$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: QXZfbrATIviZ2RHg2/jJusnWiwdVqssNYqXFAcGIrWI= Subject key identifier: D8:4D:4C:BE:6F:43:61:02:29:C4:C1:F3:D3:86:48:59:6B:89:3D:9A Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: F4 Signing time: Fri 25 Apr 2025 04:17:24 +0000 Manifest this update: Fri 25 Apr 2025 04:17:23 +0000 Manifest next update: Fri 02 May 2025 04:17:23 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: 62tWOS1mxUF4JLmHSdbe5BLCKzHphT1PP5xWJX9wJMg=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:17:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: Apr 25 04:17:23 2025 GMT Not After : May 2 04:17:23 2025 GMT Subject: CN=680b0cd3-427d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:88:2f:4b:2a:77:a0:9e:7a:e6:d2:3e:55:6a: 98:e8:18:97:20:b5:ea:5d:b9:0a:41:6e:bb:9f:3a: a0:b5:4c:02:8c:e3:2c:75:bc:6e:59:51:86:b6:3a: af:04:08:f0:8d:af:87:68:f4:ee:3a:50:75:97:fc: 66:9b:ab:65:16:66:8c:46:f5:c5:a0:85:12:e4:8c: 45:70:96:a1:12:f9:d5:ea:05:45:80:56:44:d1:5e: 34:b9:26:d7:e3:78:eb:fe:43:c0:1f:a6:dc:47:89: 00:cf:24:a9:96:48:4e:16:4b:7f:84:d6:29:b0:49: 49:78:43:0b:0e:aa:4c:f8:ed:21:f1:3a:ed:88:a0: 4a:83:3e:c3:5a:da:29:b9:5e:a5:61:7e:c2:86:bb: e3:d7:dc:89:d8:93:40:2d:bd:68:ab:ee:88:a9:84: 07:21:ef:35:85:ec:23:5a:6c:a6:b8:58:e7:f4:a9: 02:c9:ac:72:e1:ea:72:7d:95:52:59:8e:ec:f8:b6: d9:67:b4:bf:22:4a:4c:33:ea:1c:d1:41:c8:51:20: cb:87:64:19:d7:18:b5:7f:77:b6:7e:06:44:91:bd: c7:1a:5b:02:e7:ef:44:9b:05:ed:26:35:96:3c:3e: e1:28:ac:a8:1f:7c:46:e0:26:10:fb:f2:95:69:f3: 37:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4D:4C:BE:6F:43:61:02:29:C4:C1:F3:D3:86:48:59:6B:89:3D:9A X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9f:8a:0b:d1:4b:18:5a:d8:a8:c8:eb:42:76:41:22:ae:71: 95:c7:c8:84:b0:8b:3d:88:d9:ac:7a:2b:f7:0c:41:2f:e7:86: f2:f8:d8:70:d3:21:76:77:00:d1:0b:6e:db:d3:80:1d:85:90: 72:c0:ef:f1:59:c8:57:c8:af:87:3f:18:a1:df:99:df:a8:f2: b5:e5:c6:fe:5d:77:8b:6e:5d:96:81:55:47:79:00:f0:b3:25: cf:90:6f:49:ea:5b:02:31:53:d2:e7:f7:76:98:0d:6a:8a:1c: cf:64:71:46:c8:93:1d:7e:da:aa:49:9b:b5:3b:a2:af:54:f1: cf:c2:88:af:8c:d6:47:f8:55:f9:f1:fc:29:23:ee:f5:ab:e2: 39:5c:71:03:4f:80:48:ff:4a:e3:ec:9f:70:26:fe:ed:9d:6a: b7:72:3b:22:59:85:df:46:a8:1b:a9:cc:c9:9f:44:e2:2d:19: a8:c0:77:6c:10:fd:4f:db:a8:b0:24:48:6c:dc:fe:46:38:c9: 96:8d:90:cd:2d:d3:86:6e:23:3d:7e:6e:50:ae:ba:d9:56:50: 7e:4e:74:ab:a7:d2:38:77:78:7e:28:a8:91:aa:42:0f:89:de: 5a:ab:bc:46:1d:bd:77:7a:63:62:08:6b:6b:3e:f3:24:c5:82: 85:ed:f5:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwNDI1MDQxNzIzWhcNMjUwNTAyMDQxNzIzWjAYMRYwFAYD VQQDEw02ODBiMGNkMy00MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34gvSyp3oJ565tI+VWqY6BiXILXqXbkKQW67nzqgtUwCjOMsdbxuWVGGtjqv BAjwja+HaPTuOlB1l/xmm6tlFmaMRvXFoIUS5IxFcJahEvnV6gVFgFZE0V40uSbX 43jr/kPAH6bcR4kAzySplkhOFkt/hNYpsElJeEMLDqpM+O0h8TrtiKBKgz7DWtop uV6lYX7Chrvj19yJ2JNALb1oq+6IqYQHIe81hewjWmymuFjn9KkCyaxy4epyfZVS WY7s+LbZZ7S/IkpMM+oc0UHIUSDLh2QZ1xi1f3e2fgZEkb3HGlsC5+9EmwXtJjWW PD7hKKyoH3xG4CYQ+/KVafM3IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhNTL5v Q2ECKcTB89OGSFlriT2aMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcn4oL0UsYWtioyOtCdkEirnGVx8iEsIs9iNmseiv3DEEv54by+Nhw 0yF2dwDRC27b04AdhZBywO/xWchXyK+HPxih35nfqPK15cb+XXeLbl2WgVVHeQDw syXPkG9J6lsCMVPS5/d2mA1qihzPZHFGyJMdftqqSZu1O6KvVPHPwoivjNZH+FX5 8fwpI+71q+I5XHEDT4BI/0rj7J9wJv7tnWq3cjsiWYXfRqgbqczJn0TiLRmowHds EP1P26iwJEhs3P5GOMmWjZDNLdOGbiM9fm5QrrrZVlB+TnSrp9I4d3h+KKiRqkIP id5aq7xGHb13emNiCGtrPvMkxYKF7fU/ -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:47 2025 by rpki-client