$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: HfD9dn12HtTXZplPTTCRzJcASOmuwvmwBO5yQjFHvaA= Subject key identifier: 00:82:0F:E2:73:73:44:69:91:FE:22:A9:8A:2B:C2:52:C7:2A:6D:D9 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: A6 Signing time: Fri 25 Apr 2025 05:10:54 +0000 Manifest this update: Fri 25 Apr 2025 05:10:53 +0000 Manifest next update: Fri 02 May 2025 05:10:53 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: CJmHX1heKd8q3dxKtLlB6J3M9ulOhLGrNvXqMMidMHc=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: Iji2xdjNL9b32bfsJ+kVOrXH1mKlpeXd/SW3QeUD+pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Apr 25 05:10:53 2025 GMT Not After : May 2 05:10:53 2025 GMT Subject: CN=680b195e-6bb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:21:91:88:e8:21:4f:8a:8c:92:21:48:9b: b5:11:a1:09:21:c7:31:48:6d:b3:62:c3:66:5a:8f: 78:68:5a:aa:07:f9:ee:66:ec:0c:53:b1:df:45:0a: 3d:43:40:10:e1:12:ac:a3:6e:89:3f:ed:cb:3a:24: 8e:d6:d9:af:a6:b1:b7:aa:9b:52:3b:83:52:5f:3b: e1:43:89:c5:4d:d4:92:e2:bf:de:6b:a1:65:23:b8: 2b:f1:81:30:dc:75:9e:f6:69:1f:5f:7d:7b:57:72: 6a:6a:81:ed:40:83:0f:a4:57:a7:40:57:54:b0:69: 86:77:97:db:07:20:a8:24:70:7a:d6:05:41:37:37: 96:cd:af:2f:64:f6:10:00:99:c8:a5:d0:24:e5:9a: f0:49:bc:54:15:18:c3:e5:86:e7:98:24:23:87:f5: 4a:9a:61:72:78:a1:a1:6d:c7:2f:60:66:03:07:2e: e1:76:4e:4f:91:a8:2e:2b:89:3e:78:e6:ab:2a:0c: 94:28:3a:e4:e7:dd:c8:85:56:e8:a2:e6:8e:be:f1: e5:96:57:58:8b:ae:6d:08:b1:77:d4:10:4d:80:51: 3f:b9:fc:8d:ed:db:f2:96:15:9f:a9:b6:d1:fc:48: 2b:66:61:91:ff:b8:cb:76:99:05:93:5b:70:db:08: b3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:82:0F:E2:73:73:44:69:91:FE:22:A9:8A:2B:C2:52:C7:2A:6D:D9 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:69:3d:b8:11:3b:82:53:6a:5e:7c:64:48:27:12:15:cd:0c: e4:6f:2f:d3:02:83:65:41:14:74:f8:e5:6a:27:86:9d:70:90: 15:8c:76:68:10:8e:cf:93:72:95:11:ec:49:f5:94:74:b5:7d: c8:fe:2c:3b:fc:c9:4f:4b:d3:bc:eb:22:78:1f:2e:5a:28:f0: 37:3e:13:87:90:0c:2b:18:f1:9b:97:84:7f:4b:a8:08:37:f0: b0:ee:3f:ec:16:81:09:0d:f5:ef:e0:2c:11:4d:d3:c4:a5:f7: 81:0d:9c:d3:a8:b9:6e:37:57:00:78:b4:91:4d:61:12:e3:19: 19:f4:b9:2b:2e:83:f3:d6:d0:0a:bc:ee:cf:4e:3c:95:89:60: 3a:0f:52:83:cd:bf:f3:e5:af:a7:2f:4f:62:9e:c3:ce:ea:51: 15:94:ef:3b:08:16:52:79:49:9a:70:53:09:fe:f0:e5:06:d9: 2a:48:a4:67:d9:bf:82:25:95:1f:8f:d7:57:e7:6f:a2:57:32: a6:5e:9e:4c:3b:b0:84:b1:75:97:d5:20:90:00:d7:8e:c4:c4: c2:91:76:8f:06:fc:d0:88:b7:43:4b:ce:74:1d:0f:5c:c9:cd: 2b:bf:d6:9d:19:b1:a5:54:e0:a8:a1:45:ca:b8:88:f4:74:90: 93:54:76:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwNDI1MDUxMDUzWhcNMjUwNTAyMDUxMDUzWjAYMRYwFAYD VQQDEw02ODBiMTk1ZS02YmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqbQhkYjoIU+KjJIhSJu1EaEJIccxSG2zYsNmWo94aFqqB/nuZuwMU7HfRQo9 Q0AQ4RKso26JP+3LOiSO1tmvprG3qptSO4NSXzvhQ4nFTdSS4r/ea6FlI7gr8YEw 3HWe9mkfX317V3JqaoHtQIMPpFenQFdUsGmGd5fbByCoJHB61gVBNzeWza8vZPYQ AJnIpdAk5ZrwSbxUFRjD5YbnmCQjh/VKmmFyeKGhbccvYGYDBy7hdk5PkaguK4k+ eOarKgyUKDrk593IhVboouaOvvHllldYi65tCLF31BBNgFE/ufyN7dvylhWfqbbR /EgrZmGR/7jLdpkFk1tw2wizvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACCD+Jz c0Rpkf4iqYorwlLHKm3ZMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNaT24ETuCU2pefGRIJxIVzQzkby/TAoNlQRR0+OVqJ4adcJAVjHZo EI7Pk3KVEexJ9ZR0tX3I/iw7/MlPS9O86yJ4Hy5aKPA3PhOHkAwrGPGbl4R/S6gI N/Cw7j/sFoEJDfXv4CwRTdPEpfeBDZzTqLluN1cAeLSRTWES4xkZ9LkrLoPz1tAK vO7PTjyViWA6D1KDzb/z5a+nL09insPO6lEVlO87CBZSeUmacFMJ/vDlBtkqSKRn 2b+CJZUfj9dX52+iVzKmXp5MO7CEsXWX1SCQANeOxMTCkXaPBvzQiLdDS850HQ9c yc0rv9adGbGlVOCooUXKuIj0dJCTVHZo -----END CERTIFICATE-----Generated at Sat Apr 26 04:30:41 2025 by rpki-client