$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: 8MOSx6PuuO/w1872BZtJIiE9+c2jVFLjYBRNrc9MIOo= Subject key identifier: 78:0C:29:5E:52:95:B1:BF:CE:83:A0:97:D8:C3:F7:1F:F2:98:88:18 Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 2B Signing time: Tue 13 May 2025 06:57:00 +0000 Manifest this update: Tue 13 May 2025 06:56:59 +0000 Manifest next update: Tue 20 May 2025 06:56:59 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: WkhWNthFWR0EyG+qrAvZDcNohfeYWENJAfKITJqluPU=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: BR0iac6RCibng8iXx5EGv9yUT7uect2xiyJYOcbA9Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: May 13 06:56:59 2025 GMT Not After : May 20 06:56:59 2025 GMT Subject: CN=6822ed3b-a425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:82:a1:ce:e8:ff:1d:f7:f6:85:db:88:9d:25: 7b:2d:e9:7d:16:65:80:d1:0e:ea:30:04:be:2f:3c: db:9d:dc:00:4a:c3:d6:49:14:c7:57:2e:2c:34:e1: 74:3f:60:c3:06:ce:e9:ae:3c:49:9a:73:35:03:04: 9a:3d:46:10:7c:fa:cb:1b:57:65:72:f8:3a:da:d8: 37:18:e4:97:ef:7d:91:17:d3:14:bd:e5:5e:b3:bd: 5d:2e:13:11:b0:90:72:33:35:e7:bc:36:83:a9:bb: 5a:16:9a:9b:bf:12:be:c3:39:16:68:b3:4b:d2:72: b6:44:a2:a4:2b:df:57:c7:d4:ca:dd:30:c1:b2:01: 2f:ea:7c:e4:26:41:a9:7a:3e:70:60:8c:4f:7f:b0: 2b:78:44:80:5d:9b:e0:8b:b5:10:f9:c0:7a:1d:0e: 2a:90:7a:ee:b0:0a:7c:6b:29:ce:95:bc:57:c0:3e: 3f:13:64:f9:ec:0f:34:20:22:5c:5f:b6:b5:7e:3e: b4:ac:36:74:52:85:99:e5:10:c4:4d:68:e6:1d:39: 07:2e:3b:90:ab:18:e9:c6:ad:e1:f7:7a:47:b2:ed: 70:77:ff:c3:80:0a:ce:1f:02:b8:ad:15:20:13:42: e1:cc:62:fb:7a:7e:34:0c:a6:06:10:10:63:ef:7e: e3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0C:29:5E:52:95:B1:BF:CE:83:A0:97:D8:C3:F7:1F:F2:98:88:18 X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cd:21:e6:a4:96:4f:82:ff:0b:7a:63:f3:e1:e0:b1:d1:a1: 7f:13:40:b1:c5:57:23:99:f4:7e:48:1e:94:0a:a2:3e:5f:bc: 4f:45:44:b6:fa:4e:61:24:13:52:6a:68:71:51:61:56:f1:55: ce:29:b7:6d:21:62:c4:56:ab:f0:9b:9f:6f:cd:4f:42:37:ea: a5:e3:94:5e:15:01:95:db:1e:de:f5:15:94:88:67:70:d8:81: 2e:f8:bf:9c:5a:4e:97:3b:7b:be:e1:d6:47:00:2c:a9:94:14: 15:14:66:a4:e1:f5:18:4d:81:bb:63:98:53:1b:39:14:f9:fe: 63:f3:0f:24:5e:75:96:ce:10:6c:60:ff:48:c3:fc:6f:b2:44: 82:50:38:1b:98:a4:4c:2e:3a:d6:e3:7f:45:bf:d5:c6:0d:bd: be:bc:a2:44:75:51:a2:3d:b3:ca:0d:6b:f8:38:11:e0:dd:c0: 3c:81:23:6c:3f:84:40:ac:00:ac:dd:c6:33:38:60:a7:48:b8: 18:35:d9:10:e8:cb:5b:ee:b0:04:5c:5a:56:d5:61:c7:08:36: e9:3c:6c:59:f8:c0:21:0e:15:88:0a:62:3f:eb:20:82:2e:93: b6:bf:e6:b3:ca:5e:83:3c:5f:b9:f7:a0:21:ab:ff:be:2c:66: 27:28:bc:73 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MTQ3NzExMC8GA1UEBRMoNzI0MUU4RjAzOEI5RjI1MkZCNjFDQTQxQjZBNEZDMTY3 Qjc3NTUyNjAeFw0yNTA1MTMwNjU2NTlaFw0yNTA1MjAwNjU2NTlaMBgxFjAUBgNV BAMTDTY4MjJlZDNiLWE0MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvgqHO6P8d9/aF24idJXst6X0WZYDRDuowBL4vPNud3ABKw9ZJFMdXLiw04XQ/ YMMGzumuPEmaczUDBJo9RhB8+ssbV2Vy+Dra2DcY5JfvfZEX0xS95V6zvV0uExGw kHIzNee8NoOpu1oWmpu/Er7DORZos0vScrZEoqQr31fH1MrdMMGyAS/qfOQmQal6 PnBgjE9/sCt4RIBdm+CLtRD5wHodDiqQeu6wCnxrKc6VvFfAPj8TZPnsDzQgIlxf trV+PrSsNnRShZnlEMRNaOYdOQcuO5CrGOnGreH3ekey7XB3/8OACs4fAritFSAT QuHMYvt6fjQMpgYQEGPvfuPTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeAwpXlKV sb/Og6CX2MP3H/KYiBgwHwYDVR0jBBgwFoAUckHo8Di58lL7YcpBtqT8Fnt3VSYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxNDc3LzZCNzAzNUY4RjNG QzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZT WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY2tIbzhEaTU4bEw3WWNwQnRxVDhGbnQzVlNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx NDc3LzZCNzAzNUY4RjNGQzExRUY5OUQ1MzczMEM0RjlBRTAyL2NrSG84RGk1OGxM N1ljcEJ0cVQ4Rm50M1ZTWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADzNIeaklk+C/wt6Y/Ph4LHRoX8TQLHFVyOZ9H5IHpQKoj5fvE9FRLb6 TmEkE1JqaHFRYVbxVc4pt20hYsRWq/Cbn2/NT0I36qXjlF4VAZXbHt71FZSIZ3DY gS74v5xaTpc7e77h1kcALKmUFBUUZqTh9RhNgbtjmFMbORT5/mPzDyRedZbOEGxg /0jD/G+yRIJQOBuYpEwuOtbjf0W/1cYNvb68okR1UaI9s8oNa/g4EeDdwDyBI2w/ hECsAKzdxjM4YKdIuBg12RDoy1vusARcWlbVYccINuk8bFn4wCEOFYgKYj/rIIIu k7a/5rPKXoM8X7n3oCGr/74sZicovHM= -----END CERTIFICATE-----Generated at Wed May 14 03:22:30 2025 by rpki-client