$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: HCOS5mfRR1dUyz72qFRIotPgEiWsadXBt+m0qkcAWWY= Subject key identifier: B3:08:45:43:54:10:9C:2B:B6:31:4B:92:9C:49:F2:AB:12:5E:BF:85 Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: 0122 Signing time: Tue 01 Jul 2025 05:42:26 +0000 Manifest this update: Tue 01 Jul 2025 05:42:25 +0000 Manifest next update: Tue 08 Jul 2025 05:42:25 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: C9dcRlMOo7UlmUXOC/1pcpS1gBHgEZZzAY4C4w+P0HM=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: 9cLUWM+lWWpZt/EGTjBbXr6teTbVNtgXpN+WMvBwXno=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: Jul 1 05:42:25 2025 GMT Not After : Jul 8 05:42:25 2025 GMT Subject: CN=68637542-0d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3a:b2:db:00:85:8e:b5:2c:5c:dc:28:ac:87: 78:6f:96:9c:47:24:0a:5c:61:f3:43:ff:a1:ed:ed: 2f:5f:81:bd:b9:cd:f2:a9:1d:be:8f:1e:c8:87:f0: 60:73:e4:d9:a1:e3:ce:16:2b:65:57:d4:5e:b8:65: c6:d6:c2:58:95:d1:3d:b1:ff:cd:1a:83:8e:00:b3: 17:fd:0a:17:e7:70:91:a5:b8:43:19:f1:5d:63:eb: d0:0f:cc:02:59:1b:db:1b:3f:60:45:da:d2:db:0d: 3d:90:c3:65:d1:ce:b2:d2:a6:fa:2c:12:6f:df:64: 6b:52:a0:bb:70:19:77:9a:67:a6:93:36:10:88:08: 50:bf:32:56:e8:f8:4b:8f:94:93:02:74:e9:40:4a: d4:b7:05:0a:97:87:44:ce:19:0b:31:61:44:df:3e: 16:9c:8a:57:29:d0:25:ce:ec:0b:51:06:c0:f5:b8: 65:3d:b3:5a:e8:0f:11:cf:0c:12:5e:61:f2:e3:a3: b2:30:19:b7:d7:86:1a:9c:aa:2a:49:05:cb:2e:84: 9f:e0:3d:ed:75:83:1e:5c:58:0f:7e:a0:c5:0a:56: 73:a4:01:eb:32:a7:83:84:7b:72:0b:d7:99:70:99: 41:32:0d:0e:08:25:1c:92:e2:d0:ec:21:49:2b:ba: f7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:08:45:43:54:10:9C:2B:B6:31:4B:92:9C:49:F2:AB:12:5E:BF:85 X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:71:08:23:3d:53:e0:4b:ab:47:86:48:fa:11:37:8c:68:c7: ab:5e:19:c9:2b:71:63:c2:14:3a:a1:c6:08:5c:0c:2c:45:aa: 69:ce:5b:17:60:4f:32:55:92:3b:56:05:57:45:61:79:10:f5: 46:5f:81:e2:83:42:2f:ba:25:ef:c8:7b:41:01:c3:46:48:ab: 56:21:e0:bd:7c:ae:75:33:e3:58:5f:e4:ca:78:d5:10:1c:bb: 78:aa:4b:6f:a6:e4:5d:e3:2a:c8:97:af:49:11:04:81:c9:d2: 0b:70:87:e7:55:75:b7:28:38:2e:c8:e8:62:18:dd:ff:41:4a: 54:17:97:2e:74:46:d5:55:b1:8e:ba:b6:6e:cd:81:05:23:1d: 40:d7:72:00:6b:fe:cb:83:e0:5a:44:06:5b:0a:8a:10:14:d2: 20:48:20:a7:7b:2a:57:32:99:a9:19:6c:ef:fc:04:6c:21:a5: ee:f4:58:b1:ae:b0:62:a3:c3:5b:28:4d:98:84:4b:55:a0:44: 30:a0:5e:6f:82:d4:2c:58:87:6a:dd:4f:97:9e:80:c3:df:c9: 70:30:bd:a2:ff:5d:0b:1b:c8:92:01:35:70:2b:80:5c:35:16: 45:58:b3:69:09:e4:8c:37:08:2c:5f:65:96:be:e3:9f:78:32: d8:84:7e:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjUwNzAxMDU0MjI1WhcNMjUwNzA4MDU0MjI1WjAYMRYwFAYD VQQDEw02ODYzNzU0Mi0wZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszqy2wCFjrUsXNworId4b5acRyQKXGHzQ/+h7e0vX4G9uc3yqR2+jx7Ih/Bg c+TZoePOFitlV9ReuGXG1sJYldE9sf/NGoOOALMX/QoX53CRpbhDGfFdY+vQD8wC WRvbGz9gRdrS2w09kMNl0c6y0qb6LBJv32RrUqC7cBl3mmemkzYQiAhQvzJW6PhL j5STAnTpQErUtwUKl4dEzhkLMWFE3z4WnIpXKdAlzuwLUQbA9bhlPbNa6A8RzwwS XmHy46OyMBm314YanKoqSQXLLoSf4D3tdYMeXFgPfqDFClZzpAHrMqeDhHtyC9eZ cJlBMg0OCCUckuLQ7CFJK7r3/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMIRUNU EJwrtjFLkpxJ8qsSXr+FMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9cQgjPVPgS6tHhkj6ETeMaMerXhnJK3FjwhQ6ocYIXAwsRappzlsX YE8yVZI7VgVXRWF5EPVGX4Hig0IvuiXvyHtBAcNGSKtWIeC9fK51M+NYX+TKeNUQ HLt4qktvpuRd4yrIl69JEQSBydILcIfnVXW3KDguyOhiGN3/QUpUF5cudEbVVbGO urZuzYEFIx1A13IAa/7Lg+BaRAZbCooQFNIgSCCneypXMpmpGWzv/ARsIaXu9Fix rrBio8NbKE2YhEtVoEQwoF5vgtQsWIdq3U+XnoDD38lwML2i/10LG8iSATVwK4Bc NRZFWLNpCeSMNwgsX2WWvuOfeDLYhH5m -----END CERTIFICATE-----Generated at Thu Jul 3 03:49:03 2025 by rpki-client