$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: Cp5uCuBeDoGQWVWh45tMWhF9LVIgo5fcGUJtbKuNOjg= Subject key identifier: 0D:37:35:58:29:12:D7:5F:E3:1B:36:7E:A4:F0:F0:19:66:DF:EE:0C Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0539 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 052F Signing time: Wed 02 Apr 2025 23:30:30 +0000 Manifest this update: Wed 02 Apr 2025 23:30:29 +0000 Manifest next update: Wed 09 Apr 2025 23:30:29 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: TktpLaLwKm0VuRsrJ8fwh8L2OnuxtPi0moC5t7IpnEw=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1337 (0x539) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2 Validity Not Before: Apr 2 23:30:29 2025 GMT Not After : Apr 9 23:30:29 2025 GMT Subject: CN=67edc896-b837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:28:12:53:3d:ea:ae:51:ac:92:24:eb:21: 57:dd:3c:de:71:9a:3a:31:87:36:2b:8e:6a:8c:f8: e2:45:2f:c3:13:9f:52:c9:e3:e3:4c:bf:1f:57:b4: 1c:4a:5f:10:66:73:f4:0f:6f:dd:38:02:11:c2:1c: 3f:9e:18:7d:5e:03:af:03:9b:dc:b9:24:be:47:7f: 2e:b2:10:be:09:ec:84:cc:07:5a:2f:b4:d6:6a:73: ad:0e:b8:24:38:1e:0c:5c:61:00:d4:c8:59:bc:bf: 7e:d0:4a:04:e1:8d:a9:7c:76:45:85:ad:f4:11:dd: de:c4:6d:f7:41:65:fd:e3:07:44:fc:ff:0f:0b:cb: 4e:a9:ec:f2:d1:ae:2a:3f:75:5c:18:f9:cb:c8:50: f3:c8:e9:1e:9a:86:36:c4:05:9e:65:88:79:63:af: d4:f1:92:73:f5:f4:08:ce:4d:4d:f2:f3:c2:bc:3c: 7b:68:ed:00:f1:c5:b8:1d:59:a7:53:aa:4e:ff:5b: 43:83:08:3d:1b:15:8b:40:0e:1b:0c:73:3a:ae:51: 52:06:8a:50:30:f9:b1:e0:ce:ac:a6:ea:f1:d0:54: d4:8a:45:3d:d8:0b:a7:3c:e5:f5:39:21:4f:cf:93: 4a:e9:f5:59:c1:71:cb:5c:b0:65:74:37:63:61:63: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:37:35:58:29:12:D7:5F:E3:1B:36:7E:A4:F0:F0:19:66:DF:EE:0C X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c0:bb:57:d6:48:ce:1f:e4:80:4d:6e:43:c5:6d:8f:7a:da: 38:76:f9:10:5d:9d:8d:a7:99:28:2a:88:59:0b:c2:b5:9e:12: df:c0:06:92:09:89:75:11:88:4a:05:28:f4:be:f7:75:aa:d1: ff:fa:aa:d1:dd:e0:79:de:ea:01:0d:a0:00:73:1e:85:05:2b: 50:39:70:19:d2:29:bb:6b:89:a8:8e:76:7a:66:5d:4c:f5:4c: 9a:dd:ca:b6:6c:4d:a2:cc:fe:36:5c:7b:8a:09:ba:4c:e5:bf: de:6c:c8:62:cd:71:ee:5f:08:a9:a7:00:08:e1:54:16:02:be: 83:52:8d:e3:94:c4:a9:f0:8b:ee:9e:28:e3:d9:9f:b3:f3:65: c3:88:37:50:23:12:63:15:f9:c3:5b:3c:d3:3d:7f:3c:17:51: ec:25:51:b8:67:98:93:c6:f4:93:a0:b2:2f:6b:b3:73:b7:83: 3b:e1:d7:70:f7:4c:7e:b9:79:a0:59:24:6d:82:07:06:fa:9f: a3:ad:f3:3c:c9:ad:58:d5:3f:c2:56:f4:7a:05:48:4a:a7:39: 56:48:4c:38:b2:b3:db:bd:77:c9:b5:d2:b2:22:b2:8d:4b:fb: ea:02:7a:1e:41:48:00:cb:d9:c4:30:5f:fe:53:c5:2f:eb:11: e4:c8:67:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUwNDAyMjMzMDI5WhcNMjUwNDA5MjMzMDI5WjAYMRYwFAYD VQQDEw02N2VkYzg5Ni1iODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnYwoElM96q5RrJIk6yFX3TzecZo6MYc2K45qjPjiRS/DE59SyePjTL8fV7Qc Sl8QZnP0D2/dOAIRwhw/nhh9XgOvA5vcuSS+R38ushC+CeyEzAdaL7TWanOtDrgk OB4MXGEA1MhZvL9+0EoE4Y2pfHZFha30Ed3exG33QWX94wdE/P8PC8tOqezy0a4q P3VcGPnLyFDzyOkemoY2xAWeZYh5Y6/U8ZJz9fQIzk1N8vPCvDx7aO0A8cW4HVmn U6pO/1tDgwg9GxWLQA4bDHM6rlFSBopQMPmx4M6spurx0FTUikU92AunPOX1OSFP z5NK6fVZwXHLXLBldDdjYWP5kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA03NVgp Etdf4xs2fqTw8Blm3+4MMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYwLtX1kjOH+SATW5DxW2Peto4dvkQXZ2Np5koKohZC8K1nhLfwAaS CYl1EYhKBSj0vvd1qtH/+qrR3eB53uoBDaAAcx6FBStQOXAZ0im7a4mojnZ6Zl1M 9Uya3cq2bE2izP42XHuKCbpM5b/ebMhizXHuXwippwAI4VQWAr6DUo3jlMSp8Ivu nijj2Z+z82XDiDdQIxJjFfnDWzzTPX88F1HsJVG4Z5iTxvSToLIva7Nzt4M74ddw 90x+uXmgWSRtggcG+p+jrfM8ya1Y1T/CVvR6BUhKpzlWSEw4srPbvXfJtdKyIrKN S/vqAnoeQUgAy9nEMF/+U8Uv6xHkyGfv -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:06 2025 by rpki-client