$ rpki-client -vvf rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft File: cRYXAC2fDJ62W07dYfehyR_NuD4.mft (raw, json) Hash identifier: P6on+qa2bG9DrNNTU6UEGZp6dMbpL1gnOoGti62IdWM= Subject key identifier: 57:BE:E1:54:E4:F5:D9:0B:57:84:CE:0D:9F:62:FF:8F:2D:44:CF:87 Authority key identifier: 71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E Certificate issuer: /CN=A919C6E7/serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft Manifest number: 88 Signing time: Fri 09 May 2025 05:33:30 +0000 Manifest this update: Fri 09 May 2025 05:33:29 +0000 Manifest next update: Fri 16 May 2025 05:33:29 +0000 Files and hashes: 1: cRYXAC2fDJ62W07dYfehyR_NuD4.crl (hash: pzsb3T6+ojxS39k4qE9pEbId9SOFN1Fguf+6rsRsp3E=) 2: 73EF25545DDE11EFBCDB7463C4F9AE02.roa (hash: JrlJ2EvGFrH8+I8VUWwxgID9iYwpW3LVV5yISMkbZ08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C6E7, serialNumber=711617002D9F0C9EB65B4EDD61F7A1C91FCDB83E Validity Not Before: May 9 05:33:29 2025 GMT Not After : May 16 05:33:29 2025 GMT Subject: CN=681d93aa-6ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:ca:d1:c6:99:b1:97:47:0c:a6:13:ea:29: 44:4d:28:2a:8f:2b:58:0f:c5:c1:ab:b8:a3:16:2f: 35:69:cd:52:7b:58:02:73:08:1f:e1:e7:3d:da:29: 3c:1d:a9:4d:34:01:23:eb:a8:a8:1a:49:cb:7d:8c: ea:64:bd:33:92:02:a8:e3:cb:9a:50:cd:ac:57:14: e5:48:80:d4:8c:6b:03:4d:cb:0d:74:53:59:35:b0: da:22:a2:14:82:7a:4e:2e:a3:a1:dd:bc:87:12:44: b0:4c:ee:7c:20:d7:b2:1b:32:8d:89:44:2e:e8:43: a2:9e:47:fc:fd:2c:c1:bb:03:74:67:db:4c:34:8b: 9b:8b:ed:37:60:ce:dd:da:99:37:07:11:ae:9b:89: 7f:91:71:3a:30:44:e4:cd:80:ee:ee:47:30:77:50: fe:c2:84:56:ba:63:56:16:d7:50:20:3c:6c:c0:b3: ff:f1:4f:33:2a:70:4e:19:81:d9:61:9e:2f:2a:79: fe:a9:82:82:d9:bf:38:ab:ba:07:b0:3d:aa:28:10: c8:0f:65:c2:10:0c:38:4c:b4:ab:ab:e4:e5:a8:45: 79:8f:ee:eb:cc:06:b8:26:13:3c:89:cd:12:bb:28: ce:eb:ab:01:f1:28:01:be:30:be:fb:a3:47:77:1e: d2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BE:E1:54:E4:F5:D9:0B:57:84:CE:0D:9F:62:FF:8F:2D:44:CF:87 X509v3 Authority Key Identifier: keyid:71:16:17:00:2D:9F:0C:9E:B6:5B:4E:DD:61:F7:A1:C9:1F:CD:B8:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRYXAC2fDJ62W07dYfehyR_NuD4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C6E7/E4A0CCAE5DDD11EF830DF561C4F9AE02/cRYXAC2fDJ62W07dYfehyR_NuD4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:05:a7:b0:5c:e3:72:10:a1:71:8d:15:54:c1:46:3d:67:b6: 82:32:a6:5a:c7:ba:90:33:49:f0:4b:fa:38:47:a2:0d:96:b0: 95:a6:c1:da:a4:d8:6e:f1:b6:5e:7e:16:7d:36:9a:11:28:70: 0e:ca:b1:f0:83:62:97:92:a6:4b:fb:5c:7a:8b:99:74:9e:eb: a8:c8:b8:d2:b7:fa:56:bd:ed:60:9a:98:54:43:d3:68:a3:58: 96:35:01:e8:d8:ce:ea:ac:20:c8:0d:4b:68:42:a0:85:fc:75: 26:fc:f8:cd:26:85:48:9b:50:77:39:fd:a3:37:ee:f6:ef:ad: 3a:18:b0:3a:47:2a:c4:ef:b9:6c:f1:ce:cb:05:e7:f0:87:38: 7e:33:16:d0:6c:fe:ad:6b:87:eb:88:07:9b:be:9e:88:59:96: 1c:51:67:c4:db:d6:72:f9:22:6a:5d:ac:14:3e:99:ad:9a:bb: 99:34:3c:72:ac:4d:86:31:fb:c1:48:4c:49:fa:53:31:b0:95: c5:62:11:6a:7c:54:38:f1:23:fa:ec:50:02:30:30:3a:01:12: 38:88:fe:a8:aa:c6:75:f4:15:53:39:2b:d3:82:6d:79:38:a1: 3d:c1:75:77:db:24:e4:c9:75:c5:cf:04:e1:fe:01:cb:40:e4: fb:e5:48:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM2RTcxMTAvBgNVBAUTKDcxMTYxNzAwMkQ5RjBDOUVCNjVCNEVERDYxRjdBMUM5 MUZDREI4M0UwHhcNMjUwNTA5MDUzMzI5WhcNMjUwNTE2MDUzMzI5WjAYMRYwFAYD VQQDEw02ODFkOTNhYS02YmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBrK0caZsZdHDKYT6ilETSgqjytYD8XBq7ijFi81ac1Se1gCcwgf4ec92ik8 HalNNAEj66ioGknLfYzqZL0zkgKo48uaUM2sVxTlSIDUjGsDTcsNdFNZNbDaIqIU gnpOLqOh3byHEkSwTO58INeyGzKNiUQu6EOinkf8/SzBuwN0Z9tMNIubi+03YM7d 2pk3BxGum4l/kXE6METkzYDu7kcwd1D+woRWumNWFtdQIDxswLP/8U8zKnBOGYHZ YZ4vKnn+qYKC2b84q7oHsD2qKBDID2XCEAw4TLSrq+TlqEV5j+7rzAa4JhM8ic0S uyjO66sB8SgBvjC++6NHdx7S5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe+4VTk 9dkLV4TODZ9i/48tRM+HMB8GA1UdIwQYMBaAFHEWFwAtnwyetltO3WH3ockfzbg+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzZFNy9FNEEwQ0NBRTVE REQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRKNjJXMDdkWWZlaHlSX051 RDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSWVhBQzJmREo2MlcwN2RZZmVoeVJfTnVENC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzZFNy9FNEEwQ0NBRTVEREQxMUVGODMwREY1NjFDNEY5QUUwMi9jUllYQUMyZkRK NjJXMDdkWWZlaHlSX051RDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYBaewXONyEKFxjRVUwUY9Z7aCMqZax7qQM0nwS/o4R6INlrCVpsHa pNhu8bZefhZ9NpoRKHAOyrHwg2KXkqZL+1x6i5l0nuuoyLjSt/pWve1gmphUQ9No o1iWNQHo2M7qrCDIDUtoQqCF/HUm/PjNJoVIm1B3Of2jN+727606GLA6RyrE77ls 8c7LBefwhzh+MxbQbP6ta4friAebvp6IWZYcUWfE29Zy+SJqXawUPpmtmruZNDxy rE2GMfvBSExJ+lMxsJXFYhFqfFQ48SP67FACMDA6ARI4iP6oqsZ19BVTOSvTgm15 OKE9wXV32yTkyXXFzwTh/gHLQOT75UiR -----END CERTIFICATE-----Generated at Sat May 10 09:53:04 2025 by rpki-client