$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: b0kfcE1vU8ct/7FlvJnZcOH2kgBRbsNznLYXEnBVv30= Subject key identifier: 3E:74:A7:5C:E2:15:43:29:95:FA:FD:77:DF:6F:1E:DD:41:AD:9F:69 Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 08E4 Signing time: Thu 24 Apr 2025 20:16:04 +0000 Manifest this update: Thu 24 Apr 2025 20:16:03 +0000 Manifest next update: Thu 01 May 2025 20:16:03 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: BCsOCBEo5/3w8wxpsQODjQvdIQyCnVWDnbwDzLJ9J7o=) 2: CD77D766287911ED93621A30C4F9AE02.roa (hash: 9wjECpQxMHiWIScEWQz9Aw6dt/TmNOFZhpVGY5NdNQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721, serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: Apr 24 20:16:03 2025 GMT Not After : May 1 20:16:03 2025 GMT Subject: CN=680a9c04-439e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:21:74:bf:40:c4:59:37:a3:ad:37:84:0a:91: 2c:41:a4:47:45:dc:85:7f:fc:77:68:5d:5a:ac:f4: 20:3d:69:81:cf:7d:61:23:bb:12:e2:53:1c:67:b1: 36:2c:f0:2e:8c:18:b9:96:a5:d7:66:bb:e8:65:7a: 36:c8:88:94:77:8d:93:ce:9f:44:06:c2:d7:de:2e: 0f:44:27:2e:bd:29:13:f8:e9:1c:a5:3b:44:9d:db: 2c:7f:bb:0a:e0:d7:cb:66:3a:5e:82:bf:be:8c:28: de:c1:df:ea:c4:3c:17:16:48:30:c4:5b:d3:89:e4: 32:7d:b8:c8:d3:2a:7a:6b:dc:6a:51:17:bd:c6:10: 0c:fb:22:3b:61:b0:98:6e:46:a8:1c:a4:3c:54:5c: 83:8b:2b:f2:3c:32:3f:2f:7d:b6:65:24:66:98:bd: 1d:30:2a:8e:7f:1f:af:5d:16:7b:24:76:c0:4d:8f: 34:04:96:1b:d7:2e:53:68:45:d3:ee:05:4d:af:96: f6:12:db:9b:fb:61:c4:3b:96:b4:9b:e0:81:aa:ea: 9d:86:df:8a:e8:44:e6:8b:e7:02:ae:2d:7b:bc:d2: 1b:81:5b:a7:52:fc:44:62:5c:2b:76:41:10:c9:f9: 41:49:62:a6:5d:93:7d:a0:77:38:48:4f:88:1d:f4: 8c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:74:A7:5C:E2:15:43:29:95:FA:FD:77:DF:6F:1E:DD:41:AD:9F:69 X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:77:dc:7e:7d:d6:dc:8d:60:25:18:e7:7f:cd:12:1b:67:1a: ff:d7:b5:b2:53:81:43:93:38:32:45:65:17:28:1c:32:9b:14: 5a:eb:b4:2b:76:ba:26:39:29:7f:b1:5a:69:40:cc:22:de:5f: 48:19:7e:f5:ed:b8:c0:08:1b:80:98:bd:f7:aa:3b:b4:aa:35: 2c:5a:6a:a6:b1:18:83:d2:08:da:ab:95:4d:d0:eb:e6:1a:29: d0:cb:97:6b:ab:93:37:05:be:8c:00:a9:cd:9f:14:df:cd:10: ba:f2:34:3f:b2:ce:f9:ce:e9:fa:53:7f:c2:96:0b:ea:bb:c7: b5:17:5a:af:74:9e:84:e4:88:39:4c:51:d1:70:d0:a5:72:51: d4:3d:b7:46:a2:6a:13:bb:20:1c:63:2c:95:17:8e:f4:d8:e5: 26:ed:58:ca:a3:2a:ff:52:48:9e:ae:b1:93:72:6d:15:4f:d3: 7c:f3:e8:df:e0:78:13:8e:79:c1:54:15:48:b0:e7:17:8f:24: c6:a8:ab:05:8b:80:d6:e6:62:e0:a8:6d:f6:cd:6e:c1:9d:d2: 15:3b:d8:eb:3f:68:90:01:1b:12:f3:85:0b:a1:63:f7:db:c5: 45:fc:ce:7d:fb:15:59:9d:0f:e9:09:c9:b5:c0:91:f9:d5:cf: 5d:94:89:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjUwNDI0MjAxNjAzWhcNMjUwNTAxMjAxNjAzWjAYMRYwFAYD VQQDEw02ODBhOWMwNC00MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+SF0v0DEWTejrTeECpEsQaRHRdyFf/x3aF1arPQgPWmBz31hI7sS4lMcZ7E2 LPAujBi5lqXXZrvoZXo2yIiUd42Tzp9EBsLX3i4PRCcuvSkT+OkcpTtEndssf7sK 4NfLZjpegr++jCjewd/qxDwXFkgwxFvTieQyfbjI0yp6a9xqURe9xhAM+yI7YbCY bkaoHKQ8VFyDiyvyPDI/L322ZSRmmL0dMCqOfx+vXRZ7JHbATY80BJYb1y5TaEXT 7gVNr5b2Etub+2HEO5a0m+CBquqdht+K6ETmi+cCri17vNIbgVunUvxEYlwrdkEQ yflBSWKmXZN9oHc4SE+IHfSMTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD50p1zi FUMplfr9d99vHt1BrZ9pMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBed9x+fdbcjWAlGOd/zRIbZxr/17WyU4FDkzgyRWUXKBwymxRa67Qr dromOSl/sVppQMwi3l9IGX717bjACBuAmL33qju0qjUsWmqmsRiD0gjaq5VN0Ovm GinQy5drq5M3Bb6MAKnNnxTfzRC68jQ/ss75zun6U3/Clgvqu8e1F1qvdJ6E5Ig5 TFHRcNClclHUPbdGomoTuyAcYyyVF4702OUm7VjKoyr/UkierrGTcm0VT9N88+jf 4HgTjnnBVBVIsOcXjyTGqKsFi4DW5mLgqG32zW7BndIVO9jrP2iQARsS84ULoWP3 28VF/M59+xVZnQ/pCcm1wJH51c9dlIno -----END CERTIFICATE-----Generated at Sat Apr 26 17:05:01 2025 by rpki-client