$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: 84Sxb41Exh6HQIeWS/u1/EX8beSAlNSX+FMRhVMJQ5w= Subject key identifier: F8:C4:72:C4:17:1C:A7:7A:5A:AD:A4:3B:FC:FA:42:16:7B:7A:FF:2D Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 0183 Signing time: Tue 13 May 2025 01:00:28 +0000 Manifest this update: Tue 13 May 2025 01:00:27 +0000 Manifest next update: Tue 20 May 2025 01:00:27 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: o19nwuT1xiB+wTK5iLMNKFeDZTVPBXLBtBJ4BzX6FYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: May 13 01:00:27 2025 GMT Not After : May 20 01:00:27 2025 GMT Subject: CN=682299ab-6937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:75:c6:08:74:ab:d8:7d:a8:db:b5:fa:8f:f7: 89:11:87:a8:7e:48:d6:58:13:cb:57:bb:12:53:12: 32:2e:4d:f1:eb:c2:4c:3b:f8:da:f6:b4:ce:b1:20: 3a:25:9b:b1:0d:e3:2b:be:17:2b:21:cd:c1:80:b5: 40:42:53:b2:33:af:0b:65:f0:8c:79:6f:2b:49:0f: 42:a8:4c:ee:3a:3d:ba:d5:ca:41:6b:54:19:c6:b9: c0:a3:43:c3:cf:1e:1a:65:e3:20:71:64:66:3c:5f: c2:a0:c4:95:62:ef:91:74:62:7a:ba:43:4a:13:ff: cc:e2:f7:76:97:1d:ba:44:6a:3d:9d:8e:59:af:1c: 89:26:c6:6d:65:59:e0:2d:ec:e9:0d:3b:38:f4:d7: 4b:ce:c0:0d:5d:86:09:1d:40:a9:77:3a:1b:81:ac: fa:b1:2d:e4:9f:2b:8a:73:50:8f:5f:85:f1:4d:19: e4:20:67:55:61:e5:35:26:3a:57:24:cc:16:de:e6: ec:92:86:d6:6d:9d:a4:c3:dd:39:00:2d:bf:36:cc: d6:b8:a2:4f:94:57:75:d8:cd:60:4d:e0:15:8c:4e: 3a:de:74:48:00:1d:14:86:b1:20:ea:df:62:6c:e5: ce:4a:34:7c:96:df:6c:df:55:c9:0a:f6:8c:95:74: 4d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C4:72:C4:17:1C:A7:7A:5A:AD:A4:3B:FC:FA:42:16:7B:7A:FF:2D X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:fc:ed:0a:4e:34:e5:75:77:45:2b:a5:ac:a6:7e:f5:bc:44: 7f:22:15:be:60:f6:ce:a6:9d:28:ba:ae:c0:f2:d1:95:76:73: d4:50:36:c1:fc:7f:0f:1a:1a:31:49:5c:fa:78:68:d9:15:bd: 58:1d:33:02:9b:7f:ad:e9:cd:be:9c:64:d0:8a:a3:7b:b6:69: 4c:a9:59:c1:4f:e9:1d:fb:41:5c:2b:76:41:68:e4:6a:76:a9: f3:64:b2:2f:9c:0d:82:1e:9d:57:6e:aa:34:b2:f3:07:58:3a: 51:88:39:c6:e4:52:1f:88:bb:bb:fc:5b:66:72:e3:85:f4:e2: 04:6c:5e:1b:03:d3:ff:b8:c3:9d:8e:13:99:81:14:b0:ad:dd: 7c:f3:95:ba:17:af:f9:cf:04:79:f9:01:17:ee:0c:4c:50:9e: d2:96:4c:96:a2:ba:6a:5f:47:97:04:2f:e8:e1:4f:c8:5b:e7: 6e:0b:b4:d3:e0:e9:3b:99:40:28:6d:b5:c8:c9:f5:63:7c:ad: e1:82:82:96:52:12:4d:76:d1:40:c5:5c:e5:b5:27:75:b4:ee: 6f:95:7c:a6:d3:06:77:3e:72:92:75:48:f1:d0:6d:0b:62:a6: 43:04:a8:5c:82:54:fa:62:01:fb:4b:e0:50:dd:1f:95:ca:cf: 67:67:01:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUwNTEzMDEwMDI3WhcNMjUwNTIwMDEwMDI3WjAYMRYwFAYD VQQDEw02ODIyOTlhYi02OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXXGCHSr2H2o27X6j/eJEYeofkjWWBPLV7sSUxIyLk3x68JMO/ja9rTOsSA6 JZuxDeMrvhcrIc3BgLVAQlOyM68LZfCMeW8rSQ9CqEzuOj261cpBa1QZxrnAo0PD zx4aZeMgcWRmPF/CoMSVYu+RdGJ6ukNKE//M4vd2lx26RGo9nY5ZrxyJJsZtZVng LezpDTs49NdLzsANXYYJHUCpdzobgaz6sS3knyuKc1CPX4XxTRnkIGdVYeU1JjpX JMwW3ubskobWbZ2kw905AC2/NszWuKJPlFd12M1gTeAVjE463nRIAB0UhrEg6t9i bOXOSjR8lt9s31XJCvaMlXRNswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjEcsQX HKd6Wq2kO/z6QhZ7ev8tMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY/O0KTjTldXdFK6Wspn71vER/IhW+YPbOpp0ouq7A8tGVdnPUUDbB /H8PGhoxSVz6eGjZFb1YHTMCm3+t6c2+nGTQiqN7tmlMqVnBT+kd+0FcK3ZBaORq dqnzZLIvnA2CHp1Xbqo0svMHWDpRiDnG5FIfiLu7/FtmcuOF9OIEbF4bA9P/uMOd jhOZgRSwrd1885W6F6/5zwR5+QEX7gxMUJ7SlkyWorpqX0eXBC/o4U/IW+duC7TT 4Ok7mUAobbXIyfVjfK3hgoKWUhJNdtFAxVzltSd1tO5vlXym0wZ3PnKSdUjx0G0L YqZDBKhcglT6YgH7S+BQ3R+Vys9nZwEJ -----END CERTIFICATE-----Generated at Tue May 13 15:14:04 2025 by rpki-client