$ rpki-client -vvf rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft File: mCCQpe9tD1WDItzVs3y8RW51xUM.mft (raw, json) Hash identifier: d8e6pJ0dUnkUyaRN56BT/eS3t4wQD3eIBN8XNGBQW5s= Subject key identifier: 6E:95:73:71:BE:35:46:C8:69:CB:03:D9:BD:2B:76:33:8F:7F:AE:1D Authority key identifier: 98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 Certificate issuer: /CN=A919290F/serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Certificate serial: 03CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft Manifest number: 03C5 Signing time: Tue 13 May 2025 00:26:30 +0000 Manifest this update: Tue 13 May 2025 00:26:29 +0000 Manifest next update: Tue 20 May 2025 00:26:29 +0000 Files and hashes: 1: mCCQpe9tD1WDItzVs3y8RW51xUM.crl (hash: m78UNPugT2JK1GK2uZM2b6+M9bgs9dZ5SBKAcuBiEvE=) 2: D3C1BBD687DF11EC9FAA242CC4F9AE02.roa (hash: Lu0DnvWKzViBD3LlCEVvbQZrg7/F2h1sbFYCuGPJgY8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 971 (0x3cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919290F, serialNumber=982090A5EF6D0F558322DCD5B37CBC456E75C543 Validity Not Before: May 13 00:26:29 2025 GMT Not After : May 20 00:26:29 2025 GMT Subject: CN=682291b6-163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:c7:83:63:17:af:2c:a2:f1:23:fc:a5:4b: 81:ad:e2:fb:24:7b:8e:39:d1:ea:0f:2a:93:67:d4: 3f:e7:b9:a4:47:28:0b:38:0a:4d:0c:35:f0:fc:08: 67:ec:94:87:b4:55:71:1f:27:3b:79:1a:84:a2:71: 0a:47:cf:75:b4:6c:7d:b8:3e:fe:7e:23:87:d1:90: 52:af:2d:05:8e:60:2a:e5:4d:ce:6e:3a:03:4b:f5: 9b:4c:40:81:e6:39:a7:de:83:47:42:65:86:93:fd: d1:ae:bb:3f:fb:81:71:8b:ad:25:4e:7e:77:87:8a: 2b:d9:b5:f2:c7:bd:a4:94:dc:09:0c:12:48:9c:65: b3:c7:d1:d3:18:a6:30:6f:de:4a:57:59:ee:ea:1f: 3f:25:d4:66:98:cc:2d:74:2d:e5:bd:e0:8c:bc:0b: fc:d4:e8:84:59:6d:41:cf:7a:0c:90:76:e9:46:68: fe:16:14:07:ee:ef:97:bf:e0:70:95:22:29:e4:b3: c8:22:de:8c:96:dc:ac:6c:12:82:4a:8c:bf:e7:10: a5:36:aa:c7:51:ac:95:39:e2:b0:99:a4:b4:d4:c0: 20:63:7c:1d:2d:60:42:c1:d6:20:e3:63:04:2d:8c: 6d:75:4d:71:e1:6f:3c:76:0e:5f:22:24:28:b3:34: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:95:73:71:BE:35:46:C8:69:CB:03:D9:BD:2B:76:33:8F:7F:AE:1D X509v3 Authority Key Identifier: keyid:98:20:90:A5:EF:6D:0F:55:83:22:DC:D5:B3:7C:BC:45:6E:75:C5:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mCCQpe9tD1WDItzVs3y8RW51xUM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919290F/5AB2753E87DD11ECBD7D3D0BC4F9AE02/mCCQpe9tD1WDItzVs3y8RW51xUM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:3f:f9:1b:23:f3:8c:d1:50:98:e4:f7:be:3e:14:9f:d1:f2: 3e:51:2c:77:4f:66:03:2b:5b:97:bd:b3:88:5c:ad:94:0e:40: 4d:53:f2:0f:a5:33:0e:3c:b6:6f:2a:99:26:93:a0:df:4d:53: eb:4b:c7:70:8b:45:cf:7f:da:99:83:96:41:f5:45:18:43:3d: c4:a7:c1:f1:7d:78:ee:f3:95:f6:8c:aa:35:03:bd:87:58:c7: 36:7b:06:62:1f:3b:96:33:1b:b4:d7:e2:97:7f:05:1a:7a:4e: a0:b1:19:36:07:d4:9c:6d:7e:7f:ad:57:31:99:71:ac:8f:a5: 0b:5a:0b:10:51:87:13:b7:95:27:4e:eb:54:19:1a:67:53:eb: 8b:d4:f0:0c:ac:de:c1:6a:63:b6:02:db:c8:8d:a5:ca:c5:11: 3d:ab:d4:c2:3f:e2:70:a7:ac:96:7f:8c:bc:3c:b8:30:46:ee: 80:dd:84:26:f1:5b:de:85:69:26:39:64:dc:9b:b7:fc:fa:21: cc:8f:57:42:d7:82:2c:a7:af:12:a8:fa:6c:77:eb:2a:68:49: be:39:82:55:63:fa:88:14:0b:b7:20:39:e1:d1:28:c5:6b:ce: c6:fa:ac:58:cc:31:dd:9b:45:56:b6:1a:8a:4b:83:3a:c9:bc: 2d:01:5c:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTI5MEYxMTAvBgNVBAUTKDk4MjA5MEE1RUY2RDBGNTU4MzIyRENENUIzN0NCQzQ1 NkU3NUM1NDMwHhcNMjUwNTEzMDAyNjI5WhcNMjUwNTIwMDAyNjI5WjAYMRYwFAYD VQQDEw02ODIyOTFiNi0xNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdPHg2MXryyi8SP8pUuBreL7JHuOOdHqDyqTZ9Q/57mkRygLOApNDDXw/Ahn 7JSHtFVxHyc7eRqEonEKR891tGx9uD7+fiOH0ZBSry0FjmAq5U3ObjoDS/WbTECB 5jmn3oNHQmWGk/3Rrrs/+4Fxi60lTn53h4or2bXyx72klNwJDBJInGWzx9HTGKYw b95KV1nu6h8/JdRmmMwtdC3lveCMvAv81OiEWW1Bz3oMkHbpRmj+FhQH7u+Xv+Bw lSIp5LPIIt6MltysbBKCSoy/5xClNqrHUayVOeKwmaS01MAgY3wdLWBCwdYg42ME LYxtdU1x4W88dg5fIiQoszSuIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6Vc3G+ NUbIacsD2b0rdjOPf64dMB8GA1UdIwQYMBaAFJggkKXvbQ9VgyLc1bN8vEVudcVD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjkwRi81QUIyNzUzRTg3 REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQxV0RJdHpWczN5OFJXNTF4 VU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21DQ1FwZTl0RDFXREl0elZzM3k4Ulc1MXhVTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjkwRi81QUIyNzUzRTg3REQxMUVDQkQ3RDNEMEJDNEY5QUUwMi9tQ0NRcGU5dEQx V0RJdHpWczN5OFJXNTF4VU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmP/kbI/OM0VCY5Pe+PhSf0fI+USx3T2YDK1uXvbOIXK2UDkBNU/IP pTMOPLZvKpkmk6DfTVPrS8dwi0XPf9qZg5ZB9UUYQz3Ep8HxfXju85X2jKo1A72H WMc2ewZiHzuWMxu01+KXfwUaek6gsRk2B9ScbX5/rVcxmXGsj6ULWgsQUYcTt5Un TutUGRpnU+uL1PAMrN7BamO2AtvIjaXKxRE9q9TCP+Jwp6yWf4y8PLgwRu6A3YQm 8VvehWkmOWTcm7f8+iHMj1dC14Isp68SqPpsd+sqaEm+OYJVY/qIFAu3IDnh0SjF a87G+qxYzDHdm0VWthqKS4M6ybwtAVwi -----END CERTIFICATE-----Generated at Wed May 14 10:28:15 2025 by rpki-client