$ rpki-client -vvf rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft File: CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft (raw, json) Hash identifier: AwbI1BYARqTrq73Gi2k3/4/6A30BJLSapOB/KgqkOpM= Subject key identifier: 6B:83:2A:35:DD:5E:33:6A:AC:10:EA:A5:D5:5D:E1:62:A4:17:6C:A2 Authority key identifier: 0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 Certificate issuer: /CN=A9128C53/serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:08:22 +0000 Manifest this update: Fri 25 Apr 2025 04:08:22 +0000 Manifest next update: Fri 02 May 2025 04:08:22 +0000 Files and hashes: 1: CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl (hash: PB6RdxwHeN7tsQQZwPBDZWVJQyFFLSq39JW5sbBag0U=) 2: 04A9BC6EDAC011EE94B8705AC4F9AE02.roa (hash: KPnhqjLLs6yDc2UwZmMfmiNxRsrivufpZvf1sQ6QcZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:08:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9128C53, serialNumber=0A45C50E37235A2AA223E9F31331F69428E0D946 Validity Not Before: Apr 25 04:08:22 2025 GMT Not After : May 2 04:08:22 2025 GMT Subject: CN=680b0ab6-7457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:61:f6:be:bd:fd:3d:7f:0e:1f:05:84:cd: 25:9f:08:72:26:17:15:aa:65:b4:ea:c0:b5:53:bd: 7c:cb:4e:8e:6f:db:20:4b:7e:d0:8f:b4:d9:b2:20: e3:e4:21:ad:8a:f8:cc:5a:dc:32:98:b5:95:66:fc: 5b:1c:02:ce:73:dc:6f:a3:9b:ea:36:cb:5e:63:ac: 48:4a:69:1b:d1:ac:f6:f0:1b:29:73:b6:34:6e:71: a4:98:ac:f2:f4:89:95:42:35:bd:42:d7:04:67:32: c4:03:b7:29:03:c2:30:38:a3:08:6d:64:cf:17:ab: ed:97:ec:23:81:5e:c4:e5:87:0a:64:35:42:34:81: 4a:05:90:ea:8a:4a:4c:6f:85:e8:d0:1e:57:96:8d: 16:98:d5:9a:3b:53:6f:fe:36:bc:80:9d:85:1a:46: 10:3b:7a:cd:5c:c3:af:2b:38:3f:57:04:01:6b:6b: 08:d0:11:16:a7:c1:48:0a:be:15:28:b3:5b:3d:04: 08:02:e5:b6:b3:09:fe:db:33:7e:78:ae:d8:1f:65: 08:09:82:ba:2d:54:1d:64:53:30:0e:60:f2:b3:b3: b6:e6:b8:6d:2c:6a:c3:32:12:be:0d:aa:ea:ff:c0: 48:04:a9:ad:9f:ff:ba:2e:05:2c:42:c8:6e:79:90: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:83:2A:35:DD:5E:33:6A:AC:10:EA:A5:D5:5D:E1:62:A4:17:6C:A2 X509v3 Authority Key Identifier: keyid:0A:45:C5:0E:37:23:5A:2A:A2:23:E9:F3:13:31:F6:94:28:E0:D9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkXFDjcjWiqiI-nzEzH2lCjg2UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9128C53/EA6ECE0A938111EEBFCBFF24C4F9AE02/CkXFDjcjWiqiI-nzEzH2lCjg2UY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:cc:f9:f4:fc:4d:93:e7:87:e3:e6:79:d9:f7:b8:2f:e0:50: 90:2a:21:10:36:c9:62:9e:0d:0e:2b:8a:8f:a8:cc:7f:df:93: 42:11:b1:2a:21:dd:c3:6a:2a:d1:51:6f:fd:be:93:40:a7:0d: 66:31:13:c1:57:a5:c7:fd:8f:71:27:84:41:41:4f:1c:8a:ab: 87:13:60:a4:3d:4f:b0:07:2c:af:86:a5:ca:13:3f:1a:ba:9e: 93:a0:6f:eb:0e:e5:40:fb:83:0c:89:4a:50:93:9e:be:92:fe: d8:6e:2d:73:ca:e9:40:6b:23:02:fd:83:db:19:c0:de:64:95: 22:16:30:10:2f:59:36:8d:76:a1:f9:0f:c0:61:b2:d1:c7:72: 70:63:7e:c6:10:5a:03:e4:80:b8:dd:1a:5b:c1:c3:67:ac:5c: 04:91:91:35:3c:0a:40:17:a5:e5:a2:ca:6c:24:e9:f1:62:af: 88:37:77:9f:ad:63:9d:c5:ee:64:d6:16:ed:be:69:34:cd:7d: b5:31:10:86:b2:16:3a:08:5f:be:d1:3a:e8:a1:e0:12:f2:2a: bc:8e:c2:3d:78:1c:a6:e7:a3:3c:7b:7c:ca:d3:98:0f:ee:d9: d8:2c:1f:55:a2:27:61:30:5b:6a:9c:ca:03:51:aa:1a:00:e9: b6:4d:8b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjhDNTMxMTAvBgNVBAUTKDBBNDVDNTBFMzcyMzVBMkFBMjIzRTlGMzEzMzFGNjk0 MjhFMEQ5NDYwHhcNMjUwNDI1MDQwODIyWhcNMjUwNTAyMDQwODIyWjAYMRYwFAYD VQQDEw02ODBiMGFiNi03NDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyudh9r69/T1/Dh8FhM0lnwhyJhcVqmW06sC1U718y06Ob9sgS37Qj7TZsiDj 5CGtivjMWtwymLWVZvxbHALOc9xvo5vqNsteY6xISmkb0az28Bspc7Y0bnGkmKzy 9ImVQjW9QtcEZzLEA7cpA8IwOKMIbWTPF6vtl+wjgV7E5YcKZDVCNIFKBZDqikpM b4Xo0B5Xlo0WmNWaO1Nv/ja8gJ2FGkYQO3rNXMOvKzg/VwQBa2sI0BEWp8FICr4V KLNbPQQIAuW2swn+2zN+eK7YH2UICYK6LVQdZFMwDmDys7O25rhtLGrDMhK+Darq /8BIBKmtn/+6LgUsQshueZDguwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuDKjXd XjNqrBDqpdVd4WKkF2yiMB8GA1UdIwQYMBaAFApFxQ43I1oqoiPp8xMx9pQo4NlG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOEM1My9FQTZFQ0UwQTkz ODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldpcWlJLW56RXpIMmxDamcy VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrWEZEamNqV2lxaUktbnpFekgybENqZzJVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OEM1My9FQTZFQ0UwQTkzODExMUVFQkZDQkZGMjRDNEY5QUUwMi9Da1hGRGpjaldp cWlJLW56RXpIMmxDamcyVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnzPn0/E2T54fj5nnZ97gv4FCQKiEQNsling0OK4qPqMx/35NCEbEq Id3DairRUW/9vpNApw1mMRPBV6XH/Y9xJ4RBQU8ciquHE2CkPU+wByyvhqXKEz8a up6ToG/rDuVA+4MMiUpQk56+kv7Ybi1zyulAayMC/YPbGcDeZJUiFjAQL1k2jXah +Q/AYbLRx3JwY37GEFoD5IC43RpbwcNnrFwEkZE1PApAF6XlospsJOnxYq+IN3ef rWOdxe5k1hbtvmk0zX21MRCGshY6CF++0TrooeAS8iq8jsI9eBym56M8e3zK05gP 7tnYLB9VoidhMFtqnMoDUaoaAOm2TYs4 -----END CERTIFICATE-----Generated at Sat Apr 26 04:39:53 2025 by rpki-client