$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: Gtumj+2csT++jCP58GTYYLweZjyyES1o0HrUoNT9L2U= Subject key identifier: 06:5F:02:7A:EA:B6:FE:C4:5F:42:E5:DD:3A:0A:5A:FA:71:3B:D4:39 Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0546 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 052C Signing time: Sat 10 May 2025 23:11:47 +0000 Manifest this update: Sat 10 May 2025 23:11:47 +0000 Manifest next update: Sat 17 May 2025 23:11:47 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: sEFzH9lPsptk6UoiprBZ2+Kfk4imK+GZO5aW0V6wHZw=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 4bP+/xCzlCHzMiPDDeZZu8ryV1WmsI6f+3c5qjtpUM8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: MPM/fDIm7iSq8h5ZOB3ujJWuioyZyPhojtnDvre1LOg=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: 3s0Y71iF/fsJNHbeREVW+BHHh6vRQTKc/vlJskM3cQo=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: DJiem+mJ9guPOqkkTAIozTCpaBw0W78lezIlNh26BC0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: qkcR8ZEDC9+iqlFe5dp0WkDY8PQPtYRvJuQb0n842mU=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1350 (0x546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: May 10 23:11:47 2025 GMT Not After : May 17 23:11:47 2025 GMT Subject: CN=681fdd33-fd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:6b:f0:59:6a:1b:a7:be:26:b7:61:04:f0: 28:00:92:97:26:ec:13:4b:7c:31:c8:12:6e:d6:01: d3:d2:16:4e:f4:12:73:50:5e:f2:20:80:37:f6:a1: 77:90:0d:da:81:13:bb:1f:c9:04:2a:68:91:2b:1e: 2e:d7:27:b2:76:e5:c1:3e:74:09:ee:8a:20:42:21: 68:d3:ef:d3:94:e7:ea:35:4c:01:8b:c1:3f:0f:bc: 64:39:4a:e6:11:bd:7c:ff:8a:5e:d0:be:b7:ad:e7: 09:53:7e:f9:97:29:f9:d3:dd:fc:1e:51:17:19:df: f0:c0:92:6a:42:45:32:ce:a6:26:a9:c8:8c:5e:dc: b0:21:b4:40:59:d6:2b:4b:1b:44:61:5f:91:00:33: 7a:d3:6b:e0:b0:31:8a:35:a5:17:d6:ff:1c:bc:40: 10:47:09:21:99:4d:d3:ab:31:06:d6:36:4b:10:13: 2c:af:17:7b:90:53:25:03:71:92:28:58:fa:79:5d: 4c:ea:b5:fc:a3:8e:28:83:14:8b:1e:5d:4a:8c:cd: 85:97:7f:86:4d:d7:fe:80:36:31:aa:87:14:d0:88: 48:f1:9c:7c:6b:05:64:68:da:bd:68:bc:ce:a8:56: 42:45:5c:82:45:b9:cd:0d:4e:e0:28:87:03:a1:15: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5F:02:7A:EA:B6:FE:C4:5F:42:E5:DD:3A:0A:5A:FA:71:3B:D4:39 X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:81:d4:df:f9:59:1e:03:c5:bc:3e:a9:e1:a2:a4:23:48:3c: 2c:f3:00:77:2d:d5:78:dd:83:7c:1b:02:0b:b4:ec:07:f6:b0: 00:59:51:d6:4e:8b:83:e3:67:63:2e:82:85:da:62:67:6e:bc: 9d:4f:33:aa:8f:72:c3:bd:d3:a7:d8:e8:28:b9:e7:0c:58:72: d5:16:8d:a0:f6:08:b6:bb:8b:d2:dc:cd:c8:2f:04:56:d6:98: b8:c6:a5:bc:32:ec:e6:0a:9f:6a:bf:2f:61:c2:58:5f:15:37: 0d:1f:22:2d:89:4e:97:71:72:2e:51:6c:5e:36:9c:87:1d:2d: 06:c6:6f:bf:7f:07:00:55:0c:54:49:75:31:4b:cd:12:38:f0: 39:3a:5f:85:11:00:a3:24:5c:67:a0:9a:52:a4:4b:5b:78:00: d3:7d:88:46:e7:c2:5d:9b:00:de:2a:be:b0:0c:3a:cb:a2:47: 2a:02:0b:86:7e:00:d6:85:f4:6d:f7:d8:55:37:60:b9:e4:8b: a5:ee:3a:18:60:f1:3c:2c:36:e5:3f:45:19:3f:35:fd:1d:3b: f6:c2:3c:9c:48:51:cd:75:75:db:f9:c3:ed:cf:cf:40:36:cb: a9:41:fc:63:d5:e5:44:86:20:4d:d1:52:70:d2:4a:e3:90:81: 69:52:52:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwNTEwMjMxMTQ3WhcNMjUwNTE3MjMxMTQ3WjAYMRYwFAYD VQQDEw02ODFmZGQzMy1mZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqZ1r8FlqG6e+JrdhBPAoAJKXJuwTS3wxyBJu1gHT0hZO9BJzUF7yIIA39qF3 kA3agRO7H8kEKmiRKx4u1yeyduXBPnQJ7oogQiFo0+/TlOfqNUwBi8E/D7xkOUrm Eb18/4pe0L63recJU375lyn50938HlEXGd/wwJJqQkUyzqYmqciMXtywIbRAWdYr SxtEYV+RADN602vgsDGKNaUX1v8cvEAQRwkhmU3TqzEG1jZLEBMsrxd7kFMlA3GS KFj6eV1M6rX8o44ogxSLHl1KjM2Fl3+GTdf+gDYxqocU0IhI8Zx8awVkaNq9aLzO qFZCRVyCRbnNDU7gKIcDoRW42wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZfAnrq tv7EX0Ll3ToKWvpxO9Q5MB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKgdTf+VkeA8W8PqnhoqQjSDws8wB3LdV43YN8GwILtOwH9rAAWVHW TouD42djLoKF2mJnbrydTzOqj3LDvdOn2OgouecMWHLVFo2g9gi2u4vS3M3ILwRW 1pi4xqW8MuzmCp9qvy9hwlhfFTcNHyItiU6XcXIuUWxeNpyHHS0Gxm+/fwcAVQxU SXUxS80SOPA5Ol+FEQCjJFxnoJpSpEtbeADTfYhG58JdmwDeKr6wDDrLokcqAguG fgDWhfRt99hVN2C55Iul7joYYPE8LDblP0UZPzX9HTv2wjycSFHNdXXb+cPtz89A NsupQfxj1eVEhiBN0VJw0krjkIFpUlJV -----END CERTIFICATE-----Generated at Sun May 11 13:08:22 2025 by rpki-client