$ rpki-client -vvf rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft File: r-cn5CCdzfgnYldLXjPICDeHoY8.mft (raw, json) Hash identifier: 8ChoX/VE8rHjLFhmjfA9WYIFhDyD7b/sZ8MEA+M3gcQ= Subject key identifier: F9:81:78:22:FE:87:3C:98:8B:C9:EB:2B:81:1C:31:3E:53:BE:1E:83 Authority key identifier: AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F Certificate issuer: /CN=A915AE5F/serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Certificate serial: 1E95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft Manifest number: 1E34 Signing time: Thu 24 Apr 2025 16:06:08 +0000 Manifest this update: Thu 24 Apr 2025 16:06:08 +0000 Manifest next update: Thu 01 May 2025 16:06:08 +0000 Files and hashes: 1: r-cn5CCdzfgnYldLXjPICDeHoY8.crl (hash: sMWN21ueCxSUUV4ZHFMT+8Ub3tmxFzQHbPzXERWNmM4=) 2: 7EFB8A6E885311E6BDE50A80C4F9AE02.roa (hash: WKYh+NxnsT3X7rLjv5qUGFM6/m1tIHkeIZefmgprnPs=) 3: D80B013A172011EEB3A9C124C4F9AE02.roa (hash: i+bH68t7yKzy0Rw6D9wkVEOs5mv50GBBoWxW4vThyQY=) 4: CF946690E5E711EE89AF4E5AC4F9AE02.roa (hash: Hy5wV1LNqpxbM5ijt7NUzM7tVBcEJ4OJJPk557Hpy8c=) 5: 882AC358E1F511EE9188A919C4F9AE02.roa (hash: 7XnoI3SWGKSLq9zz7HLNS32aw+KK++smhLaAOQ+1lDo=) 6: 5C6A7BE6E1F511EEA08A5519C4F9AE02.roa (hash: T6jmHSx80+1QapW6ywMYadpctCcOQDce4QIxekTXdlo=) 7: B0ACAB905A2011EA9E34F70BC4F9AE02.roa (hash: K3rejCNdQ0NeO9mAgLHI687zq5GLAF1vM1BDZ4QHrk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7829 (0x1e95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915AE5F, serialNumber=AFE727E4209DCDF82762574B5E33C8083787A18F Validity Not Before: Apr 24 16:06:08 2025 GMT Not After : May 1 16:06:08 2025 GMT Subject: CN=680a6170-7aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:f8:2e:ee:59:01:a3:ee:b1:fe:e5:7f:ac: 3f:02:82:08:eb:c1:f0:10:28:fd:62:71:47:c1:06: c9:ca:74:5f:de:cb:1b:38:2b:93:27:df:b0:22:a6: 69:d7:90:58:c5:0c:46:6f:35:9c:ca:fc:fc:aa:27: d6:85:18:3e:f5:ae:15:48:30:3b:5f:ea:5d:82:f9: b1:e3:f8:a2:67:9a:5f:e0:7a:d0:87:03:1c:bc:7d: ba:22:16:b0:5f:6f:83:1c:88:3a:bb:83:ee:e7:b5: d1:b9:25:f4:29:4b:bf:68:21:f2:4c:e2:1f:23:c6: 45:3c:e4:42:7b:42:d2:b6:e9:99:bd:49:d2:70:19: 57:26:2d:ff:da:c6:29:ed:be:3a:c0:11:81:6b:62: ce:1a:ce:9f:03:20:ac:9c:6b:b7:d6:cd:99:d7:16: 31:45:78:54:f4:f4:cb:6d:f6:d1:81:8c:1e:c5:e3: e0:5c:e7:b4:cc:ff:11:6d:a6:5d:16:00:96:5b:68: bf:44:8a:94:af:f3:d3:f6:b4:85:58:1c:41:9c:89: 0c:8e:cc:7e:d8:26:73:f6:de:e7:51:51:cb:7a:02: 71:90:3f:a0:75:8b:fc:e4:9c:38:0d:b9:85:55:64: e5:f8:a2:07:45:72:20:67:7f:be:d8:a6:46:d9:d1: bd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:81:78:22:FE:87:3C:98:8B:C9:EB:2B:81:1C:31:3E:53:BE:1E:83 X509v3 Authority Key Identifier: keyid:AF:E7:27:E4:20:9D:CD:F8:27:62:57:4B:5E:33:C8:08:37:87:A1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r-cn5CCdzfgnYldLXjPICDeHoY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AE5F/8B79B678885111E6A692DE78C4F9AE02/r-cn5CCdzfgnYldLXjPICDeHoY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:cc:b1:36:5e:42:56:23:ff:2e:95:b9:e9:ee:e7:25:c3:25: 7a:5f:46:5d:b6:22:b6:bb:29:37:81:81:ba:5d:9b:eb:2b:ce: 37:a2:46:8b:2d:26:57:5e:d1:20:ce:c1:51:c7:7a:6d:8c:f7: 87:18:93:25:a4:c9:73:2e:d0:42:32:56:29:9d:d5:58:8f:8a: d2:73:6b:7b:c0:77:6d:7b:9b:25:4f:40:f7:fe:c2:f3:a3:28: 30:8f:8a:3a:53:9d:b6:66:fe:d4:76:f1:fa:e7:75:4f:67:d2: 49:8e:81:56:29:78:f8:60:e4:9b:1c:72:36:90:d8:09:8a:b6: 3e:02:c9:6a:85:e2:e3:8a:a8:32:37:1c:d8:49:fd:4d:0f:f9: e5:a1:0d:1a:6d:91:12:a9:bc:65:a1:25:3e:26:c8:b5:6c:73: 45:1c:1d:36:9d:20:d4:7b:eb:ec:24:90:b7:e8:7e:7b:78:6c: 6b:2d:68:f6:09:50:7d:1e:62:60:a6:1d:62:5e:bb:eb:db:f9: 4a:dd:2c:5b:4e:7b:ab:d2:c5:24:5a:24:a0:78:a4:30:00:46: 91:75:90:19:89:26:7f:65:b7:3f:7c:90:8b:74:20:62:86:b9: fe:06:38:53:6b:ad:1d:04:c9:aa:6b:03:03:24:e8:c7:d7:e4: 02:7c:bf:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUFFNUYxMTAvBgNVBAUTKEFGRTcyN0U0MjA5RENERjgyNzYyNTc0QjVFMzNDODA4 Mzc4N0ExOEYwHhcNMjUwNDI0MTYwNjA4WhcNMjUwNTAxMTYwNjA4WjAYMRYwFAYD VQQDEw02ODBhNjE3MC03YWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1R74Lu5ZAaPusf7lf6w/AoII68HwECj9YnFHwQbJynRf3ssbOCuTJ9+wIqZp 15BYxQxGbzWcyvz8qifWhRg+9a4VSDA7X+pdgvmx4/iiZ5pf4HrQhwMcvH26Ihaw X2+DHIg6u4Pu57XRuSX0KUu/aCHyTOIfI8ZFPORCe0LStumZvUnScBlXJi3/2sYp 7b46wBGBa2LOGs6fAyCsnGu31s2Z1xYxRXhU9PTLbfbRgYwexePgXOe0zP8RbaZd FgCWW2i/RIqUr/PT9rSFWBxBnIkMjsx+2CZz9t7nUVHLegJxkD+gdYv85Jw4DbmF VWTl+KIHRXIgZ3++2KZG2dG9AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmBeCL+ hzyYi8nrK4EcMT5Tvh6DMB8GA1UdIwQYMBaAFK/nJ+Qgnc34J2JXS14zyAg3h6GP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUU1Ri84Qjc5QjY3ODg4 NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpmZ25ZbGRMWGpQSUNEZUhv WTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ItY241Q0NkemZnbllsZExYalBJQ0RlSG9ZOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QUU1Ri84Qjc5QjY3ODg4NTExMUU2QTY5MkRFNzhDNEY5QUUwMi9yLWNuNUNDZHpm Z25ZbGRMWGpQSUNEZUhvWTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNzLE2XkJWI/8ulbnp7uclwyV6X0ZdtiK2uyk3gYG6XZvrK843okaL LSZXXtEgzsFRx3ptjPeHGJMlpMlzLtBCMlYpndVYj4rSc2t7wHdte5slT0D3/sLz oygwj4o6U522Zv7UdvH653VPZ9JJjoFWKXj4YOSbHHI2kNgJirY+AslqheLjiqgy NxzYSf1ND/nloQ0abZESqbxloSU+Jsi1bHNFHB02nSDUe+vsJJC36H57eGxrLWj2 CVB9HmJgph1iXrvr2/lK3SxbTnur0sUkWiSgeKQwAEaRdZAZiSZ/Zbc/fJCLdCBi hrn+BjhTa60dBMmqawMDJOjH1+QCfL9h -----END CERTIFICATE-----Generated at Sat Apr 26 05:16:37 2025 by rpki-client