$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft File: Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json) Hash identifier: MC5vQiLrLCe1zqREddOgcb12BbK/wWDQDKMcXqwgZ+E= Subject key identifier: B4:1E:B9:A4:6D:75:31:5D:5F:DB:AB:EC:7F:07:CE:2D:FB:AA:3C:47 Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 Certificate issuer: /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Certificate serial: 1BED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft Manifest number: 1BCB Signing time: Mon 12 May 2025 16:12:28 +0000 Manifest this update: Mon 12 May 2025 16:12:28 +0000 Manifest next update: Mon 19 May 2025 16:12:28 +0000 Files and hashes: 1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: wWx9hqfDl2HS6/+rzh0/Y3eBVmJ5w9E++GQIoG0xfv8=) 2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=) 3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=) 4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 16:12:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7149 (0x1bed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75 Validity Not Before: May 12 16:12:28 2025 GMT Not After : May 19 16:12:28 2025 GMT Subject: CN=68221dec-4e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:46:2a:eb:33:28:f6:a6:3a:57:ab:ae:c3:b9: 72:fc:39:4c:60:68:03:02:a9:3e:94:ef:29:33:c8: f0:28:bd:b6:97:3a:11:24:8c:42:6d:8e:5c:84:b9: 71:a3:de:a6:db:be:fc:43:65:b1:3f:9c:d4:a7:c4: 45:4b:46:18:32:68:79:bb:07:e6:76:e4:f3:88:17: 70:96:12:4c:dd:46:5e:f9:2c:2e:63:53:d9:3e:3e: 7e:ca:03:a6:15:e8:5f:f8:f9:bc:a4:84:d7:2d:4b: 42:c9:7a:d6:a3:95:ba:2b:75:e4:47:21:dd:23:20: 21:fb:f1:b9:fa:21:cb:b7:ec:e6:d8:ff:ba:5a:c6: 62:c7:49:bd:96:d6:e6:91:b9:ba:0a:68:38:01:5a: e2:87:78:d3:ff:0d:3e:ed:c9:b2:6d:66:f0:72:1a: 5d:5b:96:75:a5:b6:c1:e1:15:85:d1:fb:8b:3e:66: ed:cb:6f:20:6f:28:06:a9:a4:92:f5:35:0b:6f:ca: 5c:df:a1:9e:99:32:b7:2d:83:fe:82:d6:6c:50:88: 22:51:d4:e6:ab:49:75:9c:b6:18:7a:1e:a5:b5:82: aa:d1:fb:21:03:32:d0:b0:a1:83:b7:0a:43:5f:b8: 47:61:fb:ca:48:29:b9:80:3c:18:90:8a:33:3c:4f: e2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:B9:A4:6D:75:31:5D:5F:DB:AB:EC:7F:07:CE:2D:FB:AA:3C:47 X509v3 Authority Key Identifier: keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:70:28:9b:6a:3f:af:ac:fd:0f:60:78:3f:c4:1f:32:6c:d1: f6:e4:ff:e6:5c:da:18:28:c7:d3:61:9f:75:5d:c9:99:6c:9a: 99:09:13:1c:a5:56:4e:a4:2d:30:b9:53:bf:5c:1d:dd:eb:f8: 5d:86:02:e2:a5:5d:b1:80:33:11:ab:34:cd:b7:01:e0:c6:67: 59:3e:1c:3a:62:b8:76:6e:17:e6:17:f5:d8:84:6a:5f:d7:23: 9b:53:e0:52:17:16:fd:63:5e:f2:8e:dc:4c:1f:68:84:09:67: 96:9f:50:0b:7b:2b:b7:1c:09:93:39:b1:cd:f2:c0:06:ef:ea: 72:c6:5e:b1:b6:04:d5:08:e9:83:7f:76:9f:cb:48:79:cc:4a: f2:a4:4c:18:c1:e0:30:6d:96:6d:c4:17:2c:93:81:0a:45:d4: 95:81:24:29:dc:78:c8:b8:88:36:85:5f:cb:63:d4:e6:90:9a: be:e8:51:93:95:72:79:db:5b:5a:c8:9d:c6:3a:a5:50:0d:11: 3e:5b:0d:b9:fb:0e:8f:7f:4f:5b:9e:8a:55:f9:98:78:5f:76: f8:3a:ea:a5:4e:de:92:45:cd:e7:35:0c:7f:e1:08:30:d7:28: 46:05:24:fc:03:05:bb:e1:ef:07:6f:43:8f:e1:ed:d2:85:f5: 06:55:a5:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw MDNFNEJCNzUwHhcNMjUwNTEyMTYxMjI4WhcNMjUwNTE5MTYxMjI4WjAYMRYwFAYD VQQDEw02ODIyMWRlYy00ZTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kYq6zMo9qY6V6uuw7ly/DlMYGgDAqk+lO8pM8jwKL22lzoRJIxCbY5chLlx o96m2778Q2WxP5zUp8RFS0YYMmh5uwfmduTziBdwlhJM3UZe+SwuY1PZPj5+ygOm Fehf+Pm8pITXLUtCyXrWo5W6K3XkRyHdIyAh+/G5+iHLt+zm2P+6WsZix0m9ltbm kbm6Cmg4AVrih3jT/w0+7cmybWbwchpdW5Z1pbbB4RWF0fuLPmbty28gbygGqaSS 9TULb8pc36GemTK3LYP+gtZsUIgiUdTmq0l1nLYYeh6ltYKq0fshAzLQsKGDtwpD X7hHYfvKSCm5gDwYkIozPE/iaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQeuaRt dTFdX9ur7H8Hzi37qjxHMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1 M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAcCibaj+vrP0PYHg/xB8ybNH25P/mXNoYKMfTYZ91XcmZbJqZCRMc pVZOpC0wuVO/XB3d6/hdhgLipV2xgDMRqzTNtwHgxmdZPhw6Yrh2bhfmF/XYhGpf 1yObU+BSFxb9Y17yjtxMH2iECWeWn1ALeyu3HAmTObHN8sAG7+pyxl6xtgTVCOmD f3afy0h5zErypEwYweAwbZZtxBcsk4EKRdSVgSQp3HjIuIg2hV/LY9TmkJq+6FGT lXJ521tayJ3GOqVQDRE+Ww25+w6Pf09bnopV+Zh4X3b4OuqlTt6SRc3nNQx/4Qgw 1yhGBST8AwW74e8Hb0OP4e3ShfUGVaV7 -----END CERTIFICATE-----Generated at Wed May 14 11:39:30 2025 by rpki-client