$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: TCmRpQVE/+KKH4rbKicnEplQkoOQ8qU0HaytUB/zlaQ= Subject key identifier: 35:CA:ED:3A:33:D4:F3:43:B4:B7:E4:50:19:AA:62:E5:ED:C9:A9:91 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 06 Signing time: Fri 09 May 2025 07:11:56 +0000 Manifest this update: Fri 09 May 2025 07:11:56 +0000 Manifest next update: Fri 16 May 2025 07:11:56 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: /0gLM49u8jWeVkWQFkpizvbq1Oh7yHXfqAQPMj2CS0Y=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:11:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: May 9 07:11:56 2025 GMT Not After : May 16 07:11:56 2025 GMT Subject: CN=681daabc-a26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3a:4e:e7:3c:b9:30:23:c5:43:71:b2:d9:e8: 27:30:77:ed:f3:4d:89:59:da:73:44:21:15:b5:01: 6f:9c:b1:70:b7:e1:63:b2:09:c3:8b:49:c7:11:68: 73:bb:bc:f1:00:cd:32:33:89:51:12:84:cd:9b:f6: b2:0a:6e:eb:16:cd:55:16:d3:26:c9:be:55:bb:80: 78:48:f7:00:61:84:e2:63:f0:6c:e7:60:76:14:69: c0:18:40:3d:31:e1:d2:a8:b4:09:5a:5e:8c:b5:bf: 8c:92:c1:65:7e:d7:45:9a:35:7c:9a:85:2b:07:80: af:9f:5c:55:fc:35:a0:1b:a0:c3:b0:90:7e:4a:05: 53:28:0c:d6:09:6f:bf:ab:4a:cc:54:41:c9:4b:18: 40:c2:8f:f2:12:30:44:18:31:25:90:4e:f8:28:8e: 93:e3:e7:ca:b6:c5:82:9e:d5:f8:bd:b8:1e:34:cf: a9:f0:20:25:43:2e:e8:81:dd:ee:98:73:aa:e0:bc: 90:f0:ee:a2:22:d9:6e:72:90:05:0b:74:01:8f:d2: 28:80:c4:fc:66:8b:79:ab:9a:ca:a6:04:b4:4d:d7: bf:af:a4:e5:c6:7d:b5:8b:8d:85:43:e3:02:33:8a: f5:c6:81:56:4a:a0:36:14:82:ac:1d:af:31:26:2b: d0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CA:ED:3A:33:D4:F3:43:B4:B7:E4:50:19:AA:62:E5:ED:C9:A9:91 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:1d:f6:f0:c9:d1:01:6c:9d:8e:94:54:fb:e8:af:2c:e8:71: 23:34:04:08:39:e4:9e:60:c5:80:4b:17:72:b5:5a:c3:ac:ab: 77:07:c0:83:01:f4:4e:04:5b:3a:95:03:96:f3:c7:2c:0a:0b: 2d:8e:30:6d:e3:f9:ae:87:71:b1:2d:58:e7:8d:f1:26:6b:d6: fa:29:be:5b:c6:1e:b5:b7:e6:34:20:24:41:f6:80:55:d8:9a: 09:26:a3:1f:7b:b5:bb:cd:e0:cf:11:9e:fd:70:e5:96:7b:d8: 6c:66:54:0f:37:a8:46:b1:30:73:67:9d:65:99:51:5f:46:ad: b5:67:9a:41:7d:99:1e:64:50:fd:ce:df:b0:9c:46:f0:3f:33: 84:40:7c:c2:00:ad:5e:72:60:90:5e:16:07:8e:92:46:e0:90: 28:94:50:33:18:be:ce:e4:07:23:98:8e:78:3b:98:33:84:80: 59:c0:91:7f:a8:5b:23:8d:27:92:b4:f1:0d:49:9d:0c:da:ed: 68:f8:fb:5e:44:2d:26:55:33:fd:90:01:e8:d4:aa:73:a0:97: 4c:39:9c:32:09:5b:80:54:24:57:c5:ef:27:a0:61:43:09:97: 4c:27:87:85:40:7e:1a:78:5d:40:44:73:ad:da:0c:6d:87:fb: 27:a7:aa:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA1MDkwNzExNTZaFw0yNTA1MTYwNzExNTZaMBgxFjAUBgNV BAMTDTY4MWRhYWJjLWEyNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAOk7nPLkwI8VDcbLZ6Ccwd+3zTYlZ2nNEIRW1AW+csXC34WOyCcOLSccRaHO7 vPEAzTIziVEShM2b9rIKbusWzVUW0ybJvlW7gHhI9wBhhOJj8GznYHYUacAYQD0x 4dKotAlaXoy1v4ySwWV+10WaNXyahSsHgK+fXFX8NaAboMOwkH5KBVMoDNYJb7+r SsxUQclLGEDCj/ISMEQYMSWQTvgojpPj58q2xYKe1fi9uB40z6nwICVDLuiB3e6Y c6rgvJDw7qIi2W5ykAULdAGP0iiAxPxmi3mrmsqmBLRN17+vpOXGfbWLjYVD4wIz ivXGgVZKoDYUgqwdrzEmK9AFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNcrtOjPU 80O0t+RQGapi5e3JqZEwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACod9vDJ0QFsnY6UVPvoryzocSM0BAg55J5gxYBLF3K1WsOsq3cHwIMB 9E4EWzqVA5bzxywKCy2OMG3j+a6HcbEtWOeN8SZr1vopvlvGHrW35jQgJEH2gFXY mgkmox97tbvN4M8Rnv1w5ZZ72GxmVA83qEaxMHNnnWWZUV9GrbVnmkF9mR5kUP3O 37CcRvA/M4RAfMIArV5yYJBeFgeOkkbgkCiUUDMYvs7kByOYjng7mDOEgFnAkX+o WyONJ5K08Q1JnQza7Wj4+15ELSZVM/2QAejUqnOgl0w5nDIJW4BUJFfF7yegYUMJ l0wnh4VAfhp4XUBEc63aDG2H+yenqso= -----END CERTIFICATE-----Generated at Sat May 10 16:45:08 2025 by rpki-client