$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: 6ExLCOAg/oNAHV4N8y01IF92bRb+qXGiAUfcmCnh7vI= Subject key identifier: 62:BD:BC:CE:9B:52:7E:1D:C6:E0:BF:03:52:88:21:96:B1:72:D3:0A Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 0D Signing time: Sun 11 May 2025 06:51:19 +0000 Manifest this update: Sun 11 May 2025 06:51:18 +0000 Manifest next update: Sun 18 May 2025 06:51:18 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: sEB391NhIfme7+t/+pgPA5izDA9xhLDirCYXDh8ZmBk=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: May 11 06:51:18 2025 GMT Not After : May 18 06:51:18 2025 GMT Subject: CN=682048e6-3d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:e5:38:86:c2:8e:8b:a3:b0:74:ea:41:32:a0: e0:e3:46:4a:09:42:0a:79:6f:9b:84:99:ac:94:77: 35:43:0f:2d:1d:b9:b6:81:f7:6e:87:e9:39:6e:ef: 9b:92:c5:62:8c:80:50:86:7a:bc:2c:15:2f:48:3f: 6e:b9:93:f1:b2:4a:92:8a:ce:29:aa:11:be:f0:61: 0d:23:00:30:b5:2a:9a:3b:d9:bf:69:5a:42:92:44: 6b:ad:80:47:cc:3a:e6:be:ea:46:66:d7:81:8b:75: 0d:bc:fa:5e:91:95:50:81:a2:08:56:c6:f1:3b:4f: 6e:72:4d:1e:0e:ba:8b:42:74:b8:dc:7e:e8:56:1e: e9:99:11:10:0f:25:95:32:19:da:82:57:2e:e4:d5: 4e:98:ba:f2:be:dc:92:48:8b:c3:ef:14:35:93:4d: dd:e8:a7:7f:e1:e9:5e:ae:4c:d2:62:c4:b1:0b:4d: e3:05:98:ed:f9:79:7c:ab:16:fb:09:1b:9b:7e:bd: a4:b9:e3:81:86:ed:34:6d:84:74:86:eb:d4:26:e1: 51:62:d5:df:ee:d1:1e:68:78:e4:ac:4c:21:3b:2b: 2c:4f:57:36:33:45:48:58:b7:b9:13:24:bf:e7:2b: ea:98:e5:33:2e:6b:a4:0f:5a:f6:03:92:2d:85:dc: 99:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BD:BC:CE:9B:52:7E:1D:C6:E0:BF:03:52:88:21:96:B1:72:D3:0A X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:c6:73:ed:46:22:4f:69:f9:fa:4e:a2:b9:1c:10:9f:0a:ee: 01:a9:92:34:62:58:73:6e:3b:6d:e2:ea:f7:1c:7a:48:b3:d5: 28:25:de:46:99:14:6a:b0:53:d0:c7:77:6d:2d:24:35:99:07: 2c:42:a5:16:d7:9d:b5:7d:72:3b:16:bb:70:15:cd:5d:2e:c3: 45:11:c5:5c:5e:34:51:8f:cd:8b:bd:7d:d5:a5:b4:3d:04:df: 57:c4:eb:6d:53:7b:f3:07:98:0c:45:b2:ec:38:33:8b:73:5d: 18:66:3f:b0:78:2a:93:35:47:0c:29:1f:3f:df:fe:51:95:41: 29:b4:68:6a:79:b4:45:bf:43:b7:01:f1:17:07:42:e6:74:cb: bb:d1:dc:2c:f4:d1:aa:48:78:dc:c5:37:09:0b:02:e4:7c:dd: 73:d5:22:77:78:21:00:cc:77:14:9b:a2:54:fa:a7:e1:26:e9: 2b:c1:0f:7c:09:cd:50:66:0f:19:27:6a:44:59:6a:05:af:25: 89:01:ff:60:fe:a9:69:a0:3e:9f:5e:05:b9:ff:39:ab:8d:89: 00:84:32:b9:2e:5f:6b:05:e5:b1:df:66:0e:06:cf:b4:14:85: cf:af:ac:6f:48:d3:1c:68:6a:0c:b3:8d:7d:e3:ed:21:58:6e: 1a:84:af:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTA1MTEwNjUxMThaFw0yNTA1MTgwNjUxMThaMBgxFjAUBgNV BAMTDTY4MjA0OGU2LTNkN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDz5TiGwo6Lo7B06kEyoODjRkoJQgp5b5uEmayUdzVDDy0dubaB926H6Tlu75uS xWKMgFCGerwsFS9IP265k/GySpKKzimqEb7wYQ0jADC1Kpo72b9pWkKSRGutgEfM Oua+6kZm14GLdQ28+l6RlVCBoghWxvE7T25yTR4OuotCdLjcfuhWHumZERAPJZUy GdqCVy7k1U6YuvK+3JJIi8PvFDWTTd3op3/h6V6uTNJixLELTeMFmO35eXyrFvsJ G5t+vaS544GG7TRthHSG69Qm4VFi1d/u0R5oeOSsTCE7KyxPVzYzRUhYt7kTJL/n K+qY5TMua6QPWvYDki2F3JmBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYr28zptS fh3G4L8DUoghlrFy0wowHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3Gc+1GIk9p+fpOorkcEJ8K7gGpkjRiWHNuO23i6vccekiz1Sgl3kaZ FGqwU9DHd20tJDWZByxCpRbXnbV9cjsWu3AVzV0uw0URxVxeNFGPzYu9fdWltD0E 31fE621Te/MHmAxFsuw4M4tzXRhmP7B4KpM1RwwpHz/f/lGVQSm0aGp5tEW/Q7cB 8RcHQuZ0y7vR3Cz00apIeNzFNwkLAuR83XPVInd4IQDMdxSbolT6p+Em6SvBD3wJ zVBmDxknakRZagWvJYkB/2D+qWmgPp9eBbn/OauNiQCEMrkuX2sF5bHfZg4Gz7QU hc+vrG9I0xxoagyzjX3j7SFYbhqEr6A= -----END CERTIFICATE-----Generated at Mon May 12 04:20:04 2025 by rpki-client