$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft File: CkMWPL6xv3mMnOQcHF50ociDesY.mft (raw, json) Hash identifier: dlrnPmf2QPoz53lGb/Y0OokWUcLiZqXw3yus4uG/XKU= Subject key identifier: 56:FF:39:6B:BE:16:99:2D:60:DE:A8:5B:C8:D8:61:97:26:CB:6C:FC Authority key identifier: 0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 Certificate issuer: /CN=A91A95C1/serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Certificate serial: 0269 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft Manifest number: 0264 Signing time: Fri 25 Apr 2025 01:32:32 +0000 Manifest this update: Fri 25 Apr 2025 01:32:32 +0000 Manifest next update: Fri 02 May 2025 01:32:32 +0000 Files and hashes: 1: CkMWPL6xv3mMnOQcHF50ociDesY.crl (hash: r/BJqmhmoNC/1DAG2cnRPH2Fu9FppoG7fu7xH7SrdxQ=) 2: DA61302A0F0211EDABBE3C6AC4F9AE02.roa (hash: vW2EZP2Cwb4m+zHwX4dxc62MHLuj24Kv3gEJBseD9aY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:32:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 617 (0x269) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A95C1, serialNumber=0A43163CBEB1BF798C9CE41C1C5E74A1C8837AC6 Validity Not Before: Apr 25 01:32:32 2025 GMT Not After : May 2 01:32:32 2025 GMT Subject: CN=680ae630-06b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1e:44:12:3e:2f:00:34:e7:0c:a3:88:59:6d: e6:c4:c6:27:78:3e:63:47:fd:ae:13:1c:6a:1b:73: 73:bb:3b:c7:e7:9c:dc:e6:a1:cd:a6:9d:38:2d:bb: e7:0a:4b:83:2b:a9:9e:f5:bc:ca:86:b0:63:3c:b0: 65:d3:82:ca:f0:b1:df:38:fa:9a:e7:8d:f4:ef:f5: 91:1d:34:d8:76:5c:c1:e7:45:48:b9:23:7b:5a:4f: 71:00:d9:78:65:68:7e:d4:b8:ed:bf:93:ef:64:90: 88:a1:e6:20:46:8b:ff:c8:92:17:65:05:79:4c:f2: ca:8e:a3:8d:50:9c:7e:be:32:75:93:7b:76:aa:96: a4:2a:d6:7f:12:aa:08:43:70:d6:b0:14:1b:b9:63: 3e:eb:73:90:33:84:a0:03:4e:85:77:67:7f:32:05: fa:24:43:84:81:59:c4:80:b2:62:7c:17:55:ed:b5: 0c:b2:cf:88:eb:fb:f0:e6:88:5d:6a:a0:55:f5:cc: 7e:e4:df:ad:db:7e:eb:e9:e8:04:63:5d:67:9e:4a: b1:ee:91:26:3f:78:22:3f:d7:be:3e:0e:20:3b:37: 8b:a7:dd:bf:27:68:50:1b:70:25:ef:24:6b:18:dd: ba:2f:0b:0a:2e:e8:32:71:41:b7:16:2e:fb:8d:36: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FF:39:6B:BE:16:99:2D:60:DE:A8:5B:C8:D8:61:97:26:CB:6C:FC X509v3 Authority Key Identifier: keyid:0A:43:16:3C:BE:B1:BF:79:8C:9C:E4:1C:1C:5E:74:A1:C8:83:7A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkMWPL6xv3mMnOQcHF50ociDesY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95C1/CBE6BC740F0011EDA744066AC4F9AE02/CkMWPL6xv3mMnOQcHF50ociDesY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:44:2d:b4:35:9b:3c:c9:58:6c:5f:da:a7:67:2b:03:86:e1: d0:0f:2f:d8:27:38:4d:40:64:ec:1d:88:b2:3e:f7:62:db:0f: 32:0f:59:d8:ad:0d:bf:77:bf:f5:ee:de:08:03:17:1c:3e:2b: cc:c3:0a:f7:17:84:86:5e:d7:eb:e3:08:7b:25:85:9f:6d:ef: d0:05:56:10:f6:db:29:ca:16:7e:81:ae:96:3d:5d:58:49:8e: 6a:c8:a4:5d:8d:43:6b:7c:5b:74:50:bf:b8:f6:6b:86:04:d3: 12:76:18:02:c5:4e:41:f3:07:9e:bf:d7:3f:bb:ac:90:f0:cc: 99:1a:bd:51:2c:11:29:cd:2d:bc:fa:f3:21:4e:ce:19:d4:86: a0:84:ad:db:4a:fa:fb:07:af:80:d4:20:9e:a3:74:8e:aa:28: a4:f0:92:18:a6:c9:8a:34:10:ad:8a:41:88:60:06:99:44:36: 25:76:4c:29:3a:ba:dd:38:63:6a:3a:0e:5b:64:4f:62:1e:27: 8e:f5:89:c2:b6:40:47:71:e3:11:de:4d:b0:ba:fb:97:6b:78: d2:bf:d7:50:b4:c8:5e:b9:f9:20:f5:c5:22:82:78:7d:0b:07: 43:ce:97:39:c1:bc:d8:9f:86:a1:3c:bc:28:38:3b:de:2c:a0: e7:cb:61:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk1QzExMTAvBgNVBAUTKDBBNDMxNjNDQkVCMUJGNzk4QzlDRTQxQzFDNUU3NEEx Qzg4MzdBQzYwHhcNMjUwNDI1MDEzMjMyWhcNMjUwNTAyMDEzMjMyWjAYMRYwFAYD VQQDEw02ODBhZTYzMC0wNmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1B5EEj4vADTnDKOIWW3mxMYneD5jR/2uExxqG3NzuzvH55zc5qHNpp04Lbvn CkuDK6me9bzKhrBjPLBl04LK8LHfOPqa54307/WRHTTYdlzB50VIuSN7Wk9xANl4 ZWh+1Ljtv5PvZJCIoeYgRov/yJIXZQV5TPLKjqONUJx+vjJ1k3t2qpakKtZ/EqoI Q3DWsBQbuWM+63OQM4SgA06Fd2d/MgX6JEOEgVnEgLJifBdV7bUMss+I6/vw5ohd aqBV9cx+5N+t237r6egEY11nnkqx7pEmP3giP9e+Pg4gOzeLp92/J2hQG3Al7yRr GN26LwsKLugycUG3Fi77jTbakQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFb/OWu+ FpktYN6oW8jYYZcmy2z8MB8GA1UdIwQYMBaAFApDFjy+sb95jJzkHBxedKHIg3rG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVDMS9DQkU2QkM3NDBG MDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYzbU1uT1FjSEY1MG9jaURl c1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NrTVdQTDZ4djNtTW5PUWNIRjUwb2NpRGVzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTVDMS9DQkU2QkM3NDBGMDAxMUVEQTc0NDA2NkFDNEY5QUUwMi9Da01XUEw2eHYz bU1uT1FjSEY1MG9jaURlc1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSRC20NZs8yVhsX9qnZysDhuHQDy/YJzhNQGTsHYiyPvdi2w8yD1nY rQ2/d7/17t4IAxccPivMwwr3F4SGXtfr4wh7JYWfbe/QBVYQ9tspyhZ+ga6WPV1Y SY5qyKRdjUNrfFt0UL+49muGBNMSdhgCxU5B8weev9c/u6yQ8MyZGr1RLBEpzS28 +vMhTs4Z1IaghK3bSvr7B6+A1CCeo3SOqiik8JIYpsmKNBCtikGIYAaZRDYldkwp OrrdOGNqOg5bZE9iHieO9YnCtkBHceMR3k2wuvuXa3jSv9dQtMheufkg9cUignh9 CwdDzpc5wbzYn4ahPLwoODveLKDny2Eg -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:02 2025 by rpki-client