$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: RSTzJ64RZBDZ3M4h6yZSnYZxaKntuNY8TJi2f2UMHgI= Subject key identifier: 98:EA:BE:AD:69:49:EE:5D:2E:A3:FE:E3:E6:8F:01:F3:B8:60:62:24 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 065F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 065F Signing time: Fri 16 May 2025 22:39:52 +0000 Manifest this update: Fri 16 May 2025 22:39:51 +0000 Manifest next update: Fri 23 May 2025 22:39:51 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: msaIOAM+LK0U3QuD9NJ1rTsQzyWy1nCn/XOjVxqy3x8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 22:39:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1631 (0x65f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: May 16 22:39:51 2025 GMT Not After : May 23 22:39:51 2025 GMT Subject: CN=6827beb8-2e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:76:ea:94:35:df:4c:1e:87:b8:87:3a:82:d5: 7c:60:3a:47:85:f8:34:a3:47:67:e9:b1:7c:e9:7a: f7:47:60:f9:92:1e:34:85:ef:e4:2d:0b:57:a5:1c: f5:17:dd:8c:7f:aa:a7:b7:13:b4:96:68:e8:25:ac: d1:71:41:cd:71:b4:47:88:25:03:ea:a9:fa:fa:ac: 8a:5e:5f:b6:10:10:69:04:ae:0d:c0:55:d0:f1:84: 3c:0d:7a:dc:d0:3e:97:a9:00:5f:c5:1d:f0:98:8e: 27:9f:c6:58:fe:06:57:2e:50:60:20:24:04:11:2c: d0:c6:91:45:16:71:96:1d:fd:a1:83:51:31:34:ad: b8:fa:09:47:c5:19:57:fe:fc:b1:2d:30:4c:d7:71: 49:92:6f:18:b3:29:57:4f:21:bd:4c:63:db:78:91: 8d:54:b2:de:6d:fd:82:70:42:77:60:e3:38:53:36: 21:ce:22:91:88:57:b0:a7:5f:d2:4f:b6:4f:61:72: 69:11:df:3b:36:45:72:ac:12:e8:29:3b:b7:73:22: 4f:1d:1a:12:1d:05:e6:51:c8:cf:96:fd:51:2a:17: cc:28:87:00:cd:18:2c:b4:ee:e7:d4:d0:9b:63:28: c5:40:d2:fd:89:08:2b:ea:ec:ab:2f:de:cb:eb:db: 1a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EA:BE:AD:69:49:EE:5D:2E:A3:FE:E3:E6:8F:01:F3:B8:60:62:24 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:18:b9:46:25:6b:47:80:e3:ad:4a:a6:b0:54:86:16:d9:5f: 0b:d3:8c:4b:7d:28:39:2d:e6:1f:77:25:9f:da:d7:6c:ae:7d: d8:94:65:c9:53:10:3a:4e:88:cb:a8:8c:dd:41:4e:6c:b8:98: 69:db:04:3b:29:4d:8e:5c:90:52:cb:d1:23:cd:0c:8f:37:0b: ae:a3:fb:eb:b5:cc:cf:08:b8:53:8b:6f:07:fc:da:42:6b:5f: c8:7f:84:c5:9a:6b:7a:4c:62:b3:0f:8e:4b:0f:a9:37:02:d4: 15:60:c9:84:fd:b9:9b:d4:f2:4c:26:3e:49:30:c0:70:8c:8d: cf:2c:48:6d:8d:4c:3a:bf:a3:33:0d:88:d9:4a:20:46:8e:df: 7d:a2:52:ea:bd:57:36:8f:57:c1:99:b5:83:4a:15:76:0e:c9: 0a:8c:ad:c1:fd:e0:f1:4a:27:91:06:a8:25:2a:bd:bb:5a:1b: d1:fb:ca:bb:5a:88:e0:e0:fe:52:f3:bd:24:cf:50:c2:cc:ce: c4:8b:cf:57:0b:d7:33:86:c2:16:09:d8:99:14:f4:84:2f:e1: 7c:7c:b1:2f:2d:8d:75:97:bf:87:f1:16:ac:50:58:e0:2c:69: 44:6d:28:4e:47:48:39:74:4c:3f:cb:91:07:25:85:92:dd:cd: 0f:d7:a4:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUwNTE2MjIzOTUxWhcNMjUwNTIzMjIzOTUxWjAYMRYwFAYD VQQDEw02ODI3YmViOC0yZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XbqlDXfTB6HuIc6gtV8YDpHhfg0o0dn6bF86Xr3R2D5kh40he/kLQtXpRz1 F92Mf6qntxO0lmjoJazRcUHNcbRHiCUD6qn6+qyKXl+2EBBpBK4NwFXQ8YQ8DXrc 0D6XqQBfxR3wmI4nn8ZY/gZXLlBgICQEESzQxpFFFnGWHf2hg1ExNK24+glHxRlX /vyxLTBM13FJkm8YsylXTyG9TGPbeJGNVLLebf2CcEJ3YOM4UzYhziKRiFewp1/S T7ZPYXJpEd87NkVyrBLoKTu3cyJPHRoSHQXmUcjPlv1RKhfMKIcAzRgstO7n1NCb YyjFQNL9iQgr6uyrL97L69saVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjqvq1p Se5dLqP+4+aPAfO4YGIkMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSGLlGJWtHgOOtSqawVIYW2V8L04xLfSg5LeYfdyWf2tdsrn3YlGXJ UxA6TojLqIzdQU5suJhp2wQ7KU2OXJBSy9EjzQyPNwuuo/vrtczPCLhTi28H/NpC a1/If4TFmmt6TGKzD45LD6k3AtQVYMmE/bmb1PJMJj5JMMBwjI3PLEhtjUw6v6Mz DYjZSiBGjt99olLqvVc2j1fBmbWDShV2DskKjK3B/eDxSieRBqglKr27WhvR+8q7 Wojg4P5S870kz1DCzM7Ei89XC9czhsIWCdiZFPSEL+F8fLEvLY11l7+H8RasUFjg LGlEbShOR0g5dEw/y5EHJYWS3c0P16Te -----END CERTIFICATE-----Generated at Sat May 17 08:36:50 2025 by rpki-client