$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft File: ccY9WQk_BNBLObseorRpLN_Rb-E.mft (raw, json) Hash identifier: 9TbDuCmI8WhKlDvIAWox42I6yd/MVi3dnj9y/FxPmtA= Subject key identifier: FA:83:77:FE:85:72:FC:06:FF:FE:D7:AB:0C:66:F8:27:C7:9C:3D:8C Authority key identifier: 71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 Certificate issuer: /CN=A91D6721/serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Certificate serial: 08F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft Manifest number: 08EE Signing time: Wed 14 May 2025 20:29:15 +0000 Manifest this update: Wed 14 May 2025 20:29:14 +0000 Manifest next update: Wed 21 May 2025 20:29:14 +0000 Files and hashes: 1: ccY9WQk_BNBLObseorRpLN_Rb-E.crl (hash: Ii7GCzIxRDgLOYTysd1Pe0GTzNm+FAxTRICKEg5L49s=) 2: CD77D766287911ED93621A30C4F9AE02.roa (hash: 9wjECpQxMHiWIScEWQz9Aw6dt/TmNOFZhpVGY5NdNQY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2293 (0x8f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6721, serialNumber=71C63D59093F04D04B39BB1EA2B4692CDFD16FE1 Validity Not Before: May 14 20:29:14 2025 GMT Not After : May 21 20:29:14 2025 GMT Subject: CN=6824fd1b-b3dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:e7:93:0c:25:ea:ec:10:17:ff:9b:5e:9b:5c: 8b:35:82:18:e2:a0:4d:f5:09:6d:b8:4c:d6:7d:50: 71:8c:38:68:5d:a8:9f:b4:42:10:25:ba:78:0a:10: 4d:41:28:ae:12:04:55:c8:c8:bd:35:05:82:c7:25: a8:64:9d:83:db:d0:4b:5b:4f:b6:b3:ca:cd:a6:f4: 10:5b:a5:27:6d:20:b0:bf:9d:55:b6:61:05:10:f2: 98:2c:1d:a9:de:aa:3b:5c:c7:7c:e0:9e:c2:16:07: 54:b5:aa:89:68:ac:08:c8:17:c4:6a:a7:da:ca:a6: d4:05:63:13:67:c4:55:81:60:37:bd:20:9c:fa:71: c3:7d:45:0e:95:23:2c:17:1c:32:a7:1d:29:93:0a: 71:45:47:be:d5:89:5d:8e:bd:e5:a0:a1:74:d3:80: f1:ba:6e:44:8f:2a:e4:15:fb:94:45:47:0a:69:b3: 12:44:18:48:e8:4d:f2:f9:19:f9:c1:e3:15:9a:36: a4:61:fd:b9:ac:fd:b4:13:0e:b3:50:76:4f:46:20: 0a:73:a2:cc:8e:50:55:fa:f6:38:13:1e:92:32:2d: cb:42:5e:2c:db:ee:78:2a:8f:0e:4c:5a:b4:c8:01: 82:56:06:1c:a1:7e:e4:f8:d6:a6:d9:62:ff:fd:89: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:83:77:FE:85:72:FC:06:FF:FE:D7:AB:0C:66:F8:27:C7:9C:3D:8C X509v3 Authority Key Identifier: keyid:71:C6:3D:59:09:3F:04:D0:4B:39:BB:1E:A2:B4:69:2C:DF:D1:6F:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccY9WQk_BNBLObseorRpLN_Rb-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6721/A3C06AD6A9BF11EAA304A023C4F9AE02/ccY9WQk_BNBLObseorRpLN_Rb-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:6c:c7:19:41:18:3c:1c:f1:7d:73:b9:dc:7f:bc:0f:db:41: 8a:0d:ab:5a:71:18:fb:c5:b7:e7:7f:dd:ab:7c:43:5c:6b:6f: 7e:a8:43:31:30:7c:3e:80:99:1c:23:1b:9e:e7:41:7d:7d:75: 72:e7:6b:53:21:a0:7a:85:d5:fd:45:62:c4:0c:30:25:7d:f7: d0:cc:11:02:75:e2:2a:f4:3e:7f:93:57:34:6b:40:d5:28:a7: a4:a7:f5:7f:2a:6d:95:ca:30:a5:90:d6:89:54:42:8d:20:00: 67:75:c7:40:61:00:4e:78:82:86:4f:6f:17:55:6f:52:9f:68: 47:65:68:f2:23:ca:da:bf:75:d3:b3:87:5b:55:8a:6c:2d:a5: d1:fb:2d:d2:05:ac:ff:51:c6:f3:7e:53:51:48:b1:f4:4e:99: 11:4c:6f:35:f0:9b:bb:50:69:34:35:e4:73:a2:f2:9b:c0:7e: 9e:07:6b:25:d5:44:ec:04:4a:09:77:2f:5d:59:e2:eb:e6:69: 24:c6:b1:14:23:67:96:ab:f7:ac:71:50:3b:cf:3e:9d:a8:aa: 49:3e:5c:fe:9e:da:51:c5:89:d1:f5:8e:71:a4:0c:9c:e3:a3: c7:ce:6b:a0:fd:ed:6c:a7:bc:79:32:9d:d9:e1:d5:df:23:65: 55:39:46:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3MjExMTAvBgNVBAUTKDcxQzYzRDU5MDkzRjA0RDA0QjM5QkIxRUEyQjQ2OTJD REZEMTZGRTEwHhcNMjUwNTE0MjAyOTE0WhcNMjUwNTIxMjAyOTE0WjAYMRYwFAYD VQQDEw02ODI0ZmQxYi1iM2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ueTDCXq7BAX/5tem1yLNYIY4qBN9QltuEzWfVBxjDhoXaiftEIQJbp4ChBN QSiuEgRVyMi9NQWCxyWoZJ2D29BLW0+2s8rNpvQQW6UnbSCwv51VtmEFEPKYLB2p 3qo7XMd84J7CFgdUtaqJaKwIyBfEaqfayqbUBWMTZ8RVgWA3vSCc+nHDfUUOlSMs Fxwypx0pkwpxRUe+1Yldjr3loKF004Dxum5EjyrkFfuURUcKabMSRBhI6E3y+Rn5 weMVmjakYf25rP20Ew6zUHZPRiAKc6LMjlBV+vY4Ex6SMi3LQl4s2+54Ko8OTFq0 yAGCVgYcoX7k+Nam2WL//YnTZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqDd/6F cvwG//7Xqwxm+CfHnD2MMB8GA1UdIwQYMBaAFHHGPVkJPwTQSzm7HqK0aSzf0W/h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjcyMS9BM0MwNkFENkE5 QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JOQkxPYnNlb3JScExOX1Ji LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjWTlXUWtfQk5CTE9ic2VvclJwTE5fUmItRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjcyMS9BM0MwNkFENkE5QkYxMUVBQTMwNEEwMjNDNEY5QUUwMi9jY1k5V1FrX0JO QkxPYnNlb3JScExOX1JiLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhbMcZQRg8HPF9c7ncf7wP20GKDatacRj7xbfnf92rfENca29+qEMx MHw+gJkcIxue50F9fXVy52tTIaB6hdX9RWLEDDAlfffQzBECdeIq9D5/k1c0a0DV KKekp/V/Km2VyjClkNaJVEKNIABndcdAYQBOeIKGT28XVW9Sn2hHZWjyI8rav3XT s4dbVYpsLaXR+y3SBaz/UcbzflNRSLH0TpkRTG818Ju7UGk0NeRzovKbwH6eB2sl 1UTsBEoJdy9dWeLr5mkkxrEUI2eWq/escVA7zz6dqKpJPlz+ntpRxYnR9Y5xpAyc 46PHzmug/e1sp7x5Mp3Z4dXfI2VVOUZ2 -----END CERTIFICATE-----Generated at Thu May 15 00:16:39 2025 by rpki-client