$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft File: cM0CtmQkeah0RicVcG5qqaidosk.mft (raw, json) Hash identifier: dNp2KkVkhBccOGKAFDTOB8SxuaOo1Z19UnAVK/P6Oh0= Subject key identifier: B9:AE:D5:49:7D:1A:6C:A8:FE:F4:4A:BB:B7:79:2A:DF:C0:B9:EF:75 Authority key identifier: 70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 Certificate issuer: /CN=A91BE6D7/serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft Manifest number: 0100 Signing time: Fri 25 Apr 2025 04:18:08 +0000 Manifest this update: Fri 25 Apr 2025 04:18:08 +0000 Manifest next update: Fri 02 May 2025 04:18:08 +0000 Files and hashes: 1: cM0CtmQkeah0RicVcG5qqaidosk.crl (hash: kP+2/8BNQxu6CjFrccv/Y9dxYfEfqGxJ9QQuuO7NyK4=) 2: 7251CC7C546211EF85988412C4F9AE02.roa (hash: MXnU/QcuEmDKktg0CnuwolgKiFkbHbMHOSWdEnSOv5c=) 3: 371059F4B8A311EEBDA30041C4F9AE02.roa (hash: S3mbIiQ1nO0L4Bz9sTuCjtwzB96XobjR5ufSof/xnsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE6D7, serialNumber=70CD02B6642479A874462715706E6AA9A89DA2C9 Validity Not Before: Apr 25 04:18:08 2025 GMT Not After : May 2 04:18:08 2025 GMT Subject: CN=680b0d00-7c5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ce:7a:99:c0:5f:8f:35:e7:3b:e0:67:b3:c8: 32:9a:01:7a:80:a5:52:3c:cd:1f:05:71:0d:9e:cd: 26:cc:4a:c0:94:cf:04:8e:c1:d4:91:c3:a5:db:5e: 40:93:54:31:72:30:02:39:d6:df:a2:15:11:a2:30: 32:0a:e0:82:a0:8b:c5:91:cc:21:94:fb:f6:a0:e3: 12:9e:80:77:6e:2f:68:81:5a:ca:88:d9:62:f9:b5: 89:d5:38:bc:10:c6:db:7d:14:1b:74:47:4a:69:d5: 3b:a1:fc:70:12:18:26:e6:18:19:d4:dd:3f:6e:4c: ae:40:de:25:c8:b5:ca:71:d2:d4:05:1b:56:b6:ec: c0:27:86:28:8c:d9:c4:13:9b:73:27:cc:65:86:68: 47:ec:fe:19:e5:8a:46:d9:c2:e4:c5:53:14:7f:20: 6d:dc:5b:16:13:96:3d:af:c8:54:22:98:d1:34:25: c3:3a:03:8f:d8:66:91:7f:b0:a6:7f:83:a8:5f:17: 07:1f:10:d6:0e:e1:a5:b0:d8:e9:ac:5c:98:62:a0: 76:4d:6c:58:f9:8e:82:7d:25:20:2c:76:66:9d:58: 42:c3:a8:2a:ed:58:93:bb:53:01:c4:1b:fa:e0:6c: ca:48:87:9f:f4:a0:e7:5b:cf:2b:17:65:39:cd:b3: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:D5:49:7D:1A:6C:A8:FE:F4:4A:BB:B7:79:2A:DF:C0:B9:EF:75 X509v3 Authority Key Identifier: keyid:70:CD:02:B6:64:24:79:A8:74:46:27:15:70:6E:6A:A9:A8:9D:A2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0CtmQkeah0RicVcG5qqaidosk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE6D7/71A51574AEF211EEB293B480C4F9AE02/cM0CtmQkeah0RicVcG5qqaidosk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:fb:42:3b:be:7e:4e:61:18:2d:4c:56:2d:1e:0d:61:4a:dd: 49:91:f0:b0:72:6f:d5:56:f3:f0:c8:5a:c8:5a:23:be:1d:aa: 8c:4d:c7:15:bb:a5:74:b7:4c:a8:53:75:78:ce:13:18:99:39: 54:f7:a5:f2:2e:3e:53:ce:4a:ac:43:0f:f9:2f:44:a5:a6:da: 91:92:59:dd:66:49:38:34:21:34:36:98:fa:cb:b1:b8:7a:d1: 4e:7a:06:2c:62:5e:ee:76:22:23:cb:83:40:31:3e:4d:a3:0b: 34:e3:ea:22:09:cc:8e:53:f8:dc:24:ad:ed:35:8a:6b:23:c1: 66:02:08:39:5a:e5:f6:71:18:04:1e:17:f7:b6:48:03:98:03: b4:7b:f6:db:b8:7b:8c:5e:c3:5d:a4:11:69:db:52:92:88:b6: 1d:45:6b:c5:6d:22:59:1e:fc:9c:92:fd:69:d3:86:a6:d6:32: b1:8c:37:d4:75:63:6b:3f:4b:3a:17:96:0f:f4:a1:bf:cc:36: 84:dc:91:ed:41:28:0b:63:9e:75:c7:1e:90:39:d2:a0:b4:a7: ab:c8:5b:76:8c:ae:04:46:0c:19:82:32:46:69:ba:07:70:1c: 30:03:e8:88:bd:ba:f7:c2:83:e7:c8:2d:4f:2e:f8:be:82:24: e0:6d:d5:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkU2RDcxMTAvBgNVBAUTKDcwQ0QwMkI2NjQyNDc5QTg3NDQ2MjcxNTcwNkU2QUE5 QTg5REEyQzkwHhcNMjUwNDI1MDQxODA4WhcNMjUwNTAyMDQxODA4WjAYMRYwFAYD VQQDEw02ODBiMGQwMC03YzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxs56mcBfjzXnO+Bns8gymgF6gKVSPM0fBXENns0mzErAlM8EjsHUkcOl215A k1QxcjACOdbfohURojAyCuCCoIvFkcwhlPv2oOMSnoB3bi9ogVrKiNli+bWJ1Ti8 EMbbfRQbdEdKadU7ofxwEhgm5hgZ1N0/bkyuQN4lyLXKcdLUBRtWtuzAJ4YojNnE E5tzJ8xlhmhH7P4Z5YpG2cLkxVMUfyBt3FsWE5Y9r8hUIpjRNCXDOgOP2GaRf7Cm f4OoXxcHHxDWDuGlsNjprFyYYqB2TWxY+Y6CfSUgLHZmnVhCw6gq7ViTu1MBxBv6 4GzKSIef9KDnW88rF2U5zbPZJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmu1Ul9 Gmyo/vRKu7d5Kt/Aue91MB8GA1UdIwQYMBaAFHDNArZkJHmodEYnFXBuaqmonaLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTZENy83MUE1MTU3NEFF RjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2VhaDBSaWNWY0c1cXFhaWRv c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMEN0bVFrZWFoMFJpY1ZjRzVxcWFpZG9zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RTZENy83MUE1MTU3NEFFRjIxMUVFQjI5M0I0ODBDNEY5QUUwMi9jTTBDdG1Ra2Vh aDBSaWNWY0c1cXFhaWRvc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCa+0I7vn5OYRgtTFYtHg1hSt1JkfCwcm/VVvPwyFrIWiO+HaqMTccV u6V0t0yoU3V4zhMYmTlU96XyLj5TzkqsQw/5L0SlptqRklndZkk4NCE0Npj6y7G4 etFOegYsYl7udiIjy4NAMT5Nows04+oiCcyOU/jcJK3tNYprI8FmAgg5WuX2cRgE Hhf3tkgDmAO0e/bbuHuMXsNdpBFp21KSiLYdRWvFbSJZHvyckv1p04am1jKxjDfU dWNrP0s6F5YP9KG/zDaE3JHtQSgLY551xx6QOdKgtKeryFt2jK4ERgwZgjJGaboH cBwwA+iIvbr3woPnyC1PLvi+giTgbdWr -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:33 2025 by rpki-client