$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: o0k+170R7b3kToCB/X+4F8qDEqALHg7r5BPWlJzP4F0= Subject key identifier: 69:7F:58:66:2F:8F:F8:C0:9F:B1:9B:9D:23:82:46:4B:50:8D:CE:08 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0106 Signing time: Fri 25 Apr 2025 04:05:02 +0000 Manifest this update: Fri 25 Apr 2025 04:05:01 +0000 Manifest next update: Fri 02 May 2025 04:05:01 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: Cl2ExCM1nVnfzZeDZ+Z5MwE3LWI6YgTQf56QCSScSHE=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:05:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: Apr 25 04:05:01 2025 GMT Not After : May 2 04:05:01 2025 GMT Subject: CN=680b09ee-2ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:b5:b5:e8:a1:bd:da:14:76:96:43:02:8b: e1:a2:fe:27:62:3c:0b:95:8e:a5:9f:df:c8:a9:dd: 23:8f:30:68:12:05:37:77:ae:84:1b:d3:5a:db:f3: 98:20:07:2f:b1:9f:4f:2c:12:b4:db:99:01:d6:69: f9:b2:f6:12:15:65:1a:80:ff:56:fc:1d:73:57:91: f4:08:2c:22:19:e3:3a:64:7a:b5:03:45:fc:7f:4e: ac:62:7a:03:fe:15:1a:f4:d6:d4:b1:76:c7:44:54: 23:b1:b8:f9:59:eb:5d:d8:6c:e2:f1:05:11:e3:b8: 5a:47:75:63:ce:5c:d4:18:db:e7:78:7a:ff:93:11: 5f:7f:c9:5c:86:bb:2d:cc:e1:b6:eb:be:e2:d9:b0: b2:74:9f:56:e3:07:8b:ea:72:85:1a:42:ac:f7:e2: c3:a4:7b:94:22:bb:e4:fa:02:9e:ee:37:89:20:fc: 8e:dd:2c:2c:6d:ea:52:60:b7:44:36:af:88:f6:e7: d8:20:ee:31:ef:39:5c:71:7e:50:16:7f:7d:db:c0: e2:37:d0:7a:04:d6:40:db:46:58:64:2e:58:b2:d9: fc:5d:88:c2:62:1e:ba:09:ef:73:95:b9:dc:2e:b2: 27:12:35:1a:15:bf:68:40:fa:7e:1a:a8:81:ca:4d: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7F:58:66:2F:8F:F8:C0:9F:B1:9B:9D:23:82:46:4B:50:8D:CE:08 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:0a:1d:31:14:7c:d6:2c:1b:9c:03:01:fd:20:60:87:db:a4: aa:db:93:1f:1b:9c:9d:d2:fb:cd:e6:02:84:71:71:3c:8e:61: e7:cd:0e:59:68:8b:ba:c6:60:b5:60:2f:91:a9:b1:a4:9a:e6: 18:fa:6d:64:25:31:f1:fc:28:b8:71:d8:03:ab:97:01:5a:cb: a6:a3:fd:bb:a5:aa:71:f3:8a:75:5f:eb:d4:ab:9c:c5:1f:e0: d1:9b:26:4f:aa:4b:79:d5:6e:48:9d:57:e1:94:46:5e:35:eb: 2b:9b:46:e8:25:cf:60:3a:88:d0:17:f3:22:5d:3e:eb:85:bd: 1a:7d:6e:10:50:0a:91:2f:1b:e0:28:ce:f2:42:36:39:89:c4: be:63:2f:de:e3:3c:df:66:84:ce:aa:d9:c3:4e:e0:28:d4:e8: 8c:d1:24:40:ee:ee:b1:dc:7c:fe:96:82:db:1b:b6:16:14:23: 96:77:8f:19:03:b9:54:12:37:18:c1:a2:ad:78:35:b6:46:02: 91:17:9c:2a:7c:a5:89:f0:fb:e6:4a:45:c4:0e:6e:9c:9d:eb: d2:97:0b:44:2e:6a:f5:78:28:38:7d:23:45:e0:9b:95:51:32: 92:70:7c:73:53:78:50:84:b9:1f:b1:31:df:2f:c6:0c:13:f4: f0:46:57:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwNDI1MDQwNTAxWhcNMjUwNTAyMDQwNTAxWjAYMRYwFAYD VQQDEw02ODBiMDllZS0yY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQu1teihvdoUdpZDAovhov4nYjwLlY6ln9/Iqd0jjzBoEgU3d66EG9Na2/OY IAcvsZ9PLBK025kB1mn5svYSFWUagP9W/B1zV5H0CCwiGeM6ZHq1A0X8f06sYnoD /hUa9NbUsXbHRFQjsbj5Wetd2Gzi8QUR47haR3VjzlzUGNvneHr/kxFff8lchrst zOG2677i2bCydJ9W4weL6nKFGkKs9+LDpHuUIrvk+gKe7jeJIPyO3SwsbepSYLdE Nq+I9ufYIO4x7zlccX5QFn9928DiN9B6BNZA20ZYZC5Ystn8XYjCYh66Ce9zlbnc LrInEjUaFb9oQPp+GqiByk1VfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl/WGYv j/jAn7GbnSOCRktQjc4IMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALCh0xFHzWLBucAwH9IGCH26Sq25MfG5yd0vvN5gKEcXE8jmHnzQ5Z aIu6xmC1YC+RqbGkmuYY+m1kJTHx/Ci4cdgDq5cBWsumo/27papx84p1X+vUq5zF H+DRmyZPqkt51W5InVfhlEZeNesrm0boJc9gOojQF/MiXT7rhb0afW4QUAqRLxvg KM7yQjY5icS+Yy/e4zzfZoTOqtnDTuAo1OiM0SRA7u6x3Hz+loLbG7YWFCOWd48Z A7lUEjcYwaKteDW2RgKRF5wqfKWJ8PvmSkXEDm6cnevSlwtELmr1eCg4fSNF4JuV UTKScHxzU3hQhLkfsTHfL8YME/TwRldL -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:38 2025 by rpki-client