$ rpki-client -vvf rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft File: cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft (raw, json) Hash identifier: Ip7kmAWQo3TQN0qzscq+Tg+jopMNq9+w0wr4R7uOk4M= Subject key identifier: 00:21:52:08:74:AD:38:76:7C:78:B1:B4:0D:B2:28:31:6E:A8:40:6E Authority key identifier: 71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 Certificate issuer: /CN=A911F627/serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft Manifest number: 0160 Signing time: Sat 31 May 2025 03:38:21 +0000 Manifest this update: Sat 31 May 2025 03:38:20 +0000 Manifest next update: Sat 07 Jun 2025 03:38:20 +0000 Files and hashes: 1: cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl (hash: z1esbPGInDuQ9N+2W4W6uQK8VlkO5bd8joTohnJE9l0=) 2: C001E5861FCC11EEB409C35EC4F9AE02.roa (hash: HsjfDSOih06ECrmd3NlukL0cYpkEm4olWRK90K810ck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F627, serialNumber=71173EDA7305CCFD10BD78D83A9330E8C7640DF6 Validity Not Before: May 31 03:38:20 2025 GMT Not After : Jun 7 03:38:20 2025 GMT Subject: CN=683a79ad-d9ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cf:85:80:a4:58:4b:ef:62:a5:0a:26:e0:83: 79:d8:68:09:3c:4a:b0:e6:58:4e:db:e2:a8:ee:2c: 2b:5b:70:ab:f7:f4:a7:e3:63:2a:07:ec:a9:e6:ca: 89:2a:c9:4d:d3:e1:71:38:3e:cd:2a:1d:83:12:32: 2e:99:d3:8c:40:0b:d5:e4:02:0d:6f:9f:13:2a:03: 29:6d:62:b4:09:ed:2e:52:34:55:1d:59:fc:de:b7: 5c:4d:90:9e:3d:55:a2:1a:36:32:60:bc:a8:be:97: 72:d5:7a:3a:c5:d8:e0:ea:d1:36:9e:47:41:ba:65: ae:71:05:69:23:27:82:4d:51:1c:95:ee:f0:7e:10: 6a:35:78:f2:05:e0:f2:d9:7d:cc:53:da:6d:4c:cf: f5:42:a6:f4:32:6e:29:d3:3b:cc:7a:4e:b0:e0:51: be:d5:dd:60:ad:ac:43:9f:e4:09:37:cc:e3:1c:b8: 1f:46:3b:0f:37:30:4c:2f:b4:66:21:06:11:92:be: 6c:e7:47:61:13:83:c4:9b:e2:ef:9e:bd:61:34:0d: 57:31:e0:4a:f1:8d:08:91:cd:40:0b:55:bc:97:b9: 1b:a7:8a:2b:7f:50:5a:b2:c1:2b:48:c5:03:4d:a6: cf:d5:6b:54:12:8b:db:6a:5a:f8:8d:5e:97:75:a8: ba:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:21:52:08:74:AD:38:76:7C:78:B1:B4:0D:B2:28:31:6E:A8:40:6E X509v3 Authority Key Identifier: keyid:71:17:3E:DA:73:05:CC:FD:10:BD:78:D8:3A:93:30:E8:C7:64:0D:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cRc-2nMFzP0QvXjYOpMw6MdkDfY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F627/493DA3661FC911EE999F5960C4F9AE02/cRc-2nMFzP0QvXjYOpMw6MdkDfY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:e9:c9:63:1d:ce:03:67:2d:a5:82:7d:e0:ac:2e:32:bd:86: dd:f6:d4:7b:80:48:22:ec:18:7d:a9:6e:e7:a1:73:b9:f2:d2: 37:00:eb:d2:80:fa:4c:ce:59:a5:04:6d:e8:25:53:c9:5e:0d: d5:3a:af:46:9a:71:60:10:ca:2a:5b:12:86:f2:9c:00:05:a2: f3:0b:cc:df:0f:e5:ff:1e:8f:61:21:93:fd:72:9b:c8:e9:7d: cc:a4:d1:9c:05:0d:4d:e5:ce:5b:c6:18:29:50:bf:d9:ce:fc: 53:08:58:b0:26:d3:2c:b9:ee:f4:da:23:70:92:84:36:d2:db: 62:00:78:98:a0:8b:c5:c8:0b:87:11:41:6e:ab:dd:37:14:89: eb:49:b2:2a:52:27:c8:fe:21:bf:3c:e4:e0:0e:b9:30:9c:2f: c0:44:1b:12:89:79:32:23:ee:59:f8:d5:f3:87:70:1e:5f:7d: 8b:e1:a8:95:0e:22:95:a9:d1:45:b5:9c:f5:5b:92:16:0b:cc: a5:9f:fa:dc:6a:51:70:58:9f:93:86:68:cb:5f:77:27:50:95: 10:1b:8a:2b:37:71:f6:48:89:b5:fd:d7:c7:34:33:9b:42:d4: 64:3c:b8:0b:eb:0a:22:a2:64:89:69:0e:dc:ae:ab:80:5d:02: 22:57:f0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY2MjcxMTAvBgNVBAUTKDcxMTczRURBNzMwNUNDRkQxMEJENzhEODNBOTMzMEU4 Qzc2NDBERjYwHhcNMjUwNTMxMDMzODIwWhcNMjUwNjA3MDMzODIwWjAYMRYwFAYD VQQDEw02ODNhNzlhZC1kOWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0M+FgKRYS+9ipQom4IN52GgJPEqw5lhO2+Ko7iwrW3Cr9/Sn42MqB+yp5sqJ KslN0+FxOD7NKh2DEjIumdOMQAvV5AINb58TKgMpbWK0Ce0uUjRVHVn83rdcTZCe PVWiGjYyYLyovpdy1Xo6xdjg6tE2nkdBumWucQVpIyeCTVEcle7wfhBqNXjyBeDy 2X3MU9ptTM/1Qqb0Mm4p0zvMek6w4FG+1d1graxDn+QJN8zjHLgfRjsPNzBML7Rm IQYRkr5s50dhE4PEm+Lvnr1hNA1XMeBK8Y0Ikc1AC1W8l7kbp4orf1BassErSMUD TabP1WtUEovbalr4jV6Xdai6jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAhUgh0 rTh2fHixtA2yKDFuqEBuMB8GA1UdIwQYMBaAFHEXPtpzBcz9EL142DqTMOjHZA32 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjYyNy80OTNEQTM2NjFG QzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQMFF2WGpZT3BNdzZNZGtE ZlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NSYy0ybk1GelAwUXZYallPcE13Nk1ka0RmWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjYyNy80OTNEQTM2NjFGQzkxMUVFOTk5RjU5NjBDNEY5QUUwMi9jUmMtMm5NRnpQ MFF2WGpZT3BNdzZNZGtEZlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ6cljHc4DZy2lgn3grC4yvYbd9tR7gEgi7Bh9qW7noXO58tI3AOvS gPpMzlmlBG3oJVPJXg3VOq9GmnFgEMoqWxKG8pwABaLzC8zfD+X/Ho9hIZP9cpvI 6X3MpNGcBQ1N5c5bxhgpUL/ZzvxTCFiwJtMsue702iNwkoQ20ttiAHiYoIvFyAuH EUFuq903FInrSbIqUifI/iG/POTgDrkwnC/ARBsSiXkyI+5Z+NXzh3AeX32L4aiV DiKVqdFFtZz1W5IWC8yln/rcalFwWJ+ThmjLX3cnUJUQG4orN3H2SIm1/dfHNDOb QtRkPLgL6woiomSJaQ7crquAXQIiV/Bw -----END CERTIFICATE-----Generated at Sat May 31 17:02:18 2025 by rpki-client