$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft File: Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft (raw, json) Hash identifier: PM5rTvQsP4tQFQNXHJ6DU9teCzykBL1EFgsClGrMTnA= Subject key identifier: 81:81:DD:23:47:1F:B1:28:F2:57:F4:AB:0A:28:D7:A9:6D:C3:E3:E1 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 05C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft Manifest number: 05B1 Signing time: Thu 24 Apr 2025 22:58:28 +0000 Manifest this update: Thu 24 Apr 2025 22:58:28 +0000 Manifest next update: Thu 01 May 2025 22:58:28 +0000 Files and hashes: 1: Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl (hash: 78lwycwC9/PAXwV6NLDQtEA5WJklHEBwsGgF6JJNV4s=) 2: 4D38774A86E611EF9D6F5581C4F9AE02.roa (hash: 7ioLjk8VeJvEHBuoWRfrT57B74IDRpNgRa9+NJtrnGo=) 3: 0DD6AB9CA4F011EC96AF7B65C4F9AE02.roa (hash: /5KvjYunF83kIcMiJK5ao0UnFWTIm9b33GuRAVT7yXE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1473 (0x5c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Apr 24 22:58:28 2025 GMT Not After : May 1 22:58:28 2025 GMT Subject: CN=680ac214-ff66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:05:54:36:2d:6f:1d:21:a2:b1:e1:5f:34: f0:c0:9e:4d:7c:82:3c:c9:27:c1:07:88:cc:ba:a6: ef:d2:8a:13:b3:79:32:58:13:91:0c:17:d6:47:7c: 41:c9:30:e9:8e:c3:95:57:da:af:8b:36:02:33:86: a5:8e:45:64:33:33:40:5f:3c:59:c7:34:9f:e4:8b: a3:58:e1:e7:18:79:93:35:62:6b:94:09:44:29:4f: be:12:d0:94:fa:bd:ec:b7:c5:d8:aa:9b:64:89:e8: 96:eb:7a:ae:93:7a:b9:e8:5b:68:72:a5:cd:25:b8: c5:c0:8b:e1:52:7b:ec:61:ef:f9:f2:b2:10:3d:c8: e3:95:e2:24:98:ac:2c:3f:b1:3c:92:5f:47:a4:b5: 61:d8:c5:8b:c7:a0:8e:67:c5:46:e4:89:b8:c0:db: 58:68:40:cb:44:6a:63:f1:fe:89:ca:65:d0:35:69: 7d:30:6e:6f:0b:a4:07:83:33:0d:6c:a8:45:f9:94: 04:58:f5:44:17:5d:fb:bb:cc:b5:6f:fe:8b:2b:bd: b8:d3:86:bf:4b:67:23:2f:de:df:4d:bd:b5:c0:93: 44:28:bd:90:08:51:ff:91:d7:66:59:5e:f4:a4:20: 79:05:00:a9:49:8b:72:69:73:09:ad:6e:57:69:24: cb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:81:DD:23:47:1F:B1:28:F2:57:F4:AB:0A:28:D7:A9:6D:C3:E3:E1 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:a2:42:f0:cd:67:f2:68:aa:56:65:4d:82:f8:1f:9b:e1:f8: f2:81:ef:9b:be:2a:24:77:22:9b:39:f4:e0:8c:33:51:33:f8: 2f:4c:a6:48:92:2a:ef:21:13:bc:51:b3:9b:3e:47:eb:53:7b: 8a:1c:38:89:39:e3:d2:48:cb:da:be:d6:23:48:04:62:2b:cd: 17:6c:91:42:95:a9:03:c5:f6:8d:4d:91:43:09:45:ed:f7:cb: 53:39:ef:77:3c:95:0b:ec:d6:46:48:e0:55:39:12:23:cb:cd: 9c:27:83:1f:67:54:5b:d7:ef:43:fa:36:0a:be:07:c6:a5:14: de:d7:ab:83:55:46:72:82:7a:9d:bf:c8:b3:9e:8f:be:64:ea: 26:f5:97:1e:1e:5e:98:1a:c8:b4:45:69:5d:2c:dd:81:5e:52: 2f:c9:11:5b:a6:98:54:5c:96:1d:b2:48:ad:5f:b1:b9:4a:83: 78:b1:62:f5:bf:84:27:a8:21:81:bf:83:e5:c3:28:7d:c5:da: 8a:6e:c1:4d:c4:b1:60:da:6b:94:89:84:15:b1:f5:7c:f1:0f: 39:32:b8:4e:fb:81:ec:16:5b:e2:aa:2b:ab:cf:ac:1d:03:d7: 59:3a:03:e8:5c:ba:38:12:76:f4:03:ca:f5:4c:a6:33:2a:f5: 09:e4:14:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjUwNDI0MjI1ODI4WhcNMjUwNTAxMjI1ODI4WjAYMRYwFAYD VQQDEw02ODBhYzIxNC1mZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV8FVDYtbx0horHhXzTwwJ5NfII8ySfBB4jMuqbv0ooTs3kyWBORDBfWR3xB yTDpjsOVV9qvizYCM4aljkVkMzNAXzxZxzSf5IujWOHnGHmTNWJrlAlEKU++EtCU +r3st8XYqptkieiW63quk3q56FtocqXNJbjFwIvhUnvsYe/58rIQPcjjleIkmKws P7E8kl9HpLVh2MWLx6COZ8VG5Im4wNtYaEDLRGpj8f6JymXQNWl9MG5vC6QHgzMN bKhF+ZQEWPVEF137u8y1b/6LK72404a/S2cjL97fTb21wJNEKL2QCFH/kddmWV70 pCB5BQCpSYtyaXMJrW5XaSTLXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIGB3SNH H7Eo8lf0qwoo16ltw+PhMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjVGNy80NEZDRTU2OEM3ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FD dUtITlJYZVRYazg4Slp3WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7okLwzWfyaKpWZU2C+B+b4fjyge+bviokdyKbOfTgjDNRM/gvTKZI kirvIRO8UbObPkfrU3uKHDiJOePSSMvavtYjSARiK80XbJFClakDxfaNTZFDCUXt 98tTOe93PJUL7NZGSOBVORIjy82cJ4MfZ1Rb1+9D+jYKvgfGpRTe16uDVUZygnqd v8izno++ZOom9ZceHl6YGsi0RWldLN2BXlIvyRFbpphUXJYdskitX7G5SoN4sWL1 v4QnqCGBv4Plwyh9xdqKbsFNxLFg2muUiYQVsfV88Q85MrhO+4HsFlviqiurz6wd A9dZOgPoXLo4Enb0A8r1TKYzKvUJ5BTR -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:03 2025 by rpki-client