$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft File: ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft (raw, json) Hash identifier: tvANgMdQ0X+NeBaxlytZkXkicVPse9Q/18NsB+MrO44= Subject key identifier: 81:DA:6D:2E:20:64:2E:77:AE:16:A1:1B:B5:EF:D7:D2:A4:BB:AE:8B Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 Certificate issuer: /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Certificate serial: 054F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft Manifest number: 0535 Signing time: Fri 30 May 2025 23:46:32 +0000 Manifest this update: Fri 30 May 2025 23:46:32 +0000 Manifest next update: Fri 06 Jun 2025 23:46:32 +0000 Files and hashes: 1: ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl (hash: gvEVoHlUvpcvfzvTem5xoqryGoT9DuMn3OMQFJ1BBfM=) 2: 3B2A0EE4AEBC11EF876B6A5AC4F9AE02.roa (hash: 4bP+/xCzlCHzMiPDDeZZu8ryV1WmsI6f+3c5qjtpUM8=) 3: EDC6896617B611F08E260814C4F9AE02.roa (hash: MPM/fDIm7iSq8h5ZOB3ujJWuioyZyPhojtnDvre1LOg=) 4: 3A964BE6AEBC11EF876B6A5AC4F9AE02.roa (hash: 3s0Y71iF/fsJNHbeREVW+BHHh6vRQTKc/vlJskM3cQo=) 5: 5F652B164A0311EC84EFD42FC4F9AE02.roa (hash: DJiem+mJ9guPOqkkTAIozTCpaBw0W78lezIlNh26BC0=) 6: CE751320B9D511ED89A5B11FC4F9AE02.roa (hash: qkcR8ZEDC9+iqlFe5dp0WkDY8PQPtYRvJuQb0n842mU=) 7: 16DA3F3E784E11EC96A28137C4F9AE02.roa (hash: y2qv06TmgMwKADn1oDVapCF1E/WcY7FuZLGnohpiPWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:46:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1359 (0x54f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1 Validity Not Before: May 30 23:46:32 2025 GMT Not After : Jun 6 23:46:32 2025 GMT Subject: CN=683a4358-d765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:65:ac:d6:6e:5d:bb:d4:f5:07:a6:9d:fd: d1:04:1a:d7:10:75:c7:70:6d:98:5b:21:2b:f1:e1: 81:55:9d:8f:bc:44:11:ec:56:2d:b7:bb:cb:5f:85: 8a:64:bf:55:92:e0:a7:8e:d2:19:29:9c:63:97:75: b2:bc:ec:13:56:aa:e1:6f:12:fd:e0:0f:59:b7:24: c5:25:42:b3:98:ec:fc:8c:06:19:4f:2b:d7:24:30: 48:cd:c9:b1:24:97:44:24:b5:55:5b:ed:00:f7:95: c5:8d:9f:95:95:13:9d:4d:c0:97:5e:47:56:f2:d6: 51:d1:54:38:fc:07:ff:e8:42:a6:d7:66:61:76:f0: 6f:3f:3e:38:f8:76:da:73:e2:e2:e7:6c:2f:24:e9: d4:fc:fb:78:c3:50:36:69:4a:7c:5d:b9:e2:c6:78: 7d:50:8b:7b:52:d6:76:56:fc:f1:32:52:04:ff:ba: be:75:5e:34:ee:3a:db:79:91:d3:91:e7:df:ae:20: 5d:a7:7e:72:42:16:7f:5d:86:b7:c0:1f:28:1e:bc: ed:9f:2b:b8:fc:29:a0:38:09:b5:97:54:26:6f:ed: 28:18:e7:cc:d9:e7:a1:3b:77:e5:80:1b:42:c9:33: 55:59:38:02:62:87:c0:bd:b1:3b:7f:a9:8a:0c:7a: 7d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DA:6D:2E:20:64:2E:77:AE:16:A1:1B:B5:EF:D7:D2:A4:BB:AE:8B X509v3 Authority Key Identifier: keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:44:2d:cc:ed:b8:83:31:65:4a:da:60:39:34:82:65:a1:95: a0:02:55:c7:48:ce:04:a5:81:48:a6:d4:d0:fc:6d:8d:94:ca: ee:06:61:d4:58:07:05:77:23:a4:cc:82:0a:1d:06:c1:9b:b9: 6b:14:40:96:8d:23:11:ed:76:50:a5:a5:1d:d1:12:84:e3:62: 8b:4d:a4:53:dd:de:35:cf:bf:35:2e:86:30:c4:55:2c:1d:d0: ab:79:e4:45:80:b8:d2:d2:9e:a5:9b:67:ef:27:91:f0:ad:75: 0e:3a:14:65:4f:e6:14:54:56:1a:44:10:f0:37:eb:ec:63:8d: 5c:90:40:a4:ce:87:4d:6c:bd:11:46:a4:46:0a:37:58:5e:28: 94:44:48:1a:d3:e9:3b:0a:7f:d0:ca:92:1e:18:ce:84:1c:1d: a5:d1:49:eb:67:77:63:83:f4:5b:75:7d:7a:11:5e:7d:b0:56: 66:89:44:88:0a:96:85:99:b9:e2:97:b5:20:38:cf:43:42:82: e5:47:4d:5f:f1:a7:ec:d7:a1:1b:89:9e:2e:3b:73:c3:a5:67: 4e:b6:19:0a:7c:c9:dc:96:13:0f:cd:40:97:7d:5c:34:9c:08: b1:ee:a1:a7:87:5e:c6:42:29:5a:3c:83:d1:a0:c5:3b:c2:fe: 59:ee:59:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4RTMxMTAvBgNVBAUTKDcxQzFFOEUwNTQwNDlBQ0ZEOUFBMjE5M0FGMUQ0OEM2 RDFEMDI1RTEwHhcNMjUwNTMwMjM0NjMyWhcNMjUwNjA2MjM0NjMyWjAYMRYwFAYD VQQDEw02ODNhNDM1OC1kNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzqllrNZuXbvU9Qemnf3RBBrXEHXHcG2YWyEr8eGBVZ2PvEQR7FYtt7vLX4WK ZL9VkuCnjtIZKZxjl3WyvOwTVqrhbxL94A9ZtyTFJUKzmOz8jAYZTyvXJDBIzcmx JJdEJLVVW+0A95XFjZ+VlROdTcCXXkdW8tZR0VQ4/Af/6EKm12ZhdvBvPz44+Hba c+Li52wvJOnU/Pt4w1A2aUp8Xbnixnh9UIt7UtZ2VvzxMlIE/7q+dV407jrbeZHT keffriBdp35yQhZ/XYa3wB8oHrztnyu4/CmgOAm1l1Qmb+0oGOfM2eehO3flgBtC yTNVWTgCYofAvbE7f6mKDHp9LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHabS4g ZC53rhahG7Xv19Kku66LMB8GA1UdIwQYMBaAFHHB6OBUBJrP2aohk68dSMbR0CXh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhFMy81MzkzQzBFRTAw MjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1zX1pxaUdUcngxSXh0SFFK ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjSG80RlFFbXNfWnFpR1RyeDFJeHRIUUplRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhFMy81MzkzQzBFRTAwMjYxMUVDQTQwNjE2MTRDNEY5QUUwMi9jY0hvNEZRRW1z X1pxaUdUcngxSXh0SFFKZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPRC3M7biDMWVK2mA5NIJloZWgAlXHSM4EpYFIptTQ/G2NlMruBmHU WAcFdyOkzIIKHQbBm7lrFECWjSMR7XZQpaUd0RKE42KLTaRT3d41z781LoYwxFUs HdCreeRFgLjS0p6lm2fvJ5HwrXUOOhRlT+YUVFYaRBDwN+vsY41ckECkzodNbL0R RqRGCjdYXiiUREga0+k7Cn/QypIeGM6EHB2l0UnrZ3djg/RbdX16EV59sFZmiUSI CpaFmbnil7UgOM9DQoLlR01f8afs16EbiZ4uO3PDpWdOthkKfMnclhMPzUCXfVw0 nAix7qGnh17GQilaPIPRoMU7wv5Z7ln8 -----END CERTIFICATE-----Generated at Sat May 31 15:16:23 2025 by rpki-client