$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft File: cClGBbAXy3lsrYhC9e-6P0SHB_U.mft (raw, json) Hash identifier: 3k0XEy84EhaQ+Do+9yWwca9eQm6+A/Whfenpz5sr3d8= Subject key identifier: D8:57:C2:68:09:08:F4:BA:2F:6C:14:8F:43:84:F3:5F:E6:3A:B9:D4 Authority key identifier: 70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5 Certificate issuer: /CN=A91E1C16/serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5 Certificate serial: 05E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft Manifest number: 05CB Signing time: Thu 24 Apr 2025 22:54:29 +0000 Manifest this update: Thu 24 Apr 2025 22:54:28 +0000 Manifest next update: Thu 01 May 2025 22:54:28 +0000 Files and hashes: 1: cClGBbAXy3lsrYhC9e-6P0SHB_U.crl (hash: qfmvdYxbM9aK6qrowDHMG5yotz4UhM/QB85rjC7tNSc=) 2: 2B6E7D32FC5311ECBCE27247C4F9AE02.roa (hash: Pea43XyYLdD57bd2jMcFm5++NRhrK6aAEARYz2ZZaTI=) 3: FA18CEA2F07A11EBBEBB415AC4F9AE02.roa (hash: byFCEX/cfxkLVHdJ69qb/hcxv5zL8EwxRt2sj7xuv/w=) 4: 4FF82F28045E11EDB581B43EC4F9AE02.roa (hash: w21kT3wxQZFfqU1ntFUJE5r1+DTM2tACmKEPJfh1Bvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 22:54:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1508 (0x5e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1C16, serialNumber=70294605B017CB796CAD8842F5EFBA3F448707F5 Validity Not Before: Apr 24 22:54:28 2025 GMT Not After : May 1 22:54:28 2025 GMT Subject: CN=680ac125-1e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:28:9a:31:81:1c:e0:0f:8f:34:13:c3:52:c8: 48:3d:60:3d:f0:60:bf:b2:a5:df:72:34:77:29:c4: 91:66:49:f5:e9:c4:22:18:6f:30:ef:56:4e:33:32: 75:3b:eb:63:b5:8d:a7:b1:6c:00:f2:21:6b:b1:87: 9a:8f:66:27:64:ae:ea:e1:d8:78:cd:a8:b5:2a:b8: 84:be:a5:ed:4b:03:29:f1:21:53:b3:38:cd:c6:a5: fc:4d:9b:50:ea:d2:50:34:21:1d:54:45:4d:bb:41: 41:63:45:a5:d6:ee:d4:4c:2e:cc:4c:e7:6d:20:ac: 2c:5f:5d:59:65:0f:65:e4:13:9d:8a:b2:ac:7d:90: d7:b4:21:41:a7:cf:14:1c:d6:90:4b:f0:74:7b:74: f1:0a:47:e6:6e:7e:49:4a:05:a7:d9:86:02:40:46: 3b:24:2e:d8:53:27:fc:5e:42:57:d4:41:44:f4:ee: 56:72:e7:fc:1f:4a:27:17:4e:94:69:6a:63:2a:a3: 88:35:02:2f:56:53:b0:a2:22:e0:ad:db:a4:6f:a2: f7:60:61:96:2c:4a:b4:37:9b:b7:0e:67:0b:99:5e: a7:6b:51:59:cc:ce:bb:d7:0c:7f:fc:ab:5b:2f:a4: c8:32:02:9f:e8:2e:56:43:e2:b1:d2:4d:84:05:5a: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:C2:68:09:08:F4:BA:2F:6C:14:8F:43:84:F3:5F:E6:3A:B9:D4 X509v3 Authority Key Identifier: keyid:70:29:46:05:B0:17:CB:79:6C:AD:88:42:F5:EF:BA:3F:44:87:07:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cClGBbAXy3lsrYhC9e-6P0SHB_U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1C16/8F0C6B00BE6111EBAEF35A61C4F9AE02/cClGBbAXy3lsrYhC9e-6P0SHB_U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:3a:41:50:c5:8a:c7:04:cc:9a:44:ed:b2:c1:61:51:39:8c: 70:18:23:1f:8e:c2:91:5d:0b:0d:5c:77:6f:22:33:58:29:32: 95:40:92:06:4c:46:25:44:e3:a2:65:9b:60:52:b4:74:f9:e2: 17:84:2e:2b:e3:a6:f1:ba:37:28:b6:b1:7c:15:1c:c8:2b:a3: e8:a4:e2:ed:91:dc:86:84:a2:66:90:18:6f:98:17:c2:ea:06: 92:09:39:ad:de:dc:69:06:d6:1d:70:ec:0c:b9:c4:6e:f4:78: ca:04:39:71:f6:12:9e:21:a2:c6:11:6c:71:51:b4:7e:52:bf: 8f:82:4d:78:ee:f4:5d:ce:46:74:f2:c8:68:c2:b4:48:e8:d5: 46:0a:cf:e9:22:84:bf:b3:c7:72:ae:2f:14:d4:5c:21:65:99: c0:69:e1:71:9c:27:61:11:51:5c:ca:b7:f6:f5:36:36:3b:08: 96:38:d6:b7:47:00:be:22:dc:17:90:08:cb:4c:7d:ee:e4:8f: 19:37:02:91:ae:ae:41:7a:a0:04:9a:fc:c4:09:3d:12:d5:ab: 26:48:6a:59:89:b3:4f:86:c2:b2:33:ac:a1:de:9a:8e:d2:23: f6:5b:31:b7:79:9e:e2:10:27:83:fc:60:75:10:a7:0f:21:ef: 30:d9:02:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFDMTYxMTAvBgNVBAUTKDcwMjk0NjA1QjAxN0NCNzk2Q0FEODg0MkY1RUZCQTNG NDQ4NzA3RjUwHhcNMjUwNDI0MjI1NDI4WhcNMjUwNTAxMjI1NDI4WjAYMRYwFAYD VQQDEw02ODBhYzEyNS0xZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CiaMYEc4A+PNBPDUshIPWA98GC/sqXfcjR3KcSRZkn16cQiGG8w71ZOMzJ1 O+tjtY2nsWwA8iFrsYeaj2YnZK7q4dh4zai1KriEvqXtSwMp8SFTszjNxqX8TZtQ 6tJQNCEdVEVNu0FBY0Wl1u7UTC7MTOdtIKwsX11ZZQ9l5BOdirKsfZDXtCFBp88U HNaQS/B0e3TxCkfmbn5JSgWn2YYCQEY7JC7YUyf8XkJX1EFE9O5Wcuf8H0onF06U aWpjKqOINQIvVlOwoiLgrdukb6L3YGGWLEq0N5u3DmcLmV6na1FZzM671wx//Ktb L6TIMgKf6C5WQ+Kx0k2EBVqURQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhXwmgJ CPS6L2wUj0OE81/mOrnUMB8GA1UdIwQYMBaAFHApRgWwF8t5bK2IQvXvuj9Ehwf1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUMxNi84RjBDNkIwMEJF NjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkzbHNyWWhDOWUtNlAwU0hC X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDbEdCYkFYeTNsc3JZaEM5ZS02UDBTSEJfVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUMxNi84RjBDNkIwMEJFNjExMUVCQUVGMzVBNjFDNEY5QUUwMi9jQ2xHQmJBWHkz bHNyWWhDOWUtNlAwU0hCX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIOkFQxYrHBMyaRO2ywWFROYxwGCMfjsKRXQsNXHdvIjNYKTKVQJIG TEYlROOiZZtgUrR0+eIXhC4r46bxujcotrF8FRzIK6PopOLtkdyGhKJmkBhvmBfC 6gaSCTmt3txpBtYdcOwMucRu9HjKBDlx9hKeIaLGEWxxUbR+Ur+Pgk147vRdzkZ0 8showrRI6NVGCs/pIoS/s8dyri8U1FwhZZnAaeFxnCdhEVFcyrf29TY2OwiWONa3 RwC+ItwXkAjLTH3u5I8ZNwKRrq5BeqAEmvzECT0S1asmSGpZibNPhsKyM6yh3pqO 0iP2WzG3eZ7iECeD/GB1EKcPIe8w2QI8 -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:14 2025 by rpki-client