$ rpki-client -vvf rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft File: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft (raw, json) Hash identifier: NpaGItUD1pFwLIM5oP7gSzrWe0T6PwbTv5wz4aYRNzE= Subject key identifier: AD:A0:DE:F7:6E:5F:83:00:CF:1C:D6:D6:37:B7:0C:C7:2D:F3:3A:69 Authority key identifier: 09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 Certificate issuer: /CN=A91F05B5/serialNumber=095F6C6BB387C6932FDA01C0BFA626F6AAC7BB00 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft Manifest number: 013E Signing time: Sat 29 Mar 2025 03:49:08 +0000 Manifest this update: Sat 29 Mar 2025 03:49:08 +0000 Manifest next update: Sat 05 Apr 2025 03:49:08 +0000 Files and hashes: 1: CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl (hash: KJbxU9ZJrsFIk55sP3Pv99Vw+NvxMD5ejREtHr5c544=) 2: E0A69DBC2AB311EE9CA5E515C4F9AE02.roa (hash: ZqsBefU5j7GUz5qH7o82aafqjpUX9O/Biz1HkkL6OG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 03:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F05B5 Validity Not Before: Mar 29 03:49:08 2025 GMT Not After : Apr 5 03:49:08 2025 GMT Subject: CN=67e76db4-9706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0e:89:1a:5f:e4:e2:a1:92:86:2e:4c:03:7c: 7c:e2:bb:63:d8:fb:32:fd:d8:6e:05:78:a1:ad:4a: fd:23:5c:4e:ad:a3:98:61:3a:92:cc:a4:99:b1:ee: 71:7c:1a:3d:e5:36:e1:72:fb:fe:36:41:61:96:71: e0:a5:bf:cf:f4:1f:23:46:bf:37:ab:ee:00:08:1a: 4a:ba:51:af:ac:9d:44:c0:fa:da:d2:94:df:f7:c2: bf:d4:ef:7a:a4:83:19:6c:4d:12:3e:f8:c7:f8:6d: 96:82:4c:1d:17:3a:4f:0e:95:11:07:9d:ce:9b:03: 12:25:df:d1:69:b3:e5:de:20:7f:45:69:1d:15:10: ac:e3:9c:56:26:ad:9c:e5:de:c6:ec:1f:c8:54:a5: 71:a5:f4:4d:ec:ae:b3:64:37:7b:05:a4:26:70:54: a7:71:ef:5c:61:b7:bb:73:11:c7:e0:90:2f:a7:e8: eb:ed:a3:30:6e:44:b3:cd:f1:9b:a9:dc:ec:8d:55: d3:be:1e:6d:ce:60:54:ac:70:0a:2b:ce:bc:44:16: c9:0c:fb:1e:0f:32:7e:d3:3f:ae:11:ef:e1:e2:ee: 74:55:9f:0f:f3:6d:2f:23:d3:d0:f9:00:63:a5:b1: 30:23:93:ba:e4:05:d6:2d:4b:28:cd:1a:c9:f0:65: 4d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A0:DE:F7:6E:5F:83:00:CF:1C:D6:D6:37:B7:0C:C7:2D:F3:3A:69 X509v3 Authority Key Identifier: keyid:09:5F:6C:6B:B3:87:C6:93:2F:DA:01:C0:BF:A6:26:F6:AA:C7:BB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F05B5/475012062AB311EE8FAE7214C4F9AE02/CV9sa7OHxpMv2gHAv6Ym9qrHuwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:44:73:03:57:1c:34:3f:47:31:1c:54:ee:79:f5:36:42: f4:71:4d:f4:54:9c:88:5c:56:7c:84:f1:2f:a9:60:9c:f3:7c: f6:bf:22:c3:0a:a9:9c:23:44:73:75:b5:8a:cb:32:c3:e9:7b: 21:e6:d3:48:42:73:ed:c6:f9:c7:60:28:cd:6f:f0:73:37:68: 90:18:45:4f:10:ec:dc:59:6b:b0:ef:ee:bf:f1:dc:b1:6e:67: 32:9e:70:8d:a9:bb:9a:68:fc:c8:b2:09:79:37:32:ae:ca:56: 40:06:63:4e:02:17:55:a7:f4:a5:c1:a2:af:a0:1f:04:d3:b2: c2:06:75:92:ae:2f:66:8f:b4:0e:fa:20:47:e9:92:42:70:27: c7:51:5b:96:5a:77:0d:77:96:af:8c:c6:f8:ae:c0:df:11:dc: fe:a6:1d:81:65:bc:7c:fc:b4:81:ab:22:06:b4:df:6c:48:7e: 90:9b:df:39:81:4f:49:f9:05:d3:ee:49:2f:f0:40:3d:59:78: f5:a8:d7:6c:0c:84:17:c0:15:96:24:2e:2b:18:cf:b7:ef:5f: 3a:d3:de:5e:a7:e8:27:de:24:66:41:ba:2b:c0:16:5c:5e:6b: 08:de:75:87:fc:75:1a:3c:9e:88:ad:c5:58:ca:d1:0c:0c:56: 6d:1f:86:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA1QjUxMTAvBgNVBAUTKDA5NUY2QzZCQjM4N0M2OTMyRkRBMDFDMEJGQTYyNkY2 QUFDN0JCMDAwHhcNMjUwMzI5MDM0OTA4WhcNMjUwNDA1MDM0OTA4WjAYMRYwFAYD VQQDEw02N2U3NmRiNC05NzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ6JGl/k4qGShi5MA3x84rtj2Psy/dhuBXihrUr9I1xOraOYYTqSzKSZse5x fBo95Tbhcvv+NkFhlnHgpb/P9B8jRr83q+4ACBpKulGvrJ1EwPra0pTf98K/1O96 pIMZbE0SPvjH+G2WgkwdFzpPDpURB53OmwMSJd/RabPl3iB/RWkdFRCs45xWJq2c 5d7G7B/IVKVxpfRN7K6zZDd7BaQmcFSnce9cYbe7cxHH4JAvp+jr7aMwbkSzzfGb qdzsjVXTvh5tzmBUrHAKK868RBbJDPseDzJ+0z+uEe/h4u50VZ8P820vI9PQ+QBj pbEwI5O65AXWLUsozRrJ8GVNUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2g3vdu X4MAzxzW1je3DMct8zppMB8GA1UdIwQYMBaAFAlfbGuzh8aTL9oBwL+mJvaqx7sA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDVCNS80NzUwMTIwNjJB QjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhwTXYyZ0hBdjZZbTlxckh1 d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWOXNhN09IeHBNdjJnSEF2NlltOXFySHV3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDVCNS80NzUwMTIwNjJBQjMxMUVFOEZBRTcyMTRDNEY5QUUwMi9DVjlzYTdPSHhw TXYyZ0hBdjZZbTlxckh1d0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcGURzA1ccND9HMRxU7nn1NkL0cU30VJyIXFZ8hPEvqWCc83z2vyLD CqmcI0RzdbWKyzLD6Xsh5tNIQnPtxvnHYCjNb/BzN2iQGEVPEOzcWWuw7+6/8dyx bmcynnCNqbuaaPzIsgl5NzKuylZABmNOAhdVp/SlwaKvoB8E07LCBnWSri9mj7QO +iBH6ZJCcCfHUVuWWncNd5avjMb4rsDfEdz+ph2BZbx8/LSBqyIGtN9sSH6Qm985 gU9J+QXT7kkv8EA9WXj1qNdsDIQXwBWWJC4rGM+37186095ep+gn3iRmQborwBZc XmsI3nWH/HUaPJ6IrcVYytEMDFZtH4a3 -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:08 2025 by rpki-client