$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: AmJ1v9GPlmjmMa8z99UYkQVGaGqK5/QGPUIY4riKMvw= Subject key identifier: A9:D6:29:1E:40:F9:E7:89:04:D1:F2:62:4C:D1:BA:C5:DA:B0:FB:22 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: AF Signing time: Tue 13 May 2025 05:14:33 +0000 Manifest this update: Tue 13 May 2025 05:14:33 +0000 Manifest next update: Tue 20 May 2025 05:14:33 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: ibuYUPp7bVTAKGAl/DjQ1e1iG13XE0u07AM2oPUHwzc=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: Iji2xdjNL9b32bfsJ+kVOrXH1mKlpeXd/SW3QeUD+pI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: May 13 05:14:33 2025 GMT Not After : May 20 05:14:33 2025 GMT Subject: CN=6822d539-99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:a4:67:87:57:21:3e:72:f7:35:29:ab:92: 63:85:c6:e9:34:dd:0d:1a:86:a1:39:a1:31:29:42: 11:72:9f:ee:c8:b5:97:3f:7b:72:53:92:f3:3b:25: 19:71:56:93:fd:1a:b2:60:79:65:33:58:b5:29:a4: 4f:9d:b2:12:67:ca:bd:bf:86:38:57:a5:ef:69:0e: 9f:7e:0a:6c:4c:66:10:3e:f2:8f:b7:35:28:bf:e5: 5d:bb:f0:15:b3:97:8d:c0:ff:2c:2a:3b:da:d8:7b: 9d:01:4f:8f:71:80:22:1b:ad:64:7e:cc:01:08:af: 2a:f2:67:bc:88:ba:71:28:d8:9d:51:8f:ac:84:c9: d9:c0:99:2d:6d:7d:2c:59:84:2a:82:54:b8:7b:1c: e6:a8:e9:3a:a1:53:3e:67:0b:bd:91:d8:1d:93:83: 63:a0:d0:4f:ae:ca:dc:99:7a:65:36:51:f7:2e:64: 97:cb:4a:2c:bf:b4:f1:4f:a6:8e:3f:16:0f:06:93: 78:42:11:de:80:ad:46:25:a9:e9:3d:b7:5a:b2:7c: 18:90:3c:9a:19:f8:a2:85:46:50:e2:c0:46:85:a8: 72:76:f0:9c:72:e4:d6:d5:26:2b:2b:7d:1e:9e:5f: 28:b4:78:7a:a1:29:cd:44:13:9b:30:d4:80:c7:cb: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D6:29:1E:40:F9:E7:89:04:D1:F2:62:4C:D1:BA:C5:DA:B0:FB:22 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e3:fd:da:01:fb:35:30:55:f9:6c:7b:03:a5:b2:cc:47:5a: b8:b2:c0:98:d5:2d:86:a0:71:66:37:22:90:2c:6d:66:aa:b1: 7b:e0:5b:68:a9:c3:f0:d9:4d:13:e3:fe:19:ba:d0:90:a3:62: c8:19:e9:34:7f:0a:f7:73:be:a9:f4:71:cf:b8:d1:d4:9c:19: b5:02:d8:57:28:7f:fd:d3:50:13:95:c8:b2:a2:1e:a6:da:c7: c8:30:ce:30:51:a4:3d:9e:5c:35:3d:ed:dd:98:df:90:e0:af: a0:95:83:b4:7c:1f:c7:c7:1e:ed:6d:b3:c8:c3:de:69:b5:12: ca:8e:1e:c1:33:bd:9b:04:7f:4c:c7:5e:53:a1:dc:43:80:59: 68:ad:7c:c1:86:fe:2e:88:86:32:d5:37:c6:0a:f3:92:30:7f: 02:ca:ca:46:31:4d:6e:51:01:50:f7:df:9e:bd:bd:cc:96:16: 4c:71:28:7d:3c:02:16:93:79:bb:58:ab:8a:fc:b5:80:75:53: 95:04:54:d9:35:cb:b5:b6:10:c3:88:31:41:62:fe:26:7d:48: 7a:0a:29:98:03:ee:a1:4c:94:6f:0c:d9:ab:de:1c:d5:f9:bc: eb:04:14:f8:95:98:1b:72:99:f1:d9:06:c8:f0:a6:25:fd:6a: 5f:56:e1:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUwNTEzMDUxNDMzWhcNMjUwNTIwMDUxNDMzWjAYMRYwFAYD VQQDEw02ODIyZDUzOS05OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0I2kZ4dXIT5y9zUpq5JjhcbpNN0NGoahOaExKUIRcp/uyLWXP3tyU5LzOyUZ cVaT/RqyYHllM1i1KaRPnbISZ8q9v4Y4V6XvaQ6ffgpsTGYQPvKPtzUov+Vdu/AV s5eNwP8sKjva2HudAU+PcYAiG61kfswBCK8q8me8iLpxKNidUY+shMnZwJktbX0s WYQqglS4exzmqOk6oVM+Zwu9kdgdk4NjoNBPrsrcmXplNlH3LmSXy0osv7TxT6aO PxYPBpN4QhHegK1GJanpPbdasnwYkDyaGfiihUZQ4sBGhahydvCccuTW1SYrK30e nl8otHh6oSnNRBObMNSAx8tJhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnWKR5A +eeJBNHyYkzRusXasPsiMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA54/3aAfs1MFX5bHsDpbLMR1q4ssCY1S2GoHFmNyKQLG1mqrF74Fto qcPw2U0T4/4ZutCQo2LIGek0fwr3c76p9HHPuNHUnBm1AthXKH/901ATlciyoh6m 2sfIMM4wUaQ9nlw1Pe3dmN+Q4K+glYO0fB/Hxx7tbbPIw95ptRLKjh7BM72bBH9M x15TodxDgFlorXzBhv4uiIYy1TfGCvOSMH8CyspGMU1uUQFQ99+evb3MlhZMcSh9 PAIWk3m7WKuK/LWAdVOVBFTZNcu1thDDiDFBYv4mfUh6CimYA+6hTJRvDNmr3hzV +bzrBBT4lZgbcpnx2QbI8KYl/WpfVuHS -----END CERTIFICATE-----Generated at Wed May 14 01:15:21 2025 by rpki-client