$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft File: CC8e6S_qY3P9odWuxG4vLYrorIc.mft (raw, json) Hash identifier: NLNH8NySBhaMQzVprZ4zEPWVZM1xT+c0jkezVbCKXBo= Subject key identifier: 79:9F:3B:92:42:9E:04:DE:EB:A3:CB:AD:02:84:C2:02:13:C2:2F:63 Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Certificate serial: 07D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft Manifest number: 5FE0 Signing time: Sun 04 May 2025 14:15:21 +0000 Manifest this update: Sun 04 May 2025 14:15:20 +0000 Manifest next update: Sun 11 May 2025 14:15:20 +0000 Files and hashes: 1: CC8e6S_qY3P9odWuxG4vLYrorIc.crl (hash: e5gCGn6I6Sj2/7V1AcaTXGY6JwVtSLfzUN54iEO4SRs=) 2: 8272E36003BD11EBB416B77DC4F9AE02.roa (hash: FqFiDIcegnSEYf0rjDFvLA1E5hLrfJwjUSudPY/6PhE=) 3: D64176D81B9911ECAB0E1678C4F9AE02.roa (hash: SCnihDYbmc4GiaIEvX2j7M8vuw8f64Zz9GgFXob0XUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2003 (0x7d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87 Validity Not Before: May 4 14:15:20 2025 GMT Not After : May 11 14:15:20 2025 GMT Subject: CN=68177679-fa06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:8f:68:ca:31:dd:42:ff:37:2b:b9:17:33: 8a:26:28:34:0c:e1:d2:97:3a:74:03:a7:01:90:37: c7:b7:e7:96:1b:c2:96:da:b0:f8:08:91:a9:bb:52: bb:0c:14:bd:87:82:c2:18:97:5d:cf:1d:98:3e:f6: 74:fe:dd:07:ca:5a:d7:2d:3b:97:9f:95:85:87:66: 3c:1a:52:53:f0:b3:99:cf:46:b8:33:6c:a2:5f:1d: 9a:a1:9c:2e:dd:67:c8:51:1a:73:73:b8:44:4f:bc: dc:b1:85:2e:c6:e0:fc:51:15:9c:e9:b6:8e:31:8d: f3:4d:d6:b4:60:b6:b8:05:68:10:12:d9:b0:ee:22: ab:7f:9f:b9:12:97:1b:06:8c:22:69:25:3d:1d:9d: ca:18:be:33:17:dc:5d:dc:12:83:b1:82:64:ea:ba: b3:cc:02:b2:10:72:ae:48:e4:92:31:40:91:ce:4c: 77:c9:dc:22:c9:10:53:19:d9:ac:3d:29:f6:42:75: 41:c2:1c:90:46:4f:8d:1c:68:92:fe:22:0f:52:cb: 06:ee:7d:2b:46:29:3b:4e:8b:98:ae:f7:b2:b7:ed: f0:b9:aa:15:4e:08:4a:cf:e9:7a:38:54:2a:f6:c4: 85:a3:8a:1f:9c:16:45:ad:89:92:01:33:53:83:1b: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9F:3B:92:42:9E:04:DE:EB:A3:CB:AD:02:84:C2:02:13:C2:2F:63 X509v3 Authority Key Identifier: keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:c6:ff:e9:11:fa:2d:b9:f5:54:bf:a2:ab:8d:ac:53:3e:f1: 8a:ff:f4:8a:86:1e:a0:01:6d:5a:d8:f7:51:79:4c:df:da:53: fa:ba:c6:dc:74:e1:d2:72:7a:53:a2:d3:c3:d4:61:11:4e:9a: 08:e5:04:8d:74:f4:5a:da:89:37:b6:46:f7:00:d7:7e:61:3d: 7f:fd:1d:7f:72:4f:b7:75:0a:0b:ad:9f:b6:29:f0:e9:53:d1: e4:fa:af:d4:b4:ef:4c:e2:5e:40:38:7b:be:26:df:3a:aa:98: a2:ec:1b:d4:a5:4d:6c:a7:48:00:6b:29:f1:11:57:6c:63:7b: b3:b0:93:7c:df:c3:e7:f6:c6:b6:50:e8:1b:63:b6:b0:66:cb: 8d:c3:98:16:47:c9:ad:89:be:d0:c2:1d:f3:89:f6:3e:46:4a: dc:91:86:8e:25:16:e5:96:67:f5:ef:2d:ba:47:a5:a3:95:14: ec:8c:da:5f:57:e0:23:aa:78:46:5f:8d:ac:73:a4:36:71:b6: 91:db:e6:86:f7:6c:a5:23:04:96:44:f3:33:c8:de:99:8c:5f: d6:f5:f5:5a:94:1f:43:2c:d8:0e:bd:77:4f:c1:df:f9:99:16: ad:fd:8a:33:5b:66:ab:83:5c:0d:01:a6:e7:66:be:48:cd:9e: b6:e3:4f:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDA4MkYxRUU5MkZFQTYzNzNGREExRDVBRUM0NkUyRjJE OEFFOEFDODcwHhcNMjUwNTA0MTQxNTIwWhcNMjUwNTExMTQxNTIwWjAYMRYwFAYD VQQDEw02ODE3NzY3OS1mYTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV6PaMox3UL/Nyu5FzOKJig0DOHSlzp0A6cBkDfHt+eWG8KW2rD4CJGpu1K7 DBS9h4LCGJddzx2YPvZ0/t0HylrXLTuXn5WFh2Y8GlJT8LOZz0a4M2yiXx2aoZwu 3WfIURpzc7hET7zcsYUuxuD8URWc6baOMY3zTda0YLa4BWgQEtmw7iKrf5+5Epcb BowiaSU9HZ3KGL4zF9xd3BKDsYJk6rqzzAKyEHKuSOSSMUCRzkx3ydwiyRBTGdms PSn2QnVBwhyQRk+NHGiS/iIPUssG7n0rRik7TouYrveyt+3wuaoVTghKz+l6OFQq 9sSFo4ofnBZFrYmSATNTgxsMYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmfO5JC ngTe66PLrQKEwgITwi9jMB8GA1UdIwQYMBaAFAgvHukv6mNz/aHVrsRuLy2K6KyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS9GQzYxRTAwODFE NjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkzUDlvZFd1eEc0dkxZcm9y SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NDOGU2U19xWTNQOW9kV3V4RzR2TFlyb3JJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS9GQzYxRTAwODFENjcxMUUyOEMxODI4QTQwOEIwMkNEMi9DQzhlNlNfcVkz UDlvZFd1eEc0dkxZcm9ySWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjxv/pEfotufVUv6KrjaxTPvGK//SKhh6gAW1a2PdReUzf2lP6usbc dOHScnpTotPD1GERTpoI5QSNdPRa2ok3tkb3ANd+YT1//R1/ck+3dQoLrZ+2KfDp U9Hk+q/UtO9M4l5AOHu+Jt86qpii7BvUpU1sp0gAaynxEVdsY3uzsJN838Pn9sa2 UOgbY7awZsuNw5gWR8mtib7Qwh3zifY+RkrckYaOJRbllmf17y26R6WjlRTsjNpf V+AjqnhGX42sc6Q2cbaR2+aG92ylIwSWRPMzyN6ZjF/W9fValB9DLNgOvXdPwd/5 mRat/YozW2arg1wNAabnZr5IzZ624080 -----END CERTIFICATE-----Generated at Tue May 6 03:42:53 2025 by rpki-client