$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json) Hash identifier: OJcQEFWo1Xqnhd2OEiUlyRaT0hCMXcU1hsZGc8ObF30= Subject key identifier: E5:91:96:FC:0B:4A:CF:F1:E0:C7:82:AE:E0:2F:E9:A4:33:3B:BA:3D Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Certificate serial: 0AD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft Manifest number: 0AC4 Signing time: Fri 20 Jun 2025 19:27:06 +0000 Manifest this update: Fri 20 Jun 2025 19:27:05 +0000 Manifest next update: Fri 27 Jun 2025 19:27:05 +0000 Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: U/5gXS9RPBdrYspVz3Nn4rDCDLe5kAb3fJzNV/nw1LM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 19:27:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2772 (0xad4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91442B0, serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Validity Not Before: Jun 20 19:27:05 2025 GMT Not After : Jun 27 19:27:05 2025 GMT Subject: CN=6855b60a-e66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e9:c0:cd:0f:3f:0f:e2:0a:46:ef:28:57:8b: 50:ba:4b:60:b2:16:54:03:a2:98:67:00:01:db:c7: 5e:ba:e5:2d:9b:fc:ae:cb:47:95:94:a2:39:26:b4: 7b:52:08:6a:e3:e3:63:76:e2:c4:83:10:e0:d5:fd: dd:6a:b5:d4:47:da:ab:d3:e3:22:98:31:c0:32:a5: 00:71:bf:84:2c:05:2b:9d:0d:a8:f3:f2:23:ea:65: 57:a6:34:f5:f5:a8:88:1e:d5:66:a4:6b:37:6c:c3: be:b3:25:bf:db:2e:26:3b:fc:a0:16:e4:97:4a:5c: 7d:16:d4:47:8f:5c:e6:3f:54:bf:6d:fa:80:0d:20: 57:00:77:a4:dc:4c:fb:14:68:ca:bd:c9:3a:c6:cd: ce:ad:71:40:b9:95:6e:e8:b3:0b:3c:ee:66:af:01: 7e:89:6f:8e:29:d4:ca:84:90:1a:74:fa:4e:9b:35: 8b:93:07:dc:53:bb:21:e9:40:91:93:30:dd:97:90: c5:d9:cb:5e:97:97:fd:70:e0:4c:e8:7a:fe:b9:7d: 52:86:3d:cc:58:95:25:21:8e:55:2a:b3:a1:62:47: 21:49:d8:4a:01:ed:9a:bf:c1:ef:cc:5d:84:33:d2: bb:4d:65:1e:16:15:50:8f:67:21:c3:a6:1b:80:1b: dc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:96:FC:0B:4A:CF:F1:E0:C7:82:AE:E0:2F:E9:A4:33:3B:BA:3D X509v3 Authority Key Identifier: keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:43:b3:2b:2a:97:be:45:ce:0b:09:06:77:35:3d:8a:6b:d7: 8f:71:29:fa:48:84:5e:d1:8f:d1:b3:99:b3:92:02:fc:ce:0b: a8:ed:75:a9:14:ec:c2:2f:e3:94:cd:3f:ac:a8:37:f6:40:bd: fb:05:18:b6:61:69:cd:b4:0a:d4:78:4b:7f:c6:09:d0:e1:d0: 7f:b7:31:73:43:00:61:1e:b2:10:e6:82:9b:00:5e:d3:a0:ff: 6a:06:e2:68:f3:90:f2:16:f5:55:60:01:1f:25:37:95:6c:cb: 53:51:a9:42:83:76:cf:c1:06:db:a8:df:ab:65:46:20:07:8b: 8f:ca:d5:bd:5f:26:7a:7a:e2:15:25:2d:72:e4:be:b5:1e:cf: a3:c6:e5:4b:b8:8b:39:ac:0f:c0:5f:e0:3c:d9:29:a1:8e:73: a3:28:9b:0b:45:03:f5:c6:84:5d:c4:83:16:06:04:e2:1e:2d: d8:88:d5:80:20:66:12:26:d9:b2:86:06:7c:29:48:54:66:b5: 55:98:02:59:68:a5:f4:bf:a0:23:e3:02:e6:bb:11:5f:65:ed: 97:34:d8:cb:e8:8d:c0:4f:fa:1b:04:4c:4a:8e:df:36:46:bd: fc:a1:1f:b4:22:e6:55:c6:14:83:62:75:06:e1:6b:5c:5a:57: db:4e:f8:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyQjAxMTAvBgNVBAUTKDBCNDhBOEZCMkU2QkU3REY4RkVEMDdBM0M5MTlCMjND QTQwQkRFQ0EwHhcNMjUwNjIwMTkyNzA1WhcNMjUwNjI3MTkyNzA1WjAYMRYwFAYD VQQDEw02ODU1YjYwYS1lNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1+nAzQ8/D+IKRu8oV4tQuktgshZUA6KYZwAB28deuuUtm/yuy0eVlKI5JrR7 Ughq4+NjduLEgxDg1f3darXUR9qr0+MimDHAMqUAcb+ELAUrnQ2o8/Ij6mVXpjT1 9aiIHtVmpGs3bMO+syW/2y4mO/ygFuSXSlx9FtRHj1zmP1S/bfqADSBXAHek3Ez7 FGjKvck6xs3OrXFAuZVu6LMLPO5mrwF+iW+OKdTKhJAadPpOmzWLkwfcU7sh6UCR kzDdl5DF2ctel5f9cOBM6Hr+uX1Shj3MWJUlIY5VKrOhYkchSdhKAe2av8HvzF2E M9K7TWUeFhVQj2chw6YbgBvcAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWRlvwL Ss/x4MeCruAv6aQzO7o9MB8GA1UdIwQYMBaAFAtIqPsua+ffj+0Ho8kZsjykC97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDJCMC82NkUwQ0FENjU2 RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5LVA3UWVqeVJteVBLUUwz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwaW8teTVyNTktUDdRZWp5Um15UEtRTDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDJCMC82NkUwQ0FENjU2RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5 LVA3UWVqeVJteVBLUUwzc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQ7MrKpe+Rc4LCQZ3NT2Ka9ePcSn6SIRe0Y/Rs5mzkgL8zguo7XWp FOzCL+OUzT+sqDf2QL37BRi2YWnNtArUeEt/xgnQ4dB/tzFzQwBhHrIQ5oKbAF7T oP9qBuJo85DyFvVVYAEfJTeVbMtTUalCg3bPwQbbqN+rZUYgB4uPytW9XyZ6euIV JS1y5L61Hs+jxuVLuIs5rA/AX+A82SmhjnOjKJsLRQP1xoRdxIMWBgTiHi3YiNWA IGYSJtmyhgZ8KUhUZrVVmAJZaKX0v6Aj4wLmuxFfZe2XNNjL6I3AT/obBExKjt82 Rr38oR+0IuZVxhSDYnUG4WtcWlfbTvg4 -----END CERTIFICATE-----Generated at Fri Jun 20 22:31:05 2025 by rpki-client