$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json) Hash identifier: xlFxrjerAKypMGv469kSNCqs/f+dDlv8OVWEmQKygwU= Subject key identifier: 36:C5:41:CB:1F:C7:71:3A:46:01:A0:02:22:6A:EC:C4:BC:3A:CC:30 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft Manifest number: 049D Signing time: Thu 24 Apr 2025 23:45:07 +0000 Manifest this update: Thu 24 Apr 2025 23:45:07 +0000 Manifest next update: Thu 01 May 2025 23:45:07 +0000 Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: W95wx2qb7IXiP+RpcRVbEMKPFZm7g0EncPlTV81o6IU=) 2: 2110795ED38E11EDADA86381C4F9AE02.roa (hash: 3scFbI2eqJmRXNfrH/g1NhiMJkdzFzRzL2hCN9j3R/w=) 3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Jk80jeO05hd8HdpNBJKbydf23WQjdBY/wJrAaPYnYxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: Apr 24 23:45:07 2025 GMT Not After : May 1 23:45:07 2025 GMT Subject: CN=680acd03-af12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:62:ac:17:62:5c:fd:ea:ee:65:5c:f6:40: 40:3f:67:fa:61:7b:b0:0a:fc:99:31:fb:cc:6f:1a: 57:3d:8f:2d:c8:a1:31:a0:69:0c:58:6b:34:fd:f4: 4e:8e:b5:46:ca:44:ec:6d:91:bf:dd:97:5f:c1:9c: 4f:a5:dd:ed:90:bc:33:91:8c:95:ba:e0:cd:db:65: c5:66:e5:12:de:59:5b:2f:fe:48:d1:a2:0c:9a:2a: 17:25:2b:85:6f:84:b8:02:ab:18:52:8e:02:41:47: 47:15:a0:a6:fa:25:bf:70:ff:25:71:d0:33:f6:21: 67:4b:03:45:26:f9:07:66:32:4f:16:50:5c:9f:4f: 3b:f4:5a:aa:8c:18:83:e6:7c:44:44:b6:f2:ac:82: 3f:28:70:d6:cc:10:ea:53:ac:5c:eb:f3:c0:91:b3: b8:cb:4c:5c:33:30:84:7a:19:cd:c0:6a:5d:37:e7: 50:20:d4:9a:87:de:39:5d:08:06:ec:8c:75:13:c8: 4e:e2:d6:f4:23:fa:4c:2b:aa:7e:55:bd:7e:89:9a: b0:30:66:3d:82:03:15:df:cb:eb:ee:b7:ba:1d:e2: 29:06:fd:ae:c2:45:1a:d9:67:ab:ef:d3:01:6d:3b: bd:f6:d6:ee:96:4c:f9:e1:43:3a:3b:12:2b:3d:b5: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C5:41:CB:1F:C7:71:3A:46:01:A0:02:22:6A:EC:C4:BC:3A:CC:30 X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:6e:1c:a5:cf:4f:ee:d9:1c:80:8c:e2:66:a6:fb:9d:e4:e6: 07:57:d2:22:a0:59:08:60:9f:82:eb:6c:5b:60:2f:c1:a9:7b: 3b:2f:86:d5:a1:1f:f4:c5:b5:cd:d0:52:9e:81:ae:ac:22:85: 3c:b8:08:b4:96:14:a0:87:ac:61:be:ea:b8:f8:b6:a2:c0:b2: e1:5c:a1:ce:d4:2b:85:73:c9:47:e1:81:8e:83:f2:da:96:a1: 6c:0e:f1:aa:1e:b7:e5:7c:6b:6e:1f:ad:75:1e:8e:49:b3:d9: b5:b4:a7:74:38:73:b9:31:f5:a6:cd:78:f4:13:4e:65:a3:ed: ec:12:7e:a2:37:91:47:69:f9:c2:cf:56:40:0a:54:91:3c:59: 33:a8:b5:78:b9:b2:51:b6:49:49:c2:d5:c5:63:10:86:eb:5d: f5:65:8a:50:e0:dd:04:3f:fd:5d:aa:d5:90:e4:ca:7d:12:12: 97:5f:24:31:26:da:0d:ba:84:83:60:29:74:56:03:fe:e1:b4: 62:ce:0d:10:6b:98:8e:25:a8:d1:ac:09:88:13:aa:58:0e:d5: eb:00:2a:e9:e5:b3:e7:30:92:e0:f6:8d:58:02:9b:14:51:da: b3:0b:a4:1a:26:e4:d3:00:59:4b:0a:a9:65:d8:26:bd:75:fd: c0:82:da:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjUwNDI0MjM0NTA3WhcNMjUwNTAxMjM0NTA3WjAYMRYwFAYD VQQDEw02ODBhY2QwMy1hZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1VirBdiXP3q7mVc9kBAP2f6YXuwCvyZMfvMbxpXPY8tyKExoGkMWGs0/fRO jrVGykTsbZG/3ZdfwZxPpd3tkLwzkYyVuuDN22XFZuUS3llbL/5I0aIMmioXJSuF b4S4AqsYUo4CQUdHFaCm+iW/cP8lcdAz9iFnSwNFJvkHZjJPFlBcn0879FqqjBiD 5nxERLbyrII/KHDWzBDqU6xc6/PAkbO4y0xcMzCEehnNwGpdN+dQINSah945XQgG 7Ix1E8hO4tb0I/pMK6p+Vb1+iZqwMGY9ggMV38vr7re6HeIpBv2uwkUa2Wer79MB bTu99tbulkz54UM6OxIrPbUxUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbFQcsf x3E6RgGgAiJq7MS8OswwMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+bhylz0/u2RyAjOJmpvud5OYHV9IioFkIYJ+C62xbYC/BqXs7L4bV oR/0xbXN0FKega6sIoU8uAi0lhSgh6xhvuq4+LaiwLLhXKHO1CuFc8lH4YGOg/La lqFsDvGqHrflfGtuH611Ho5Js9m1tKd0OHO5MfWmzXj0E05lo+3sEn6iN5FHafnC z1ZAClSRPFkzqLV4ubJRtklJwtXFYxCG6131ZYpQ4N0EP/1dqtWQ5Mp9EhKXXyQx JtoNuoSDYCl0VgP+4bRizg0Qa5iOJajRrAmIE6pYDtXrACrp5bPnMJLg9o1YApsU UdqzC6QaJuTTAFlLCqll2Ca9df3Agtqp -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:34 2025 by rpki-client