$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: QbkX0jt0fs8YBPL77SMkmVo7Dhb9H7zS2jJUTbZq+F0= Subject key identifier: 52:A0:86:E2:67:1F:31:DE:76:2A:D1:36:C2:1C:80:A6:C2:EF:44:B2 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 054E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 0544 Signing time: Wed 14 May 2025 23:28:52 +0000 Manifest this update: Wed 14 May 2025 23:28:52 +0000 Manifest next update: Wed 21 May 2025 23:28:52 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: Gr7JsoStPzaJu4LzYyHlMN1IA97YXeph8RwjBIesbic=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 23:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1358 (0x54e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: May 14 23:28:52 2025 GMT Not After : May 21 23:28:52 2025 GMT Subject: CN=68252734-5f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:69:d4:ab:d1:a9:26:99:b5:1a:e0:4c:2a: c8:68:59:bd:4c:48:49:db:6d:96:af:81:f5:fa:ff: cb:55:5c:48:b1:b6:d8:c6:2a:af:69:84:5f:69:e9: 2b:d6:21:05:3d:4e:ba:18:25:e8:e1:2b:a8:fd:60: 7e:9a:c7:90:dc:fc:4c:9f:1f:ea:c4:79:c1:be:42: c5:c1:88:a0:3f:d5:3d:fb:3f:a9:d4:31:db:19:b2: 55:ad:b6:25:a5:38:a4:58:6a:0b:d2:6b:32:2b:40: 95:d2:b6:a6:36:35:95:0d:b3:19:ef:bb:75:5c:96: f6:03:38:d8:00:b5:b2:ef:86:31:4f:7a:eb:0c:45: d2:1e:5b:cc:bf:f2:3e:fc:42:96:ee:3f:c5:a5:e7: 81:5f:11:90:5b:fc:4c:b8:f0:38:e4:87:07:9c:d4: ba:55:13:81:2c:e2:14:12:64:8d:fa:74:bf:c5:21: 3c:31:d5:be:e8:15:f6:71:64:16:d4:b4:d9:fe:86: 57:f8:8b:d9:3e:51:c4:ac:92:5e:28:a3:32:39:6c: e3:ba:42:ec:93:02:e8:bc:d4:06:ea:0a:aa:b4:c3: 33:7f:86:0b:2a:72:31:d9:ac:05:cf:19:61:09:14: eb:3c:20:08:06:8b:29:c7:02:7c:f2:7f:65:8e:04: 00:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A0:86:E2:67:1F:31:DE:76:2A:D1:36:C2:1C:80:A6:C2:EF:44:B2 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:af:bb:68:58:cf:d9:d9:79:e1:42:b1:d4:34:1d:5c:c6:19: 1c:06:7b:63:f7:59:e9:72:60:c7:e3:8c:06:71:c4:3d:89:2d: de:93:34:44:77:b0:ee:76:67:00:28:7d:3b:ca:23:8e:cb:42: 82:4f:01:6a:1d:1c:97:ac:f9:09:97:ed:e7:3e:96:31:a5:45: d8:63:0a:87:e7:95:d1:c1:01:2b:b7:7b:ab:23:a2:3c:92:ea: bd:27:27:d1:07:11:fc:f6:e9:45:ca:96:e6:21:d5:c5:6b:02: a6:2e:2a:11:a9:7a:46:ce:90:b5:11:72:bf:23:2c:94:7e:dc: 7d:57:88:a9:6b:82:6f:c1:78:7f:e0:49:3d:f6:1e:91:93:b7: 11:f4:a5:e5:05:2d:f6:fb:a4:cb:f9:dd:30:3a:42:94:68:37: fd:ef:d4:4c:ac:f6:2e:ba:e9:55:c9:03:9c:98:23:21:b8:1d: 19:f5:3c:d3:5f:82:a7:ab:80:85:e8:2b:aa:60:49:3e:a2:08: 14:b9:55:5e:0d:2f:d0:ad:6a:b4:8f:c0:9d:f0:82:1b:4d:99: c2:7b:7f:d4:2b:87:04:f1:7c:0d:79:29:37:6f:d4:8b:ac:a6: 84:39:eb:f7:af:ba:f4:ce:fe:21:6a:1e:0f:0f:9f:11:26:42: 48:21:e4:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUwNTE0MjMyODUyWhcNMjUwNTIxMjMyODUyWjAYMRYwFAYD VQQDEw02ODI1MjczNC01ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT5p1KvRqSaZtRrgTCrIaFm9TEhJ222Wr4H1+v/LVVxIsbbYxiqvaYRfaekr 1iEFPU66GCXo4Suo/WB+mseQ3PxMnx/qxHnBvkLFwYigP9U9+z+p1DHbGbJVrbYl pTikWGoL0msyK0CV0ramNjWVDbMZ77t1XJb2AzjYALWy74YxT3rrDEXSHlvMv/I+ /EKW7j/FpeeBXxGQW/xMuPA45IcHnNS6VROBLOIUEmSN+nS/xSE8MdW+6BX2cWQW 1LTZ/oZX+IvZPlHErJJeKKMyOWzjukLskwLovNQG6gqqtMMzf4YLKnIx2awFzxlh CRTrPCAIBospxwJ88n9ljgQAFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKghuJn HzHedirRNsIcgKbC70SyMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwr7toWM/Z2XnhQrHUNB1cxhkcBntj91npcmDH44wGccQ9iS3ekzRE d7DudmcAKH07yiOOy0KCTwFqHRyXrPkJl+3nPpYxpUXYYwqH55XRwQErt3urI6I8 kuq9JyfRBxH89ulFypbmIdXFawKmLioRqXpGzpC1EXK/IyyUftx9V4ipa4JvwXh/ 4Ek99h6Rk7cR9KXlBS32+6TL+d0wOkKUaDf979RMrPYuuulVyQOcmCMhuB0Z9TzT X4Knq4CF6CuqYEk+oggUuVVeDS/QrWq0j8Cd8IIbTZnCe3/UK4cE8XwNeSk3b9SL rKaEOev3r7r0zv4hah4PD58RJkJIIeSS -----END CERTIFICATE-----Generated at Fri May 16 06:07:42 2025 by rpki-client