$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft File: cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json) Hash identifier: sZu95CVwstPHYTlwRIipGP9Q02B9YNrqXyx4BIawvDM= Subject key identifier: DA:4C:4A:A8:D2:9C:19:D8:42:18:77:FC:FE:3E:43:85:77:07:3F:A9 Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 Certificate issuer: /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft Manifest number: 73 Signing time: Fri 25 Apr 2025 06:00:58 +0000 Manifest this update: Fri 25 Apr 2025 06:00:57 +0000 Manifest next update: Fri 02 May 2025 06:00:57 +0000 Files and hashes: 1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: +8Jr3r8wJBxYraik9Yeqbj2UDTx76nbin1EMVQtCFI8=) 2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: NMDs0Vn0lErQbJ2ubqn2Wa0iHcDZLQ+NyOe8KJVyEl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2 Validity Not Before: Apr 25 06:00:57 2025 GMT Not After : May 2 06:00:57 2025 GMT Subject: CN=680b2519-77ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6a:20:84:ec:39:95:a2:b2:97:fd:83:7f:10: 5c:c4:c4:e4:76:36:33:e2:da:f4:de:2c:23:56:4b: 63:77:b7:94:9d:bf:fc:5d:0a:5f:43:1d:9f:84:11: c5:e3:e9:a1:bd:11:23:20:37:8a:f6:53:84:28:8b: 9f:d9:05:fa:85:66:ef:87:dc:51:bf:4a:75:ed:8c: a0:48:56:a4:b9:0b:51:d6:da:14:49:de:16:84:a8: f4:07:65:0d:d3:b6:47:cd:cc:8e:e9:6e:99:63:ee: 35:b2:be:7d:1a:b9:96:ee:48:45:d1:ab:74:39:35: 12:19:34:12:07:c9:b9:4a:13:f1:21:46:ef:9b:19: 6b:c0:bf:0b:79:6d:fd:22:8c:ed:49:95:10:2d:13: 1b:04:3b:cd:5d:22:f5:af:fa:e7:c3:4c:80:80:7f: e3:51:4c:61:97:fb:54:f8:1f:f2:4d:c7:cc:9d:6d: 4b:56:6e:8c:fa:a1:5a:e6:b5:e0:9b:b7:ba:ca:4d: 69:e0:5e:ec:86:a7:21:cb:f7:ad:15:67:7b:c1:8a: 19:04:4a:cc:79:1d:be:89:fc:d6:11:f5:0f:27:5c: 79:f0:29:cc:90:57:2d:05:20:d2:7b:8a:f2:30:b1: 3b:0b:a0:a4:a4:7a:5b:6a:e6:fb:f7:75:4f:88:ad: f1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:4C:4A:A8:D2:9C:19:D8:42:18:77:FC:FE:3E:43:85:77:07:3F:A9 X509v3 Authority Key Identifier: keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:eb:ef:6b:0c:2f:71:8e:81:8f:38:a2:51:ab:86:db:45:ce: aa:a1:b9:2a:54:27:cd:12:f1:10:9c:43:2f:2b:b0:9a:2a:20: 60:fb:65:63:66:4e:01:5c:e8:17:f3:12:a6:88:66:be:3c:e8: a6:8b:48:74:77:5d:74:3b:5a:70:57:f8:6b:f3:69:ba:03:d7: 9d:1f:bf:19:ea:d2:ac:ad:c7:03:31:7a:80:de:58:2e:2a:d9: cb:4a:19:4a:a6:15:81:80:a7:8a:89:1d:77:72:96:23:d9:c4: 42:b4:f5:e6:9d:96:71:40:29:c0:1c:c9:44:95:c8:44:46:3e: 73:ee:13:64:f7:b0:ff:7b:d0:94:0e:9c:d6:aa:93:6b:74:a4: 98:50:ef:70:b0:11:90:c3:91:36:0d:6a:62:e9:c4:e4:a5:31: 76:f9:c5:de:5d:71:97:12:00:05:fd:39:70:5a:d6:9f:73:15: 6a:75:db:4b:15:67:be:03:0a:d8:75:a8:fe:68:39:31:cf:24: 05:10:3a:1d:64:5a:80:ab:9a:59:81:17:6f:2d:84:c1:8d:22: 47:06:4f:90:ae:f1:fa:87:51:a7:d9:a1:09:23:66:8e:3a:51: be:8b:01:87:b7:ec:eb:64:53:53:03:3c:56:10:19:9e:ff:44: 6a:d0:13:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QUMzMDExMC8GA1UEBRMoNzJFODg2MEIyQjQ3MzM2NUJGMjYxNDIwRDA2QjU4QTgw NEMyOTZCMjAeFw0yNTA0MjUwNjAwNTdaFw0yNTA1MDIwNjAwNTdaMBgxFjAUBgNV BAMTDTY4MGIyNTE5LTc3YWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAaiCE7DmVorKX/YN/EFzExOR2NjPi2vTeLCNWS2N3t5Sdv/xdCl9DHZ+EEcXj 6aG9ESMgN4r2U4Qoi5/ZBfqFZu+H3FG/SnXtjKBIVqS5C1HW2hRJ3haEqPQHZQ3T tkfNzI7pbplj7jWyvn0auZbuSEXRq3Q5NRIZNBIHyblKE/EhRu+bGWvAvwt5bf0i jO1JlRAtExsEO81dIvWv+ufDTICAf+NRTGGX+1T4H/JNx8ydbUtWboz6oVrmteCb t7rKTWngXuyGpyHL960VZ3vBihkESsx5Hb6J/NYR9Q8nXHnwKcyQVy0FINJ7ivIw sTsLoKSkeltq5vv3dU+IrfEzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2kxKqNKc GdhCGHf8/j5DhXcHP6kwHwYDVR0jBBgwFoAUcuiGCytHM2W/JhQg0GtYqATClrIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBQzMwLzc2MEQ2QTY0OEM2 MjExRUY5OTQ2NDA4NUM0RjlBRTAyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xy SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY3VpR0N5dEhNMldfSmhRZzBHdFlxQVRDbHJJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB QzMwLzc2MEQ2QTY0OEM2MjExRUY5OTQ2NDA4NUM0RjlBRTAyL2N1aUdDeXRITTJX X0poUWcwR3RZcUFUQ2xySS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIHr72sML3GOgY84olGrhttFzqqhuSpUJ80S8RCcQy8rsJoqIGD7ZWNm TgFc6BfzEqaIZr486KaLSHR3XXQ7WnBX+GvzaboD150fvxnq0qytxwMxeoDeWC4q 2ctKGUqmFYGAp4qJHXdyliPZxEK09eadlnFAKcAcyUSVyERGPnPuE2T3sP970JQO nNaqk2t0pJhQ73CwEZDDkTYNamLpxOSlMXb5xd5dcZcSAAX9OXBa1p9zFWp120sV Z74DCth1qP5oOTHPJAUQOh1kWoCrmlmBF28thMGNIkcGT5Cu8fqHUafZoQkjZo46 Ub6LAYe37OtkU1MDPFYQGZ7/RGrQEzU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:28:41 2025 by rpki-client