$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft File: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft (raw, json) Hash identifier: npcLZQdvqfmNIuGWplyatgiLMuW8VrwgbLTLkyPc5Fo= Subject key identifier: F6:B3:5E:65:02:22:78:CE:0C:5C:42:34:C2:F6:AE:1A:E2:9A:AD:4B Authority key identifier: 09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF Certificate issuer: /CN=A91E9D0C/serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Certificate serial: 04E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft Manifest number: 04DC Signing time: Sat 10 May 2025 23:21:54 +0000 Manifest this update: Sat 10 May 2025 23:21:53 +0000 Manifest next update: Sat 17 May 2025 23:21:53 +0000 Files and hashes: 1: Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl (hash: KBFYiCY3d/1UjB430vbJClceZ1vEP1bWMEFrSXlFFR8=) 2: 630BCB6E1A1D11EC99B84C20C4F9AE02.roa (hash: DgUDwmkN0T0UntF7QmQLHNafJtdHs9vt+l0U9HNHmvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 23:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1250 (0x4e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9D0C, serialNumber=09DE1967E952EE8E1B2DD60F88F63BA2605753EF Validity Not Before: May 10 23:21:53 2025 GMT Not After : May 17 23:21:53 2025 GMT Subject: CN=681fdf91-d9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:06:9c:24:36:93:dc:ee:d9:0a:83:04:09: f6:a1:4c:97:50:5d:88:89:6a:b4:ad:c8:c2:be:dd: 64:c9:b3:ea:0f:e7:76:84:b4:a9:c8:c0:aa:51:a1: c1:f4:83:0a:8a:00:e1:a7:d5:17:e2:bb:21:c9:7d: 01:d3:09:09:3a:56:e7:33:32:ce:3b:dc:b3:b1:73: 69:21:10:00:75:e2:a8:3a:bd:e3:18:32:cd:d0:82: a1:74:7f:46:c5:6d:7f:5b:fe:a9:94:da:b3:4d:a4: 7e:49:1b:5c:e1:71:05:58:f9:69:3f:bf:59:44:b3: 25:fe:a1:58:21:ac:f8:e4:62:af:2c:26:a7:ac:53: 8e:9e:43:08:c8:6f:13:6d:58:2f:3c:f7:72:0c:48: 56:23:61:ff:a0:ad:df:12:d1:6e:85:e4:2b:f3:52: 7b:9b:04:b8:46:e5:2a:fe:a7:9a:33:27:4a:e7:27: 54:8c:96:19:7e:85:b2:b8:9e:37:98:51:b5:0c:a8: b3:f7:12:47:3b:a2:2b:8d:73:af:84:de:39:03:54: cf:b6:dd:7d:c9:63:f2:87:3d:e2:73:cb:8a:ae:1e: ae:a9:a2:00:a9:ea:b5:2d:42:ce:17:b7:e7:fd:0d: d4:33:23:0a:0d:40:02:99:89:1a:7e:c9:a7:1b:26: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B3:5E:65:02:22:78:CE:0C:5C:42:34:C2:F6:AE:1A:E2:9A:AD:4B X509v3 Authority Key Identifier: keyid:09:DE:19:67:E9:52:EE:8E:1B:2D:D6:0F:88:F6:3B:A2:60:57:53:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9D0C/814F6D041A1A11EC9D1CDF1EC4F9AE02/Cd4ZZ-lS7o4bLdYPiPY7omBXU-8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:65:1c:ac:81:57:74:1a:57:53:04:4c:67:0c:09:cf:9b:78: 75:82:d8:7a:ba:32:ff:92:a0:d2:dd:c4:a4:54:0c:b0:3f:ec: 26:7d:bc:d8:b0:09:f6:c1:91:b9:22:6b:fa:1b:66:db:ca:7b: d4:09:e6:80:48:79:91:e1:27:d8:5f:18:d8:16:de:7e:da:f8: 60:c3:00:94:0b:83:f3:34:38:63:9f:9c:3f:2e:de:23:95:d2: 0e:1b:93:1e:68:7d:52:1a:72:29:bb:e5:e5:cc:a2:a2:88:3e: a7:7c:e9:a4:77:cd:42:6a:b5:39:ae:8c:2e:5b:fa:74:04:5e: be:8d:6a:6d:72:f5:6b:90:98:99:71:ae:6c:29:ab:12:fd:e0: cc:6e:23:c5:87:7d:d7:fa:1c:67:79:ed:84:1b:c2:6f:ca:09: a4:a2:28:e6:47:65:ab:77:d7:40:6c:b6:a0:38:05:1e:e5:47: 02:48:ea:cc:2d:92:15:33:13:d6:62:72:6b:23:18:9e:45:2c: d9:58:93:03:01:f0:fd:8c:97:e0:7d:44:06:d9:d1:d1:c9:e9: d6:53:05:35:4c:91:d6:04:15:f2:d9:80:58:fb:4d:93:fb:cb: 69:2b:2c:fa:b2:df:2a:1b:c4:78:df:f9:36:53:d9:9b:24:75: be:5e:89:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTlEMEMxMTAvBgNVBAUTKDA5REUxOTY3RTk1MkVFOEUxQjJERDYwRjg4RjYzQkEy NjA1NzUzRUYwHhcNMjUwNTEwMjMyMTUzWhcNMjUwNTE3MjMyMTUzWjAYMRYwFAYD VQQDEw02ODFmZGY5MS1kOWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgMGnCQ2k9zu2QqDBAn2oUyXUF2IiWq0rcjCvt1kybPqD+d2hLSpyMCqUaHB 9IMKigDhp9UX4rshyX0B0wkJOlbnMzLOO9yzsXNpIRAAdeKoOr3jGDLN0IKhdH9G xW1/W/6plNqzTaR+SRtc4XEFWPlpP79ZRLMl/qFYIaz45GKvLCanrFOOnkMIyG8T bVgvPPdyDEhWI2H/oK3fEtFuheQr81J7mwS4RuUq/qeaMydK5ydUjJYZfoWyuJ43 mFG1DKiz9xJHO6IrjXOvhN45A1TPtt19yWPyhz3ic8uKrh6uqaIAqeq1LULOF7fn /Q3UMyMKDUACmYkafsmnGyazqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPazXmUC InjODFxCNML2rhrimq1LMB8GA1UdIwQYMBaAFAneGWfpUu6OGy3WD4j2O6JgV1Pv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUQwQy84MTRGNkQwNDFB MUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdvNGJMZFlQaVBZN29tQlhV LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NkNFpaLWxTN280YkxkWVBpUFk3b21CWFUtOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OUQwQy84MTRGNkQwNDFBMUExMUVDOUQxQ0RGMUVDNEY5QUUwMi9DZDRaWi1sUzdv NGJMZFlQaVBZN29tQlhVLTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuZRysgVd0GldTBExnDAnPm3h1gth6ujL/kqDS3cSkVAywP+wmfbzY sAn2wZG5Imv6G2bbynvUCeaASHmR4SfYXxjYFt5+2vhgwwCUC4PzNDhjn5w/Lt4j ldIOG5MeaH1SGnIpu+XlzKKiiD6nfOmkd81CarU5rowuW/p0BF6+jWptcvVrkJiZ ca5sKasS/eDMbiPFh33X+hxnee2EG8JvygmkoijmR2Wrd9dAbLagOAUe5UcCSOrM LZIVMxPWYnJrIxieRSzZWJMDAfD9jJfgfUQG2dHRyenWUwU1TJHWBBXy2YBY+02T +8tpKyz6st8qG8R43/k2U9mbJHW+Xonj -----END CERTIFICATE-----Generated at Sun May 11 08:34:18 2025 by rpki-client