$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json) Hash identifier: VdnzpFTtVTuPM7cfEF3AER1eVa9eXBR8C5WQhZuuGls= Subject key identifier: 28:65:92:48:70:CF:31:3F:CC:8F:07:67:67:39:D4:DB:E4:EE:B1:81 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft Manifest number: EF Signing time: Sun 11 May 2025 04:09:17 +0000 Manifest this update: Sun 11 May 2025 04:09:17 +0000 Manifest next update: Sun 18 May 2025 04:09:16 +0000 Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: oZh5ucY4z7Z34GIztfnraBr+wSo1M2uxYsinRTcU/+8=) 2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: 1zjPjAAMi/TzSsloil5toyL9PUAMXEmH20tRK4X3XV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: May 11 04:09:17 2025 GMT Not After : May 18 04:09:16 2025 GMT Subject: CN=682022ed-9430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d1:67:0d:a8:11:bd:1e:c3:9f:f6:74:84:77: b5:e6:4d:ab:07:3c:bc:ce:f5:b5:0f:ba:ed:fa:72: 99:66:cd:43:24:5f:e6:52:92:f3:7e:dc:08:bf:d0: 11:6c:3e:7b:32:be:57:91:ba:5f:04:86:46:5a:3d: 57:0a:7d:3b:8a:3c:38:92:b5:ac:88:26:58:5c:f3: 43:b6:92:ae:a4:72:09:20:8e:c3:b2:3c:3d:d5:d2: 15:ca:86:7e:81:75:19:15:32:d7:ff:60:47:80:c7: 5d:1d:bb:8c:74:57:c1:be:33:f9:3e:09:70:1e:c5: 86:cf:57:27:6b:49:90:09:07:fc:f0:0c:10:2e:53: bf:38:07:ed:27:4b:1e:67:4f:a3:0c:e4:77:40:19: 77:c4:2f:ef:68:ad:c8:51:11:7c:53:08:68:5e:60: 6a:6f:7b:9f:be:62:92:2e:58:4a:58:71:ac:c7:77: 21:99:4b:9b:f3:4c:4b:ec:60:30:64:d0:da:f4:87: 23:bd:0a:65:e2:30:2d:64:9c:97:1d:07:5e:8c:45: 61:ba:9d:4e:04:98:52:7b:b8:57:f7:e5:52:72:9e: 26:04:db:54:42:fc:89:ec:2f:8a:b6:5e:70:45:99: 91:36:48:2e:05:76:db:85:e3:b1:33:f7:4d:93:60: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:65:92:48:70:CF:31:3F:CC:8F:07:67:67:39:D4:DB:E4:EE:B1:81 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:67:bb:45:27:85:b1:de:d8:63:af:db:7b:ad:1b:2d:44:1f: 79:9e:1c:4b:b1:18:e9:eb:48:76:29:12:ed:9f:29:23:6f:ee: 02:ce:0c:81:d7:d6:f6:d9:0e:31:98:f4:00:4b:9f:2f:9b:11: 22:a1:ed:1c:70:3f:39:b7:e9:ec:1b:d6:28:5e:ad:b7:f5:dd: 99:92:84:f9:d4:41:66:36:76:d5:9b:d0:f5:35:5a:5f:57:40: d3:f0:7b:e6:1e:ef:fc:92:01:ec:f9:fe:b5:e2:b1:9d:0a:f5: 4c:36:a9:a4:33:67:6a:8b:60:67:47:1f:3e:5f:4c:fa:e6:5d: 4f:98:b5:6b:0e:35:f5:c7:0f:eb:ef:66:19:07:50:17:da:0a: 83:1a:ad:d8:e3:59:a5:da:a1:a2:b8:75:43:8a:40:bc:96:a1: dc:25:5d:db:ba:00:2f:2b:e7:be:19:3f:78:d1:9c:73:76:c7: 8c:36:f0:24:07:24:ab:b3:96:93:86:2e:9a:c5:6f:48:62:c2: 04:b6:fa:bf:ea:f0:5b:66:86:90:0a:90:7c:c7:2d:98:04:27: 8c:76:4a:3e:2e:21:46:31:a4:a4:d3:14:b6:5d:7e:65:31:c2: 90:b5:61:f2:17:7c:2b:14:09:91:e7:83:e5:d9:09:ff:41:c9: b6:99:4f:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjUwNTExMDQwOTE3WhcNMjUwNTE4MDQwOTE2WjAYMRYwFAYD VQQDEw02ODIwMjJlZC05NDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9FnDagRvR7Dn/Z0hHe15k2rBzy8zvW1D7rt+nKZZs1DJF/mUpLzftwIv9AR bD57Mr5XkbpfBIZGWj1XCn07ijw4krWsiCZYXPNDtpKupHIJII7Dsjw91dIVyoZ+ gXUZFTLX/2BHgMddHbuMdFfBvjP5PglwHsWGz1cna0mQCQf88AwQLlO/OAftJ0se Z0+jDOR3QBl3xC/vaK3IURF8UwhoXmBqb3ufvmKSLlhKWHGsx3chmUub80xL7GAw ZNDa9IcjvQpl4jAtZJyXHQdejEVhup1OBJhSe7hX9+VScp4mBNtUQvyJ7C+Ktl5w RZmRNkguBXbbheOxM/dNk2DkmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFChlkkhw zzE/zI8HZ2c51Nvk7rGBMB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGZ7tFJ4Wx3thjr9t7rRstRB95nhxLsRjp60h2KRLtnykjb+4CzgyB 19b22Q4xmPQAS58vmxEioe0ccD85t+nsG9YoXq239d2ZkoT51EFmNnbVm9D1NVpf V0DT8HvmHu/8kgHs+f614rGdCvVMNqmkM2dqi2BnRx8+X0z65l1PmLVrDjX1xw/r 72YZB1AX2gqDGq3Y41ml2qGiuHVDikC8lqHcJV3bugAvK+e+GT940ZxzdseMNvAk BySrs5aThi6axW9IYsIEtvq/6vBbZoaQCpB8xy2YBCeMdko+LiFGMaSk0xS2XX5l McKQtWHyF3wrFAmR54Pl2Qn/Qcm2mU8Y -----END CERTIFICATE-----Generated at Mon May 12 12:53:27 2025 by rpki-client