$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: 3yWohq9qOy0Rnwu6w6IOJ6/NY9u+uZDLuj9z/CaZL+Q= Subject key identifier: 4E:56:28:F6:F9:72:B1:76:6D:54:3D:B1:17:FC:24:ED:56:58:16:C9 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: C8 Signing time: Sun 15 Jun 2025 04:51:24 +0000 Manifest this update: Sun 15 Jun 2025 04:51:24 +0000 Manifest next update: Sun 22 Jun 2025 04:51:24 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: akd3/Kri9ZfCJ3xDucjyJ6wXK0o8mGdUK7eILbFy+Rg=) 2: FDC5FC0C232411EF868B873EC4F9AE02.roa (hash: ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Jun 15 04:51:24 2025 GMT Not After : Jun 22 04:51:24 2025 GMT Subject: CN=684e514c-7862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8f:97:5c:be:d1:68:f2:e4:fd:26:46:27:9b: 89:1c:74:5b:2a:3d:72:f6:ec:10:b4:92:99:6d:93: 48:ca:f5:f1:92:e4:32:5d:94:1f:71:e2:1a:f6:e7: f0:61:65:12:86:0b:f2:c4:c7:43:ec:c9:8a:3b:ab: b7:25:5d:9e:7f:2e:56:c9:d9:91:ed:6b:fe:f0:3e: 5f:65:89:0c:4d:ed:47:3f:2e:57:a7:f8:da:ee:ac: 59:41:44:13:fa:9c:0f:d1:13:21:1d:65:b0:2c:31: cc:a8:ac:fa:90:92:30:40:1d:d4:ac:cc:e6:58:f3: 41:b3:7b:1c:85:08:eb:48:56:51:8f:e9:8f:41:62: 3e:86:2f:03:6e:35:8f:6a:89:12:be:98:31:66:6d: 4c:6a:40:bb:60:a8:ac:9c:a6:4b:92:f2:ab:6e:46: 03:87:72:02:12:2b:04:f1:2b:78:fb:24:c5:9a:7f: 21:ea:63:24:9f:5b:ef:56:d2:c6:d8:7f:b0:e6:79: e3:8b:3f:ab:0f:01:86:77:ae:5a:c4:05:6d:fd:d1: d7:09:33:41:ca:d1:bb:ed:0c:b9:4a:08:ab:6f:d3: 38:03:d3:f6:23:43:83:97:d2:f6:b1:f0:2f:41:86: 0e:3a:9c:d4:89:51:ba:69:5c:a5:27:0f:c3:77:99: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:56:28:F6:F9:72:B1:76:6D:54:3D:B1:17:FC:24:ED:56:58:16:C9 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e7:c8:22:8a:be:58:5f:e8:50:1d:87:b4:5b:d6:b8:d6:c0: be:61:5b:27:45:a1:78:bb:d6:67:7e:23:d4:0e:17:8d:09:3c: 8d:d4:ad:f9:e5:84:c0:d4:7b:cb:44:4d:45:cc:4f:37:a5:bd: ed:89:0d:df:cb:ad:26:3e:0f:4d:03:25:94:7b:bf:7c:66:fd: bb:6b:2a:bd:22:82:65:07:dd:9b:45:64:11:f3:b2:5f:f4:4a: c7:15:65:f3:c0:f8:10:a2:64:32:43:1d:89:6d:ee:9f:2c:e0: dd:74:fc:e5:c6:0c:4a:bb:73:89:57:f6:85:06:16:c3:1a:30: 38:46:4b:f8:90:a5:00:bf:cc:3b:b7:35:34:90:c8:60:f2:35: 97:f3:92:82:05:5c:ba:21:59:57:6d:55:b1:66:7a:9d:36:6c: 34:fe:63:92:ea:1f:13:24:21:e2:0e:b6:90:4c:3a:8d:c2:a6: 2a:c3:28:3e:a5:8b:c2:5b:76:51:5e:8f:c0:28:da:fa:67:81: 48:37:e6:85:be:38:d3:62:36:0d:be:d9:9f:f3:e8:6c:6d:81: e5:4b:12:ac:16:1c:1f:cf:ec:87:3a:52:1c:03:15:e7:2b:43: 02:6f:3d:de:9b:8b:cd:cd:27:0c:fd:09:7b:af:18:53:77:2c: f3:58:3f:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwNjE1MDQ1MTI0WhcNMjUwNjIyMDQ1MTI0WjAYMRYwFAYD VQQDEw02ODRlNTE0Yy03ODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY+XXL7RaPLk/SZGJ5uJHHRbKj1y9uwQtJKZbZNIyvXxkuQyXZQfceIa9ufw YWUShgvyxMdD7MmKO6u3JV2efy5WydmR7Wv+8D5fZYkMTe1HPy5Xp/ja7qxZQUQT +pwP0RMhHWWwLDHMqKz6kJIwQB3UrMzmWPNBs3schQjrSFZRj+mPQWI+hi8DbjWP aokSvpgxZm1MakC7YKisnKZLkvKrbkYDh3ICEisE8St4+yTFmn8h6mMkn1vvVtLG 2H+w5nnjiz+rDwGGd65axAVt/dHXCTNBytG77Qy5Sgirb9M4A9P2I0ODl9L2sfAv QYYOOpzUiVG6aVylJw/Dd5nN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5WKPb5 crF2bVQ9sRf8JO1WWBbJMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn58giir5YX+hQHYe0W9a41sC+YVsnRaF4u9ZnfiPUDheNCTyN1K35 5YTA1HvLRE1FzE83pb3tiQ3fy60mPg9NAyWUe798Zv27ayq9IoJlB92bRWQR87Jf 9ErHFWXzwPgQomQyQx2Jbe6fLODddPzlxgxKu3OJV/aFBhbDGjA4Rkv4kKUAv8w7 tzU0kMhg8jWX85KCBVy6IVlXbVWxZnqdNmw0/mOS6h8TJCHiDraQTDqNwqYqwyg+ pYvCW3ZRXo/AKNr6Z4FIN+aFvjjTYjYNvtmf8+hsbYHlSxKsFhwfz+yHOlIcAxXn K0MCbz3em4vNzScM/Ql7rxhTdyzzWD/x -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:51 2025 by rpki-client