$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: QOGpLGzbqj+Sv+mKPbcPhYX1Y2VFAbrcec4BXF1c9uw= Subject key identifier: B8:0C:9E:07:AF:B0:34:FB:1B:56:9B:6D:BD:5A:74:50:F2:E7:39:0B Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0157 Signing time: Sun 11 May 2025 02:58:16 +0000 Manifest this update: Sun 11 May 2025 02:58:16 +0000 Manifest next update: Sun 18 May 2025 02:58:16 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: chJfHDxa+PRKtfUPWJ9iK2p5dgQpAZJw1T4uM1UbDFc=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: May 11 02:58:16 2025 GMT Not After : May 18 02:58:16 2025 GMT Subject: CN=68201248-ed0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:28:eb:fa:14:40:e2:7d:ab:00:66:32:82: e0:4d:8f:d2:01:9d:17:37:8a:c4:de:3e:a7:3d:d4: 5e:26:e1:39:67:02:9e:00:6a:c1:8e:c5:fa:23:11: ef:f0:4a:8c:84:9f:a3:3f:5c:19:e1:a7:87:b2:cb: 78:5a:8b:2e:c6:bf:38:18:7f:a9:2b:d8:3c:31:a8: 2e:ce:bc:2e:1d:c5:3a:6e:43:f5:33:36:e2:2c:6a: 2a:52:d6:a6:33:f6:be:29:c2:19:e8:0e:fe:c9:dc: 16:83:6d:64:86:63:cb:b4:c1:78:88:0c:d6:0b:1c: b4:0f:42:a1:cf:7a:62:83:81:86:d6:3b:6c:bb:c4: c9:cc:2e:00:73:5a:e9:d2:ec:23:a2:d7:c2:45:a7: c6:8e:04:39:4e:0d:d5:f8:07:49:1d:b6:14:e9:00: 1f:38:a4:b6:64:de:ed:a3:7f:01:a9:cf:d0:c8:e1: 44:56:be:68:a9:42:63:ac:aa:a8:93:2c:9a:48:e0: ae:98:48:76:da:78:09:9e:b2:86:a1:d5:6c:a8:d0: 24:21:0c:53:8a:e5:86:6c:f5:ed:a7:1b:ea:65:fd: 4f:61:1d:ca:77:8d:cf:dd:2d:03:70:1a:ed:49:36: 77:4e:79:1c:b6:9d:c8:9b:28:ed:45:3a:ef:79:9d: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:0C:9E:07:AF:B0:34:FB:1B:56:9B:6D:BD:5A:74:50:F2:E7:39:0B X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:28:18:97:c5:57:82:d5:d2:b0:7b:3c:9a:bf:38:b4:9a:3b: 29:50:30:d6:09:21:57:82:d5:2b:2e:a4:e8:af:eb:cf:82:93: 1a:92:64:ce:03:68:f1:91:64:d0:45:d1:20:c9:e5:d9:e6:06: d1:e4:8c:88:76:11:a8:7c:6c:06:ab:93:f4:36:93:fe:ae:a2: c0:27:3d:38:75:eb:82:3f:48:0b:ea:bb:5d:0e:37:c6:84:74: f1:fb:89:a0:1a:20:a4:23:56:8d:9b:fc:d8:e2:c4:7c:9e:55: 3e:dd:ff:6a:0f:2a:0e:38:91:52:56:61:59:e9:c6:6b:13:23: 49:38:13:0a:8a:f8:34:e7:a7:69:04:d5:3f:7c:b9:d7:3d:c8: af:a3:7d:da:ad:a4:fb:b8:95:cb:d9:23:f2:79:31:d6:12:06: f6:d4:28:24:44:c4:b2:a7:3f:3c:59:27:54:6b:75:16:80:3b: a4:5b:cb:80:96:99:34:4e:02:01:92:e5:24:9b:7a:c3:ec:48: bc:65:5d:b0:36:db:e9:c4:10:0a:23:67:2e:af:f6:f7:0e:c6: 0c:8f:52:f0:ed:59:04:62:2e:0d:cd:03:65:c0:f9:14:1b:a1: 48:ff:06:e1:12:48:cc:e1:c2:2b:df:22:6f:55:a5:11:0c:8d: cc:38:5f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwNTExMDI1ODE2WhcNMjUwNTE4MDI1ODE2WjAYMRYwFAYD VQQDEw02ODIwMTI0OC1lZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgko6/oUQOJ9qwBmMoLgTY/SAZ0XN4rE3j6nPdReJuE5ZwKeAGrBjsX6IxHv 8EqMhJ+jP1wZ4aeHsst4Wosuxr84GH+pK9g8MaguzrwuHcU6bkP1MzbiLGoqUtam M/a+KcIZ6A7+ydwWg21khmPLtMF4iAzWCxy0D0Khz3pig4GG1jtsu8TJzC4Ac1rp 0uwjotfCRafGjgQ5Tg3V+AdJHbYU6QAfOKS2ZN7to38Bqc/QyOFEVr5oqUJjrKqo kyyaSOCumEh22ngJnrKGodVsqNAkIQxTiuWGbPXtpxvqZf1PYR3Kd43P3S0DcBrt STZ3Tnkctp3ImyjtRTrveZ1gvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgMngev sDT7G1abbb1adFDy5zkLMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACKBiXxVeC1dKwezyavzi0mjspUDDWCSFXgtUrLqTor+vPgpMakmTO A2jxkWTQRdEgyeXZ5gbR5IyIdhGofGwGq5P0NpP+rqLAJz04deuCP0gL6rtdDjfG hHTx+4mgGiCkI1aNm/zY4sR8nlU+3f9qDyoOOJFSVmFZ6cZrEyNJOBMKivg056dp BNU/fLnXPcivo33araT7uJXL2SPyeTHWEgb21CgkRMSypz88WSdUa3UWgDukW8uA lpk0TgIBkuUkm3rD7Ei8ZV2wNtvpxBAKI2cur/b3DsYMj1Lw7VkEYi4NzQNlwPkU G6FI/wbhEkjM4cIr3yJvVaURDI3MOF/t -----END CERTIFICATE-----Generated at Tue May 13 02:33:46 2025 by rpki-client