$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: JQ+/Qx/tzsfKbVCLO29iIk3HFrMlzwkWuI5ipDYD1I0= Subject key identifier: F9:06:46:B1:65:D5:E8:BB:C6:F0:8C:8D:FE:0F:E1:CF:5B:8B:80:31 Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: F1 Signing time: Sat 29 Mar 2025 04:46:58 +0000 Manifest this update: Sat 29 Mar 2025 04:46:58 +0000 Manifest next update: Sat 05 Apr 2025 04:46:58 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: kUtRFqBcHjRusJHflom+Lplv3q75LPklVRfAulVuYKU=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: eBM1U0C9BAgz3z+X5mRsroakC5anBwEWYdlHygNX0ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE Validity Not Before: Mar 29 04:46:58 2025 GMT Not After : Apr 5 04:46:58 2025 GMT Subject: CN=67e77b42-54dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2e:c0:78:b7:1e:7e:53:ff:d8:fa:33:3a:6a: de:23:12:e0:1b:5f:06:4d:6d:6a:55:78:26:01:69: 4a:be:22:27:61:64:b0:f7:ef:ad:94:fb:1c:35:c6: 69:ea:b6:51:cc:38:19:84:17:54:ef:26:f8:a8:50: 59:6d:c6:17:e6:66:3d:8e:4a:1e:04:1c:d9:4b:69: 83:b7:f8:c4:a6:ac:8f:dc:59:cc:09:d7:a2:bc:70: 57:8a:69:26:ff:2a:7b:a8:ca:62:be:ac:66:1a:f7: 48:6b:89:25:3c:22:8d:8c:24:4d:2f:cc:80:1b:59: c3:a7:bd:c9:0a:8b:33:35:0c:0c:da:bc:64:b3:c1: 56:0e:03:44:86:ee:f7:1c:db:3f:4a:06:23:1b:f6: 9f:0b:f2:ce:f6:04:38:b8:6c:26:82:ab:b8:34:18: dc:75:a2:b9:bd:55:2a:93:58:09:dd:8c:af:42:96: 2f:e6:c3:ba:b4:af:42:6c:b4:7c:4e:d0:d7:da:59: b8:6a:6d:d8:b5:5f:b1:07:a0:49:bc:71:25:cf:2c: 44:78:fc:b7:42:3e:b1:6f:c7:94:65:29:78:3e:9b: 2a:cf:aa:cd:a6:11:63:2d:91:b4:ba:c3:0e:c9:17: 99:9d:73:1a:b5:2f:7f:e8:74:39:23:53:47:c6:a6: f3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:46:B1:65:D5:E8:BB:C6:F0:8C:8D:FE:0F:E1:CF:5B:8B:80:31 X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:74:c8:66:08:8a:c0:1f:09:09:1f:89:fb:97:f7:77:45:91: 42:bc:21:f9:aa:12:9b:35:53:da:5d:a6:14:c4:96:8d:1e:28: 93:46:d6:b7:14:2e:94:75:b5:b8:45:c8:cb:3b:5b:46:24:b9: 70:48:e4:97:b0:36:75:bd:cb:cb:54:5c:34:63:f0:cc:a4:13: eb:b0:27:03:f6:cf:82:12:2f:44:fb:4e:8a:e4:7a:50:83:94: fa:fd:00:7f:f6:00:5e:8e:3e:1e:91:7e:70:ce:c0:78:bb:12: b3:87:62:ce:21:3b:f8:83:42:35:a7:f1:3e:49:23:eb:b3:cb: f8:9f:c2:06:52:50:e5:93:25:89:bb:b4:f5:da:53:63:51:39: ff:24:71:6e:76:60:da:8d:c3:96:7c:26:87:36:84:18:b5:ba: b3:a9:05:ab:f6:9a:50:4d:7d:5c:4c:10:f8:5d:27:a5:8b:30: b8:c5:fe:ef:cc:e1:67:f3:23:cf:5b:25:30:e3:55:18:99:05: 96:f5:23:88:64:f2:37:34:f3:25:d3:a7:92:3c:d5:ec:26:96: f8:c6:59:1e:0b:ed:20:ef:14:00:2a:ef:42:d3:ce:a8:51:fc: 94:ee:b5:bb:27:04:9d:59:c2:6e:63:91:4c:08:c8:a9:df:ea: 3b:5f:46:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjUwMzI5MDQ0NjU4WhcNMjUwNDA1MDQ0NjU4WjAYMRYwFAYD VQQDEw02N2U3N2I0Mi01NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsS7AeLceflP/2PozOmreIxLgG18GTW1qVXgmAWlKviInYWSw9++tlPscNcZp 6rZRzDgZhBdU7yb4qFBZbcYX5mY9jkoeBBzZS2mDt/jEpqyP3FnMCdeivHBXimkm /yp7qMpivqxmGvdIa4klPCKNjCRNL8yAG1nDp73JCoszNQwM2rxks8FWDgNEhu73 HNs/SgYjG/afC/LO9gQ4uGwmgqu4NBjcdaK5vVUqk1gJ3YyvQpYv5sO6tK9CbLR8 TtDX2lm4am3YtV+xB6BJvHElzyxEePy3Qj6xb8eUZSl4Ppsqz6rNphFjLZG0usMO yReZnXMatS9/6HQ5I1NHxqbz3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkGRrFl 1ei7xvCMjf4P4c9bi4AxMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAdMhmCIrAHwkJH4n7l/d3RZFCvCH5qhKbNVPaXaYUxJaNHiiTRta3 FC6UdbW4RcjLO1tGJLlwSOSXsDZ1vcvLVFw0Y/DMpBPrsCcD9s+CEi9E+06K5HpQ g5T6/QB/9gBejj4ekX5wzsB4uxKzh2LOITv4g0I1p/E+SSPrs8v4n8IGUlDlkyWJ u7T12lNjUTn/JHFudmDajcOWfCaHNoQYtbqzqQWr9ppQTX1cTBD4XSelizC4xf7v zOFn8yPPWyUw41UYmQWW9SOIZPI3NPMl06eSPNXsJpb4xlkeC+0g7xQAKu9C086o UfyU7rW7JwSdWcJuY5FMCMip3+o7X0bt -----END CERTIFICATE-----Generated at Fri Apr 4 21:53:55 2025 by rpki-client