$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: LZOx1/LbLeHic66g7ikoAF1qUMnHY49tp8rcClB4V9k= Subject key identifier: 4B:5F:17:33:5E:F7:E4:CD:1E:5D:E4:84:9D:B8:50:92:05:C4:3B:4C Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: 0107 Signing time: Sun 11 May 2025 03:58:34 +0000 Manifest this update: Sun 11 May 2025 03:58:33 +0000 Manifest next update: Sun 18 May 2025 03:58:33 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: 50tU11ZYhgPInNrSdFvBgWCZPRwG80oBej27CLsTML4=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: eBM1U0C9BAgz3z+X5mRsroakC5anBwEWYdlHygNX0ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: May 11 03:58:33 2025 GMT Not After : May 18 03:58:33 2025 GMT Subject: CN=6820206a-ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:22:65:d9:51:95:67:d1:cb:e0:e1:d5:68: 14:72:7d:e8:bb:00:af:f9:ac:01:dd:3a:2a:15:4c: 1f:20:50:4a:33:dc:db:08:21:c6:9f:a7:0c:eb:df: d9:a9:ab:f0:7a:0a:d1:f0:a4:5e:32:de:f6:d7:3c: 25:1c:f3:99:e2:f4:5d:d6:64:5a:d4:ec:31:dc:63: ee:04:2b:26:68:85:b2:a9:b0:7a:32:d9:37:82:a6: 31:67:8d:1c:72:12:98:de:d5:97:b6:bf:d0:59:20: 9c:7b:77:0a:4a:d2:b1:ab:c3:d5:54:0a:99:43:31: a1:29:c0:d3:eb:c1:3b:33:a6:39:b7:56:c8:63:b5: d3:8c:ab:8d:2d:e7:ae:10:cc:65:77:a4:6a:75:8f: 68:32:38:97:f0:c8:70:d7:22:64:17:a1:cc:06:3d: 81:22:30:97:fc:86:12:a2:b8:28:ea:59:92:bb:d3: 9e:bb:85:64:70:ec:40:0e:b1:d0:16:3f:c8:12:85: 67:23:e2:69:f0:bd:94:db:09:16:c0:5c:2d:03:42: 06:7d:3b:8b:b1:3b:1a:14:37:cb:4f:d4:54:89:71: 69:e1:1c:ed:e0:e8:5d:80:0f:d6:de:ef:46:98:71: 64:d3:44:bc:42:4e:d8:50:ee:8e:60:e2:f9:f2:55: 1f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5F:17:33:5E:F7:E4:CD:1E:5D:E4:84:9D:B8:50:92:05:C4:3B:4C X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:38:68:86:63:70:6c:40:51:b2:e2:f4:49:8e:c4:46:6f:d6: b1:06:cd:9b:47:02:c8:92:c2:1b:23:c2:91:a4:c2:b4:07:27: 95:34:72:88:e1:8e:b7:c3:7f:93:63:5d:5f:91:30:bd:8c:76: 83:ee:b8:a3:6c:c0:f2:47:10:23:fe:20:58:76:18:0e:24:fd: be:9e:01:27:0a:77:02:0a:87:cc:c8:b1:7d:18:72:79:bf:42: 24:41:da:16:76:ba:cc:09:6d:b3:90:c0:b5:80:c3:c3:64:c0: cc:69:8b:05:17:3c:98:49:0c:32:d5:00:02:8e:8b:6c:15:63: 8d:a3:2f:90:70:76:c1:68:5b:63:a5:44:53:fa:fe:13:5c:52: 91:bb:76:d7:c5:0b:b2:5d:86:ef:c6:18:21:7e:86:2b:67:74: 70:cc:9b:1e:44:4b:8c:5a:56:41:74:29:73:9e:63:3d:e1:94: ff:74:b5:3e:ad:74:98:90:18:a5:36:57:0e:3f:20:d8:32:49: c0:de:4b:14:fe:a4:ce:b7:18:ea:f2:7c:00:2e:2a:31:67:57: 1d:2d:d9:b4:9e:eb:06:75:58:ad:3c:79:33:ec:4f:f2:1d:58: d8:64:3c:1f:2b:e1:6b:2d:67:8a:0f:3a:dc:a5:9d:8e:0c:c0: 82:a3:1e:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjUwNTExMDM1ODMzWhcNMjUwNTE4MDM1ODMzWjAYMRYwFAYD VQQDEw02ODIwMjA2YS1lYzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovAiZdlRlWfRy+Dh1WgUcn3ouwCv+awB3ToqFUwfIFBKM9zbCCHGn6cM69/Z qavwegrR8KReMt721zwlHPOZ4vRd1mRa1Owx3GPuBCsmaIWyqbB6Mtk3gqYxZ40c chKY3tWXtr/QWSCce3cKStKxq8PVVAqZQzGhKcDT68E7M6Y5t1bIY7XTjKuNLeeu EMxld6RqdY9oMjiX8Mhw1yJkF6HMBj2BIjCX/IYSorgo6lmSu9Oeu4VkcOxADrHQ Fj/IEoVnI+Jp8L2U2wkWwFwtA0IGfTuLsTsaFDfLT9RUiXFp4Rzt4OhdgA/W3u9G mHFk00S8Qk7YUO6OYOL58lUfYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEtfFzNe 9+TNHl3khJ24UJIFxDtMMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdOGiGY3BsQFGy4vRJjsRGb9axBs2bRwLIksIbI8KRpMK0ByeVNHKI 4Y63w3+TY11fkTC9jHaD7rijbMDyRxAj/iBYdhgOJP2+ngEnCncCCofMyLF9GHJ5 v0IkQdoWdrrMCW2zkMC1gMPDZMDMaYsFFzyYSQwy1QACjotsFWONoy+QcHbBaFtj pURT+v4TXFKRu3bXxQuyXYbvxhghfoYrZ3RwzJseREuMWlZBdClznmM94ZT/dLU+ rXSYkBilNlcOPyDYMknA3ksU/qTOtxjq8nwALioxZ1cdLdm0nusGdVitPHkz7E/y HVjYZDwfK+FrLWeKDzrcpZ2ODMCCox6r -----END CERTIFICATE-----Generated at Mon May 12 10:25:44 2025 by rpki-client