$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft File: CpU4Un2lMv4x11DRNpblzq8qm88.mft (raw, json) Hash identifier: fb8NRCgDLIi7kHSfFq4lzJoQ/7MRrwDR/dAI2fsVrs4= Subject key identifier: 8D:F5:E8:97:B7:4B:85:90:38:B1:99:82:9D:45:03:95:5E:36:CA:58 Authority key identifier: 0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF Certificate issuer: /CN=A91C2677/serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft Manifest number: 0187 Signing time: Sun 11 May 2025 02:32:34 +0000 Manifest this update: Sun 11 May 2025 02:32:33 +0000 Manifest next update: Sun 18 May 2025 02:32:33 +0000 Files and hashes: 1: CpU4Un2lMv4x11DRNpblzq8qm88.crl (hash: T3c5lGCrZMl0yNDJEVmwb+XZPDaAWt6minTE9FCzrdY=) 2: 5A1F332618A211EEB9517111C4F9AE02.roa (hash: L46j7D5JqRMEtMeerHLvKLCnSiPpfI4fJUlK6SBHvHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2677, serialNumber=0A9538527DA532FE31D750D13696E5CEAF2A9BCF Validity Not Before: May 11 02:32:33 2025 GMT Not After : May 18 02:32:33 2025 GMT Subject: CN=68200c41-90c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:21:a0:ae:ea:ec:28:93:d5:de:c0:30:1c: 25:2a:1e:8b:f0:22:cc:b0:3e:d0:92:f3:92:62:46: 90:b7:2b:70:03:11:fb:da:f4:5c:92:28:e0:57:8b: cb:8b:75:73:86:12:12:1a:5e:79:10:cd:36:68:2d: e9:44:b1:5f:fe:ec:80:02:4f:37:ed:43:0a:7a:23: b1:d6:43:c4:44:a4:9b:4b:7b:28:65:96:5c:b0:4f: e8:ee:a6:ed:32:88:9f:2e:bb:4e:5d:8f:f0:ec:ae: 15:56:2f:28:b4:8d:97:c4:e3:25:61:49:0d:58:5e: f9:ea:a3:1c:7a:55:1c:5c:02:52:06:85:14:86:b7: a1:87:92:31:4a:35:e8:43:aa:9d:3d:d6:8c:5a:a3: af:5a:5f:f0:b3:f1:d0:30:99:a8:d5:d6:df:90:57: 75:60:db:67:37:33:26:5b:8e:12:f4:8c:34:98:1a: d7:cc:64:45:8f:d1:63:17:3e:2d:d6:50:4a:da:8c: ed:6e:4e:62:c3:8c:ad:3e:24:77:ed:8e:c3:d6:de: f9:66:00:c7:f8:1f:38:18:14:7a:2e:a0:c8:78:74: 10:e8:68:32:b9:7e:9d:97:15:e6:8e:40:dd:15:ef: 72:f9:a7:36:af:e9:e8:17:91:83:2b:ad:6b:04:b7: 75:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F5:E8:97:B7:4B:85:90:38:B1:99:82:9D:45:03:95:5E:36:CA:58 X509v3 Authority Key Identifier: keyid:0A:95:38:52:7D:A5:32:FE:31:D7:50:D1:36:96:E5:CE:AF:2A:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CpU4Un2lMv4x11DRNpblzq8qm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2677/6457DFD8D83711ED8C096629C4F9AE02/CpU4Un2lMv4x11DRNpblzq8qm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:c6:28:a1:cb:6f:53:56:78:71:f4:c5:65:85:52:db:3f:5d: a3:c2:57:d6:ff:af:c8:18:bd:ed:3d:f7:64:d0:e0:cf:9e:78: 46:05:8e:ef:70:b3:f3:21:d1:84:09:b2:13:4a:07:d9:2c:4b: 39:51:29:a2:5c:de:99:10:f6:b1:50:bf:61:d8:7e:ae:40:df: cd:64:21:22:4f:2e:4f:ef:f6:97:d9:64:5f:32:cc:fd:1f:32: 76:76:8c:1b:9a:d9:2d:34:af:ac:2e:5b:fb:7c:3e:8b:7d:44: 99:23:f9:3a:f5:c2:b6:fa:40:db:89:89:44:25:b6:cd:13:4c: e1:62:7d:e5:2e:b3:70:1a:2f:a7:b0:b5:e0:0d:23:63:7b:87: b1:1a:31:c4:39:39:8c:e6:35:f5:24:99:19:d1:21:ab:87:c2: e0:3e:b7:93:ed:a4:22:e4:9d:80:16:8f:31:5c:37:20:b4:0b: a0:72:5e:7b:0f:9c:ff:25:10:8f:9a:18:4e:ef:14:d3:03:c7: 11:47:98:82:74:17:8b:51:2c:5a:26:79:10:e5:6e:71:ec:5a: 0c:af:0b:f8:ac:fc:e4:45:af:54:ef:b9:92:96:99:88:5a:9f: fa:a8:9e:dc:fe:57:ed:c2:d7:ee:c5:66:1a:1b:c5:2c:2e:c0: f4:3d:e3:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzI2NzcxMTAvBgNVBAUTKDBBOTUzODUyN0RBNTMyRkUzMUQ3NTBEMTM2OTZFNUNF QUYyQTlCQ0YwHhcNMjUwNTExMDIzMjMzWhcNMjUwNTE4MDIzMjMzWjAYMRYwFAYD VQQDEw02ODIwMGM0MS05MGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVwhoK7q7CiT1d7AMBwlKh6L8CLMsD7QkvOSYkaQtytwAxH72vRckijgV4vL i3VzhhISGl55EM02aC3pRLFf/uyAAk837UMKeiOx1kPERKSbS3soZZZcsE/o7qbt MoifLrtOXY/w7K4VVi8otI2XxOMlYUkNWF756qMcelUcXAJSBoUUhrehh5IxSjXo Q6qdPdaMWqOvWl/ws/HQMJmo1dbfkFd1YNtnNzMmW44S9Iw0mBrXzGRFj9FjFz4t 1lBK2oztbk5iw4ytPiR37Y7D1t75ZgDH+B84GBR6LqDIeHQQ6GgyuX6dlxXmjkDd Fe9y+ac2r+noF5GDK61rBLd1EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI316Je3 S4WQOLGZgp1FA5VeNspYMB8GA1UdIwQYMBaAFAqVOFJ9pTL+MddQ0TaW5c6vKpvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjY3Ny82NDU3REZEOEQ4 MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12NHgxMURSTnBibHpxOHFt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NwVTRVbjJsTXY0eDExRFJOcGJsenE4cW04OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MjY3Ny82NDU3REZEOEQ4MzcxMUVEOEMwOTY2MjlDNEY5QUUwMi9DcFU0VW4ybE12 NHgxMURSTnBibHpxOHFtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAxiihy29TVnhx9MVlhVLbP12jwlfW/6/IGL3tPfdk0ODPnnhGBY7v cLPzIdGECbITSgfZLEs5USmiXN6ZEPaxUL9h2H6uQN/NZCEiTy5P7/aX2WRfMsz9 HzJ2dowbmtktNK+sLlv7fD6LfUSZI/k69cK2+kDbiYlEJbbNE0zhYn3lLrNwGi+n sLXgDSNje4exGjHEOTmM5jX1JJkZ0SGrh8LgPreT7aQi5J2AFo8xXDcgtAugcl57 D5z/JRCPmhhO7xTTA8cRR5iCdBeLUSxaJnkQ5W5x7FoMrwv4rPzkRa9U77mSlpmI Wp/6qJ7c/lftwtfuxWYaG8UsLsD0PeOV -----END CERTIFICATE-----Generated at Sun May 11 13:25:39 2025 by rpki-client