$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: iuA9q9TMw4eEqp63Li+eyiXXBsefTJJGA7EBrowJAtc= Subject key identifier: 10:D0:F5:03:33:7F:DA:7A:98:2B:33:EE:11:D0:AA:85:3E:76:62:DD Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 06C1 Signing time: Thu 24 Apr 2025 21:58:45 +0000 Manifest this update: Thu 24 Apr 2025 21:58:45 +0000 Manifest next update: Thu 01 May 2025 21:58:45 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: +riFARp1jdRrLFjWkMUbu64SPN8wnPPHwU0VkeuQ9NE=) 2: A825CC96324011EC9E90243EC4F9AE02.roa (hash: Csw4qj9xE9hGEDImUH/XPPY2KPdm1RGZvA3bAW3MNCY=) 3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: MLem2RJrmzD72xixiKpCd0XFlZ6/VicCf/qXTlSWENc=) 4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: w3Ln1KV8lxVl5Uw2YRQh7wulnVukzVJfQnsYtJXybYU=) 5: 0C42C86EF38611EF92753935C4F9AE02.roa (hash: MdSSPQnzwPVIzYg1f83uFbIF+zvXp1fZov2cahwOMzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Apr 24 21:58:45 2025 GMT Not After : May 1 21:58:45 2025 GMT Subject: CN=680ab415-f2f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:bf:0c:ab:e0:99:ea:65:13:87:66:f5:29: 73:ae:71:7c:b1:c2:80:be:11:a6:b1:c7:5a:09:2a: 84:fa:79:0e:b3:47:84:56:c1:ec:5a:b5:85:55:62: 2d:95:a6:0e:6b:85:a0:6d:88:41:7e:ec:33:c7:6d: d2:08:3c:4d:90:dd:51:dd:c5:59:74:fe:c7:45:24: 87:02:09:b7:24:35:c7:72:a7:e6:32:e9:e5:9f:78: 37:97:0b:73:64:47:af:6b:fa:02:d1:4f:16:8d:06: de:a7:e0:db:4a:2f:3f:41:ff:21:13:d2:c9:77:42: 46:bb:3a:86:8e:60:e6:62:64:db:40:68:e1:68:26: a5:a5:01:b1:c7:cb:29:50:a7:a7:38:12:a6:3a:5a: 17:b4:04:38:78:aa:40:8f:19:aa:27:4b:8e:ea:8e: b5:86:7c:38:af:18:80:88:2e:38:74:7b:a8:bd:01: 53:8c:7d:ad:3d:95:82:bb:0b:fa:b0:05:f5:99:fc: 85:01:da:bd:e9:ec:d3:f0:ba:8b:cb:eb:f9:81:85: d6:8b:a4:96:a9:68:3b:a4:a2:9d:e1:95:9c:5e:52: fe:fc:3b:ae:9d:01:2a:2f:30:59:59:79:7e:eb:a0: 46:a5:db:b2:77:83:a7:fb:eb:25:f0:64:84:16:c1: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D0:F5:03:33:7F:DA:7A:98:2B:33:EE:11:D0:AA:85:3E:76:62:DD X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b0:95:4c:f5:d3:97:c0:98:17:ab:7c:cc:31:21:c2:98:5e: 88:a8:6d:37:49:11:2a:4c:ec:40:e5:8d:46:06:18:ad:5f:a4: 3e:85:a3:a7:e1:ed:f9:8d:78:6d:fd:f5:55:d9:43:c5:97:a6: 1a:39:1d:90:5c:b7:6e:d6:e1:23:c5:e8:50:31:83:6e:f0:ba: 5b:71:47:55:ac:9c:1c:3e:28:91:02:2b:3c:57:6e:e0:82:0a: 20:f6:13:90:3b:2d:28:90:b3:82:eb:12:7e:e4:25:83:c1:b8: 01:7b:e9:70:2f:84:81:dc:54:60:0b:f8:ed:6e:04:75:b4:45: 0a:f2:a6:a8:9e:b5:7c:f9:f2:82:a3:ba:7d:07:65:f0:a1:8f: 11:fc:b9:6c:eb:e1:57:43:b0:85:06:88:e0:65:5c:cf:9b:ad: 52:6c:0e:7d:8f:8f:ca:dc:a5:82:07:1d:e8:d9:4c:6f:54:72: af:ef:eb:1b:4d:92:be:c5:53:5e:11:97:10:d0:8d:88:86:f1: 62:41:ca:3b:70:6b:73:9e:8b:3f:2c:41:a9:4f:af:55:4a:55: 22:18:53:9a:97:99:61:00:40:d9:df:d2:48:45:59:94:d2:30: cc:45:15:e0:79:9b:b7:4d:71:35:1e:ad:73:72:46:a9:b8:12: e7:8d:4c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjUwNDI0MjE1ODQ1WhcNMjUwNTAxMjE1ODQ1WjAYMRYwFAYD VQQDEw02ODBhYjQxNS1mMmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbq/DKvgmeplE4dm9SlzrnF8scKAvhGmscdaCSqE+nkOs0eEVsHsWrWFVWIt laYOa4WgbYhBfuwzx23SCDxNkN1R3cVZdP7HRSSHAgm3JDXHcqfmMunln3g3lwtz ZEeva/oC0U8WjQbep+DbSi8/Qf8hE9LJd0JGuzqGjmDmYmTbQGjhaCalpQGxx8sp UKenOBKmOloXtAQ4eKpAjxmqJ0uO6o61hnw4rxiAiC44dHuovQFTjH2tPZWCuwv6 sAX1mfyFAdq96ezT8LqLy+v5gYXWi6SWqWg7pKKd4ZWcXlL+/DuunQEqLzBZWXl+ 66BGpduyd4On++sl8GSEFsGGtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBDQ9QMz f9p6mCsz7hHQqoU+dmLdMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+sJVM9dOXwJgXq3zMMSHCmF6IqG03SREqTOxA5Y1GBhitX6Q+haOn 4e35jXht/fVV2UPFl6YaOR2QXLdu1uEjxehQMYNu8LpbcUdVrJwcPiiRAis8V27g ggog9hOQOy0okLOC6xJ+5CWDwbgBe+lwL4SB3FRgC/jtbgR1tEUK8qaonrV8+fKC o7p9B2XwoY8R/Lls6+FXQ7CFBojgZVzPm61SbA59j4/K3KWCBx3o2UxvVHKv7+sb TZK+xVNeEZcQ0I2IhvFiQco7cGtznos/LEGpT69VSlUiGFOal5lhAEDZ39JIRVmU 0jDMRRXgeZu3TXE1Hq1zckapuBLnjUwb -----END CERTIFICATE-----Generated at Sat Apr 26 12:36:47 2025 by rpki-client