$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft File: cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json) Hash identifier: XYBDKNUG7vuFdsbFxCS1yNEZBTyZ3vR2J6Ka8K6+Gu4= Subject key identifier: 6B:C5:1C:A5:FB:6E:05:76:79:7D:AF:9B:29:62:00:A1:1E:88:01:32 Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 Certificate issuer: /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Certificate serial: 0BC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft Manifest number: 0BBD Signing time: Thu 24 Apr 2025 18:47:28 +0000 Manifest this update: Thu 24 Apr 2025 18:47:28 +0000 Manifest next update: Thu 01 May 2025 18:47:28 +0000 Files and hashes: 1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: yBZ+Ggyk3neImuTIYVwaEV1IazNe1PA1M5R/8ppIW1U=) 2: 2CD5AAF8060311EBBE15EA18C4F9AE02.roa (hash: mW8L1FLDXuwnCDk5B3rFgpB45GljzNSPgwbjM/e2Wu0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4 Validity Not Before: Apr 24 18:47:28 2025 GMT Not After : May 1 18:47:28 2025 GMT Subject: CN=680a8740-3913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d9:d2:60:29:36:88:3d:90:62:39:20:3c:71: 15:48:06:5d:6d:e9:32:54:68:dc:29:31:8f:67:30: ed:6e:1e:8a:35:d0:2e:e8:b7:98:57:dc:f3:64:82: 27:b9:73:58:ea:6b:4c:10:6c:cf:4d:0f:67:da:9c: c2:90:04:63:ff:bd:1b:eb:fa:85:f9:ea:84:4d:44: 06:3e:91:20:ba:8c:01:6b:96:63:d0:e7:7a:6c:c7: 94:76:6a:00:5f:3d:e9:34:f7:09:20:cd:9d:61:4d: 39:be:ce:dc:43:aa:a7:d2:0e:7f:1e:b3:78:78:c7: e2:5f:8b:a2:a5:b5:16:27:ab:f4:07:61:77:4e:e9: d0:16:ca:c4:7c:6b:ee:c8:9a:50:e2:ab:dd:31:c3: a4:0e:4c:a2:b3:22:20:3a:04:11:d0:ab:de:db:6c: d6:de:04:88:7b:82:00:94:97:79:96:cc:ef:f8:21: 56:06:a9:63:52:d0:42:d0:10:41:7f:07:6d:03:52: e0:71:d8:19:79:27:b2:e6:72:52:ee:18:75:bf:ef: 27:06:e3:6a:af:5b:20:1a:5b:29:0a:57:2d:c0:f8: 9b:57:db:f0:c7:3d:9d:71:9e:3a:fa:d8:0e:64:e7: 90:45:40:d7:e9:d0:5f:01:13:c4:d3:b5:fe:29:93: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C5:1C:A5:FB:6E:05:76:79:7D:AF:9B:29:62:00:A1:1E:88:01:32 X509v3 Authority Key Identifier: keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:19:82:3a:90:18:ed:f7:7b:80:52:c3:0a:26:fd:b4:55:29: 8a:25:fd:ad:f0:e6:11:a0:50:c5:b3:f8:8f:f3:bc:54:8e:3e: e4:e4:9d:5a:59:04:83:49:39:d1:db:69:9f:53:33:c0:37:9a: 73:7f:ae:bb:10:30:5f:21:eb:10:bb:56:4f:c9:61:6b:bd:85: 3b:1a:24:ba:05:a5:34:26:ce:94:e8:bf:a5:a4:4d:cb:bd:29: 78:9a:c0:d8:ab:7c:1d:60:fc:e9:49:ce:25:7a:58:f8:06:66: e6:db:bb:18:c3:02:83:34:cd:61:88:29:39:7f:27:8e:3a:0d: 8f:20:fe:89:8b:59:fe:bf:7d:c2:03:27:10:86:37:ec:98:42: 11:3f:0a:c1:d3:0a:26:3c:bc:a4:55:49:e3:68:e9:04:dc:67: 9e:49:b7:6d:a1:af:ae:9e:db:47:7d:68:54:1c:1b:9c:34:51: a8:67:23:03:7d:6f:f9:b6:e0:95:b9:ab:25:f8:93:e3:ba:b3: 4f:b8:d9:7b:84:4d:2b:21:1b:c0:e7:1d:16:28:bc:93:4f:4f: d3:d4:f6:f1:91:87:a5:68:e7:b9:84:24:0c:6a:58:67:85:cc: 84:28:e3:49:96:45:9c:9a:7d:a3:39:8c:33:f0:37:73:ce:24: e5:6d:6c:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEFFMjIxMTAvBgNVBAUTKDcyNjIyMEQ5OEJDQzdEQzY2QTNDQ0YzNzY3N0VBMEEz REIwOTBEQTQwHhcNMjUwNDI0MTg0NzI4WhcNMjUwNTAxMTg0NzI4WjAYMRYwFAYD VQQDEw02ODBhODc0MC0zOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdnSYCk2iD2QYjkgPHEVSAZdbekyVGjcKTGPZzDtbh6KNdAu6LeYV9zzZIIn uXNY6mtMEGzPTQ9n2pzCkARj/70b6/qF+eqETUQGPpEguowBa5Zj0Od6bMeUdmoA Xz3pNPcJIM2dYU05vs7cQ6qn0g5/HrN4eMfiX4uipbUWJ6v0B2F3TunQFsrEfGvu yJpQ4qvdMcOkDkyisyIgOgQR0Kve22zW3gSIe4IAlJd5lszv+CFWBqljUtBC0BBB fwdtA1LgcdgZeSey5nJS7hh1v+8nBuNqr1sgGlspClctwPibV9vwxz2dcZ46+tgO ZOeQRUDX6dBfARPE07X+KZNihQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGvFHKX7 bgV2eX2vmyliAKEeiAEyMB8GA1UdIwQYMBaAFHJiINmLzH3GajzPN2d+oKPbCQ2k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QUUyMi9CMTc4NDM5RTFC QkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZjWnFQTTgzWjM2Z285c0pE YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtSWcyWXZNZmNacVBNODNaMzZnbzlzSkRhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QUUyMi9CMTc4NDM5RTFCQkYxMUVBQjZBNzRGNzFDNEY5QUUwMi9jbUlnMll2TWZj WnFQTTgzWjM2Z285c0pEYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHGYI6kBjt93uAUsMKJv20VSmKJf2t8OYRoFDFs/iP87xUjj7k5J1a WQSDSTnR22mfUzPAN5pzf667EDBfIesQu1ZPyWFrvYU7GiS6BaU0Js6U6L+lpE3L vSl4msDYq3wdYPzpSc4lelj4Bmbm27sYwwKDNM1hiCk5fyeOOg2PIP6Ji1n+v33C AycQhjfsmEIRPwrB0womPLykVUnjaOkE3GeeSbdtoa+unttHfWhUHBucNFGoZyMD fW/5tuCVuasl+JPjurNPuNl7hE0rIRvA5x0WKLyTT0/T1PbxkYelaOe5hCQMalhn hcyEKONJlkWcmn2jOYwz8DdzziTlbWwS -----END CERTIFICATE-----Generated at Sat Apr 26 15:06:35 2025 by rpki-client