$ rpki-client -vvf rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft File: CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft (raw, json) Hash identifier: wNc14EhFl9xBpAZbOTyd3z4EBSutWSds/aeMU80Pm7k= Subject key identifier: EB:0E:AF:54:26:8B:9E:87:4C:C6:DA:76:18:14:F3:F9:97:B1:5B:99 Authority key identifier: 08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 Certificate issuer: /CN=A9151050/serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Certificate serial: 0856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft Manifest number: 0852 Signing time: Fri 30 May 2025 20:56:33 +0000 Manifest this update: Fri 30 May 2025 20:56:33 +0000 Manifest next update: Fri 06 Jun 2025 20:56:33 +0000 Files and hashes: 1: CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl (hash: Qsm1ioHSU3FITUZYOqbymLqiRO1mIX0ynE4MvVFeshU=) 2: 4D0E00D6470A11EE84127B66C4F9AE02.roa (hash: /M2P6qLYLe5I9DwmD7wnKMTRki3A6i4WYlxxpdISB7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2134 (0x856) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151050, serialNumber=082C67C9AEC7DD1AA9D855D8A0FCC07966EFC8C7 Validity Not Before: May 30 20:56:33 2025 GMT Not After : Jun 6 20:56:33 2025 GMT Subject: CN=683a1b81-ed9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d3:12:00:be:14:89:83:e4:54:d7:4c:6a:8b: a7:93:04:18:c0:90:9b:5b:46:cc:d6:0d:ad:96:79: ca:c3:7c:f5:8b:a7:6a:ae:60:11:2d:57:4e:ec:88: 98:55:f7:43:52:8e:aa:26:b7:b9:69:27:d7:45:23: ca:81:e4:b6:00:71:d4:40:fb:db:6e:40:2f:d6:d4: 88:78:e6:13:5f:31:e9:30:81:d0:09:00:a9:23:97: 18:be:a1:06:b3:35:98:cd:e5:5b:01:9f:ae:10:ab: f9:d7:ed:54:d9:c1:5c:db:0f:1c:2d:9a:18:30:63: ce:06:0b:73:56:03:cb:55:2b:57:a5:02:e3:41:e3: 2d:2b:5c:40:25:64:ce:eb:2e:d3:32:75:e7:f4:4e: d5:ad:5c:7d:c2:26:75:f0:ef:7a:7c:c7:1c:2b:4e: 2e:7a:1e:8f:19:35:8f:b9:df:15:e5:49:94:09:7b: 13:91:38:cd:87:e0:7d:fb:a9:88:c1:96:cb:8d:cf: 27:dc:71:b0:6f:4a:e5:b6:a2:ed:21:be:78:82:fd: aa:45:e5:af:7e:bc:ec:d3:fe:d9:79:c2:21:36:b6: 57:65:78:fa:1d:87:42:f3:6a:79:82:74:90:6e:79: 9f:d5:ce:0c:04:70:b3:ed:b4:51:76:9e:14:72:af: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0E:AF:54:26:8B:9E:87:4C:C6:DA:76:18:14:F3:F9:97:B1:5B:99 X509v3 Authority Key Identifier: keyid:08:2C:67:C9:AE:C7:DD:1A:A9:D8:55:D8:A0:FC:C0:79:66:EF:C8:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CCxnya7H3Rqp2FXYoPzAeWbvyMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151050/46A9C440C94111EA8BEFEE67C4F9AE02/CCxnya7H3Rqp2FXYoPzAeWbvyMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:15:c8:39:c4:c2:5a:29:e2:d9:15:a2:c2:2a:49:f8:dc:68: d0:d4:2c:93:87:79:07:c1:f2:57:c1:3a:29:6e:70:76:2c:38: cf:33:c8:4a:0c:b3:9e:ca:b4:02:94:3b:84:7e:13:56:cf:1c: a0:a5:cb:e1:84:ca:f7:e3:ba:39:72:c7:4e:89:3e:e1:ae:81: 44:db:9d:7e:3b:99:0c:8f:03:9a:d9:80:64:6d:b8:9c:7f:34: be:b8:5c:4e:e2:42:b5:61:49:e7:7a:83:4d:23:8c:5a:e2:b2: 8a:c6:e9:f8:4d:41:fe:f3:42:9e:87:8f:0a:7c:31:1c:04:c4: 74:ed:92:71:82:93:03:7f:b2:30:ac:65:09:15:ee:f4:24:ea: e2:89:51:7f:b3:c8:7f:68:5b:80:23:85:36:10:b3:5b:7d:52: 85:8d:87:76:71:ba:1c:a0:f9:2c:3c:a5:be:5c:6b:28:b6:ae: 17:50:d7:f6:a8:de:3b:45:6d:7d:02:a2:01:df:53:90:87:9e: b5:d6:fa:3a:c4:d4:62:7f:c3:42:92:b5:32:0e:e3:42:f0:32: 2e:a2:de:cc:1c:52:28:9e:33:13:49:ca:68:76:02:40:4d:19: 86:9e:53:87:6c:dd:8a:da:9a:72:37:b1:38:23:69:b2:dc:65: 9d:a9:96:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwNTAxMTAvBgNVBAUTKDA4MkM2N0M5QUVDN0REMUFBOUQ4NTVEOEEwRkNDMDc5 NjZFRkM4QzcwHhcNMjUwNTMwMjA1NjMzWhcNMjUwNjA2MjA1NjMzWjAYMRYwFAYD VQQDEw02ODNhMWI4MS1lZDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs9MSAL4UiYPkVNdMaounkwQYwJCbW0bM1g2tlnnKw3z1i6dqrmARLVdO7IiY VfdDUo6qJre5aSfXRSPKgeS2AHHUQPvbbkAv1tSIeOYTXzHpMIHQCQCpI5cYvqEG szWYzeVbAZ+uEKv51+1U2cFc2w8cLZoYMGPOBgtzVgPLVStXpQLjQeMtK1xAJWTO 6y7TMnXn9E7VrVx9wiZ18O96fMccK04ueh6PGTWPud8V5UmUCXsTkTjNh+B9+6mI wZbLjc8n3HGwb0rltqLtIb54gv2qReWvfrzs0/7ZecIhNrZXZXj6HYdC82p5gnSQ bnmf1c4MBHCz7bRRdp4Ucq9EOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsOr1Qm i56HTMbadhgU8/mXsVuZMB8GA1UdIwQYMBaAFAgsZ8mux90aqdhV2KD8wHlm78jH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTA1MC80NkE5QzQ0MEM5 NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNScXAyRlhZb1B6QWVXYnZ5 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NDeG55YTdIM1JxcDJGWFlvUHpBZVdidnlNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTA1MC80NkE5QzQ0MEM5NDExMUVBOEJFRkVFNjdDNEY5QUUwMi9DQ3hueWE3SDNS cXAyRlhZb1B6QWVXYnZ5TWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcFcg5xMJaKeLZFaLCKkn43GjQ1CyTh3kHwfJXwTopbnB2LDjPM8hK DLOeyrQClDuEfhNWzxygpcvhhMr347o5csdOiT7hroFE251+O5kMjwOa2YBkbbic fzS+uFxO4kK1YUnneoNNI4xa4rKKxun4TUH+80Keh48KfDEcBMR07ZJxgpMDf7Iw rGUJFe70JOriiVF/s8h/aFuAI4U2ELNbfVKFjYd2cbocoPksPKW+XGsotq4XUNf2 qN47RW19AqIB31OQh5611vo6xNRif8NCkrUyDuNC8DIuot7MHFIonjMTScpodgJA TRmGnlOHbN2K2ppyN7E4I2my3GWdqZZr -----END CERTIFICATE-----Generated at Sat May 31 15:07:53 2025 by rpki-client