$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: tp9Pd+HWGNd4MhUSA69KCzEX0UKOvM+Hwv23Li8/+84= Subject key identifier: 46:B4:F6:E7:71:C8:3C:7A:BB:7D:E8:89:81:C9:4F:E0:1D:4C:F4:49 Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 05 Signing time: Fri 25 Apr 2025 07:12:52 +0000 Manifest this update: Fri 25 Apr 2025 07:12:52 +0000 Manifest next update: Fri 02 May 2025 07:12:52 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: igDP+2g3whzs9FYvV/5Zw2Paxz3Evtla9+LuSgViXC4=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Apr 25 07:12:52 2025 GMT Not After : May 2 07:12:52 2025 GMT Subject: CN=680b35f4-b9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:8d:39:48:c8:50:c4:13:ec:e0:aa:35:7a: 9f:f7:eb:c5:ae:2c:7c:04:83:bc:3a:3e:1e:69:76: d5:42:c0:ce:1d:e0:65:94:cd:7a:59:b0:47:3f:eb: 7f:66:bf:80:fe:9a:58:4a:f6:ec:8f:90:f9:9f:b8: f8:7b:26:61:f7:7b:53:e0:7a:13:0a:34:2c:5c:e0: 6c:48:1b:38:b9:08:85:2c:32:90:4b:c6:12:d1:64: 2e:4a:b5:1b:b2:fb:5e:56:94:7e:39:3d:d7:4e:14: b1:67:8b:f8:f4:ad:59:51:b6:ab:60:ec:d8:1f:1d: 0c:b2:11:69:04:ae:e7:dd:9c:64:b7:11:5d:9e:df: dc:0f:52:62:4d:73:02:e7:12:44:0f:78:3a:cb:95: 4a:b8:f1:ad:e7:b5:78:08:f8:e5:52:d5:d0:2f:bf: 43:01:1d:9a:f3:83:28:b7:5a:b6:2f:30:c7:a8:49: b1:0e:87:90:b5:25:c4:dc:f9:6c:b5:18:79:13:74: 79:35:32:63:2d:11:43:38:d5:07:24:57:f7:69:b2: 00:83:59:6f:d9:13:64:48:c5:53:c4:e3:66:d3:0e: f7:ba:08:92:f4:b8:bc:35:92:4a:1f:82:1d:23:4b: 16:80:c7:ec:de:1d:cf:79:73:c4:d7:ae:c3:4e:91: fd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B4:F6:E7:71:C8:3C:7A:BB:7D:E8:89:81:C9:4F:E0:1D:4C:F4:49 X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:25:4e:8b:91:a2:4e:36:c4:2c:3a:ae:e0:f9:0b:11:f4:24: 1d:69:7d:a4:4e:d2:96:b2:f1:c6:09:31:4d:2e:01:d0:09:e2: 1b:bd:5b:60:92:8a:fb:a8:65:c4:81:99:7b:63:fb:a8:36:c0: c7:11:a9:17:31:3e:dd:88:10:82:f4:6d:b7:e2:71:bb:bd:fe: 6f:34:ac:52:83:b3:e7:ae:d0:db:93:92:10:4f:51:47:d1:4e: dd:4f:15:b2:9d:4f:48:86:81:d5:20:e6:c3:4d:fa:d7:36:af: 9e:1b:4f:67:4b:a7:87:a6:49:58:00:88:2d:5e:d3:3b:3f:26: 6a:ac:31:26:ed:09:6d:96:18:44:ca:db:41:3f:ef:37:c9:d9: 35:68:da:49:0f:22:dc:2e:00:2c:92:dc:00:d9:62:bf:54:03: 40:0a:62:6b:36:56:2a:6b:44:6c:c5:af:4d:9b:af:fe:3a:5d: 62:3f:c7:0f:ba:5d:bc:ba:78:0b:bf:1d:52:50:84:9c:a0:fe: 05:20:b5:d2:d7:9f:04:24:55:41:60:2f:f3:66:29:b9:a4:ac: c4:63:20:10:75:b2:fe:7b:47:34:a0:8b:14:d1:42:ce:ab:73: c1:bf:44:7b:01:ec:a7:5f:4b:d3:8e:80:3e:89:4c:2a:d0:ae: eb:1b:a5:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA0MjUwNzEyNTJaFw0yNTA1MDIwNzEyNTJaMBgxFjAUBgNV BAMTDTY4MGIzNWY0LWI5ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6BI05SMhQxBPs4Ko1ep/368WuLHwEg7w6Ph5pdtVCwM4d4GWUzXpZsEc/639m v4D+mlhK9uyPkPmfuPh7JmH3e1PgehMKNCxc4GxIGzi5CIUsMpBLxhLRZC5KtRuy +15WlH45PddOFLFni/j0rVlRtqtg7NgfHQyyEWkErufdnGS3EV2e39wPUmJNcwLn EkQPeDrLlUq48a3ntXgI+OVS1dAvv0MBHZrzgyi3WrYvMMeoSbEOh5C1JcTc+Wy1 GHkTdHk1MmMtEUM41QckV/dpsgCDWW/ZE2RIxVPE42bTDve6CJL0uLw1kkofgh0j SxaAx+zeHc95c8TXrsNOkf0FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURrT253HI PHq7feiJgclP4B1M9EkwHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ8lTouRok42xCw6ruD5CxH0JB1pfaRO0pay8cYJMU0uAdAJ4hu9W2CS ivuoZcSBmXtj+6g2wMcRqRcxPt2IEIL0bbficbu9/m80rFKDs+eu0NuTkhBPUUfR Tt1PFbKdT0iGgdUg5sNN+tc2r54bT2dLp4emSVgAiC1e0zs/JmqsMSbtCW2WGETK 20E/7zfJ2TVo2kkPItwuACyS3ADZYr9UA0AKYms2ViprRGzFr02br/46XWI/xw+6 Xby6eAu/HVJQhJyg/gUgtdLXnwQkVUFgL/NmKbmkrMRjIBB1sv57RzSgixTRQs6r c8G/RHsB7KdfS9OOgD6JTCrQrusbpbo= -----END CERTIFICATE-----Generated at Sat Apr 26 05:15:55 2025 by rpki-client