$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: 2xWWwjC+tJ6fEdhwLB4VOfYaJnqKJSzgUMLiUTQjl8Q= Subject key identifier: 95:A5:D3:50:AB:8B:AE:E7:6D:40:70:0D:4F:A8:4D:DF:20:DB:26:E2 Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 161F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 25C2 Signing time: Thu 24 Apr 2025 16:44:28 +0000 Manifest this update: Thu 24 Apr 2025 16:44:27 +0000 Manifest next update: Thu 01 May 2025 16:44:27 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: lvL4nntWtv/o+meE70G4LqgS6n9PYHTFmM0onvPPbuk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5663 (0x161f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Apr 24 16:44:27 2025 GMT Not After : May 1 16:44:27 2025 GMT Subject: CN=680a6a6c-a84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:05:f5:e6:b8:8f:17:c3:bc:80:d5:78:fb: c8:81:3e:0b:7e:ab:77:b9:ea:77:cb:98:13:7d:09: 3b:33:3b:55:ba:53:bd:fb:21:86:d0:dc:6a:00:68: 07:ee:47:8d:57:34:01:ae:da:e2:4d:aa:a4:32:db: b9:cb:eb:f5:e0:f2:e6:aa:84:fa:ca:df:28:0d:13: 18:62:90:6e:c0:be:db:ed:71:0d:03:0b:0d:dd:10: ae:02:e4:b2:ad:ad:53:ad:ea:64:bf:49:ba:d5:6f: 0c:1c:c3:5b:c8:90:86:a5:b8:e7:81:24:95:76:07: 2b:d0:15:4e:d8:fe:b8:45:85:65:54:b1:12:87:84: 61:e0:44:17:81:45:7b:fc:e5:d6:53:9d:48:7f:fd: a1:c4:c3:99:65:e4:6d:fd:da:53:14:29:cf:8f:89: a1:97:9c:1b:19:b2:ce:68:cf:dc:f7:8b:de:bc:45: 79:7f:13:bc:41:29:c9:bd:fc:38:df:cb:10:fc:c6: 92:0f:9e:33:90:ec:d4:41:e7:36:ed:99:0a:25:b5: 80:b6:9b:22:b5:e0:3f:94:76:c2:da:40:be:fc:08: c4:5e:1f:ca:6c:7a:34:8b:ae:6a:ed:e4:e5:27:05: e3:75:61:47:ee:92:7f:a0:19:97:fd:96:8a:77:a5: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A5:D3:50:AB:8B:AE:E7:6D:40:70:0D:4F:A8:4D:DF:20:DB:26:E2 X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:97:f3:c0:35:15:35:51:24:c0:d0:b8:08:9a:0d:8c:14:de: 24:ea:0d:b0:df:ab:2a:b6:5f:3b:2e:3e:db:32:e7:e5:9a:13: 24:62:41:ce:76:fc:8f:c7:20:c1:53:50:c1:27:16:61:71:88: 97:a4:34:7b:54:ef:8a:54:80:aa:83:3d:cb:fd:d4:2c:d5:9e: 7c:6b:8c:14:54:ee:76:ec:59:b0:28:fc:fe:bb:ac:00:12:5a: 75:ad:72:f5:be:97:b7:86:8e:e8:27:20:db:5e:77:ab:97:73: 05:82:49:8a:92:ab:59:e8:92:d6:d7:a4:6c:6b:a1:54:d7:23: 9b:52:44:dd:0c:0c:05:d6:37:ea:c7:5b:bc:a1:8f:07:a1:bb: 45:34:2a:22:6b:56:34:4e:43:3d:f6:4e:97:3a:1d:3d:f1:73: 1f:5f:fc:9a:be:af:19:eb:9a:69:31:58:ca:2e:78:28:65:d6: 5c:48:f9:a5:fa:33:e2:ff:75:57:5f:21:46:20:8b:02:ce:f6: 18:f2:46:35:b3:78:6a:18:76:5f:52:cf:10:38:25:57:7b:3e: 6e:bd:da:53:af:be:e8:a8:f8:a3:f5:d1:57:14:d2:a9:ea:8d: 58:54:0e:34:41:bf:13:6e:91:d2:6f:d4:a1:d1:d6:2e:35:b7: 30:f2:f5:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjUwNDI0MTY0NDI3WhcNMjUwNTAxMTY0NDI3WjAYMRYwFAYD VQQDEw02ODBhNmE2Yy1hODRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHgF9ea4jxfDvIDVePvIgT4Lfqt3uep3y5gTfQk7MztVulO9+yGG0NxqAGgH 7keNVzQBrtriTaqkMtu5y+v14PLmqoT6yt8oDRMYYpBuwL7b7XENAwsN3RCuAuSy ra1Trepkv0m61W8MHMNbyJCGpbjngSSVdgcr0BVO2P64RYVlVLESh4Rh4EQXgUV7 /OXWU51If/2hxMOZZeRt/dpTFCnPj4mhl5wbGbLOaM/c94vevEV5fxO8QSnJvfw4 38sQ/MaSD54zkOzUQec27ZkKJbWAtpsiteA/lHbC2kC+/AjEXh/KbHo0i65q7eTl JwXjdWFH7pJ/oBmX/ZaKd6XUXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWl01Cr i67nbUBwDU+oTd8g2ybiMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYl/PANRU1USTA0LgImg2MFN4k6g2w36sqtl87Lj7bMuflmhMkYkHO dvyPxyDBU1DBJxZhcYiXpDR7VO+KVICqgz3L/dQs1Z58a4wUVO527FmwKPz+u6wA Elp1rXL1vpe3ho7oJyDbXnerl3MFgkmKkqtZ6JLW16Rsa6FU1yObUkTdDAwF1jfq x1u8oY8HobtFNCoia1Y0TkM99k6XOh098XMfX/yavq8Z65ppMVjKLngoZdZcSPml +jPi/3VXXyFGIIsCzvYY8kY1s3hqGHZfUs8QOCVXez5uvdpTr77oqPij9dFXFNKp 6o1YVA40Qb8TbpHSb9Sh0dYuNbcw8vWb -----END CERTIFICATE-----Generated at Sat Apr 26 07:50:08 2025 by rpki-client