$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: I/XVugpu9QVm1UX3JH0wu8Dnmc5Owu7MAy2OzmUnVUA= Subject key identifier: B5:6D:22:EB:C1:36:48:B3:BE:BE:00:58:B6:41:68:B0:CD:89:23:E1 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: B8 Signing time: Tue 13 May 2025 05:06:44 +0000 Manifest this update: Tue 13 May 2025 05:06:44 +0000 Manifest next update: Tue 20 May 2025 05:06:44 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: bQq8hPfbFj5Q93XWrIqkL6jHWGitBkZgBGg28QcK0QE=) 2: FDC5FC0C232411EF868B873EC4F9AE02.roa (hash: ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: May 13 05:06:44 2025 GMT Not After : May 20 05:06:44 2025 GMT Subject: CN=6822d364-9b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:d4:4e:98:0d:6f:4c:c9:a1:6d:75:75:23: 6b:36:b7:26:46:9d:00:53:aa:c5:f6:79:85:c9:5e: f1:b4:2e:7f:f3:80:f7:87:d0:38:0f:79:cf:37:57: c1:74:0a:b0:f2:bb:1b:e9:2c:39:d8:91:1d:f9:cd: 47:64:93:a1:43:32:59:79:b0:7c:5e:41:4e:35:1d: 67:d2:ce:5e:d0:15:4b:a6:c7:41:46:15:6f:be:cd: a0:a5:0c:b9:ad:34:fc:6d:6f:9e:e6:2f:1d:d3:ca: 7a:f5:82:99:7b:97:d2:c4:8a:ba:33:d7:20:6d:f1: 2e:d2:34:eb:df:bf:c5:b0:5d:84:99:1b:2f:07:67: 78:7b:ab:17:c8:41:0a:cc:08:3e:ea:4b:cf:db:23: 83:f3:e7:05:e0:de:9d:b2:d3:00:9c:70:fa:f1:11: e4:37:46:32:e7:2e:fa:d2:3e:10:cf:bc:8e:74:3b: 49:f7:ea:bb:ae:15:fc:13:76:bf:34:bf:4b:54:68: 9c:71:c3:49:cd:7e:b7:1c:35:92:c6:93:30:5e:98: 4f:43:3e:e4:ef:6a:bd:ce:31:2e:66:67:59:eb:b1: 00:9c:17:7e:a4:9b:78:eb:b9:a3:db:3a:01:2e:1a: 40:7e:90:8b:9f:c3:a4:ac:ba:5e:42:00:1b:d6:0e: 3c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6D:22:EB:C1:36:48:B3:BE:BE:00:58:B6:41:68:B0:CD:89:23:E1 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:90:98:5a:38:48:25:15:1e:78:2d:b4:9b:a4:2d:a3:c5:0b: aa:c3:0b:21:f8:b0:9a:e5:12:e4:21:e0:57:a5:d8:02:50:c4: 0a:0b:d5:5e:0e:c5:eb:68:37:07:8a:43:b1:d7:76:4f:ae:02: 41:47:c0:e9:f0:74:d2:97:6e:5a:dd:f5:f4:a6:ef:4d:e6:dc: 57:b6:73:3e:08:bf:32:a4:81:d9:c5:4c:04:71:39:55:e7:04: 5d:ed:d1:fe:1a:32:c4:8b:09:fb:50:de:0c:6f:46:ff:8c:d6: 16:89:6b:b0:2c:e6:2b:4b:8d:76:a8:d4:ce:5c:5a:c3:b3:76: 68:e8:ee:3c:5f:ef:b0:84:41:6c:70:73:f1:ab:d1:d5:1a:31: 6c:5c:d3:04:da:77:e5:7a:11:6f:aa:90:30:14:3d:f2:bd:3f: 77:b2:15:11:06:ab:ed:54:56:f7:1b:d2:64:7c:c9:c2:a6:d7: f3:70:ee:74:ab:61:3e:fc:70:f9:ec:08:2d:b3:e6:26:a5:1e: 29:6c:13:f3:33:e9:54:8d:90:02:fe:e8:96:4a:d7:2d:c2:76: 2d:ec:88:a9:50:a0:cf:a1:2b:4d:19:a3:31:ff:5d:99:0d:91: 9b:c4:b7:95:87:fe:f2:f3:81:b2:62:4d:83:1c:47:7f:05:c5: e1:cd:59:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwNTEzMDUwNjQ0WhcNMjUwNTIwMDUwNjQ0WjAYMRYwFAYD VQQDEw02ODIyZDM2NC05YjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHDUTpgNb0zJoW11dSNrNrcmRp0AU6rF9nmFyV7xtC5/84D3h9A4D3nPN1fB dAqw8rsb6Sw52JEd+c1HZJOhQzJZebB8XkFONR1n0s5e0BVLpsdBRhVvvs2gpQy5 rTT8bW+e5i8d08p69YKZe5fSxIq6M9cgbfEu0jTr37/FsF2EmRsvB2d4e6sXyEEK zAg+6kvP2yOD8+cF4N6dstMAnHD68RHkN0Yy5y760j4Qz7yOdDtJ9+q7rhX8E3a/ NL9LVGicccNJzX63HDWSxpMwXphPQz7k72q9zjEuZmdZ67EAnBd+pJt467mj2zoB LhpAfpCLn8OkrLpeQgAb1g48twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVtIuvB Nkizvr4AWLZBaLDNiSPhMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFkJhaOEglFR54LbSbpC2jxQuqwwsh+LCa5RLkIeBXpdgCUMQKC9Ve DsXraDcHikOx13ZPrgJBR8Dp8HTSl25a3fX0pu9N5txXtnM+CL8ypIHZxUwEcTlV 5wRd7dH+GjLEiwn7UN4Mb0b/jNYWiWuwLOYrS412qNTOXFrDs3Zo6O48X++whEFs cHPxq9HVGjFsXNME2nflehFvqpAwFD3yvT93shURBqvtVFb3G9JkfMnCptfzcO50 q2E+/HD57Agts+YmpR4pbBPzM+lUjZAC/uiWStctwnYt7IipUKDPoStNGaMx/12Z DZGbxLeVh/7y84GyYk2DHEd/BcXhzVle -----END CERTIFICATE-----Generated at Wed May 14 13:02:28 2025 by rpki-client