$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: /g0wjZaYOWt5gnrNPbBwIJN26wbcPfe0g8/AbeGey8U= Subject key identifier: 79:5E:C1:39:3C:E0:D4:11:A6:C5:A0:D7:5A:D8:49:CB:45:64:59:22 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: AB Signing time: Thu 17 Apr 2025 04:55:27 +0000 Manifest this update: Thu 17 Apr 2025 04:55:26 +0000 Manifest next update: Thu 24 Apr 2025 04:55:26 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: J3cEHB37sMvFJG2b2t38fUZLYVPhuOe0LBpLL+FqUj4=) 2: FDC5FC0C232411EF868B873EC4F9AE02.roa (hash: ollqUlHXEfXQhQfDGC+/77xh3ifYmQTxENHBKgBxBPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 04:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Apr 17 04:55:26 2025 GMT Not After : Apr 24 04:55:26 2025 GMT Subject: CN=680089be-2a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:86:5f:66:36:20:85:2f:27:65:e3:a2:bd:59: 33:27:14:30:90:5e:f3:55:7c:4c:e3:0e:3d:b0:6d: ce:6e:78:13:26:b8:0f:c0:ae:2f:66:0d:9e:32:2d: 38:27:72:cf:32:0a:e6:83:dc:5f:b4:33:49:5e:b2: ce:fb:0a:dd:76:11:3e:25:4b:86:c9:53:a7:b9:f8: e3:f9:fd:09:d6:66:5d:1d:2e:1e:22:3d:c0:df:d3: 38:37:66:e7:f7:b9:3e:50:8a:68:72:50:22:c3:74: 1e:24:63:e3:e9:33:20:2b:be:d7:20:54:8c:24:3c: d4:34:d5:90:2a:92:e5:b3:f9:af:14:10:16:f8:1e: 7d:c7:37:20:0d:3e:9f:40:b0:43:3e:60:ae:17:c6: 79:e9:af:b5:96:18:3f:5f:1b:4f:83:5f:2d:2a:aa: 00:a4:03:da:3d:4b:16:a5:e5:7a:65:fc:52:71:28: 73:8b:72:2f:1f:cd:0c:87:ff:c8:d9:ff:b7:78:5c: c9:4c:d7:89:37:dd:5a:08:d8:f4:cf:f7:e3:2d:1b: 84:c0:10:68:bd:01:b4:74:c3:bf:db:a9:c3:28:5f: 28:df:dc:22:f3:67:9c:7d:8a:c1:d0:6d:a0:87:1c: d9:91:e5:4b:7d:6d:c3:e9:23:3e:71:90:bf:28:d2: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5E:C1:39:3C:E0:D4:11:A6:C5:A0:D7:5A:D8:49:CB:45:64:59:22 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:a1:7e:77:e5:0e:32:58:90:c6:16:32:b4:c2:bb:fa:2c:00: 4b:ef:12:32:42:b8:c7:82:ff:52:a6:4d:3a:74:63:c9:f8:a6: 16:67:43:8e:60:e6:e4:b5:89:cd:f5:f7:8e:6c:0b:2a:68:67: 14:f9:30:45:ba:46:6d:b4:49:f0:22:c9:bd:5a:e9:e3:72:0b: a3:eb:6f:b9:e4:f1:91:09:2b:66:ca:cd:60:86:16:14:d7:59: 87:45:22:29:69:fc:25:57:4e:6b:49:df:c2:6f:e6:01:41:fd: fb:4a:20:48:d9:88:e6:9b:7b:06:44:80:e4:96:5c:ea:a6:87: c2:bf:55:43:e1:f6:8b:9a:29:09:c5:47:0e:5f:0d:0c:58:19: 94:45:23:25:d5:d3:bb:66:53:93:f9:2b:f7:96:92:2c:37:7f: c7:92:26:07:fc:06:0c:60:07:86:2c:3e:31:8e:20:cc:f2:78: 99:5a:6a:fb:ee:6b:07:95:4c:ef:29:01:4f:21:a1:1b:03:74: 57:d7:c3:fa:e6:6f:e6:87:46:9f:c9:09:92:8b:d7:5f:4e:03: 98:19:76:5a:24:93:87:8f:9c:a1:8e:70:7f:dd:49:7c:cc:f6: 97:87:ce:8f:ae:cd:7e:b8:17:57:8c:98:27:f0:ad:d3:ed:e2: 6c:10:e3:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUwNDE3MDQ1NTI2WhcNMjUwNDI0MDQ1NTI2WjAYMRYwFAYD VQQDEw02ODAwODliZS0yYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4ZfZjYghS8nZeOivVkzJxQwkF7zVXxM4w49sG3ObngTJrgPwK4vZg2eMi04 J3LPMgrmg9xftDNJXrLO+wrddhE+JUuGyVOnufjj+f0J1mZdHS4eIj3A39M4N2bn 97k+UIpoclAiw3QeJGPj6TMgK77XIFSMJDzUNNWQKpLls/mvFBAW+B59xzcgDT6f QLBDPmCuF8Z56a+1lhg/XxtPg18tKqoApAPaPUsWpeV6ZfxScShzi3IvH80Mh//I 2f+3eFzJTNeJN91aCNj0z/fjLRuEwBBovQG0dMO/26nDKF8o39wi82ecfYrB0G2g hxzZkeVLfW3D6SM+cZC/KNKo7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlewTk8 4NQRpsWg11rYSctFZFkiMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpoX535Q4yWJDGFjK0wrv6LABL7xIyQrjHgv9Spk06dGPJ+KYWZ0OO YObktYnN9feObAsqaGcU+TBFukZttEnwIsm9Wunjcguj62+55PGRCStmys1ghhYU 11mHRSIpafwlV05rSd/Cb+YBQf37SiBI2Yjmm3sGRIDkllzqpofCv1VD4faLmikJ xUcOXw0MWBmURSMl1dO7ZlOT+Sv3lpIsN3/HkiYH/AYMYAeGLD4xjiDM8niZWmr7 7msHlUzvKQFPIaEbA3RX18P65m/mh0afyQmSi9dfTgOYGXZaJJOHj5yhjnB/3Ul8 zPaXh86Prs1+uBdXjJgn8K3T7eJsEONY -----END CERTIFICATE-----Generated at Sat Apr 19 03:47:45 2025 by rpki-client