$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: 73lggUkI0tstz5ITdaSyI4GVcCwK9CrEJgZ0DbBJpqk= Subject key identifier: D4:EA:3D:81:75:08:20:21:1F:92:E0:16:FF:DE:50:FD:6E:2C:C9:58 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: A8 Signing time: Fri 25 Apr 2025 05:09:43 +0000 Manifest this update: Fri 25 Apr 2025 05:09:43 +0000 Manifest next update: Fri 02 May 2025 05:09:43 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: ssw3cM39WhZGOzMFepUdnIZsmmlut+aBqrh6TIzg2BY=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: Apr 25 05:09:43 2025 GMT Not After : May 2 05:09:43 2025 GMT Subject: CN=680b1917-cf48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6c:83:df:5e:57:d8:00:e8:3c:8b:84:62:d9: 68:92:fc:cb:fc:b5:d7:7a:84:ee:71:77:13:40:29: 78:97:03:0a:86:13:2d:dd:89:4a:66:31:d8:90:cc: 22:72:fa:97:19:de:af:c5:b3:25:b9:8b:fd:db:16: ea:25:38:dd:b5:93:32:fa:d5:9e:5c:9b:a5:e6:59: 7c:6d:84:09:b3:4a:3b:ca:d1:45:06:f0:1b:9b:23: 65:de:7c:e8:31:32:c1:98:10:49:0a:9d:b3:27:39: 5a:9e:60:79:e5:4f:6b:16:24:41:60:da:1e:5f:dd: 45:c4:3d:f4:d7:2e:51:c2:f4:de:26:25:b8:ac:ce: 6b:02:57:6d:fc:a3:af:c1:30:ea:eb:fa:89:cb:26: 33:45:13:21:a0:18:07:d1:85:48:08:47:6a:ef:19: f5:be:79:fb:0c:ab:c9:74:70:a8:9d:1b:cb:fd:fe: c9:51:6f:af:c9:37:69:5c:44:03:4b:71:bf:7a:c4: 47:3d:42:e1:db:50:ff:a3:2c:84:a7:15:90:fe:8b: 6f:f2:86:7f:d1:fb:14:8e:ec:00:ca:84:1c:e8:e7: 2b:db:ee:b4:f8:d8:b0:99:9e:1e:a0:cf:8c:2f:7e: 35:fa:99:64:eb:bb:0f:0e:f8:9f:69:ae:0a:5a:29: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:3D:81:75:08:20:21:1F:92:E0:16:FF:DE:50:FD:6E:2C:C9:58 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:bd:3b:ed:96:19:0f:e8:92:7d:39:14:21:71:e0:35:32:1d: 1d:24:01:4a:4a:fa:a1:15:05:5c:53:91:cd:0f:78:8b:96:fa: a1:0b:34:eb:b5:07:31:5a:02:86:ab:2b:2a:06:19:e9:84:70: a0:24:b2:03:8a:1b:c8:0c:c7:27:0c:51:38:dc:37:e8:6d:bf: c7:6a:2e:33:51:23:bb:92:a6:d3:13:52:bc:9f:d1:82:98:b0: 99:3a:85:c6:5c:52:f2:a7:b9:96:f5:49:5c:e6:f7:03:03:be: 7e:c3:dd:5f:35:d2:be:7a:ad:0a:83:47:52:89:eb:e0:26:8f: 0d:95:13:40:36:3d:6b:ec:06:85:99:9c:b0:6a:4e:b0:00:c8: df:b0:77:81:ef:52:06:0c:3b:91:0e:04:60:c1:27:36:89:26: 49:19:8c:6d:68:92:ac:7a:bd:08:f2:7a:5c:0b:79:90:c6:66: 98:7f:5a:31:7e:1d:9f:d5:60:07:0d:c7:bb:1e:4f:80:23:d9: b7:5d:bb:eb:53:6c:ff:e6:ad:52:3a:b8:37:e3:13:69:4b:16: b3:c3:ac:33:21:bf:bf:d2:e1:38:7d:77:0b:77:90:9f:ab:98: 8e:64:92:d1:fe:b7:65:13:48:59:80:c0:b3:13:aa:c8:ba:0a: 5f:7c:ef:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUwNDI1MDUwOTQzWhcNMjUwNTAyMDUwOTQzWjAYMRYwFAYD VQQDEw02ODBiMTkxNy1jZjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2GyD315X2ADoPIuEYtlokvzL/LXXeoTucXcTQCl4lwMKhhMt3YlKZjHYkMwi cvqXGd6vxbMluYv92xbqJTjdtZMy+tWeXJul5ll8bYQJs0o7ytFFBvAbmyNl3nzo MTLBmBBJCp2zJzlanmB55U9rFiRBYNoeX91FxD301y5RwvTeJiW4rM5rAldt/KOv wTDq6/qJyyYzRRMhoBgH0YVICEdq7xn1vnn7DKvJdHConRvL/f7JUW+vyTdpXEQD S3G/esRHPULh21D/oyyEpxWQ/otv8oZ/0fsUjuwAyoQc6Ocr2+60+NiwmZ4eoM+M L341+plk67sPDvifaa4KWimgCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTqPYF1 CCAhH5LgFv/eUP1uLMlYMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDvTvtlhkP6JJ9ORQhceA1Mh0dJAFKSvqhFQVcU5HND3iLlvqhCzTr tQcxWgKGqysqBhnphHCgJLIDihvIDMcnDFE43Dfobb/Hai4zUSO7kqbTE1K8n9GC mLCZOoXGXFLyp7mW9Ulc5vcDA75+w91fNdK+eq0Kg0dSievgJo8NlRNANj1r7AaF mZywak6wAMjfsHeB71IGDDuRDgRgwSc2iSZJGYxtaJKser0I8npcC3mQxmaYf1ox fh2f1WAHDce7Hk+AI9m3XbvrU2z/5q1SOrg34xNpSxazw6wzIb+/0uE4fXcLd5Cf q5iOZJLR/rdlE0hZgMCzE6rIugpffO8T -----END CERTIFICATE-----Generated at Sat Apr 26 04:37:43 2025 by rpki-client