$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: o2EIbwW5TwGurjCaB+b17aSee1UIoxLEGFFsmlNQ88o= Subject key identifier: C7:59:6A:CA:7A:D1:27:56:9F:9F:50:48:D1:44:A3:64:62:ED:7A:7A Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1D7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D66 Signing time: Wed 14 May 2025 16:13:43 +0000 Manifest this update: Wed 14 May 2025 16:13:42 +0000 Manifest next update: Wed 21 May 2025 16:13:42 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: gqKxtn+fIiMRn9Ctjz0KQvPrri750AXf1nnIJ4Yxa3k=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7550 (0x1d7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: May 14 16:13:42 2025 GMT Not After : May 21 16:13:42 2025 GMT Subject: CN=6824c136-67ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:1c:3e:f7:65:9e:b7:ef:f8:c2:1b:1c:7f: 99:40:22:84:e5:a7:64:39:23:22:b9:c8:2d:31:4a: 9a:ce:89:ce:98:53:ee:16:21:57:1a:e7:64:db:95: a9:45:1f:b6:e1:1e:0a:64:1e:ee:36:5a:65:ef:ac: 84:6a:28:b0:d6:0e:1d:3f:80:11:0b:03:c7:0c:8c: d0:f2:22:30:08:90:92:8e:8f:8b:f6:35:6a:e3:08: dd:e6:61:25:36:e0:35:a4:ad:a8:9d:ba:81:7b:7f: 9c:c8:d7:41:e6:4e:a1:83:e4:f8:de:1b:f5:90:f0: 50:19:39:15:ef:30:ab:3b:73:d9:38:58:b4:72:d0: 12:bb:d4:16:99:49:0e:c9:10:cf:e1:45:36:92:c7: ce:64:5b:25:19:b9:03:c3:3d:61:80:8d:7f:5a:a4: d1:f7:52:e9:c0:cf:2e:4e:b8:e0:50:ac:cb:48:ca: a4:22:de:73:56:24:80:ac:eb:31:b3:94:de:c7:ff: 46:63:e8:a6:8e:64:54:24:72:3e:b7:72:02:b5:de: c5:43:f7:de:64:04:a2:40:d7:1c:71:88:41:d0:44: 29:76:68:d4:9a:0a:ef:06:3a:a7:5f:5a:ad:9c:51: ab:7a:d2:ab:f1:5f:ec:33:07:b1:6f:a7:3c:a4:c0: 01:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:59:6A:CA:7A:D1:27:56:9F:9F:50:48:D1:44:A3:64:62:ED:7A:7A X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:db:37:94:cb:f2:40:1b:41:2c:87:b5:0c:c1:88:a8:24:d1: f6:01:9d:29:29:d6:f5:86:07:26:23:4f:bc:d7:b9:88:17:5b: 6f:0c:92:e6:ee:1f:d9:d9:3b:41:dc:2b:e3:ec:3e:a3:7b:15: 4e:2e:c6:62:e7:08:ad:df:d9:08:3a:e9:7a:c8:15:bc:42:2f: 54:9e:ca:00:45:cb:c7:da:97:47:fb:7b:13:90:fc:70:0d:5f: 39:25:76:76:fd:a9:06:70:8a:54:95:db:64:36:3f:7d:5e:57: 72:a7:fb:b7:b1:02:be:f4:13:5c:09:e8:6c:41:78:11:64:d6: cf:30:7a:ef:ea:f4:f6:25:fb:a6:1e:5a:d4:75:de:e3:44:16: a7:0f:04:d4:43:c8:0c:d9:56:96:d0:43:65:1a:31:fa:5d:b9: 60:24:a0:c1:00:d1:19:81:d0:13:c5:68:9a:3f:1e:47:5c:a7: b8:55:8f:d1:30:3f:86:09:6d:f8:91:28:b0:3e:ff:f3:8d:62: 21:37:2b:2e:88:55:ed:f9:8c:76:97:cb:24:08:87:df:e9:b6: 8a:af:82:f1:9b:dd:f5:8a:9f:36:f5:79:0d:af:a8:84:0f:4c: df:3e:41:b3:1f:b1:f7:c3:c2:1c:99:60:43:17:a3:af:8c:2b: 9a:03:12:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwNTE0MTYxMzQyWhcNMjUwNTIxMTYxMzQyWjAYMRYwFAYD VQQDEw02ODI0YzEzNi02N2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRgcPvdlnrfv+MIbHH+ZQCKE5adkOSMiucgtMUqazonOmFPuFiFXGudk25Wp RR+24R4KZB7uNlpl76yEaiiw1g4dP4ARCwPHDIzQ8iIwCJCSjo+L9jVq4wjd5mEl NuA1pK2onbqBe3+cyNdB5k6hg+T43hv1kPBQGTkV7zCrO3PZOFi0ctASu9QWmUkO yRDP4UU2ksfOZFslGbkDwz1hgI1/WqTR91LpwM8uTrjgUKzLSMqkIt5zViSArOsx s5Tex/9GY+imjmRUJHI+t3ICtd7FQ/feZASiQNcccYhB0EQpdmjUmgrvBjqnX1qt nFGretKr8V/sMwexb6c8pMABoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdZasp6 0SdWn59QSNFEo2Ri7Xp6MB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn2zeUy/JAG0Esh7UMwYioJNH2AZ0pKdb1hgcmI0+817mIF1tvDJLm 7h/Z2TtB3Cvj7D6jexVOLsZi5wit39kIOul6yBW8Qi9UnsoARcvH2pdH+3sTkPxw DV85JXZ2/akGcIpUldtkNj99Xldyp/u3sQK+9BNcCehsQXgRZNbPMHrv6vT2Jfum HlrUdd7jRBanDwTUQ8gM2VaW0ENlGjH6XblgJKDBANEZgdATxWiaPx5HXKe4VY/R MD+GCW34kSiwPv/zjWIhNysuiFXt+Yx2l8skCIff6baKr4Lxm931ip829XkNr6iE D0zfPkGzH7H3w8IcmWBDF6OvjCuaAxKh -----END CERTIFICATE-----Generated at Fri May 16 14:31:27 2025 by rpki-client