$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: CGXtNZKkiEXNfsYcMXmaWQqbhTmgSp96rMe4l7qBk60= Subject key identifier: 41:D4:68:33:9E:34:FB:F9:72:01:C9:BE:CE:95:D0:42:DF:1E:60:94 Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: B2 Signing time: Thu 15 May 2025 05:19:48 +0000 Manifest this update: Thu 15 May 2025 05:19:48 +0000 Manifest next update: Thu 22 May 2025 05:19:48 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: DXtuxvYJU6vBLrY2qiAIvDigF01sowEyNKiiCpDNrE0=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: May 15 05:19:48 2025 GMT Not After : May 22 05:19:48 2025 GMT Subject: CN=68257974-87d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e3:58:bd:77:e5:59:e9:aa:74:a1:38:c8:f5: 07:b9:79:9c:1e:0d:9f:b9:87:f0:f0:c0:9d:3a:37: 2d:b0:53:3e:8c:94:6a:45:cc:cb:95:51:d5:98:3b: 63:30:04:eb:c8:a1:df:b8:66:ba:d8:8c:52:df:90: 30:0a:b5:94:ae:c7:78:85:e4:d6:23:21:69:f3:3e: f2:9d:31:b5:63:67:20:13:cb:66:46:40:25:fd:5b: 84:dd:d1:01:ae:92:18:a3:28:47:b9:f1:8c:5c:9c: 43:3f:bb:37:c2:77:19:4e:f8:9d:87:dd:85:20:8f: b4:ce:7c:99:6d:3f:32:c6:2c:34:91:f2:da:57:b3: 88:0f:a5:e3:b9:a0:4a:86:4f:d9:78:40:37:1e:66: 23:b4:1a:fc:57:07:ba:e6:93:4e:4f:6b:c1:d1:15: 2e:56:c0:a8:79:81:f8:72:ad:10:fc:1e:33:8c:ca: 7d:50:4d:1b:5f:a9:01:ef:26:85:11:cf:0a:0f:1b: a9:ba:ab:58:27:f2:c5:24:0f:8e:26:fb:10:a6:de: e8:bb:e0:7b:42:9a:2c:f0:31:e9:1c:3a:b6:16:69: 09:5c:a1:e1:f6:73:3b:cc:14:93:64:2e:b4:76:08: b5:5a:0c:7f:92:1d:c4:d9:c2:0f:7f:c7:22:ec:8b: c3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D4:68:33:9E:34:FB:F9:72:01:C9:BE:CE:95:D0:42:DF:1E:60:94 X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:3f:50:e0:de:55:78:a2:31:fc:c8:63:06:af:8e:12:86:d7: 63:b6:e7:bb:f2:99:50:35:a1:43:cb:51:d0:9a:3f:48:14:ef: 46:c6:9b:e8:fc:17:68:90:d1:fc:eb:d7:9a:ba:d5:a9:f5:86: 11:24:14:23:69:42:ca:05:68:50:07:c4:1d:b3:66:96:aa:64: 9a:af:f8:07:d5:9b:dd:10:b6:12:a5:14:e8:b8:36:9c:9b:0c: e0:14:af:9c:b7:2d:bc:f7:cf:83:1c:01:79:02:53:1c:27:5d: 09:87:91:b6:51:54:56:ee:ac:87:50:6b:45:41:a8:6e:e3:ae: c8:75:fb:a3:7d:42:ff:2a:52:20:5a:b7:74:07:98:7d:92:af: 90:ac:e0:08:cd:f6:5e:bc:ca:c7:7c:dc:71:4b:09:00:d4:e9: a9:72:2e:2c:6e:81:3a:96:11:41:94:62:66:72:21:bf:2f:51: 71:f1:c5:0b:dc:b4:03:14:e1:64:97:d2:4c:f7:ad:f1:71:8d: 56:2d:5a:bf:05:87:da:16:b8:de:88:f9:ad:a3:df:7b:5e:25: 3f:ea:d6:21:57:6a:7a:bb:87:b2:39:2d:08:e6:89:1f:85:59: b0:12:e9:df:64:04:d7:26:18:86:15:50:7c:ea:62:61:5a:7b: a4:e8:34:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUwNTE1MDUxOTQ4WhcNMjUwNTIyMDUxOTQ4WjAYMRYwFAYD VQQDEw02ODI1Nzk3NC04N2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uNYvXflWemqdKE4yPUHuXmcHg2fuYfw8MCdOjctsFM+jJRqRczLlVHVmDtj MATryKHfuGa62IxS35AwCrWUrsd4heTWIyFp8z7ynTG1Y2cgE8tmRkAl/VuE3dEB rpIYoyhHufGMXJxDP7s3wncZTvidh92FII+0znyZbT8yxiw0kfLaV7OID6XjuaBK hk/ZeEA3HmYjtBr8Vwe65pNOT2vB0RUuVsCoeYH4cq0Q/B4zjMp9UE0bX6kB7yaF Ec8KDxupuqtYJ/LFJA+OJvsQpt7ou+B7Qpos8DHpHDq2FmkJXKHh9nM7zBSTZC60 dgi1Wgx/kh3E2cIPf8ci7IvDUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHUaDOe NPv5cgHJvs6V0ELfHmCUMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZP1Dg3lV4ojH8yGMGr44Shtdjtue78plQNaFDy1HQmj9IFO9Gxpvo /BdokNH869eautWp9YYRJBQjaULKBWhQB8Qds2aWqmSar/gH1ZvdELYSpRTouDac mwzgFK+cty2898+DHAF5AlMcJ10Jh5G2UVRW7qyHUGtFQahu467IdfujfUL/KlIg Wrd0B5h9kq+QrOAIzfZevMrHfNxxSwkA1Ompci4sboE6lhFBlGJmciG/L1Fx8cUL 3LQDFOFkl9JM963xcY1WLVq/BYfaFrjeiPmto997XiU/6tYhV2p6u4eyOS0I5okf hVmwEunfZATXJhiGFVB86mJhWnuk6DTL -----END CERTIFICATE-----Generated at Fri May 16 19:07:45 2025 by rpki-client