$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: 8yIxFmarm12kTLLfhSeEfDdQjazfNHLwMQOaKtyZpVs= Subject key identifier: CD:FD:6E:71:86:A1:E9:1C:65:F2:3C:AC:70:14:9B:EF:28:E4:C9:C9 Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03BC Signing time: Fri 25 Apr 2025 00:26:10 +0000 Manifest this update: Fri 25 Apr 2025 00:26:10 +0000 Manifest next update: Fri 02 May 2025 00:26:10 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: +929tFnLbJujuk+qulOhOfQfVap0LZacRHREzdOokKs=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 962 (0x3c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: Apr 25 00:26:10 2025 GMT Not After : May 2 00:26:10 2025 GMT Subject: CN=680ad6a2-b2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e5:3f:4f:1f:7e:da:fc:2b:ee:89:69:a2:a6: 12:ac:73:9d:1a:3a:3b:67:ff:59:15:ee:82:76:c1: 75:c0:8f:fd:69:4f:a2:1e:9c:75:81:a2:45:c7:78: d5:86:0f:84:ed:ba:17:36:d2:b2:99:fc:d5:8c:c4: 14:e4:af:f9:1f:34:1c:b0:93:a0:6b:23:d8:91:b1: a8:ff:9e:50:0b:6e:e1:d0:eb:20:1d:88:48:a7:a1: b5:53:33:33:35:8d:84:18:2f:38:e0:aa:3c:74:03: 7c:ba:c1:1d:96:47:3a:16:99:a0:a5:6e:03:22:c6: bd:d0:1c:5d:d4:88:6e:c5:79:5d:f6:9d:d0:4f:b3: 11:51:30:6f:e4:71:dc:81:c2:8b:ab:9f:dd:1b:77: f7:46:25:be:10:e8:68:33:5e:3b:73:34:c1:04:2f: e8:b0:0d:19:5c:5f:c3:89:ba:ee:68:29:bd:b7:d0: d0:ff:7b:df:b3:81:f4:b9:a7:6c:e1:d3:85:53:fe: d8:73:3c:8e:2e:c7:bb:6b:4e:9e:9b:34:72:ec:b5: 2d:be:19:0f:92:d2:9c:ec:8f:5e:61:67:86:b3:c3: 82:76:b8:41:06:9e:f6:6c:87:66:98:4f:d1:90:76: a6:07:69:ff:74:d2:cc:78:0b:a1:d1:8e:65:f7:1b: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FD:6E:71:86:A1:E9:1C:65:F2:3C:AC:70:14:9B:EF:28:E4:C9:C9 X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6b:b7:c0:ee:62:54:54:a2:d4:d5:e6:17:d4:b9:5d:40:ad: 6f:bd:fb:c2:98:de:66:b2:48:7e:bd:bf:25:9b:7d:a2:0c:42: 9c:54:51:d6:e0:99:31:c2:43:89:e0:70:98:8d:3a:e1:fa:5f: 51:d0:f5:df:2c:cb:8b:45:2f:b5:b5:3c:02:3e:b4:b3:98:cd: 22:0a:61:48:06:cd:ae:ea:29:33:b7:55:bd:38:21:4a:e4:d8: 72:23:18:e3:86:7e:be:f9:0b:26:66:8c:f5:5a:f2:74:c3:16: 8f:89:01:1d:d7:d8:1a:03:b2:99:0b:4a:55:d5:7b:e6:a4:23: d0:51:da:83:36:b4:92:aa:b1:f5:33:e6:8d:aa:0b:fe:2d:75: 51:31:33:83:e0:b3:aa:b3:6e:92:79:e6:e6:25:fb:17:fc:06: 67:40:31:7e:f8:45:eb:80:4e:78:1f:8a:5b:cf:43:81:7f:c6: 62:8f:e3:a2:4d:00:43:4b:07:33:24:e8:92:cc:42:d6:55:3f: 99:56:dc:77:77:3b:b1:73:ef:df:d2:66:bc:ee:08:3a:54:8a: 27:12:a2:bf:30:4a:f9:7f:1e:8c:1e:e7:91:d4:09:0e:e2:66: ea:1a:6e:55:12:eb:33:7d:c2:25:25:f0:57:03:9b:11:3f:8a: 52:43:15:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwNDI1MDAyNjEwWhcNMjUwNTAyMDAyNjEwWjAYMRYwFAYD VQQDEw02ODBhZDZhMi1iMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmOU/Tx9+2vwr7olpoqYSrHOdGjo7Z/9ZFe6CdsF1wI/9aU+iHpx1gaJFx3jV hg+E7boXNtKymfzVjMQU5K/5HzQcsJOgayPYkbGo/55QC27h0OsgHYhIp6G1UzMz NY2EGC844Ko8dAN8usEdlkc6FpmgpW4DIsa90Bxd1IhuxXld9p3QT7MRUTBv5HHc gcKLq5/dG3f3RiW+EOhoM147czTBBC/osA0ZXF/DibruaCm9t9DQ/3vfs4H0uads 4dOFU/7YczyOLse7a06emzRy7LUtvhkPktKc7I9eYWeGs8OCdrhBBp72bIdmmE/R kHamB2n/dNLMeAuh0Y5l9xu4uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM39bnGG oekcZfI8rHAUm+8o5MnJMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZa7fA7mJUVKLU1eYX1LldQK1vvfvCmN5mskh+vb8lm32iDEKcVFHW 4JkxwkOJ4HCYjTrh+l9R0PXfLMuLRS+1tTwCPrSzmM0iCmFIBs2u6ikzt1W9OCFK 5NhyIxjjhn6++QsmZoz1WvJ0wxaPiQEd19gaA7KZC0pV1XvmpCPQUdqDNrSSqrH1 M+aNqgv+LXVRMTOD4LOqs26SeebmJfsX/AZnQDF++EXrgE54H4pbz0OBf8Zij+Oi TQBDSwczJOiSzELWVT+ZVtx3dzuxc+/f0ma87gg6VIonEqK/MEr5fx6MHueR1AkO 4mbqGm5VEuszfcIlJfBXA5sRP4pSQxX7 -----END CERTIFICATE-----Generated at Sat Apr 26 17:00:37 2025 by rpki-client