$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: cofC+0HsoiveYq0zosOpnO4syHcI5xfTeglG6PHuIU4= Subject key identifier: DF:B4:71:48:15:B1:63:32:2B:E9:8A:8D:1A:A2:E6:AD:5C:EB:61:0A Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0519 Signing time: Fri 04 Apr 2025 23:45:21 +0000 Manifest this update: Fri 04 Apr 2025 23:45:20 +0000 Manifest next update: Fri 11 Apr 2025 23:45:20 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: BNcPGG6z0jwwJ5m/adgChpxca+GzkGhcLWFDklq0lIU=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 4bP+/xCzlCHzMiPDDeZZu8ryV1WmsI6f+3c5qjtpUM8=) 3: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: 3s0Y71iF/fsJNHbeREVW+BHHh6vRQTKc/vlJskM3cQo=) 4: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: DJiem+mJ9guPOqkkTAIozTCpaBw0W78lezIlNh26BC0=) 5: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: qkcR8ZEDC9+iqlFe5dp0WkDY8PQPtYRvJuQb0n842mU=) 6: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:45:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3 Validity Not Before: Apr 4 23:45:20 2025 GMT Not After : Apr 11 23:45:20 2025 GMT Subject: CN=67f06f10-c926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:00:fe:ac:78:e3:cb:90:fc:3b:37:49:19: 49:87:60:32:f8:cb:c8:9a:02:0a:a0:ca:d3:b8:33: ee:a4:36:16:3c:a5:e0:f1:39:de:67:a5:aa:29:f1: 82:d9:c9:1e:6b:aa:03:05:44:87:45:2f:29:b9:b0: ff:5c:9f:c5:b9:77:b2:c4:e8:96:c5:9a:6a:af:a1: 77:db:25:24:ff:54:66:c8:1d:9f:cb:5f:57:35:7d: 6d:ad:6c:17:ee:03:bd:99:f2:7a:7f:c5:98:5c:c7: bd:e5:9a:ac:39:29:6e:ff:ca:73:cf:26:8c:f5:89: 0e:77:b7:35:ab:af:18:e9:fb:f0:dd:f9:ec:e1:ab: 45:bb:73:26:d6:d2:79:5e:b3:bb:1c:b5:c9:c2:43: 88:38:2d:72:5c:3c:31:2e:ac:61:a2:45:59:69:0a: a2:c5:0b:33:a7:23:7a:0c:07:58:30:42:82:4f:a9: f3:e0:db:92:b9:b2:6e:96:13:42:cb:7e:07:81:fe: dd:4f:cf:1e:5f:9e:e9:45:57:39:6c:07:94:f6:4a: 45:96:e8:cc:9b:e3:d4:f5:0f:86:e2:64:37:e8:13: e8:17:2d:c3:b1:e6:32:bc:68:49:db:eb:4c:c9:d1: 65:12:2f:4c:ac:d5:e0:3c:92:44:99:92:4f:62:d8: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B4:71:48:15:B1:63:32:2B:E9:8A:8D:1A:A2:E6:AD:5C:EB:61:0A X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:a5:44:17:82:50:33:c9:13:1c:77:a0:b7:ae:f0:d5:d5:bb: 18:3f:15:35:37:00:a2:27:74:e4:25:a7:0e:ac:ce:80:f5:93: 00:d6:ce:03:4d:f1:f8:f4:8d:61:ff:a4:61:aa:03:a1:52:21: b6:94:01:6c:1e:60:de:71:d1:86:2c:05:82:3e:f8:39:6e:6b: 66:54:75:db:57:a3:09:f9:25:70:80:42:7c:34:c0:61:c9:b3: 66:cb:e9:81:d4:5e:98:7c:9e:a7:1d:3c:4f:48:74:02:34:b9: be:4b:93:ac:7b:38:37:5a:a5:4b:58:40:2e:ff:35:c3:75:66: 5f:43:e3:df:c1:74:2d:51:1f:35:d7:b6:79:f0:44:4a:7f:07: f6:c8:0e:58:e9:aa:f9:fe:cc:29:65:31:7f:8e:d0:d6:e2:cf: 76:d4:1d:3c:c1:da:18:cb:b8:9e:6b:97:91:36:a7:7d:d3:99: 46:3f:b7:b7:be:b9:b2:17:e8:3d:5a:59:b6:dc:18:98:32:0d: 5d:34:55:60:c5:e6:88:92:05:08:da:c5:f2:5d:3c:af:16:23: e5:26:96:ad:fc:ca:d2:99:bc:c6:54:21:74:a2:56:5d:d1:31: 7d:2d:b9:b5:c7:4c:79:64:18:33:11:e7:2d:cc:cd:fa:b8:ef: 67:06:20:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwNDA0MjM0NTIwWhcNMjUwNDExMjM0NTIwWjAYMRYwFAYD VQQDEw02N2YwNmYxMC1jOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUsA/qx448uQ/Ds3SRlJh2Ay+MvImgIKoMrTuDPupDYWPKXg8TneZ6WqKfGC 2ckea6oDBUSHRS8pubD/XJ/FuXeyxOiWxZpqr6F32yUk/1RmyB2fy19XNX1trWwX 7gO9mfJ6f8WYXMe95ZqsOSlu/8pzzyaM9YkOd7c1q68Y6fvw3fns4atFu3Mm1tJ5 XrO7HLXJwkOIOC1yXDwxLqxhokVZaQqixQszpyN6DAdYMEKCT6nz4NuSubJulhNC y34Hgf7dT88eX57pRVc5bAeU9kpFlujMm+PU9Q+G4mQ36BPoFy3DseYyvGhJ2+tM ydFlEi9MrNXgPJJEmZJPYtgNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+0cUgV sWMyK+mKjRqi5q1c62EKMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnpUQXglAzyRMcd6C3rvDV1bsYPxU1NwCiJ3TkJacOrM6A9ZMA1s4D TfH49I1h/6RhqgOhUiG2lAFsHmDecdGGLAWCPvg5bmtmVHXbV6MJ+SVwgEJ8NMBh ybNmy+mB1F6YfJ6nHTxPSHQCNLm+S5Osezg3WqVLWEAu/zXDdWZfQ+PfwXQtUR81 17Z58ERKfwf2yA5Y6ar5/swpZTF/jtDW4s921B08wdoYy7iea5eRNqd905lGP7e3 vrmyF+g9Wlm23BiYMg1dNFVgxeaIkgUI2sXyXTyvFiPlJpat/MrSmbzGVCF0olZd 0TF9Lbm1x0x5ZBgzEectzM36uO9nBiDm -----END CERTIFICATE-----Generated at Sun Apr 6 12:46:01 2025 by rpki-client