$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: I5nuZ5CTN3UHLKHUM9o16Winhfns/1cc8btmSJsHQgA= Subject key identifier: 34:0B:F0:BE:57:C7:5E:DA:6E:48:15:8C:79:FA:BB:0A:11:CF:6B:3E Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 0118 Signing time: Fri 25 Apr 2025 03:54:44 +0000 Manifest this update: Fri 25 Apr 2025 03:54:43 +0000 Manifest next update: Fri 02 May 2025 03:54:43 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: dU5YAbufJ05Uf4a509Uk+0wTyACLG+RoukLBUVgsVa4=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: UFjrfeuvHWS1oxtfXr6IVRfPvTnGzzV9TdVJHu2o8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Apr 25 03:54:43 2025 GMT Not After : May 2 03:54:43 2025 GMT Subject: CN=680b0783-551b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4b:cd:6f:cb:97:71:21:4a:2b:68:26:b7:00: 97:eb:00:7a:ff:7d:bd:ed:c0:9d:1f:f6:20:91:f3: e7:3e:45:12:d0:14:1f:0d:5e:0d:f3:63:27:14:15: 7b:d4:dd:5d:ac:11:23:18:fe:c7:55:07:6d:d3:80: 63:7c:98:4d:62:0f:98:ab:7d:40:01:6e:22:f9:3e: e6:49:bd:62:26:34:5e:7c:75:c9:ac:ef:97:bc:03: 37:e0:a2:3c:f5:4b:63:72:b1:11:cb:b7:1c:80:e8: 5d:e5:f3:aa:af:a1:67:9f:8a:b9:6a:23:54:fb:03: e2:33:69:88:56:62:69:43:6a:cf:15:64:00:0e:00: e0:d9:41:d9:d4:b1:c0:d3:65:9b:06:d9:06:7d:56: 2c:bf:d0:37:55:b0:17:2e:ed:96:74:33:67:45:98: 05:73:75:60:cb:25:0c:e5:0d:d6:ca:ae:0f:76:ef: f8:86:af:42:9a:e8:bc:16:0d:e3:50:02:d8:31:5c: f8:9a:31:80:79:10:69:e9:27:25:71:59:72:b4:c5: 2a:57:9b:d1:fa:03:7b:94:66:9d:2a:e8:54:d7:0a: f8:08:f0:b2:57:2e:a6:8e:b2:e8:e5:44:2d:53:39: 92:35:3d:8b:9d:5c:a7:28:d4:e9:be:83:89:7f:cf: 50:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:0B:F0:BE:57:C7:5E:DA:6E:48:15:8C:79:FA:BB:0A:11:CF:6B:3E X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:08:9f:8c:27:c2:0c:e0:8d:89:5b:ca:47:62:78:89:72:b4: 46:30:ac:68:5f:f6:5e:9f:b8:75:6c:67:17:38:45:f4:5a:5a: 76:2b:94:06:06:8a:d7:61:e3:ee:0c:e6:ee:98:77:4f:b1:23: 31:66:46:07:58:03:37:eb:ae:1d:e7:76:50:f2:18:3b:1e:9a: 03:72:80:85:23:7c:bf:8c:a7:2f:80:ad:17:4c:11:a6:24:f9: 78:54:94:af:ca:5d:99:3f:f5:f1:33:88:96:20:74:17:f5:d3: ed:b2:94:d6:f9:c9:da:0f:3a:b6:f1:16:2b:5f:e3:6e:11:77: 9e:ae:0b:59:9e:4d:17:ea:e8:23:01:e9:cc:5f:44:3f:3a:11: d7:f8:81:03:ad:fc:99:06:1c:02:1a:71:5e:f9:31:22:be:e1: 66:0f:7c:6c:94:68:1a:86:fc:37:37:3b:0c:be:a8:dd:dc:e8: 79:f7:73:c0:8a:4b:44:53:0b:d5:ec:f7:3a:4f:b4:1d:c8:a1: f9:6d:9f:cc:c0:d2:93:c9:42:f3:29:02:d4:f5:4a:5f:b5:a8: 44:a2:2d:f9:68:a6:8b:dc:cc:a8:7b:e1:ce:05:9e:63:d4:3d: 46:84:58:43:44:a5:68:1c:3f:fd:c6:d5:b6:16:71:c8:0f:17: be:f8:50:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjUwNDI1MDM1NDQzWhcNMjUwNTAyMDM1NDQzWjAYMRYwFAYD VQQDEw02ODBiMDc4My01NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0vNb8uXcSFKK2gmtwCX6wB6/3297cCdH/YgkfPnPkUS0BQfDV4N82MnFBV7 1N1drBEjGP7HVQdt04BjfJhNYg+Yq31AAW4i+T7mSb1iJjRefHXJrO+XvAM34KI8 9UtjcrERy7ccgOhd5fOqr6Fnn4q5aiNU+wPiM2mIVmJpQ2rPFWQADgDg2UHZ1LHA 02WbBtkGfVYsv9A3VbAXLu2WdDNnRZgFc3VgyyUM5Q3Wyq4Pdu/4hq9Cmui8Fg3j UALYMVz4mjGAeRBp6SclcVlytMUqV5vR+gN7lGadKuhU1wr4CPCyVy6mjrLo5UQt UzmSNT2LnVynKNTpvoOJf89QFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQL8L5X x17abkgVjHn6uwoRz2s+MB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBECJ+MJ8IM4I2JW8pHYniJcrRGMKxoX/Zen7h1bGcXOEX0Wlp2K5QG BorXYePuDObumHdPsSMxZkYHWAM3664d53ZQ8hg7HpoDcoCFI3y/jKcvgK0XTBGm JPl4VJSvyl2ZP/XxM4iWIHQX9dPtspTW+cnaDzq28RYrX+NuEXeergtZnk0X6ugj AenMX0Q/OhHX+IEDrfyZBhwCGnFe+TEivuFmD3xslGgahvw3NzsMvqjd3Oh593PA iktEUwvV7Pc6T7QdyKH5bZ/MwNKTyULzKQLU9UpftahEoi35aKaL3Myoe+HOBZ5j 1D1GhFhDRKVoHD/9xtW2FnHIDxe++FCP -----END CERTIFICATE-----Generated at Sat Apr 26 03:49:48 2025 by rpki-client