$ rpki-client -vvf rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft File: C2HEdIlppE_IPIiCoCV50NWSO2E.mft (raw, json) Hash identifier: lq50kqEd16w1dLlGtxNYUMjTTno0ffIgV/J+ogJq4uY= Subject key identifier: 9A:88:FD:DB:8C:4C:9C:D6:3A:AC:8A:1A:47:36:ED:45:10:2E:75:1B Authority key identifier: 0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 Certificate issuer: /CN=A917B092/serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft Manifest number: 018F Signing time: Sun 11 May 2025 02:38:26 +0000 Manifest this update: Sun 11 May 2025 02:38:25 +0000 Manifest next update: Sun 18 May 2025 02:38:25 +0000 Files and hashes: 1: C2HEdIlppE_IPIiCoCV50NWSO2E.crl (hash: 7c5uztEMI0us33U6Zq63/NSAX41zOYaecUQ3KSv6j3k=) 2: 9816AE202ED111EF9B668069C4F9AE02.roa (hash: GMwqHbyGhuMSUm48op4I5mi1ydXZr2Sf2bThmTPQeU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:38:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B092, serialNumber=0B61C4748969A44FC83C8882A02579D0D5923B61 Validity Not Before: May 11 02:38:25 2025 GMT Not After : May 18 02:38:25 2025 GMT Subject: CN=68200da1-774f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:39:d4:d2:2a:5e:06:15:c1:6c:75:7d:b9:eb: 39:c9:60:8f:87:00:1d:f2:8f:06:3d:af:40:0c:70: 22:ea:c4:17:ea:74:89:89:90:d1:b8:d0:51:2d:46: e8:8d:1e:8c:ac:fc:c5:cb:7c:35:b1:2e:53:e5:86: c3:42:36:01:2c:cc:10:92:75:ba:4b:bb:f5:29:b4: 0e:b7:91:73:d8:72:39:35:13:95:d3:62:2c:0a:a1: 38:de:f9:32:cf:ce:a6:36:6a:1e:99:c8:da:fe:3c: 0d:cd:d7:52:ab:04:8d:b6:b5:a8:c1:73:fa:dc:d6: b2:9d:51:58:42:a0:a9:c4:d3:ff:07:b5:c3:fc:bc: 4b:55:89:44:e9:b8:39:ab:64:02:9a:dc:3d:0f:e6: 1d:90:df:9a:63:b0:fd:14:6a:27:ed:70:d1:4b:c9: f6:98:8d:b5:eb:99:df:99:7f:4d:0e:62:a8:62:14: 51:2c:85:67:32:39:87:2b:68:42:62:ed:1b:82:9e: ce:ab:ed:30:17:87:1a:9b:fe:a6:f0:d4:f4:2e:be: 63:03:80:f8:46:5c:52:8c:20:ed:a5:3a:08:14:97: ab:a4:84:c9:33:cc:54:ec:9a:5a:9d:6d:e1:78:08: 98:cb:5a:73:35:09:d4:3d:1a:c6:c2:e8:8a:95:ab: 1e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:FD:DB:8C:4C:9C:D6:3A:AC:8A:1A:47:36:ED:45:10:2E:75:1B X509v3 Authority Key Identifier: keyid:0B:61:C4:74:89:69:A4:4F:C8:3C:88:82:A0:25:79:D0:D5:92:3B:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2HEdIlppE_IPIiCoCV50NWSO2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B092/28230996EE2311EDBABE2A5DC4F9AE02/C2HEdIlppE_IPIiCoCV50NWSO2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:53:d8:09:d7:52:7e:5f:a0:98:58:3e:15:e8:0d:c6:40:66: f4:8d:c9:ab:c0:85:86:21:49:6f:de:f8:0f:c5:be:4a:b5:9a: 78:a3:51:9c:c3:88:0f:50:6b:31:27:1b:5c:1f:af:43:23:cd: 70:c7:8d:d7:ef:10:db:1c:11:c1:15:5a:62:60:f4:15:83:87: 42:d0:25:e8:73:a2:af:04:a3:49:b7:cf:c6:88:7e:c3:10:b9: 65:84:bd:08:61:0a:67:2a:09:5b:6d:d4:4f:9a:ea:c8:cf:93: 99:75:05:58:82:71:93:45:78:3c:dd:ac:60:49:1d:6a:f1:63: f0:f0:d0:30:ff:02:04:3a:9f:ab:4f:24:3e:7b:96:6d:60:a3: 4f:77:51:39:53:30:9c:be:43:cf:cf:ff:a4:c1:92:d0:89:12: 17:ea:c9:2d:7a:56:84:eb:14:b2:73:55:18:af:55:5e:f2:46: ba:2d:29:5a:ad:14:70:b9:27:44:54:36:87:86:2e:47:d3:2c: 69:dc:5b:82:b4:75:5f:68:bf:aa:a0:59:51:52:ef:df:bd:77: 84:f9:48:04:c8:11:96:a0:1d:91:31:2f:b9:0d:65:c8:cd:cf: b9:a9:28:f4:ce:b8:12:ae:e4:fe:04:25:95:0e:26:e5:74:e9: 79:67:c0:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IwOTIxMTAvBgNVBAUTKDBCNjFDNDc0ODk2OUE0NEZDODNDODg4MkEwMjU3OUQw RDU5MjNCNjEwHhcNMjUwNTExMDIzODI1WhcNMjUwNTE4MDIzODI1WjAYMRYwFAYD VQQDEw02ODIwMGRhMS03NzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDnU0ipeBhXBbHV9ues5yWCPhwAd8o8GPa9ADHAi6sQX6nSJiZDRuNBRLUbo jR6MrPzFy3w1sS5T5YbDQjYBLMwQknW6S7v1KbQOt5Fz2HI5NROV02IsCqE43vky z86mNmoemcja/jwNzddSqwSNtrWowXP63NaynVFYQqCpxNP/B7XD/LxLVYlE6bg5 q2QCmtw9D+YdkN+aY7D9FGon7XDRS8n2mI2165nfmX9NDmKoYhRRLIVnMjmHK2hC Yu0bgp7Oq+0wF4cam/6m8NT0Lr5jA4D4RlxSjCDtpToIFJerpITJM8xU7JpanW3h eAiYy1pzNQnUPRrGwuiKlase3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqI/duM TJzWOqyKGkc27UUQLnUbMB8GA1UdIwQYMBaAFAthxHSJaaRPyDyIgqAledDVkjth MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjA5Mi8yODIzMDk5NkVF MjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBFX0lQSWlDb0NWNTBOV1NP MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MySEVkSWxwcEVfSVBJaUNvQ1Y1ME5XU08yRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjA5Mi8yODIzMDk5NkVFMjMxMUVEQkFCRTJBNURDNEY5QUUwMi9DMkhFZElscHBF X0lQSWlDb0NWNTBOV1NPMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkU9gJ11J+X6CYWD4V6A3GQGb0jcmrwIWGIUlv3vgPxb5KtZp4o1Gc w4gPUGsxJxtcH69DI81wx43X7xDbHBHBFVpiYPQVg4dC0CXoc6KvBKNJt8/GiH7D ELllhL0IYQpnKglbbdRPmurIz5OZdQVYgnGTRXg83axgSR1q8WPw8NAw/wIEOp+r TyQ+e5ZtYKNPd1E5UzCcvkPPz/+kwZLQiRIX6sktelaE6xSyc1UYr1Ve8ka6LSla rRRwuSdEVDaHhi5H0yxp3FuCtHVfaL+qoFlRUu/fvXeE+UgEyBGWoB2RMS+5DWXI zc+5qSj0zrgSruT+BCWVDibldOl5Z8DO -----END CERTIFICATE-----Generated at Mon May 12 19:06:12 2025 by rpki-client