$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: lDbcNrWejHCpLtEj4syRdzxgnzPFu0TCG8qexGRsMyE= Subject key identifier: C8:AD:95:E5:A2:51:26:79:EA:C0:F9:9D:16:72:69:5E:C4:7D:13:A2 Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 01CD Signing time: Fri 25 Apr 2025 02:05:01 +0000 Manifest this update: Fri 25 Apr 2025 02:05:01 +0000 Manifest next update: Fri 02 May 2025 02:05:01 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: aFXyGMrt3lwA/13DAlZWKRL4NKTMoE+R1VrlRlJIRRM=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: 3BIidzXw3SbxxirE9B5rO+NW6ewizhq6UX39Bo2kTKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: Apr 25 02:05:01 2025 GMT Not After : May 2 02:05:01 2025 GMT Subject: CN=680aedcd-b231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:55:bb:8c:48:68:8d:fd:86:d0:f3:11:92: 8f:bf:4e:85:fa:44:50:ad:d0:68:e0:46:83:24:91: db:07:b4:64:96:ea:fe:80:dd:93:4e:ba:9b:c6:51: 5f:bb:46:60:2f:99:df:22:99:ed:e7:41:48:80:21: cd:e8:29:0b:da:09:b5:6f:01:3e:d6:2f:19:c8:da: db:0a:29:92:aa:83:ed:e9:51:f6:18:82:93:80:b6: 17:72:11:1d:19:7a:98:0b:de:af:b2:71:15:63:2e: 5d:b9:89:ad:3a:4e:dd:c9:5d:ea:d7:95:73:80:77: ad:04:f1:5e:05:c9:26:a9:64:41:1a:7b:e8:c0:be: f9:a6:4a:77:00:c4:45:e9:b9:fa:51:2c:bd:e6:72: 4d:da:86:15:ed:5b:08:05:31:da:1b:e1:e1:82:55: d9:3d:6a:95:5d:60:28:cb:8c:34:9c:05:56:f9:86: ee:32:d3:6e:d5:34:5f:cc:6d:99:e1:ad:01:17:62: dd:e6:b3:b3:3d:10:51:cd:9d:39:f3:1c:9f:c9:23: 70:d0:a8:7c:0b:87:4e:4e:41:de:59:65:fe:1f:a5: 3d:3a:76:10:6c:07:b9:ec:73:85:c4:7d:82:b6:8c: 65:10:43:c9:80:56:ec:e7:57:80:40:c5:c4:cc:d4: 63:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AD:95:E5:A2:51:26:79:EA:C0:F9:9D:16:72:69:5E:C4:7D:13:A2 X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:02:70:df:f4:3d:1f:1b:4c:20:ec:53:ee:98:32:61:16:29: 1a:10:76:0f:2d:e4:32:1c:d8:55:3d:e2:6c:24:18:ad:29:f8: 91:c4:98:29:00:b1:78:4b:32:aa:b7:53:ab:a2:7e:41:1b:f8: a3:42:6b:65:73:42:34:4f:ef:da:df:24:3e:89:83:be:84:27: ac:f2:75:4c:a5:4f:0b:14:94:3a:d3:6e:f3:a8:aa:9d:5a:30: 4f:99:0d:d9:70:b5:49:96:7b:e9:54:4f:86:b2:bb:16:cb:d1: 9b:55:06:03:87:77:f5:58:6b:3d:62:57:83:60:ca:b2:9b:ce: f2:72:eb:76:47:58:ad:20:c4:2e:a8:8e:67:5e:02:57:37:42: d8:6a:69:b3:7e:a8:42:71:78:15:82:08:92:55:41:ed:39:20: a0:4d:f4:1a:2c:f5:18:7a:2e:50:df:76:e1:3c:29:2c:9e:b6: 1a:07:10:70:4b:81:fa:8e:f6:54:58:94:d8:13:eb:b2:d2:86: 66:22:00:57:a4:1e:da:b2:79:61:ee:95:f9:f7:2d:fd:6b:03: ec:6d:53:1d:b9:4b:81:e6:63:2e:01:12:26:76:5c:8f:77:6a: df:5e:b2:fa:82:10:49:14:d3:a5:ca:d3:49:34:b7:98:51:6c: 59:1a:32:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUwNDI1MDIwNTAxWhcNMjUwNTAyMDIwNTAxWjAYMRYwFAYD VQQDEw02ODBhZWRjZC1iMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MpVu4xIaI39htDzEZKPv06F+kRQrdBo4EaDJJHbB7Rklur+gN2TTrqbxlFf u0ZgL5nfIpnt50FIgCHN6CkL2gm1bwE+1i8ZyNrbCimSqoPt6VH2GIKTgLYXchEd GXqYC96vsnEVYy5duYmtOk7dyV3q15VzgHetBPFeBckmqWRBGnvowL75pkp3AMRF 6bn6USy95nJN2oYV7VsIBTHaG+HhglXZPWqVXWAoy4w0nAVW+YbuMtNu1TRfzG2Z 4a0BF2Ld5rOzPRBRzZ058xyfySNw0Kh8C4dOTkHeWWX+H6U9OnYQbAe57HOFxH2C toxlEEPJgFbs51eAQMXEzNRj3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMitleWi USZ56sD5nRZyaV7EfROiMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARAnDf9D0fG0wg7FPumDJhFikaEHYPLeQyHNhVPeJsJBitKfiRxJgp ALF4SzKqt1Oron5BG/ijQmtlc0I0T+/a3yQ+iYO+hCes8nVMpU8LFJQ6027zqKqd WjBPmQ3ZcLVJlnvpVE+GsrsWy9GbVQYDh3f1WGs9YleDYMqym87ycut2R1itIMQu qI5nXgJXN0LYammzfqhCcXgVggiSVUHtOSCgTfQaLPUYei5Q33bhPCksnrYaBxBw S4H6jvZUWJTYE+uy0oZmIgBXpB7asnlh7pX59y39awPsbVMduUuB5mMuARImdlyP d2rfXrL6ghBJFNOlytNJNLeYUWxZGjJp -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:52 2025 by rpki-client