$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: TIxXoSo0+x/2EcRyIAIjlYETHfyk+junwJ7j+NFozx0= Subject key identifier: CC:FD:27:B9:B1:C6:CD:68:F6:5B:87:FF:FF:E1:82:63:64:14:F3:DC Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0103 Signing time: Thu 15 May 2025 04:29:44 +0000 Manifest this update: Thu 15 May 2025 04:29:43 +0000 Manifest next update: Thu 22 May 2025 04:29:43 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: ryY1wtiYsTZgMKRFInxztTMSVuH2vRDEqNNZfgXRvZA=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: May 15 04:29:43 2025 GMT Not After : May 22 04:29:43 2025 GMT Subject: CN=68256db7-1003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:b6:ba:20:c0:ea:e7:43:b2:e9:d4:4f:b1: dd:4c:8e:19:4a:3f:17:70:8e:77:df:73:79:d2:20: 4a:3d:5f:cb:06:15:24:8c:7d:b3:da:fd:b5:c8:d5: 33:50:6d:51:48:32:62:44:53:7f:51:d3:74:0d:f0: 16:93:c0:ab:3e:a1:09:db:c2:0d:86:45:47:0a:d6: 77:53:1f:7e:a0:ea:db:21:c4:9d:4d:f9:72:3e:d3: a8:7a:e0:6e:8e:8a:dc:e0:49:61:1e:ad:06:01:89: 9f:52:3b:6c:af:89:82:11:79:4c:44:a8:be:17:92: 94:33:cf:0b:02:5a:e0:bf:19:21:f9:25:c1:9e:e3: b8:c0:45:78:aa:3c:ef:00:da:a3:8c:eb:70:04:a9: cb:d2:8a:3a:e6:34:6a:18:bb:8e:64:1c:35:e9:ae: a8:b0:8a:70:71:f2:9e:b2:83:cd:a8:a7:0a:9d:35: 02:e9:79:d0:14:6d:ea:7d:2b:e5:d5:c0:03:2c:93: e0:ca:9e:f7:5e:72:f5:47:aa:52:fe:dd:77:92:89: 6d:84:5b:9f:b1:d1:77:d3:17:12:a7:49:01:3b:02: 20:88:a2:bb:05:ce:61:e9:14:64:df:28:0d:c5:4a: cc:59:58:f7:ca:89:4f:fb:22:27:48:5b:cf:f7:9e: 87:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FD:27:B9:B1:C6:CD:68:F6:5B:87:FF:FF:E1:82:63:64:14:F3:DC X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:97:89:19:8b:1e:2c:f2:a8:a2:c6:b0:96:30:fd:0a:4e:91: 64:92:49:32:db:07:60:76:8c:0a:51:1e:33:4b:f3:87:90:38: 7b:4c:0c:9a:d3:7d:ed:ab:86:1a:85:90:86:72:56:de:5d:1f: 63:6e:f4:ff:5b:95:72:67:e2:71:f5:08:82:69:1c:c1:3d:9a: 8f:23:31:fe:9c:5c:43:c5:44:4c:b7:cd:70:df:9b:04:62:ec: 99:dc:45:ea:52:d4:2c:3d:2d:70:88:39:b8:e7:6e:fd:8a:17: 02:eb:f1:b7:11:56:02:6e:26:d7:64:db:2e:19:59:41:a7:d3: 03:92:11:3d:50:ad:65:48:f9:aa:d9:95:1e:45:89:64:9b:26: b1:1d:3c:ac:7d:7f:c5:89:00:30:78:ed:4e:6d:e1:0a:54:b2: 56:bb:ea:11:44:18:8c:63:80:7b:4d:a8:82:22:94:47:8e:45: b6:ad:ee:76:db:ae:c9:c0:56:29:7f:c4:f5:ef:44:f8:ea:84: 8b:f7:a9:71:37:c3:fe:da:af:dc:c8:6e:4a:fc:0c:1b:a4:19: fd:a5:2b:f4:0e:ae:b4:73:0d:e1:5b:77:8f:d4:2a:5d:5b:21: ce:f1:32:df:84:49:71:3d:d3:52:ac:ca:23:37:8f:9c:75:22: 01:a1:92:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNTE1MDQyOTQzWhcNMjUwNTIyMDQyOTQzWjAYMRYwFAYD VQQDEw02ODI1NmRiNy0xMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7u2uiDA6udDsunUT7HdTI4ZSj8XcI5333N50iBKPV/LBhUkjH2z2v21yNUz UG1RSDJiRFN/UdN0DfAWk8CrPqEJ28INhkVHCtZ3Ux9+oOrbIcSdTflyPtOoeuBu jorc4ElhHq0GAYmfUjtsr4mCEXlMRKi+F5KUM88LAlrgvxkh+SXBnuO4wEV4qjzv ANqjjOtwBKnL0oo65jRqGLuOZBw16a6osIpwcfKesoPNqKcKnTUC6XnQFG3qfSvl 1cADLJPgyp73XnL1R6pS/t13kolthFufsdF30xcSp0kBOwIgiKK7Bc5h6RRk3ygN xUrMWVj3yolP+yInSFvP956HuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMz9J7mx xs1o9luH///hgmNkFPPcMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXl4kZix4s8qiixrCWMP0KTpFkkkky2wdgdowKUR4zS/OHkDh7TAya 033tq4YahZCGclbeXR9jbvT/W5VyZ+Jx9QiCaRzBPZqPIzH+nFxDxURMt81w35sE YuyZ3EXqUtQsPS1wiDm45279ihcC6/G3EVYCbibXZNsuGVlBp9MDkhE9UK1lSPmq 2ZUeRYlkmyaxHTysfX/FiQAweO1ObeEKVLJWu+oRRBiMY4B7TaiCIpRHjkW2re52 267JwFYpf8T170T46oSL96lxN8P+2q/cyG5K/AwbpBn9pSv0Dq60cw3hW3eP1Cpd WyHO8TLfhElxPdNSrMojN4+cdSIBoZLu -----END CERTIFICATE-----Generated at Fri May 16 11:34:54 2025 by rpki-client