$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: W2fQZ52oA9LeZWO64XmytEZWIg5o7R66s9NX+70g+T0= Subject key identifier: 0C:B7:5A:E2:84:D1:C5:6B:71:25:F0:B7:78:5D:75:60:91:2B:90:A0 Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 0365 Signing time: Sun 11 May 2025 00:31:18 +0000 Manifest this update: Sun 11 May 2025 00:31:17 +0000 Manifest next update: Sun 18 May 2025 00:31:17 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: FJcdFZt+7bESDnwchdJBgdnQe41JlrDWStIURCX0/WM=) 2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: 4I3Yc+oHBu75hPbHWxPxeRv9eI1vw2aVJaFMOmOjLHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: May 11 00:31:17 2025 GMT Not After : May 18 00:31:17 2025 GMT Subject: CN=681fefd5-2b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:35:ee:e3:03:93:37:5a:14:40:6c:0c:a3:78: 66:73:6d:8c:d8:99:ab:e8:fd:a9:39:dd:38:4d:6d: 20:06:16:eb:ba:6b:81:70:b6:31:a7:a6:3e:af:e2: 9a:b0:f9:21:a1:0e:b0:f9:0a:22:e4:de:e0:ca:36: 4f:25:09:ca:b2:cd:e5:e0:38:6c:b6:7e:b9:97:30: a2:9d:bb:ec:cf:e0:11:59:8e:50:64:d2:a1:af:ac: 09:ea:29:23:3b:ca:68:3b:ca:ee:a8:d4:44:71:f0: a7:32:f8:41:2b:3e:c4:0d:3f:47:fa:ed:10:d3:05: 03:9a:f0:8f:68:2d:5f:5e:7b:c8:62:0d:f8:dc:38: 1a:a3:3a:6c:1a:be:f3:bb:92:95:16:55:7a:85:3c: 7a:7a:4e:b3:65:07:57:7f:99:82:27:1c:7e:4f:a2: d2:78:72:66:46:03:da:6f:dc:be:96:82:7f:a3:b0: c7:e1:44:cf:f0:95:e7:59:ab:cd:28:d1:f3:28:2e: 92:4c:46:64:c7:12:ba:ad:f6:00:03:e2:2a:e1:77: 81:30:22:92:4a:42:38:98:01:67:ee:24:d9:99:0e: 64:a2:55:56:51:84:71:da:45:25:a6:c1:10:ce:86: 7b:2f:2d:1b:e3:6c:91:26:bf:d4:2b:86:1a:84:b8: e8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B7:5A:E2:84:D1:C5:6B:71:25:F0:B7:78:5D:75:60:91:2B:90:A0 X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:90:08:01:56:e0:d8:1d:1d:ec:23:c3:b4:fc:be:22:6f:c9: 31:28:d0:20:bd:a0:ee:0a:92:5a:7b:9a:20:e3:7d:c8:84:62: 85:85:9e:9c:97:ac:28:82:19:2a:ac:e4:0f:98:58:8e:c0:85: d0:e0:32:06:4b:c8:ba:38:62:ba:58:6c:e8:e8:35:60:58:fa: f5:3c:45:48:fb:b6:ad:9a:c7:55:c4:aa:45:b6:09:45:f2:42: b3:73:a0:63:68:e5:a4:8d:6e:e7:47:d6:73:bd:92:94:e2:24: 47:49:9d:e8:9e:58:00:58:3e:98:83:92:0b:59:e2:4e:1f:d2: 30:92:aa:e5:4b:42:49:ce:03:3b:3b:6f:0a:45:c3:6a:4e:d4: 9f:30:ba:f0:21:5c:5f:bb:1b:72:75:b7:d1:f0:46:2c:02:92: 9e:2a:5c:70:77:62:79:cc:a7:7f:2b:60:01:e5:ef:df:78:df: 07:02:ca:7f:a3:87:99:ab:35:fa:43:0c:51:4e:b3:f9:d8:21: 5d:f9:3b:a6:84:57:b1:97:dd:19:f1:e8:c5:1f:16:ed:16:07: 8d:7f:37:0e:56:68:7a:83:12:83:d9:b5:45:3b:2c:d0:23:63: 07:3b:47:21:d6:df:f3:cd:cd:c2:3a:e2:d1:a9:10:04:af:c6: bf:08:07:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUwNTExMDAzMTE3WhcNMjUwNTE4MDAzMTE3WjAYMRYwFAYD VQQDEw02ODFmZWZkNS0yYjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7TXu4wOTN1oUQGwMo3hmc22M2Jmr6P2pOd04TW0gBhbrumuBcLYxp6Y+r+Ka sPkhoQ6w+Qoi5N7gyjZPJQnKss3l4Dhstn65lzCinbvsz+ARWY5QZNKhr6wJ6ikj O8poO8ruqNREcfCnMvhBKz7EDT9H+u0Q0wUDmvCPaC1fXnvIYg343DgaozpsGr7z u5KVFlV6hTx6ek6zZQdXf5mCJxx+T6LSeHJmRgPab9y+loJ/o7DH4UTP8JXnWavN KNHzKC6STEZkxxK6rfYAA+Iq4XeBMCKSSkI4mAFn7iTZmQ5kolVWUYRx2kUlpsEQ zoZ7Ly0b42yRJr/UK4YahLjoKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy3WuKE 0cVrcSXwt3hddWCRK5CgMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJkAgBVuDYHR3sI8O0/L4ib8kxKNAgvaDuCpJae5og433IhGKFhZ6c l6woghkqrOQPmFiOwIXQ4DIGS8i6OGK6WGzo6DVgWPr1PEVI+7atmsdVxKpFtglF 8kKzc6BjaOWkjW7nR9ZzvZKU4iRHSZ3onlgAWD6Yg5ILWeJOH9IwkqrlS0JJzgM7 O28KRcNqTtSfMLrwIVxfuxtydbfR8EYsApKeKlxwd2J5zKd/K2AB5e/feN8HAsp/ o4eZqzX6QwxRTrP52CFd+TumhFexl90Z8ejFHxbtFgeNfzcOVmh6gxKD2bVFOyzQ I2MHO0ch1t/zzc3COuLRqRAEr8a/CAe0 -----END CERTIFICATE-----Generated at Mon May 12 19:16:51 2025 by rpki-client