$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: XWtJDRd6QJ3i4RoR2gkYlMZ3HFispMXRcUbni2nrBuA= Subject key identifier: 0F:E2:12:2B:93:9A:DE:30:04:41:FE:BD:43:F4:4C:9E:62:93:FA:B8 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1D6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D54 Signing time: Tue 08 Apr 2025 16:09:51 +0000 Manifest this update: Tue 08 Apr 2025 16:09:50 +0000 Manifest next update: Tue 15 Apr 2025 16:09:50 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: gQDlsM9Htq1P3ilj6/HRV0ljL+55wm2faLQdbLPpHLE=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 16:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7532 (0x1d6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098 Validity Not Before: Apr 8 16:09:50 2025 GMT Not After : Apr 15 16:09:50 2025 GMT Subject: CN=67f54a4f-56fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:9f:46:47:8d:4b:e8:ed:a4:09:48:5d:ec: 43:96:5f:3d:77:a4:54:56:9b:fd:28:87:fd:d6:79: c3:46:0c:74:a9:9e:55:ce:4e:3b:f8:50:ee:23:2d: c7:c5:d6:77:67:a4:59:94:1f:4d:4e:5c:49:2f:ee: 2a:f7:5e:bd:01:64:e6:85:57:6f:d4:42:e0:37:de: 50:f3:a3:9d:33:da:ec:9c:11:4c:fe:52:aa:b6:ff: 7f:23:79:1f:d6:f7:ad:b7:f2:c0:3b:1f:fe:ba:81: 25:7b:5a:20:f5:d9:69:3b:02:00:ce:a6:4c:8b:df: e8:b4:ba:28:45:74:e9:f7:0a:9c:31:3b:14:16:2a: 4b:18:c3:8e:22:ee:58:71:97:8a:78:16:6c:1c:27: 06:56:47:8c:8b:13:68:6d:15:a6:44:27:89:68:42: 1d:85:73:19:80:f2:79:4d:77:c3:c1:1d:e5:e4:ca: c7:4a:e2:ca:74:f9:2b:14:a7:51:62:99:74:ec:62: 5a:31:83:ce:1d:fb:bc:c4:29:c7:c5:e9:00:61:48: 17:a7:24:0e:36:7e:df:aa:05:43:20:32:ad:2b:0a: 14:72:56:c8:ca:e3:62:a6:07:a0:d0:37:b7:8e:23: 9f:9d:92:b3:e5:95:74:05:55:4c:c0:fa:f8:4b:54: 98:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E2:12:2B:93:9A:DE:30:04:41:FE:BD:43:F4:4C:9E:62:93:FA:B8 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:f8:38:6e:2c:53:4f:ad:d3:39:e1:e3:27:2c:43:80:1c:d7: 32:0d:f5:c3:bb:f8:f6:61:b7:87:7e:61:0b:b3:d4:40:d4:8a: 5e:fc:42:f0:ec:cd:b4:6b:c8:89:2c:48:d0:cd:81:57:ec:33: 75:de:56:94:85:1c:21:d4:f0:c1:ff:2f:83:c9:9f:1f:45:fb: 1a:3c:a5:99:d1:a9:87:c2:6e:d6:15:ff:c0:06:ed:8c:ce:e4: 81:41:c7:fc:36:f8:4c:6e:57:6e:64:3b:bb:4a:6d:98:cb:2c: 33:db:da:82:52:1e:de:fb:0d:d8:e1:59:eb:4f:01:53:02:6b: 8a:32:e4:35:2b:27:a4:9d:85:d0:a9:c2:e6:6c:ca:82:db:ca: 4f:e1:a8:96:c3:37:be:b9:17:47:7e:60:11:8f:97:03:1f:75: c9:95:0f:35:7a:f2:d0:19:f5:bc:16:73:ee:57:1e:d4:e8:fc: be:f7:9b:92:8b:e1:7c:25:d9:ad:c1:87:ad:10:fb:8d:31:02: e4:53:18:9b:3b:6e:ba:38:d1:6e:36:1a:10:fd:a6:7b:b5:f0: dc:81:c3:a5:d8:4f:0b:75:17:39:01:2c:09:9a:61:60:2c:36: d0:0a:bd:31:8c:ba:5b:3e:fa:19:b1:c9:10:35:22:a3:a5:d3: b1:69:92:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwNDA4MTYwOTUwWhcNMjUwNDE1MTYwOTUwWjAYMRYwFAYD VQQDEw02N2Y1NGE0Zi01NmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDOfRkeNS+jtpAlIXexDll89d6RUVpv9KIf91nnDRgx0qZ5Vzk47+FDuIy3H xdZ3Z6RZlB9NTlxJL+4q9169AWTmhVdv1ELgN95Q86OdM9rsnBFM/lKqtv9/I3kf 1vett/LAOx/+uoEle1og9dlpOwIAzqZMi9/otLooRXTp9wqcMTsUFipLGMOOIu5Y cZeKeBZsHCcGVkeMixNobRWmRCeJaEIdhXMZgPJ5TXfDwR3l5MrHSuLKdPkrFKdR Ypl07GJaMYPOHfu8xCnHxekAYUgXpyQONn7fqgVDIDKtKwoUclbIyuNipgeg0De3 jiOfnZKz5ZV0BVVMwPr4S1SYdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/iEiuT mt4wBEH+vUP0TJ5ik/q4MB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBk+DhuLFNPrdM54eMnLEOAHNcyDfXDu/j2YbeHfmELs9RA1Ipe/ELw 7M20a8iJLEjQzYFX7DN13laUhRwh1PDB/y+DyZ8fRfsaPKWZ0amHwm7WFf/ABu2M zuSBQcf8NvhMblduZDu7Sm2Yyywz29qCUh7e+w3Y4VnrTwFTAmuKMuQ1KyeknYXQ qcLmbMqC28pP4aiWwze+uRdHfmARj5cDH3XJlQ81evLQGfW8FnPuVx7U6Py+95uS i+F8JdmtwYetEPuNMQLkUxibO266ONFuNhoQ/aZ7tfDcgcOl2E8LdRc5ASwJmmFg LDbQCr0xjLpbPvoZsckQNSKjpdOxaZLp -----END CERTIFICATE-----Generated at Wed Apr 9 15:12:57 2025 by rpki-client