$ rpki-client -vvf rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft File: cPp5EccBLljvn7BaVaTOb7Bgm88.mft (raw, json) Hash identifier: hUKDlWo98BcO3lL5/3TAn1aqH0eGX/3++j5my634Arc= Subject key identifier: F4:BB:D8:7C:44:E7:2B:B6:8A:1C:20:1C:08:81:CD:F3:A6:51:DF:59 Authority key identifier: 70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF Certificate issuer: /CN=A9119465/serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft Manifest number: 96 Signing time: Fri 25 Apr 2025 05:24:37 +0000 Manifest this update: Fri 25 Apr 2025 05:24:37 +0000 Manifest next update: Fri 02 May 2025 05:24:37 +0000 Files and hashes: 1: cPp5EccBLljvn7BaVaTOb7Bgm88.crl (hash: U2gHgBvFVJ5ePfabeZaO8Wx/8svqCNB5MpQMB7HMo/I=) 2: F0C7266245D811EF9D851624C4F9AE02.roa (hash: SZIMeYcJUuIC8rNtcwaM/lfCvbj4vLmNtyjgG3i25mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119465, serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Validity Not Before: Apr 25 05:24:37 2025 GMT Not After : May 2 05:24:37 2025 GMT Subject: CN=680b1c95-339b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:b3:54:58:52:51:2d:8a:5d:aa:64:4c:83: 0a:d3:89:e2:bb:29:02:de:33:2c:55:65:44:64:e6: ce:ae:97:71:ec:c9:0a:e5:9c:8e:d1:73:2a:c3:0f: 32:0b:e6:51:5a:34:02:34:40:b0:71:32:ec:db:d4: 58:84:af:dd:08:b1:6a:d9:89:d5:7c:46:2c:02:8d: 51:e9:0a:2f:40:fb:e6:dd:90:f6:24:36:d4:26:12: 7e:cf:c9:29:0e:90:ca:10:c3:a7:13:00:48:aa:76: 3c:ff:1e:30:37:d3:c7:fd:c8:78:73:04:27:a5:a3: bf:16:ff:6f:cc:cf:a2:f3:db:69:d8:94:ed:5a:f2: c7:c5:d3:7d:56:1f:36:73:cf:06:2a:be:ea:52:e2: 0a:b0:b0:7f:d2:21:ba:01:e0:b9:bf:0e:f6:2c:6c: 52:94:e4:6e:8f:66:c5:0e:44:bf:75:94:e0:df:67: 4f:b2:ed:a0:28:1e:b9:e6:6b:6f:3a:fe:72:47:d3: 28:98:23:aa:15:72:60:34:4d:8d:b9:ad:0e:eb:63: e6:11:fd:7f:36:ac:86:ae:50:55:64:42:61:35:19: b2:b8:ec:44:1c:e5:fe:18:da:d6:10:96:25:26:80: db:6f:d8:d0:14:f6:ff:dc:54:68:8f:20:fa:ae:71: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BB:D8:7C:44:E7:2B:B6:8A:1C:20:1C:08:81:CD:F3:A6:51:DF:59 X509v3 Authority Key Identifier: keyid:70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:66:e8:3a:eb:52:42:7b:c6:09:1d:ec:6b:ce:18:1b:5d:b4: d8:a1:ac:fb:71:87:45:dd:7c:bb:cb:5b:23:dd:8e:9c:8e:4d: 09:cf:d5:44:e4:69:6e:bd:27:8d:37:23:ab:b3:38:51:65:2f: 1a:b5:42:cb:01:fa:4d:c9:52:91:de:e0:ac:15:5d:fb:34:e6: a7:3f:36:1a:95:5f:42:e2:54:d4:8e:88:85:53:61:10:77:5d: dd:ee:ab:e8:98:91:6d:3d:16:7c:48:eb:a1:71:f8:15:38:5a: 4e:d8:3d:f8:8d:61:8d:41:a4:c3:40:2e:22:c1:4d:70:a4:d5: 76:3c:52:04:3b:c2:3c:cc:56:ce:62:69:3a:15:68:60:34:ba: 56:a5:19:a7:0e:ae:fd:43:11:e2:18:05:9d:0b:e9:91:e9:9e: 77:f6:6e:80:79:4d:99:be:5a:d6:db:2b:d2:42:23:7b:b6:65: 4a:e1:ff:94:50:3d:34:31:b8:ce:d3:33:fc:78:01:b9:46:68: f2:28:8e:21:33:bc:87:89:90:ca:17:b4:e4:1f:25:c8:78:eb: 36:3b:d2:5e:b0:fd:fe:67:7e:73:d3:15:3b:a4:50:7a:0b:ac: 74:ec:d2:b3:a1:06:d6:a5:98:23:52:17:8f:ee:d9:f9:b8:b1: cb:18:23:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NjUxMTAvBgNVBAUTKDcwRkE3OTExQzcwMTJFNThFRjlGQjA1QTU1QTRDRTZG QjA2MDlCQ0YwHhcNMjUwNDI1MDUyNDM3WhcNMjUwNTAyMDUyNDM3WjAYMRYwFAYD VQQDEw02ODBiMWM5NS0zMzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBezVFhSUS2KXapkTIMK04niuykC3jMsVWVEZObOrpdx7MkK5ZyO0XMqww8y C+ZRWjQCNECwcTLs29RYhK/dCLFq2YnVfEYsAo1R6QovQPvm3ZD2JDbUJhJ+z8kp DpDKEMOnEwBIqnY8/x4wN9PH/ch4cwQnpaO/Fv9vzM+i89tp2JTtWvLHxdN9Vh82 c88GKr7qUuIKsLB/0iG6AeC5vw72LGxSlORuj2bFDkS/dZTg32dPsu2gKB655mtv Ov5yR9MomCOqFXJgNE2Nua0O62PmEf1/NqyGrlBVZEJhNRmyuOxEHOX+GNrWEJYl JoDbb9jQFPb/3FRojyD6rnHS3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPS72HxE 5yu2ihwgHAiBzfOmUd9ZMB8GA1UdIwQYMBaAFHD6eRHHAS5Y75+wWlWkzm+wYJvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ2NS9EQzM2OEFDMjQ1 MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxsanZuN0JhVmFUT2I3Qmdt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQcDVFY2NCTGxqdm43QmFWYVRPYjdCZ204OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ2NS9EQzM2OEFDMjQ1MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxs anZuN0JhVmFUT2I3QmdtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByZug661JCe8YJHexrzhgbXbTYoaz7cYdF3Xy7y1sj3Y6cjk0Jz9VE 5GluvSeNNyOrszhRZS8atULLAfpNyVKR3uCsFV37NOanPzYalV9C4lTUjoiFU2EQ d13d7qvomJFtPRZ8SOuhcfgVOFpO2D34jWGNQaTDQC4iwU1wpNV2PFIEO8I8zFbO Ymk6FWhgNLpWpRmnDq79QxHiGAWdC+mR6Z539m6AeU2ZvlrW2yvSQiN7tmVK4f+U UD00MbjO0zP8eAG5RmjyKI4hM7yHiZDKF7TkHyXIeOs2O9JesP3+Z35z0xU7pFB6 C6x07NKzoQbWpZgjUheP7tn5uLHLGCOG -----END CERTIFICATE-----Generated at Sat Apr 26 05:04:29 2025 by rpki-client