$ rpki-client -vvf rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft File: c0CQ78N5g_0XW-AvSUlmiiFDciE.mft (raw, json) Hash identifier: PGTsV1KeDTb2g+B0n8OfHu7BrpEoq+DHiPP3T/liw5Q= Subject key identifier: D7:7B:17:AB:1C:E8:A3:72:AC:A3:AA:EA:6D:13:C8:2D:84:DF:60:19 Authority key identifier: 73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 Certificate issuer: /CN=A91D025A/serialNumber=734090EFC37983FD175BE02F4949668A21437221 Certificate serial: 04B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft Manifest number: 04A6 Signing time: Mon 12 May 2025 23:44:29 +0000 Manifest this update: Mon 12 May 2025 23:44:28 +0000 Manifest next update: Mon 19 May 2025 23:44:28 +0000 Files and hashes: 1: c0CQ78N5g_0XW-AvSUlmiiFDciE.crl (hash: Z7YJh4L2SlmKnz+j4Dl0MaKd3ToSuQW49ElykhlPFY8=) 2: 2110795ED38E11EDADA86381C4F9AE02.roa (hash: 3scFbI2eqJmRXNfrH/g1NhiMJkdzFzRzL2hCN9j3R/w=) 3: 4B95A58630B111ECAC3FE61DC4F9AE02.roa (hash: Jk80jeO05hd8HdpNBJKbydf23WQjdBY/wJrAaPYnYxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1201 (0x4b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D025A, serialNumber=734090EFC37983FD175BE02F4949668A21437221 Validity Not Before: May 12 23:44:28 2025 GMT Not After : May 19 23:44:28 2025 GMT Subject: CN=682287dc-f890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:3f:33:e2:2a:fe:f5:b4:2a:82:0e:62:92: 8e:76:2e:14:42:0d:67:36:c5:cb:6e:55:82:bc:f0: f0:5c:1b:32:af:24:22:ad:56:70:5d:20:e6:c9:89: b2:7a:86:10:ac:ca:5e:63:14:48:48:2e:b9:e4:d7: b6:b6:f8:a1:b3:30:f0:a5:d6:dd:de:28:a1:d5:66: b4:64:f9:ea:89:1a:ad:af:da:49:15:e1:2f:1c:ed: 97:2a:e3:91:ab:38:f5:9b:30:d5:41:62:2e:9f:02: f2:ea:84:6d:48:99:95:93:09:98:a2:a8:69:5e:53: fb:fb:b2:41:f7:9d:a1:98:cc:34:67:3e:7b:d2:45: 66:e4:a0:ea:46:eb:c3:c8:86:3b:30:57:ad:75:1a: b7:b5:b3:74:30:5f:a0:78:bd:b0:b1:89:dc:58:ca: 7c:68:9a:83:25:3a:d2:99:11:d0:d1:1d:9a:5f:22: a5:53:c5:0f:8f:95:55:9e:2b:bb:bc:c1:8a:2d:f9: e7:4c:98:5a:c6:73:6a:e7:d0:9e:86:d4:4a:0d:db: ac:7c:65:16:c2:36:d4:65:74:ea:71:92:ac:d8:c9: 13:3b:1e:57:03:6f:7b:08:69:e7:09:18:63:13:57: 11:c8:d9:20:5d:36:04:cc:55:2c:fc:ac:95:5c:0d: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:7B:17:AB:1C:E8:A3:72:AC:A3:AA:EA:6D:13:C8:2D:84:DF:60:19 X509v3 Authority Key Identifier: keyid:73:40:90:EF:C3:79:83:FD:17:5B:E0:2F:49:49:66:8A:21:43:72:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0CQ78N5g_0XW-AvSUlmiiFDciE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D025A/D5EF1A9030AD11EC95B15D18C4F9AE02/c0CQ78N5g_0XW-AvSUlmiiFDciE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ee:42:d5:a3:71:81:11:f7:94:95:31:34:7d:d5:b2:a7:05: dc:97:f0:92:f1:c8:14:9a:6a:2c:44:e9:72:05:ce:fd:57:91: ee:fe:13:b8:e9:dd:5b:08:45:05:59:56:e1:3e:77:03:48:5d: ff:67:85:c3:99:b5:59:a5:c3:2d:87:04:09:d5:dd:a9:52:c1: c9:c6:d4:d8:f5:4e:7f:18:e8:d2:1c:e9:a5:11:03:a3:0f:f7: 70:2c:21:1c:0e:c0:7b:b3:f2:23:3f:51:af:18:e6:ba:65:16: 3b:32:76:cb:52:5d:38:be:1e:84:47:42:6a:a5:0d:61:3d:d0: 5e:26:df:eb:75:6c:03:33:b1:18:a2:26:ae:37:92:1b:1c:19: ca:01:93:96:02:fd:20:fe:35:bd:d8:35:0e:4b:15:56:ca:84: e3:58:67:b5:61:02:86:e1:43:be:5a:29:8a:2d:c3:f0:49:5b: 87:f5:e7:10:b5:31:b4:22:ab:5c:a9:26:c6:98:39:8c:eb:02: 18:64:0c:b0:26:ab:cb:55:0b:39:f3:1b:b3:5f:61:c4:be:d9: 19:de:81:93:c6:b5:cc:19:75:c2:51:fa:2a:f1:d4:79:e3:31: 4e:f4:d1:ff:72:1d:74:73:8b:34:ef:f7:71:03:75:9c:6f:a7: 00:2c:ab:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDAyNUExMTAvBgNVBAUTKDczNDA5MEVGQzM3OTgzRkQxNzVCRTAyRjQ5NDk2NjhB MjE0MzcyMjEwHhcNMjUwNTEyMjM0NDI4WhcNMjUwNTE5MjM0NDI4WjAYMRYwFAYD VQQDEw02ODIyODdkYy1mODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9k/M+Iq/vW0KoIOYpKOdi4UQg1nNsXLblWCvPDwXBsyryQirVZwXSDmyYmy eoYQrMpeYxRISC655Ne2tvihszDwpdbd3iih1Wa0ZPnqiRqtr9pJFeEvHO2XKuOR qzj1mzDVQWIunwLy6oRtSJmVkwmYoqhpXlP7+7JB952hmMw0Zz570kVm5KDqRuvD yIY7MFetdRq3tbN0MF+geL2wsYncWMp8aJqDJTrSmRHQ0R2aXyKlU8UPj5VVniu7 vMGKLfnnTJhaxnNq59CehtRKDdusfGUWwjbUZXTqcZKs2MkTOx5XA297CGnnCRhj E1cRyNkgXTYEzFUs/KyVXA0qhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd7F6sc 6KNyrKOq6m0TyC2E32AZMB8GA1UdIwQYMBaAFHNAkO/DeYP9F1vgL0lJZoohQ3Ih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDI1QS9ENUVGMUE5MDMw QUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdfMFhXLUF2U1VsbWlpRkRj aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2MwQ1E3OE41Z18wWFctQXZTVWxtaWlGRGNpRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDI1QS9ENUVGMUE5MDMwQUQxMUVDOTVCMTVEMThDNEY5QUUwMi9jMENRNzhONWdf MFhXLUF2U1VsbWlpRkRjaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO7kLVo3GBEfeUlTE0fdWypwXcl/CS8cgUmmosROlyBc79V5Hu/hO4 6d1bCEUFWVbhPncDSF3/Z4XDmbVZpcMthwQJ1d2pUsHJxtTY9U5/GOjSHOmlEQOj D/dwLCEcDsB7s/IjP1GvGOa6ZRY7MnbLUl04vh6ER0JqpQ1hPdBeJt/rdWwDM7EY oiauN5IbHBnKAZOWAv0g/jW92DUOSxVWyoTjWGe1YQKG4UO+WimKLcPwSVuH9ecQ tTG0IqtcqSbGmDmM6wIYZAywJqvLVQs58xuzX2HEvtkZ3oGTxrXMGXXCUfoq8dR5 4zFO9NH/ch10c4s07/dxA3Wcb6cALKt/ -----END CERTIFICATE-----Generated at Wed May 14 15:13:45 2025 by rpki-client