$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: 10VeYUSn8lcWlMx4hdpllwYdjGJsdVtlJILvGGeMi+8= Subject key identifier: 0E:BE:8E:81:98:7F:83:B3:B3:05:63:E3:66:55:06:5D:69:FD:15:07 Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0111 Signing time: Sat 17 May 2025 04:27:46 +0000 Manifest this update: Sat 17 May 2025 04:27:45 +0000 Manifest next update: Sat 24 May 2025 04:27:45 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: NU6qpskQDWXI8hGqtgNHpWIk5X2wu9LBnCzXfLwUgxU=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 04:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: May 17 04:27:45 2025 GMT Not After : May 24 04:27:45 2025 GMT Subject: CN=68281042-45f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:b3:e9:21:f9:c0:1d:8a:0b:bc:6c:40:0a: 4d:a6:71:cf:ad:c3:85:6a:b7:4e:4f:10:f8:e5:66: d4:1c:e0:31:40:1a:dd:ed:c8:7f:3f:ec:c5:6b:96: 77:e9:b3:7a:95:49:14:75:d9:94:5e:30:6b:e0:9f: db:e1:06:0d:c7:a6:ca:be:6b:9a:44:22:d0:8e:1f: 95:a4:37:d1:b3:24:43:95:66:b8:60:b3:40:c9:37: 86:47:56:08:e0:14:42:bf:c6:b7:fc:0a:08:95:eb: 43:d3:e3:06:68:b2:7d:6c:ac:fb:62:aa:db:75:e5: ca:6b:78:a0:6d:97:7a:6a:9f:91:93:fc:a2:66:8d: 55:6e:c4:fe:a3:f0:1e:67:f8:ba:ba:3c:08:e0:3c: d3:9b:58:97:7a:72:4f:b0:68:e3:e6:4b:95:01:41: de:b2:54:b0:e0:ff:a9:f5:a3:a6:23:fa:ff:17:94: 60:50:71:2c:fd:c5:65:fc:91:c9:d7:76:b6:e1:93: 13:95:5a:2f:dd:19:2c:81:eb:dd:fe:71:61:f1:7c: 8e:d1:15:4d:eb:80:57:90:f0:b4:c2:18:b5:94:71: b5:4f:e2:6f:9c:a4:d9:09:5d:9f:a7:03:64:38:19: 76:34:47:ce:81:d2:5b:7a:84:03:6d:40:c5:c0:ae: 43:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BE:8E:81:98:7F:83:B3:B3:05:63:E3:66:55:06:5D:69:FD:15:07 X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:38:f5:59:f6:5f:d3:6e:11:69:5e:1f:fd:97:89:ab:66:bd: 72:f6:89:b5:c6:5c:be:6c:6d:e1:e3:1f:60:be:a9:1f:22:c1: 15:36:62:46:18:5e:a6:29:ec:a3:e9:c2:f4:ee:45:3a:e3:00: 6a:a5:1a:82:c6:4f:cc:50:e7:ee:b5:ce:e8:93:ab:14:8c:f5: 3b:31:e7:fd:cf:ae:f0:64:3f:86:18:67:87:b8:fb:08:c6:0e: 21:c0:ea:b7:c1:5e:0f:ff:72:b1:64:ac:09:e1:92:2f:a9:e4: a8:ae:4c:15:d1:79:9c:23:7f:f4:64:69:1b:99:4e:87:a2:ef: f5:29:bf:b9:43:95:a0:36:ce:53:3e:12:e1:7b:8c:c2:42:d7: 08:45:52:2e:5a:d3:2a:25:d3:68:13:ca:81:47:33:e2:fc:20: 6d:75:bc:e7:19:70:e2:49:42:d2:c8:89:02:8b:65:f1:8b:5f: bb:c1:eb:9d:ad:7e:6a:0c:4c:1c:3c:f3:33:9c:c5:91:7c:ea: d8:5a:fe:3a:c0:88:d7:ea:c7:16:02:e5:8b:40:33:c1:61:74: 23:91:2d:fc:7d:10:e8:92:d9:be:68:a7:39:28:dc:55:3f:8a: 16:20:21:41:ca:bc:3f:76:1f:65:ac:04:e4:99:d7:b1:50:6d: d9:dd:07:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwNTE3MDQyNzQ1WhcNMjUwNTI0MDQyNzQ1WjAYMRYwFAYD VQQDEw02ODI4MTA0Mi00NWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHWz6SH5wB2KC7xsQApNpnHPrcOFardOTxD45WbUHOAxQBrd7ch/P+zFa5Z3 6bN6lUkUddmUXjBr4J/b4QYNx6bKvmuaRCLQjh+VpDfRsyRDlWa4YLNAyTeGR1YI 4BRCv8a3/AoIletD0+MGaLJ9bKz7YqrbdeXKa3igbZd6ap+Rk/yiZo1VbsT+o/Ae Z/i6ujwI4DzTm1iXenJPsGjj5kuVAUHeslSw4P+p9aOmI/r/F5RgUHEs/cVl/JHJ 13a24ZMTlVov3Rksgevd/nFh8XyO0RVN64BXkPC0whi1lHG1T+JvnKTZCV2fpwNk OBl2NEfOgdJbeoQDbUDFwK5DaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6+joGY f4OzswVj42ZVBl1p/RUHMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkOPVZ9l/TbhFpXh/9l4mrZr1y9om1xly+bG3h4x9gvqkfIsEVNmJG GF6mKeyj6cL07kU64wBqpRqCxk/MUOfutc7ok6sUjPU7Mef9z67wZD+GGGeHuPsI xg4hwOq3wV4P/3KxZKwJ4ZIvqeSorkwV0XmcI3/0ZGkbmU6Hou/1Kb+5Q5WgNs5T PhLhe4zCQtcIRVIuWtMqJdNoE8qBRzPi/CBtdbznGXDiSULSyIkCi2Xxi1+7weud rX5qDEwcPPMznMWRfOrYWv46wIjX6scWAuWLQDPBYXQjkS38fRDoktm+aKc5KNxV P4oWICFByrw/dh9lrATkmdexUG3Z3Qc2 -----END CERTIFICATE-----Generated at Sat May 17 11:20:43 2025 by rpki-client