$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft File: CUoNzYAqBb91c_96buCnqXIFUNE.mft (raw, json) Hash identifier: bSQ5ncOv5zZ9WvGLh8N7HPVtxwVvbEhB5f12S86ir4Y= Subject key identifier: D5:F1:BC:43:7D:3E:54:C0:63:12:49:17:3C:73:A7:F4:77:86:77:03 Authority key identifier: 09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 Certificate issuer: /CN=A91EC93F/serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft Manifest number: 0180 Signing time: Mon 05 May 2025 02:38:47 +0000 Manifest this update: Mon 05 May 2025 02:38:47 +0000 Manifest next update: Mon 12 May 2025 02:38:47 +0000 Files and hashes: 1: CUoNzYAqBb91c_96buCnqXIFUNE.crl (hash: 4H6sYXt427q2DYHFSO7INX5Yr1np8B18CXkl36tDXWM=) 2: 5BA557A6DEB011EDB7B0C04EC4F9AE02.roa (hash: SAjkukJRb4ZF5aM/fUJAbMY1lnAEeXzzgnRTsvAlM7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93F, serialNumber=094A0DCD802A05BF7573FF7A6EE0A7A9720550D1 Validity Not Before: May 5 02:38:47 2025 GMT Not After : May 12 02:38:47 2025 GMT Subject: CN=681824b7-3a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:95:35:70:49:19:ba:9c:2d:b6:13:18:3f:a9: 33:58:d3:bb:43:e5:f2:63:a8:a9:f3:83:c2:50:16: 75:a5:fc:ba:e1:3f:5c:3a:a2:db:07:1e:70:d6:bb: dd:2e:28:e7:74:01:27:76:6a:04:e3:2b:43:f2:20: dd:67:02:12:6b:a4:7d:b5:2c:9d:d1:da:b5:ed:b2: 42:f3:08:6c:d2:b4:b3:7a:a2:2b:a3:c1:21:74:ec: b5:bb:4d:70:c7:e7:d4:91:0b:27:ed:ff:56:9b:72: 64:7a:7d:cd:fd:a6:6d:4e:10:2b:8a:ac:50:38:79: 24:5b:68:02:3f:54:e4:54:71:42:02:a7:2c:de:0f: 8b:1a:56:2c:e6:f6:16:98:92:47:aa:3d:4b:ad:6b: 32:05:2d:50:04:c9:0c:cb:61:4b:5e:5c:0a:6b:f5: b5:6a:5e:84:5f:a3:6e:f4:bd:56:2e:68:c8:1a:a8: fe:42:bb:b8:d6:8c:ce:0f:9c:ba:3e:a8:e6:f1:4a: 4c:55:82:c1:5c:e1:c2:af:13:3f:b1:54:f4:fc:2e: 4e:78:11:b3:d8:d3:6c:69:77:26:4c:11:bd:33:fb: a2:b8:d0:f8:46:72:b1:e2:75:0a:4b:f9:ec:75:4f: 44:db:c4:9e:4e:87:e9:6e:f9:bc:a5:b3:a4:51:e6: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F1:BC:43:7D:3E:54:C0:63:12:49:17:3C:73:A7:F4:77:86:77:03 X509v3 Authority Key Identifier: keyid:09:4A:0D:CD:80:2A:05:BF:75:73:FF:7A:6E:E0:A7:A9:72:05:50:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUoNzYAqBb91c_96buCnqXIFUNE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93F/60A8F88CDEAD11ED8A6DF14DC4F9AE02/CUoNzYAqBb91c_96buCnqXIFUNE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:23:37:3f:3b:25:bb:16:7e:dc:df:7d:a7:b8:85:d6:fc:80: 0e:23:08:58:9e:63:79:cf:5f:01:4b:5e:c5:9e:ac:ff:87:62: ad:0e:57:0c:99:3b:3c:63:a4:9a:44:25:37:e2:92:33:7d:c3: e9:42:33:62:2e:0a:9d:bf:2e:cc:a8:1e:11:4c:65:b6:f3:0f: 18:2a:27:46:37:ba:92:32:9c:c2:22:97:61:89:7d:46:7b:5b: da:83:db:37:97:62:ad:58:b2:f8:dc:fd:f9:de:10:e2:96:cf: 69:45:47:9a:49:3b:1f:1f:42:4f:56:ae:09:cc:2f:69:b0:85: 7d:a6:65:52:b4:43:f8:22:7a:68:3f:79:3a:be:90:40:c1:eb: f1:13:4e:28:0e:cb:94:5f:33:0f:af:28:e9:4f:ab:bf:cb:d1: 6c:14:1f:f5:8d:5b:8e:28:aa:06:74:01:2a:b2:52:ac:ea:eb: a4:12:d5:ab:3f:c0:5a:97:bd:57:a5:f0:a6:56:73:af:77:48: e4:60:0b:c7:44:f0:88:93:cc:58:b0:3d:9c:4c:f5:1e:09:71: ee:8a:88:8c:19:3b:64:14:80:7f:bb:60:2b:e7:1b:6e:3a:dd: a6:42:1c:ae:de:be:ad:69:2b:a4:d0:0d:5c:2c:70:41:53:35: 04:5a:ff:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0YxMTAvBgNVBAUTKDA5NEEwRENEODAyQTA1QkY3NTczRkY3QTZFRTBBN0E5 NzIwNTUwRDEwHhcNMjUwNTA1MDIzODQ3WhcNMjUwNTEyMDIzODQ3WjAYMRYwFAYD VQQDEw02ODE4MjRiNy0zYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJU1cEkZupwtthMYP6kzWNO7Q+XyY6ip84PCUBZ1pfy64T9cOqLbBx5w1rvd LijndAEndmoE4ytD8iDdZwISa6R9tSyd0dq17bJC8whs0rSzeqIro8EhdOy1u01w x+fUkQsn7f9Wm3Jken3N/aZtThAriqxQOHkkW2gCP1TkVHFCAqcs3g+LGlYs5vYW mJJHqj1LrWsyBS1QBMkMy2FLXlwKa/W1al6EX6Nu9L1WLmjIGqj+Qru41ozOD5y6 Pqjm8UpMVYLBXOHCrxM/sVT0/C5OeBGz2NNsaXcmTBG9M/uiuND4RnKx4nUKS/ns dU9E28SeTofpbvm8pbOkUeaLgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXxvEN9 PlTAYxJJFzxzp/R3hncDMB8GA1UdIwQYMBaAFAlKDc2AKgW/dXP/em7gp6lyBVDR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRi82MEE4Rjg4Q0RF QUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJiOTFjXzk2YnVDbnFYSUZV TkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVb056WUFxQmI5MWNfOTZidUNucVhJRlVORS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRi82MEE4Rjg4Q0RFQUQxMUVEOEE2REYxNERDNEY5QUUwMi9DVW9OellBcUJi OTFjXzk2YnVDbnFYSUZVTkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHIzc/OyW7Fn7c332nuIXW/IAOIwhYnmN5z18BS17Fnqz/h2KtDlcM mTs8Y6SaRCU34pIzfcPpQjNiLgqdvy7MqB4RTGW28w8YKidGN7qSMpzCIpdhiX1G e1vag9s3l2KtWLL43P353hDils9pRUeaSTsfH0JPVq4JzC9psIV9pmVStEP4Inpo P3k6vpBAwevxE04oDsuUXzMPryjpT6u/y9FsFB/1jVuOKKoGdAEqslKs6uukEtWr P8Bal71XpfCmVnOvd0jkYAvHRPCIk8xYsD2cTPUeCXHuioiMGTtkFIB/u2Ar5xtu Ot2mQhyu3r6taSuk0A1cLHBBUzUEWv9w -----END CERTIFICATE-----Generated at Mon May 5 16:14:01 2025 by rpki-client