$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: y0Vw48BmG96fDYsW9BUQ2R+ONCtmuDCoR9Ct3vNjfls= Subject key identifier: 42:4B:5B:72:79:AD:CB:12:71:79:8F:60:3D:BE:EA:7C:6C:F8:89:F1 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0150 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 014C Signing time: Fri 25 Apr 2025 03:19:56 +0000 Manifest this update: Fri 25 Apr 2025 03:19:56 +0000 Manifest next update: Fri 02 May 2025 03:19:56 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: T5Y8KsIbOYbnW9v9NnNuNcVnW2K8miV0TjiXnBf6gLs=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: Apr 25 03:19:56 2025 GMT Not After : May 2 03:19:56 2025 GMT Subject: CN=680aff5c-5e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:65:7c:4b:4f:6b:7c:55:3d:fc:ec:08:0b:75: 3f:04:4d:9d:42:f1:c0:7f:68:78:97:63:cf:f1:da: 98:4a:e2:4b:27:3d:67:e1:93:aa:32:92:d8:78:52: 4a:3f:79:7d:d5:46:21:91:0c:99:8f:74:69:ff:02: 24:81:8a:b1:e7:10:18:38:9a:4d:55:a4:5c:2f:3d: 57:8b:3f:eb:18:5f:97:78:e1:b6:a5:e4:d1:4f:cd: 8a:db:a7:2d:5a:72:c7:22:37:f1:35:2b:75:d9:10: 79:4e:4d:3e:f6:c0:36:ec:c8:b6:d3:2a:32:6d:f7: b9:d8:82:fb:ad:a3:7c:93:c9:ae:16:af:3b:10:30: 7d:0f:82:5d:30:75:22:e0:5d:fa:05:ab:44:50:f1: a2:0b:fa:ec:de:42:38:75:52:07:26:59:43:e4:09: fa:96:78:2d:75:17:5b:f0:6a:39:62:c9:32:6e:16: eb:6c:a1:d4:a3:d9:74:0a:0f:7e:cd:86:66:fa:75: 20:51:87:f5:50:e4:7f:fd:10:0a:77:4e:84:0a:e6: 09:17:a7:fa:37:3b:e2:af:67:dc:6c:d6:be:13:38: 20:50:87:ed:c2:73:42:54:2b:aa:c0:8b:4b:c8:86: 3d:a8:fa:cf:17:ed:92:bf:fa:9e:7b:40:4c:1a:79: 5d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4B:5B:72:79:AD:CB:12:71:79:8F:60:3D:BE:EA:7C:6C:F8:89:F1 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:cb:3f:be:8b:36:c0:97:b6:90:66:bc:0f:99:97:6c:98:24: 7e:69:a4:56:b4:3c:84:56:ff:87:97:1d:fb:f8:82:1f:66:4a: 24:b7:64:d3:5e:7d:74:2c:06:45:b3:ec:bd:0d:8d:8c:2c:3a: 87:23:a1:c5:73:dd:b4:c0:88:8f:a8:29:c7:ce:73:8e:ce:e2: d1:8c:39:33:2a:07:f8:56:d2:cf:9e:81:78:f4:3c:c5:18:43: 6a:cc:18:40:d4:ae:98:f8:78:eb:21:11:e5:35:ab:f5:23:cd: 9c:ff:d3:69:2f:64:a4:e6:ce:4d:25:e6:40:54:b8:85:2e:77: dc:a8:92:20:1b:74:62:5a:d6:00:e8:2d:ef:cc:ed:36:36:5c: d9:cb:59:c1:2a:96:e9:b1:e6:97:17:c9:dd:ab:bc:e6:7e:f3: 85:3f:74:13:95:06:55:46:1d:f0:d8:fa:24:4e:6f:8f:02:22: 2f:0a:af:1a:b1:42:92:11:a0:a3:94:11:17:5a:75:cd:c8:91: f8:6c:98:3d:27:25:ce:8c:82:f4:6b:1a:b7:98:98:63:87:09: e8:ea:c5:2e:c6:4d:de:67:00:27:2e:63:15:21:29:e4:6a:92: 8d:1d:8a:b4:ab:38:e3:b8:18:14:1c:fc:2e:35:0d:9a:f1:ac: d0:1d:4d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwNDI1MDMxOTU2WhcNMjUwNTAyMDMxOTU2WjAYMRYwFAYD VQQDEw02ODBhZmY1Yy01ZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWV8S09rfFU9/OwIC3U/BE2dQvHAf2h4l2PP8dqYSuJLJz1n4ZOqMpLYeFJK P3l91UYhkQyZj3Rp/wIkgYqx5xAYOJpNVaRcLz1Xiz/rGF+XeOG2peTRT82K26ct WnLHIjfxNSt12RB5Tk0+9sA27Mi20yoybfe52IL7raN8k8muFq87EDB9D4JdMHUi 4F36BatEUPGiC/rs3kI4dVIHJllD5An6lngtdRdb8Go5YskybhbrbKHUo9l0Cg9+ zYZm+nUgUYf1UOR//RAKd06ECuYJF6f6Nzvir2fcbNa+EzggUIftwnNCVCuqwItL yIY9qPrPF+2Sv/qee0BMGnldAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJLW3J5 rcsScXmPYD2+6nxs+InxMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApyz++izbAl7aQZrwPmZdsmCR+aaRWtDyEVv+Hlx37+IIfZkokt2TT Xn10LAZFs+y9DY2MLDqHI6HFc920wIiPqCnHznOOzuLRjDkzKgf4VtLPnoF49DzF GENqzBhA1K6Y+HjrIRHlNav1I82c/9NpL2Sk5s5NJeZAVLiFLnfcqJIgG3RiWtYA 6C3vzO02NlzZy1nBKpbpseaXF8ndq7zmfvOFP3QTlQZVRh3w2PokTm+PAiIvCq8a sUKSEaCjlBEXWnXNyJH4bJg9JyXOjIL0axq3mJhjhwno6sUuxk3eZwAnLmMVISnk apKNHYq0qzjjuBgUHPwuNQ2a8azQHU0i -----END CERTIFICATE-----Generated at Sat Apr 26 14:18:23 2025 by rpki-client