$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json) Hash identifier: 3jN9ufI6aUnQXI5gNPvUPnmUauaMIceoVZpoXDxr6yQ= Subject key identifier: 66:65:E4:AF:9E:69:CD:E4:00:F5:55:C4:F6:7F:EB:6F:20:1C:8E:F6 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft Manifest number: E7 Signing time: Fri 25 Apr 2025 04:28:33 +0000 Manifest this update: Fri 25 Apr 2025 04:28:32 +0000 Manifest next update: Fri 02 May 2025 04:28:32 +0000 Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: qHNUxGterEb1Pvo+hARe0ZIIUCrU6rsdEroF0D4ZFHo=) 2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: 1zjPjAAMi/TzSsloil5toyL9PUAMXEmH20tRK4X3XV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: Apr 25 04:28:32 2025 GMT Not After : May 2 04:28:32 2025 GMT Subject: CN=680b0f70-44a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:74:11:7a:fe:e0:81:d2:ea:c8:76:0d:31: 2c:79:12:89:21:2c:bf:4f:ae:8c:99:a6:9e:b3:2e: 05:00:5c:86:d2:44:52:71:64:89:e6:96:ae:ed:85: 5b:02:aa:81:15:e7:37:2f:b7:f0:30:b4:ce:e6:62: 79:6b:74:2d:c5:2e:e7:d9:2a:24:84:85:a9:59:94: af:e4:0a:9e:2d:b4:55:1f:6d:9b:b7:81:6f:11:2d: c6:28:d0:45:cc:6b:b0:44:c1:fe:7f:57:96:a1:5f: f2:8f:79:68:64:68:e1:1a:8f:65:3b:06:45:55:03: d8:17:49:37:9c:66:e2:0e:42:ec:9f:4e:99:ea:23: ae:9f:da:3b:16:98:3a:32:57:2f:8c:b3:91:fb:60: f8:d8:c9:4a:a5:5e:a8:c6:01:ca:56:f4:f5:4d:81: 88:36:a0:4c:eb:e9:9f:f8:e4:b4:31:24:93:15:d1: 77:3f:97:a5:a6:53:a3:db:67:dc:02:2f:71:32:69: 2c:05:da:38:7b:a1:b5:5a:5c:17:dd:ba:19:55:dd: e9:9b:db:4a:e9:df:c8:56:71:4c:53:88:45:6f:43: 23:19:95:b3:84:13:d6:e9:bd:f4:1a:8b:a2:1a:1e: b9:56:e7:bf:5e:6a:32:74:6c:02:66:ae:4c:2f:8a: c4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:65:E4:AF:9E:69:CD:E4:00:F5:55:C4:F6:7F:EB:6F:20:1C:8E:F6 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e0:6a:0c:db:ad:e0:d5:e1:a0:10:e8:ce:f1:60:bd:f7:20: a8:38:ec:fe:55:49:30:6b:75:15:4b:26:2d:5b:4e:08:a3:99: f0:95:85:ba:54:c0:4a:b5:05:53:bf:46:b3:4d:11:30:a3:4b: 30:e8:2d:f8:a4:e8:3f:98:bd:5c:2a:a7:db:a0:10:4d:79:e4: 13:84:ef:b8:67:07:67:98:f5:03:dc:27:91:d0:b3:0a:fb:73: c3:35:c6:78:fa:6a:60:14:ed:b7:59:27:ee:98:d7:8d:47:9d: 8a:ef:11:de:22:b7:5b:25:1e:ac:5a:62:86:55:b0:e0:49:41: 87:e3:32:c9:73:b7:cc:9e:e3:68:0e:57:38:22:16:e7:27:ea: d6:f7:95:7b:8b:7c:f0:ef:ad:0b:fa:d8:26:4b:94:65:4c:45: 0a:3c:da:02:40:f6:24:80:92:19:8a:a1:29:ed:50:f1:cf:d0: 25:7a:d0:27:c9:03:a3:33:52:39:64:00:e0:e5:46:a3:9a:31: 51:d7:ca:d3:23:18:aa:68:e9:6c:93:4b:8c:51:ba:16:ac:34: 6c:80:35:df:70:8d:a7:ed:63:68:d5:cd:25:d2:d1:dd:49:77: e8:eb:70:48:ff:e4:53:67:e6:4d:f3:84:68:8b:47:61:42:5e: 1b:e5:6f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjUwNDI1MDQyODMyWhcNMjUwNTAyMDQyODMyWjAYMRYwFAYD VQQDEw02ODBiMGY3MC00NGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApft0EXr+4IHS6sh2DTEseRKJISy/T66Mmaaesy4FAFyG0kRScWSJ5pau7YVb AqqBFec3L7fwMLTO5mJ5a3QtxS7n2SokhIWpWZSv5AqeLbRVH22bt4FvES3GKNBF zGuwRMH+f1eWoV/yj3loZGjhGo9lOwZFVQPYF0k3nGbiDkLsn06Z6iOun9o7Fpg6 MlcvjLOR+2D42MlKpV6oxgHKVvT1TYGINqBM6+mf+OS0MSSTFdF3P5elplOj22fc Ai9xMmksBdo4e6G1WlwX3boZVd3pm9tK6d/IVnFMU4hFb0MjGZWzhBPW6b30Goui Gh65Vue/XmoydGwCZq5ML4rEewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZl5K+e ac3kAPVVxPZ/628gHI72MB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu4GoM263g1eGgEOjO8WC99yCoOOz+VUkwa3UVSyYtW04Io5nwlYW6 VMBKtQVTv0azTREwo0sw6C34pOg/mL1cKqfboBBNeeQThO+4ZwdnmPUD3CeR0LMK +3PDNcZ4+mpgFO23WSfumNeNR52K7xHeIrdbJR6sWmKGVbDgSUGH4zLJc7fMnuNo Dlc4IhbnJ+rW95V7i3zw760L+tgmS5RlTEUKPNoCQPYkgJIZiqEp7VDxz9AletAn yQOjM1I5ZADg5UajmjFR18rTIxiqaOlsk0uMUboWrDRsgDXfcI2n7WNo1c0l0tHd SXfo63BI/+RTZ+ZN84Roi0dhQl4b5W/B -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:16 2025 by rpki-client