$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: Zye4AmkodfGyzVE8LbTge1UfaRk7yJgx2IKmQQCbjsc= Subject key identifier: B4:91:11:53:13:6F:2E:DC:C2:D2:EF:86:C5:B9:39:2E:B1:02:78:B2 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 0155 Signing time: Tue 13 May 2025 03:20:29 +0000 Manifest this update: Tue 13 May 2025 03:20:29 +0000 Manifest next update: Tue 20 May 2025 03:20:29 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: cDU3iYm0wJjCpxHC5QQVTE/R1L4HFQgeiOvlAfaOQY8=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 03:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5, serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Validity Not Before: May 13 03:20:29 2025 GMT Not After : May 20 03:20:29 2025 GMT Subject: CN=6822ba7d-4df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6d:52:b0:19:0a:37:39:56:8f:2f:af:39:2e: c8:d2:ea:63:58:05:ba:d7:57:46:3b:00:fd:0a:39: 60:f1:d8:96:49:90:be:6b:8b:db:82:f4:70:6c:bd: 87:51:d7:1f:2b:2c:5a:d8:4d:e2:9d:e8:e5:a3:8b: 8a:8b:f2:aa:aa:46:c8:e7:10:86:6e:ef:75:0c:09: 5d:e0:11:88:fe:8c:5e:db:7b:2c:a4:51:f9:64:19: a7:7f:64:e8:05:cb:2f:0c:5e:c5:22:25:6b:89:42: 2e:ec:f1:8f:6e:92:d2:31:6c:ed:ab:b8:2a:79:ed: c6:05:a9:da:b7:ca:1d:b3:dd:03:f1:e0:ff:59:23: 72:0e:22:48:17:7d:89:da:67:2b:22:e9:3c:b5:86: 22:16:af:33:98:26:98:c3:ff:7e:f9:cf:fe:99:28: 78:db:2f:53:05:f0:1b:dc:0f:8f:bd:f0:71:fc:19: fa:94:d5:32:1c:2e:2b:b8:61:a3:cf:9f:1b:42:04: 0e:9b:d9:33:ea:c9:d3:e4:d1:b7:b8:82:99:ba:f1: 9f:e9:94:b1:51:e6:9b:6c:52:6d:cb:44:7a:59:84: f3:76:2f:81:56:ad:26:da:44:0c:2c:2a:73:a6:95: b0:ac:7f:59:dd:02:7a:90:a8:36:e3:a0:6d:ea:80: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:91:11:53:13:6F:2E:DC:C2:D2:EF:86:C5:B9:39:2E:B1:02:78:B2 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:5a:c1:0d:59:46:aa:55:60:6e:08:c0:cf:6c:2a:48:8b:95: 84:e4:00:a5:15:e0:d6:0b:a2:c5:d0:74:f5:39:ee:91:5c:d6: 78:8b:24:30:14:36:71:d8:78:17:ab:82:1d:a8:85:c6:81:18: 50:ab:c0:ac:5f:d1:1f:ef:34:86:5f:78:35:af:de:ac:f2:39: e1:6e:da:82:2c:2b:79:8c:41:11:e0:bd:f2:d9:d3:a9:8d:a3: 5c:ec:e7:b2:b4:c3:0f:aa:ef:3d:58:8b:72:fd:c6:ec:11:37: 67:3a:01:92:21:d7:6b:93:8a:c0:64:79:9f:4c:f8:a8:28:ea: 1c:5e:25:ee:d7:42:31:cb:89:80:d3:ec:f7:f5:92:f7:ac:5f: da:a5:d2:88:5f:8e:e2:93:17:ef:19:11:0e:e7:b2:ad:2a:19: 39:de:22:27:50:35:e1:26:eb:5a:c5:5c:e0:42:38:c8:88:28: fa:5b:14:e1:f2:0c:61:b7:45:ea:04:8c:b1:26:23:08:b9:2c: ad:ad:b9:2e:d8:c7:57:62:60:51:83:05:5b:a0:ce:59:41:2a: 72:a8:b7:b9:b6:a5:cd:f4:69:64:32:d6:13:f7:18:4f:ee:10: 75:d2:cc:6f:7d:5f:50:dc:80:db:67:ac:38:58:c8:94:72:c1: 86:6d:12:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwNTEzMDMyMDI5WhcNMjUwNTIwMDMyMDI5WjAYMRYwFAYD VQQDEw02ODIyYmE3ZC00ZGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5G1SsBkKNzlWjy+vOS7I0upjWAW611dGOwD9Cjlg8diWSZC+a4vbgvRwbL2H UdcfKyxa2E3inejlo4uKi/KqqkbI5xCGbu91DAld4BGI/oxe23sspFH5ZBmnf2To BcsvDF7FIiVriUIu7PGPbpLSMWztq7gqee3GBanat8ods90D8eD/WSNyDiJIF32J 2mcrIuk8tYYiFq8zmCaYw/9++c/+mSh42y9TBfAb3A+PvfBx/Bn6lNUyHC4ruGGj z58bQgQOm9kz6snT5NG3uIKZuvGf6ZSxUeabbFJty0R6WYTzdi+BVq0m2kQMLCpz ppWwrH9Z3QJ6kKg246Bt6oCgqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSREVMT by7cwtLvhsW5OS6xAniyMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFWsENWUaqVWBuCMDPbCpIi5WE5AClFeDWC6LF0HT1Oe6RXNZ4iyQw FDZx2HgXq4IdqIXGgRhQq8CsX9Ef7zSGX3g1r96s8jnhbtqCLCt5jEER4L3y2dOp jaNc7OeytMMPqu89WIty/cbsETdnOgGSIddrk4rAZHmfTPioKOocXiXu10Ixy4mA 0+z39ZL3rF/apdKIX47ikxfvGREO57KtKhk53iInUDXhJutaxVzgQjjIiCj6WxTh 8gxht0XqBIyxJiMIuSytrbku2MdXYmBRgwVboM5ZQSpyqLe5tqXN9GlkMtYT9xhP 7hB10sxvfV9Q3IDbZ6w4WMiUcsGGbRK3 -----END CERTIFICATE-----Generated at Wed May 14 21:04:24 2025 by rpki-client