$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: s3RKddefSKnZAGYhjnj4qdXaFxc/iV4EcdeZOQFznro= Subject key identifier: B2:6D:53:FB:EA:91:10:22:B6:9F:B3:C1:4C:49:EB:90:83:94:EA:A8 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0BF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 1293 Signing time: Thu 24 Apr 2025 18:33:47 +0000 Manifest this update: Thu 24 Apr 2025 18:33:46 +0000 Manifest next update: Thu 01 May 2025 18:33:46 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: WtaHPU/JExvl/4wTrvc8KyVPwds0jsYxtOCIvB4HCgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3058 (0xbf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Apr 24 18:33:46 2025 GMT Not After : May 1 18:33:46 2025 GMT Subject: CN=680a840a-a967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:b3:a8:02:de:fe:af:02:99:00:64:5e:8a: cf:29:31:84:e4:23:83:9a:d1:f6:47:4d:fc:18:f2: 03:45:00:9d:e8:63:b2:cb:63:1a:1b:e0:01:79:9b: da:03:f4:0e:a6:17:8c:cd:67:88:b5:4d:20:77:dc: 6c:5b:89:53:ce:cd:bc:1f:9b:fb:8a:b2:68:77:c2: e0:bf:2a:e6:3c:e8:c3:4c:cd:83:b0:52:f1:2b:47: 95:b5:69:2c:9c:56:c4:9a:58:3f:e6:f8:39:3e:11: 05:5e:17:b5:92:09:fe:8b:95:05:a1:77:ab:8a:12: b2:90:25:b3:11:27:26:17:27:73:53:53:95:39:b0: bf:15:fb:76:b0:15:3d:c6:4c:c0:6a:93:f9:8a:87: c6:09:8c:28:8e:f0:1d:38:8b:94:ac:dc:54:ac:92: 77:f0:bb:5a:fa:b4:06:83:35:d3:7c:bd:55:05:fb: a1:6b:2a:92:4d:6e:bd:c1:87:e8:ec:b8:78:e8:27: 18:31:75:7d:38:81:3d:35:16:78:61:84:77:b4:eb: a4:12:0d:41:2b:14:16:40:58:1a:5e:7b:13:c1:86: 98:e8:21:38:97:58:04:05:95:67:63:51:1e:17:cb: b5:fb:f3:e7:90:23:71:3c:94:6a:97:62:62:0e:ab: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:53:FB:EA:91:10:22:B6:9F:B3:C1:4C:49:EB:90:83:94:EA:A8 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:87:49:70:8b:fb:e9:0e:6d:58:4b:34:e0:3e:05:9e:4c:54: 60:02:d1:23:1c:66:da:2f:1d:f5:79:28:6e:3e:54:3a:e8:90: b0:7f:f5:cf:f1:b6:5b:63:9a:81:0b:6b:54:48:a5:67:8a:a6: 0b:19:22:d9:b8:78:00:87:0c:8c:8d:c9:eb:44:64:1b:92:bb: 59:49:4a:ea:7a:ea:43:66:e7:75:c8:ef:1f:b3:13:01:d0:2b: e0:e1:f7:1e:2f:38:dc:ff:9a:1d:1b:dd:d0:cd:f0:ba:04:9e: c1:95:0d:b2:d2:77:4d:24:df:90:ad:f3:fa:08:88:73:9e:d8: e5:6c:11:94:10:9a:64:15:69:8b:9b:dc:81:1b:2a:52:55:09: 2c:b9:9c:0f:47:de:0a:b0:5d:d1:71:0b:2c:88:62:72:ea:24: a9:21:91:de:b6:d8:0e:50:5c:6d:f0:3a:01:f6:df:a2:64:af: 81:80:3e:eb:b3:d9:e3:71:82:5f:99:2f:4e:0b:35:ba:e8:29: 78:bb:60:49:56:1a:27:41:35:ff:6e:40:2e:b0:a0:80:f7:47: cd:e4:ee:c8:6a:3f:e8:c1:f8:0d:ee:45:41:e9:da:b8:5a:10: 10:93:c9:bd:11:fd:bf:25:96:76:8a:76:42:02:74:d5:7e:24: a6:7a:b8:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUwNDI0MTgzMzQ2WhcNMjUwNTAxMTgzMzQ2WjAYMRYwFAYD VQQDEw02ODBhODQwYS1hOTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo5izqALe/q8CmQBkXorPKTGE5CODmtH2R038GPIDRQCd6GOyy2MaG+ABeZva A/QOpheMzWeItU0gd9xsW4lTzs28H5v7irJod8LgvyrmPOjDTM2DsFLxK0eVtWks nFbEmlg/5vg5PhEFXhe1kgn+i5UFoXerihKykCWzEScmFydzU1OVObC/Fft2sBU9 xkzAapP5iofGCYwojvAdOIuUrNxUrJJ38Lta+rQGgzXTfL1VBfuhayqSTW69wYfo 7Lh46CcYMXV9OIE9NRZ4YYR3tOukEg1BKxQWQFgaXnsTwYaY6CE4l1gEBZVnY1Ee F8u1+/PnkCNxPJRql2JiDqtWZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJtU/vq kRAitp+zwUxJ65CDlOqoMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJh0lwi/vpDm1YSzTgPgWeTFRgAtEjHGbaLx31eShuPlQ66JCwf/XP 8bZbY5qBC2tUSKVniqYLGSLZuHgAhwyMjcnrRGQbkrtZSUrqeupDZud1yO8fsxMB 0Cvg4fceLzjc/5odG93QzfC6BJ7BlQ2y0ndNJN+QrfP6CIhzntjlbBGUEJpkFWmL m9yBGypSVQksuZwPR94KsF3RcQssiGJy6iSpIZHettgOUFxt8DoB9t+iZK+BgD7r s9njcYJfmS9OCzW66Cl4u2BJVhonQTX/bkAusKCA90fN5O7Iaj/owfgN7kVB6dq4 WhAQk8m9Ef2/JZZ2inZCAnTVfiSmerhZ -----END CERTIFICATE-----Generated at Sat Apr 26 07:53:23 2025 by rpki-client