$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft File: cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft (raw, json) Hash identifier: 6fLEQnGw5/mBqjaK0iGlwNa5bNjipRiJQgrX/ke9JPw= Subject key identifier: DC:E8:1C:D7:A3:3B:58:55:3E:77:F1:38:79:3A:0E:5A:C9:7F:79:07 Authority key identifier: 70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 Certificate issuer: /CN=A913CA4B/serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Certificate serial: 08EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft Manifest number: 08AE Signing time: Fri 30 May 2025 20:49:34 +0000 Manifest this update: Fri 30 May 2025 20:49:34 +0000 Manifest next update: Fri 06 Jun 2025 20:49:34 +0000 Files and hashes: 1: cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl (hash: 1ai+aWY+LclVw2N276XWxMvEzUzAA0TsXXoisXGtgR8=) 2: CDD4DA8E298311F0BD5B4B35C4F9AE02.roa (hash: iP/ASGN9KdZyYFGKnxTAiQtkxJveg1GRV/nsSZO4Yjg=) 3: 7206C9B0B9A911EE82CE6832C4F9AE02.roa (hash: 1BGCuCR8/5XNnfEBqosQ71/PFSfQ7yzaxtqH4ChrsGI=) 4: C714F71CBF9B11EA9CDFD642C4F9AE02.roa (hash: WQhWvpsGEUoUyhuwJrl1CNiZNORHG8GhG41+pFuVnQM=) 5: E6EBBE4A64CA11EE97188C5DC4F9AE02.roa (hash: FPmK/ZWN45BRsvOMGslxfKU8yKPfXq+QEtu+U3CAeqM=) 6: 60D4C96008DA11EEA1B2EE78C4F9AE02.roa (hash: 9dLmROiC4Lw0+lnZo79JQvbFk0n5gZqA79ORbR1QB2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2283 (0x8eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CA4B, serialNumber=709210CF761EC67FB394EA5896A5C647B305EEF1 Validity Not Before: May 30 20:49:34 2025 GMT Not After : Jun 6 20:49:34 2025 GMT Subject: CN=683a19de-9eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:51:91:89:dc:16:e8:45:aa:39:a8:a0:3d:05: 46:08:cd:20:f4:26:db:bd:f9:cd:d5:4d:cb:45:aa: 9f:84:c4:25:04:31:5f:76:4e:dc:4f:d5:46:66:27: 77:8b:e7:17:8d:c7:d7:6b:ef:73:af:4a:cb:f8:dd: 78:20:89:c5:c5:26:7b:70:ab:36:04:ac:18:5d:8c: d4:39:ae:c2:32:db:8b:d7:04:55:25:eb:f8:09:3f: 5a:dd:af:46:fd:5b:b4:7f:a0:0c:f2:ec:31:e3:c9: 4c:79:de:17:c4:85:a0:f0:54:de:34:58:23:e3:6c: 09:f4:31:54:c0:77:ab:b8:20:26:97:08:36:0e:9f: fc:7c:d4:84:08:b4:37:59:ad:4c:57:d8:7a:8d:72: cf:0b:93:0d:b8:e9:16:3a:d9:2b:11:1e:6c:ae:7a: 94:f4:37:af:9f:16:b0:d9:71:51:b9:a5:0a:f9:fe: 5f:40:46:99:1f:00:bd:d6:92:8f:46:2a:98:56:cd: cf:19:c5:2a:ba:3d:b9:5f:cf:3f:fc:75:67:97:4f: fa:f2:b7:b9:c1:79:3c:03:e5:8b:13:cf:c6:94:dd: e7:43:b7:af:72:20:50:57:6f:de:e2:59:ca:21:fb: 27:15:38:85:e8:cb:de:a9:31:02:14:cc:04:58:7b: 09:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:1C:D7:A3:3B:58:55:3E:77:F1:38:79:3A:0E:5A:C9:7F:79:07 X509v3 Authority Key Identifier: keyid:70:92:10:CF:76:1E:C6:7F:B3:94:EA:58:96:A5:C6:47:B3:05:EE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJIQz3Yexn-zlOpYlqXGR7MF7vE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA4B/DC2F0432BF8011EA96FE4A68C4F9AE02/cJIQz3Yexn-zlOpYlqXGR7MF7vE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:06:ca:0c:df:34:61:84:14:e0:9c:5d:06:22:9a:19:bf:b5: 07:f5:4e:b6:33:0a:50:5f:ac:03:42:ed:2a:4d:6e:5f:36:a9: 7f:cd:35:2d:ad:43:65:72:b1:ae:6f:95:66:09:11:33:88:35: bc:64:2c:4a:50:3d:3b:f6:ce:01:bd:89:9c:12:07:0d:87:0d: e3:44:11:cd:94:71:ed:a9:f9:1c:e8:71:fb:b4:a5:26:e4:5a: 68:ab:d0:0e:c5:e1:23:7e:aa:d3:3b:a5:c5:62:1b:e6:39:d5: a9:35:32:e5:5c:60:21:8a:65:4e:de:5b:da:4a:e8:87:e3:ac: 39:eb:43:47:32:55:e6:42:76:43:44:62:9e:5c:ec:4a:50:bd: 99:af:86:69:5b:9c:17:68:06:2a:9d:72:53:de:df:5c:fe:2a: 48:1f:e6:fa:ef:3c:fc:6c:ed:51:da:cb:2e:7e:bb:59:45:01: 1f:90:dc:48:04:09:3e:da:d4:51:ae:a8:db:ba:6d:f4:aa:60: be:ab:95:46:b6:87:68:fa:86:99:c3:36:48:d4:a4:26:25:57: cb:d2:4e:16:98:9b:21:30:45:db:42:6f:0d:e9:a3:dd:32:65: d7:eb:52:84:f8:af:ff:fd:c5:07:e5:6f:8a:6f:a9:c3:39:07: 51:bf:d6:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0NBNEIxMTAvBgNVBAUTKDcwOTIxMENGNzYxRUM2N0ZCMzk0RUE1ODk2QTVDNjQ3 QjMwNUVFRjEwHhcNMjUwNTMwMjA0OTM0WhcNMjUwNjA2MjA0OTM0WjAYMRYwFAYD VQQDEw02ODNhMTlkZS05ZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnlGRidwW6EWqOaigPQVGCM0g9CbbvfnN1U3LRaqfhMQlBDFfdk7cT9VGZid3 i+cXjcfXa+9zr0rL+N14IInFxSZ7cKs2BKwYXYzUOa7CMtuL1wRVJev4CT9a3a9G /Vu0f6AM8uwx48lMed4XxIWg8FTeNFgj42wJ9DFUwHeruCAmlwg2Dp/8fNSECLQ3 Wa1MV9h6jXLPC5MNuOkWOtkrER5srnqU9Devnxaw2XFRuaUK+f5fQEaZHwC91pKP RiqYVs3PGcUquj25X88//HVnl0/68re5wXk8A+WLE8/GlN3nQ7evciBQV2/e4lnK IfsnFTiF6MveqTECFMwEWHsJoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzoHNej O1hVPnfxOHk6DlrJf3kHMB8GA1UdIwQYMBaAFHCSEM92HsZ/s5TqWJalxkezBe7x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQ0E0Qi9EQzJGMDQzMkJG ODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhuLXpsT3BZbHFYR1I3TUY3 dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NKSVF6M1lleG4temxPcFlscVhHUjdNRjd2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Q0E0Qi9EQzJGMDQzMkJGODAxMUVBOTZGRTRBNjhDNEY5QUUwMi9jSklRejNZZXhu LXpsT3BZbHFYR1I3TUY3dkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGBsoM3zRhhBTgnF0GIpoZv7UH9U62MwpQX6wDQu0qTW5fNql/zTUt rUNlcrGub5VmCREziDW8ZCxKUD079s4BvYmcEgcNhw3jRBHNlHHtqfkc6HH7tKUm 5Fpoq9AOxeEjfqrTO6XFYhvmOdWpNTLlXGAhimVO3lvaSuiH46w560NHMlXmQnZD RGKeXOxKUL2Zr4ZpW5wXaAYqnXJT3t9c/ipIH+b67zz8bO1R2ssufrtZRQEfkNxI BAk+2tRRrqjbum30qmC+q5VGtodo+oaZwzZI1KQmJVfL0k4WmJshMEXbQm8N6aPd MmXX61KE+K///cUH5W+Kb6nDOQdRv9Yo -----END CERTIFICATE-----Generated at Sat May 31 17:42:35 2025 by rpki-client