$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: ThIzku9jQqiGYKzF1twR5rS4SDvX9Er+FrIgGtSi9dM= Subject key identifier: B6:1D:19:5C:5E:F5:65:5E:B4:BE:9D:D2:85:1F:9E:51:3B:EB:45:0F Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 61 Signing time: Sun 11 May 2025 05:47:27 +0000 Manifest this update: Sun 11 May 2025 05:47:27 +0000 Manifest next update: Sun 18 May 2025 05:47:27 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: iD/9giTKIUyoAwdq35a443cd8bbzTTUINf/7B6rk72c=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:47:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: May 11 05:47:27 2025 GMT Not After : May 18 05:47:27 2025 GMT Subject: CN=682039ef-b59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:b5:ce:ce:79:cf:07:ca:b1:27:2a:eb:46: 81:f9:e0:d4:4b:fb:63:f8:94:ca:76:52:a3:77:3d: b0:4a:3f:20:0e:0f:29:66:68:45:8b:74:2b:7a:c1: ea:eb:b6:74:8f:c7:1c:37:48:b4:5c:9b:dc:72:40: 7e:7e:ae:0a:1d:ba:2d:2a:b8:46:3a:83:da:09:9f: be:c5:16:30:33:bc:8d:76:78:db:df:84:87:a9:4a: 78:1d:cc:41:c8:69:1d:cf:83:d7:2f:54:60:e8:63: cf:37:99:fc:79:50:cd:cf:33:8e:1b:d8:95:0a:fe: 75:f7:dc:89:e3:96:01:58:a5:4c:be:c4:68:7f:9f: b1:db:f1:d9:35:74:dd:02:de:1d:eb:26:38:c5:56: e9:c5:58:56:d6:87:8b:c6:37:d3:35:9f:e5:37:1e: 02:ea:6a:99:12:5b:f6:72:c9:9a:f8:d7:53:42:cb: 28:8e:86:8d:35:31:0e:2d:bb:49:b8:24:40:53:fa: 19:3f:85:ef:f6:41:03:9d:a0:d2:7b:3f:4a:e3:f9: 04:52:db:e4:1d:5e:2e:71:f6:f6:9e:99:a4:03:c3: f2:3d:ed:8c:ea:50:25:9e:40:f5:66:83:56:1d:b2: c0:5e:29:77:a0:af:ca:a7:98:8d:7e:07:66:22:9f: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:19:5C:5E:F5:65:5E:B4:BE:9D:D2:85:1F:9E:51:3B:EB:45:0F X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:10:de:c5:55:80:0c:22:1c:8b:fc:49:f9:d5:8b:ee:ba:d8: 5a:25:28:05:f7:a2:ca:87:9f:c1:45:a3:a3:ee:77:b5:fb:c5: 29:84:ac:b1:ec:bd:f0:b4:a9:dc:86:24:e2:95:1c:12:b3:77: d6:be:a3:54:d5:57:15:67:25:19:60:70:ab:26:c1:5a:07:da: 5d:10:8b:c6:3d:dd:53:13:47:98:7b:78:fa:7c:d2:4c:36:47: 2e:35:89:09:c8:4f:0c:77:49:50:c3:ad:df:61:65:8a:c0:bc: 7c:01:a0:21:31:00:8e:bc:f4:42:f7:18:33:de:78:48:19:6f: 00:0d:9c:5b:c7:ee:c5:5d:29:f1:c8:c3:87:2e:80:9a:52:cc: da:22:3e:56:35:b8:ac:46:6c:57:1b:c3:ba:4e:93:36:ed:41: e4:17:ce:8a:2b:47:ee:8f:7e:e0:f6:cb:d7:ec:18:28:4c:9c: d3:15:96:10:8d:6e:52:b5:b4:91:91:96:ab:37:8a:ab:ca:bc: cf:22:5e:93:b6:9e:38:2e:5b:80:0e:92:2c:32:4f:8c:df:71: 2e:a1:21:30:74:16:3c:b1:0e:92:53:5e:6a:6d:9c:cf:a7:de: dd:80:43:e3:e1:7e:6f:14:e6:dd:55:f9:e1:41:37:69:28:16: f0:e6:7e:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoQUMyOERDMkE1NTRCNEUzMzlBMzk5Qzk2NDJCNENFMDI2 OEE4REZCMDAeFw0yNTA1MTEwNTQ3MjdaFw0yNTA1MTgwNTQ3MjdaMBgxFjAUBgNV BAMTDTY4MjAzOWVmLWI1OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1JLXOznnPB8qxJyrrRoH54NRL+2P4lMp2UqN3PbBKPyAODylmaEWLdCt6werr tnSPxxw3SLRcm9xyQH5+rgodui0quEY6g9oJn77FFjAzvI12eNvfhIepSngdzEHI aR3Pg9cvVGDoY883mfx5UM3PM44b2JUK/nX33InjlgFYpUy+xGh/n7Hb8dk1dN0C 3h3rJjjFVunFWFbWh4vGN9M1n+U3HgLqapkSW/ZyyZr411NCyyiOho01MQ4tu0m4 JEBT+hk/he/2QQOdoNJ7P0rj+QRS2+QdXi5x9vaemaQDw/I97YzqUCWeQPVmg1Yd ssBeKXegr8qnmI1+B2YinwWPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUth0ZXF71 ZV60vp3ShR+eUTvrRQ8wHwYDVR0jBBgwFoAUrCjcKlVLTjOaOZyWQrTOAmio37Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0RCREEyQ0M0OUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckNqY0tsVkxUak9hT1p5V1FyVE9BbWlvMzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0RCREEyQ0M0OUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpP YU9aeVdRclRPQW1pbzM3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFkQ3sVVgAwiHIv8SfnVi+662FolKAX3osqHn8FFo6Pud7X7xSmErLHs vfC0qdyGJOKVHBKzd9a+o1TVVxVnJRlgcKsmwVoH2l0Qi8Y93VMTR5h7ePp80kw2 Ry41iQnITwx3SVDDrd9hZYrAvHwBoCExAI689EL3GDPeeEgZbwANnFvH7sVdKfHI w4cugJpSzNoiPlY1uKxGbFcbw7pOkzbtQeQXzoorR+6PfuD2y9fsGChMnNMVlhCN blK1tJGRlqs3iqvKvM8iXpO2njguW4AOkiwyT4zfcS6hITB0FjyxDpJTXmptnM+n 3t2AQ+Phfm8U5t1V+eFBN2koFvDmfgY= -----END CERTIFICATE-----Generated at Mon May 12 04:35:28 2025 by rpki-client