$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft File: ciYIDnxlJSNDlihmsxOfAjhyxAI.mft (raw, json) Hash identifier: Ch0hpM6zvw6yjsX3jeKCCk8kEDD95VzRmC7boy4ldMM= Subject key identifier: D7:17:79:79:29:31:C7:78:FF:7A:3B:06:A7:73:1D:10:35:1A:D0:81 Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 Certificate issuer: /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft Manifest number: 7F Signing time: Thu 17 Apr 2025 05:25:46 +0000 Manifest this update: Thu 17 Apr 2025 05:25:46 +0000 Manifest next update: Thu 24 Apr 2025 05:25:46 +0000 Files and hashes: 1: ciYIDnxlJSNDlihmsxOfAjhyxAI.crl (hash: hrL2Cbbiq402cssUR7vq/GlfOp3Emy28UqFQLWH/Rdk=) 2: C0C401905AE311EF90924C30C4F9AE02.roa (hash: 7P9QGIuS2YxmoaQtTvokUjWFQu4qLuQF/pm4P1jB/wE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 05:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402 Validity Not Before: Apr 17 05:25:46 2025 GMT Not After : Apr 24 05:25:46 2025 GMT Subject: CN=680090da-0323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e6:fd:2c:8d:1b:bc:01:c6:a8:28:08:5e:8f: 7a:e3:94:8a:ea:bd:6a:ee:3a:96:66:34:21:2c:a3: 4a:29:59:16:76:5d:91:43:4e:73:67:a8:2f:79:85: c8:cc:aa:7c:10:06:17:31:b9:43:74:de:71:e7:49: 45:c7:e7:6e:b2:72:84:cb:b6:e0:c8:88:c6:ce:e1: 9d:d1:db:02:ac:44:7a:20:ff:3c:ce:ed:bf:3f:29: 83:06:19:c0:41:0b:d0:65:ad:4a:bc:28:39:05:5e: 8c:6e:f2:3a:0a:cc:f6:ee:e3:5c:6b:67:12:a0:b0: 26:74:b7:06:68:15:be:be:5f:22:e9:62:0e:82:88: 5e:c3:80:a5:43:bd:f3:90:dd:e0:ce:d1:93:02:91: 5b:89:b2:09:20:6a:02:60:cf:4a:58:ae:40:d0:28: cd:64:6b:eb:b0:2c:a0:2f:f3:b3:06:bf:8f:77:88: f9:f2:06:e8:a1:a7:c6:ec:1e:bc:d1:26:6b:89:62: 27:f7:e3:34:37:58:32:c7:1d:92:af:df:df:b4:83: 4c:d8:84:ad:ec:32:9a:9e:b9:0f:a3:2e:b6:a8:61: f1:8c:80:14:74:17:4e:23:1e:a2:ab:55:d6:8b:44: c4:54:d0:6f:8f:fd:2a:71:e3:28:a7:c8:d6:27:83: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:17:79:79:29:31:C7:78:FF:7A:3B:06:A7:73:1D:10:35:1A:D0:81 X509v3 Authority Key Identifier: keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:4b:0b:f2:8a:9b:7e:22:cd:1f:d4:5a:3e:d0:ed:36:d3:d8: 6a:0c:52:23:91:fc:0b:08:d2:0d:2a:49:f7:d2:fa:e2:6f:4c: d8:ce:0a:da:b3:85:23:25:c5:ab:a3:04:d4:a8:1a:d7:12:39: 61:34:43:e0:7d:ac:f1:ba:29:f8:14:65:e4:8d:32:07:c2:a3: 04:74:c9:e2:81:11:57:f5:0d:14:4e:73:71:e8:8e:57:0b:58: 70:a1:c9:4a:93:7d:2a:5a:1b:36:f7:6e:1b:38:29:8d:cc:97: a0:9a:6f:ad:41:0a:96:47:e8:40:1a:c9:6a:6c:77:97:53:a7: ce:e4:27:86:60:03:07:01:ac:d5:5f:74:7b:e5:6d:1a:e0:8d: 5e:41:1c:dd:15:03:1e:4e:c3:85:21:fb:6c:de:09:14:00:12: bd:14:73:ff:d2:71:e3:a8:b5:ac:9d:44:25:69:cc:f2:97:53: 82:82:15:ce:1a:f3:de:39:9b:d3:6b:52:b6:5e:85:cd:42:e9: 5d:be:d9:13:6f:25:cc:54:ee:78:f2:28:a0:87:14:cd:e9:02: 4e:95:f3:d0:47:d2:73:2e:3b:39:5e:25:8b:12:38:5a:a2:e5: 3a:a3:62:60:99:41:15:7b:a9:9a:56:59:1e:d9:d7:ec:25:1a: d8:6a:32:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ1OTYxMTAvBgNVBAUTKDcyMjYwODBFN0M2NTI1MjM0Mzk2Mjg2NkIzMTM5RjAy Mzg3MkM0MDIwHhcNMjUwNDE3MDUyNTQ2WhcNMjUwNDI0MDUyNTQ2WjAYMRYwFAYD VQQDEw02ODAwOTBkYS0wMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwub9LI0bvAHGqCgIXo9645SK6r1q7jqWZjQhLKNKKVkWdl2RQ05zZ6gveYXI zKp8EAYXMblDdN5x50lFx+dusnKEy7bgyIjGzuGd0dsCrER6IP88zu2/PymDBhnA QQvQZa1KvCg5BV6MbvI6Csz27uNca2cSoLAmdLcGaBW+vl8i6WIOgohew4ClQ73z kN3gztGTApFbibIJIGoCYM9KWK5A0CjNZGvrsCygL/OzBr+Pd4j58gbooafG7B68 0SZriWIn9+M0N1gyxx2Sr9/ftINM2ISt7DKanrkPoy62qGHxjIAUdBdOIx6iq1XW i0TEVNBvj/0qceMop8jWJ4MzbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcXeXkp Mcd4/3o7BqdzHRA1GtCBMB8GA1UdIwQYMBaAFHImCA58ZSUjQ5YoZrMTnwI4csQC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDU5Ni8wREUyM0UxNjVB RTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpTTkRsaWhtc3hPZkFqaHl4 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NpWUlEbnhsSlNORGxpaG1zeE9mQWpoeXhBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDU5Ni8wREUyM0UxNjVBRTMxMUVGOTMyQzIzMkZDNEY5QUUwMi9jaVlJRG54bEpT TkRsaWhtc3hPZkFqaHl4QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSSwvyipt+Is0f1Fo+0O0209hqDFIjkfwLCNINKkn30vrib0zYzgra s4UjJcWrowTUqBrXEjlhNEPgfazxuin4FGXkjTIHwqMEdMnigRFX9Q0UTnNx6I5X C1hwoclKk30qWhs2924bOCmNzJegmm+tQQqWR+hAGslqbHeXU6fO5CeGYAMHAazV X3R75W0a4I1eQRzdFQMeTsOFIfts3gkUABK9FHP/0nHjqLWsnUQlaczyl1OCghXO GvPeOZvTa1K2XoXNQuldvtkTbyXMVO548iighxTN6QJOlfPQR9JzLjs5XiWLEjha ouU6o2JgmUEVe6maVlke2dfsJRrYajKA -----END CERTIFICATE-----Generated at Fri Apr 18 02:16:26 2025 by rpki-client