe:37:d9:9c:c7:06:05:8f:b1:21:a6:34: ec:61:f0:84:44:3e:38:47:f8:bd:74:84:37:9d:28: ca:fb:fb:15:a9:96:66:40:4c:f1:c0:78:87:26:97: 6c:aa:f5:e7:d3:c1:16:43:c5:d3:30:83:90:b6:81: 1a:1b:bd:37:1a:64:e9:e8:b3:c5:ba:0f:69:5f:88: 1c:24:59:98:0c:07:5e:26:cd:52:b9:08:c6:28:4a: 13:81:ba:9e:de:f3:aa:cb:e7:6b:b1:42:8f:e6:d5: 21:93:ec:a6:8c:8b:9c:6d:34:a9:b3:73:ef:92:03: bd:bc:c3:d6:97:68:69:73:95:41:b9:de:57:44:e0: e6:ec:2a:1e:88:88:7c:33:c2:63:83:a7:97:a6:6a: bd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:14:3B:28:54:47:10:08:80:B4:FD:55:46:DC:5B:C2:D3:5A:1B:51 X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:20:ec:67:1f:eb:ec:f8:a2:f8:8d:62:f6:a1:32:33:4b:eb: b0:b1:58:c8:a6:dd:7b:3d:c3:3d:f5:dc:54:8d:26:ce:67:c6: f1:09:34:b3:a4:2a:38:36:33:2b:ce:45:8c:ad:00:13:8c:fb: a4:4d:6f:21:4c:e2:a1:57:57:e2:11:1f:86:25:3d:72:46:99: 1e:df:0d:ca:b5:75:e7:24:c0:59:41:88:1e:8b:b7:37:a6:e8: d1:cd:dc:c9:b6:26:fe:ff:38:6e:95:6a:11:11:1d:56:ee:4b: fd:5b:27:dd:6e:05:58:97:77:36:7e:5c:78:e8:31:a9:d9:0a: ee:77:5e:81:b7:9e:d7:86:0b:46:07:80:f8:24:66:aa:bd:ae: e0:10:4b:84:73:27:2d:7e:33:fa:2d:12:26:57:cf:7b:c8:be: 92:a3:77:45:17:6b:54:7b:13:ea:81:7a:7f:a4:7d:7e:bb:32: 0d:fd:58:5f:f4:13:2d:f2:43:81:5f:63:44:ab:f5:36:87:fc: 12:64:89:cd:7d:0e:22:cb:8c:45:a5:16:24:0f:5f:e6:ce:54: 82:93:7a:70:de:d3:90:6b:3d:ff:13:1f:60:1a:d3:ca:8a:1b: ce:57:4f:52:c3:a8:e7:d7:74:50:c5:9f:52:83:b2:2f:f8:21: cf:e8:19:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUwNDI1MDEwMjI0WhcNMjUwNTAyMDEwMjI0WjAYMRYwFAYD VQQDEw02ODBhZGYyMS1lZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDHfs+4SEbfsB/fKnHC3T6AKJ6b4W3ysDqNu86425Mz7OfVnMWG0oR8S3nLu KlPNwBHafYpnP3mDm7z7eZLjkusFn2SuTihHf6EAMHbukPvolN0eF8YGiZdutuiv /9Cq814RdxgWGw4fw6X+N9mcxwYFj7EhpjTsYfCERD44R/i9dIQ3nSjK+/sVqZZm QEzxwHiHJpdsqvXn08EWQ8XTMIOQtoEaG703GmTp6LPFug9pX4gcJFmYDAdeJs1S uQjGKEoTgbqe3vOqy+drsUKP5tUhk+ymjIucbTSps3PvkgO9vMPWl2hpc5VBud5X RODm7CoeiIh8M8Jjg6eXpmq9UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgUOyhU RxAIgLT9VUbcW8LTWhtRMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKIOxnH+vs+KL4jWL2oTIzS+uwsVjIpt17PcM99dxUjSbOZ8bxCTSz pCo4NjMrzkWMrQATjPukTW8hTOKhV1fiER+GJT1yRpke3w3KtXXnJMBZQYgei7c3 pujRzdzJtib+/zhulWoRER1W7kv9WyfdbgVYl3c2flx46DGp2Qrud16Bt57XhgtG B4D4JGaqva7gEEuEcyctfjP6LRImV897yL6So3dFF2tUexPqgXp/pH1+uzIN/Vhf 9BMt8kOBX2NEq/U2h/wSZInNfQ4iy4xFpRYkD1/mzlSCk3pw3tOQaz3/Ex9gGtPK ihvOV09Sw6jn13RQxZ9Sg7Iv+CHP6BnT -----END CERTIFICATE-----Generated at Sat Apr 26 14:15:50 2025 by rpki-client