$ rpki-client -vvf rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft File: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft (raw, json) Hash identifier: KFnTyDD20ixxE2tDJh4LT8Uh1gEJJLDxGQB3xNY75PU= Subject key identifier: 78:1F:C1:1B:E4:46:88:CA:06:89:10:67:B3:CB:D8:58:83:E0:55:B2 Authority key identifier: 70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 Certificate issuer: /CN=A91764E1/serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Certificate serial: EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft Manifest number: ED Signing time: Thu 15 May 2025 04:40:45 +0000 Manifest this update: Thu 15 May 2025 04:40:45 +0000 Manifest next update: Thu 22 May 2025 04:40:45 +0000 Files and hashes: 1: cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl (hash: PNWGrPB9eEwiKjYclml0voLv7qkPg0q/mZwteMZJkM0=) 2: 0C708FB4C67E11EE87B34958C4F9AE02.roa (hash: Emtdf6B32dUyriQRU+z92VLtRvSD7HNe+9gqK+EmXtg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91764E1, serialNumber=70E88557B0C082C9B06ECF59B8F28A7703A63801 Validity Not Before: May 15 04:40:45 2025 GMT Not After : May 22 04:40:45 2025 GMT Subject: CN=6825704d-87b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c2:a9:ee:14:c0:1e:da:45:d2:ff:57:c3:e6: 94:86:03:83:47:dd:2a:17:23:19:96:72:e1:9a:aa: 1d:92:7a:99:1e:e7:f1:9e:34:a3:35:b2:50:97:e4: 8c:b0:98:5c:59:b9:e1:b4:d8:e4:e1:32:b3:09:5a: b5:69:8e:9e:17:b6:2b:90:d6:c1:89:8c:02:d7:39: 9a:0e:7d:80:22:cc:35:06:3a:4a:1d:f3:13:59:85: 0e:71:84:ce:8a:e2:ae:d2:ba:ca:37:de:d1:36:62: 09:e5:c0:4b:6a:c3:46:f4:1b:ca:bd:23:03:59:02: 67:13:ca:fa:27:9d:d3:c1:e7:95:48:14:89:4a:a9: 10:55:3e:a6:f6:2e:62:9e:30:4b:59:de:e8:82:66: cf:b8:f6:dd:a7:87:d2:63:51:52:84:fe:82:3f:f5: ac:15:06:d5:51:21:90:3f:bc:e5:2a:96:20:40:b3: ec:f6:e3:96:23:b7:c0:f5:d4:b6:cd:cd:6f:c6:55: f9:ca:fd:64:a7:22:f4:f3:03:30:0a:10:26:fc:3d: 42:d9:44:1b:d4:5f:29:81:3d:4d:3d:c9:f3:fe:7a: a6:79:ca:37:16:0f:6a:11:81:b2:dd:6a:55:05:d1: c5:2a:6e:9c:09:1f:8c:f4:90:ee:c0:af:24:01:83: 5f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1F:C1:1B:E4:46:88:CA:06:89:10:67:B3:CB:D8:58:83:E0:55:B2 X509v3 Authority Key Identifier: keyid:70:E8:85:57:B0:C0:82:C9:B0:6E:CF:59:B8:F2:8A:77:03:A6:38:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91764E1/6231A02EC67D11EE87027B3AC4F9AE02/cOiFV7DAgsmwbs9ZuPKKdwOmOAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:89:13:57:e2:2f:8d:5a:20:57:af:7f:9b:d4:23:19:54:fc: 1c:cc:1c:6b:c4:7a:4b:3b:c7:10:db:f9:e9:59:21:66:1a:46: e6:61:36:7a:98:36:85:68:4d:85:2f:b2:03:57:78:ee:f2:3e: c3:4f:5e:d9:00:b0:e6:d8:1c:bc:24:94:d1:a9:7c:0c:ac:41: ca:40:d1:87:c2:86:8d:fd:93:df:45:d9:39:b9:a9:9c:d6:03: 33:d6:ce:5d:70:d4:c1:09:1a:31:f8:24:d4:f1:00:fd:df:a2: fb:7a:da:c8:35:e9:d6:a2:8b:7c:f7:ac:25:a9:2a:96:bd:3c: a5:9f:9f:e0:7d:dd:bc:58:ca:75:32:77:42:aa:79:02:7d:a5: 7a:08:39:6a:0a:45:c8:fd:c1:45:94:62:da:dd:e6:e3:91:3b: 27:ae:3f:b7:f5:57:19:5f:61:d1:e5:aa:df:e9:61:c3:59:c1: b9:26:bb:96:ed:cd:67:0b:a5:6e:e6:fd:a0:9d:ca:b7:21:91: 5e:4e:f6:19:d5:fc:c7:93:41:ea:ee:94:e9:e2:48:ca:55:12: 57:d4:44:0d:19:22:c1:41:1c:67:eb:8c:9b:51:22:19:b1:c4: 2a:fc:07:11:6a:44:da:8d:d2:ab:f2:76:1a:cd:94:d8:b6:a8: 86:99:14:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY0RTExMTAvBgNVBAUTKDcwRTg4NTU3QjBDMDgyQzlCMDZFQ0Y1OUI4RjI4QTc3 MDNBNjM4MDEwHhcNMjUwNTE1MDQ0MDQ1WhcNMjUwNTIyMDQ0MDQ1WjAYMRYwFAYD VQQDEw02ODI1NzA0ZC04N2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8Kp7hTAHtpF0v9Xw+aUhgODR90qFyMZlnLhmqodknqZHufxnjSjNbJQl+SM sJhcWbnhtNjk4TKzCVq1aY6eF7YrkNbBiYwC1zmaDn2AIsw1BjpKHfMTWYUOcYTO iuKu0rrKN97RNmIJ5cBLasNG9BvKvSMDWQJnE8r6J53TweeVSBSJSqkQVT6m9i5i njBLWd7ogmbPuPbdp4fSY1FShP6CP/WsFQbVUSGQP7zlKpYgQLPs9uOWI7fA9dS2 zc1vxlX5yv1kpyL08wMwChAm/D1C2UQb1F8pgT1NPcnz/nqmeco3Fg9qEYGy3WpV BdHFKm6cCR+M9JDuwK8kAYNfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgfwRvk RojKBokQZ7PL2FiD4FWyMB8GA1UdIwQYMBaAFHDohVewwILJsG7PWbjyincDpjgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjRFMS82MjMxQTAyRUM2 N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdzbXdiczladVBLS2R3T21P QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NPaUZWN0RBZ3Ntd2JzOVp1UEtLZHdPbU9BRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjRFMS82MjMxQTAyRUM2N0QxMUVFODcwMjdCM0FDNEY5QUUwMi9jT2lGVjdEQWdz bXdiczladVBLS2R3T21PQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBViRNX4i+NWiBXr3+b1CMZVPwczBxrxHpLO8cQ2/npWSFmGkbmYTZ6 mDaFaE2FL7IDV3ju8j7DT17ZALDm2By8JJTRqXwMrEHKQNGHwoaN/ZPfRdk5uamc 1gMz1s5dcNTBCRox+CTU8QD936L7etrINenWoot896wlqSqWvTyln5/gfd28WMp1 MndCqnkCfaV6CDlqCkXI/cFFlGLa3ebjkTsnrj+39VcZX2HR5arf6WHDWcG5JruW 7c1nC6Vu5v2gncq3IZFeTvYZ1fzHk0Hq7pTp4kjKVRJX1EQNGSLBQRxn64ybUSIZ scQq/AcRakTajdKr8nYazZTYtqiGmRRW -----END CERTIFICATE-----Generated at Fri May 16 00:52:38 2025 by rpki-client