$ rpki-client -vvf rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft File: cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft (raw, json) Hash identifier: l0uNPo6S8zN3QIhXx5sUk7BVjALry6P0Y9bJMWG2cRE= Subject key identifier: 0F:F0:98:A6:80:52:FA:2C:F7:B5:23:C0:65:D0:F7:E0:39:4F:E5:4B Authority key identifier: 72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 Certificate issuer: /CN=A91755D7/serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft Manifest number: 0117 Signing time: Sat 31 May 2025 04:26:30 +0000 Manifest this update: Sat 31 May 2025 04:26:30 +0000 Manifest next update: Sat 07 Jun 2025 04:26:29 +0000 Files and hashes: 1: cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl (hash: cuH4mrg/9dbH+t8fY/dSLp6h0iVDJFZZmBQkzsn6pWo=) 2: A4C5164E8FD411EE85082822C4F9AE02.roa (hash: JGrOdZpDBctOporBnF3GYO8HL0N2P5Uu07r/sZBPWI8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91755D7, serialNumber=729355AA0378F6D4F4056E6626BBC9BE30C9D8F0 Validity Not Before: May 31 04:26:30 2025 GMT Not After : Jun 7 04:26:29 2025 GMT Subject: CN=683a84f6-ea8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:95:82:69:1e:97:19:df:72:12:fe:8e:e1: 3e:c9:91:87:70:3b:b5:94:e0:df:c7:fa:90:70:38: b9:da:a2:36:85:94:a2:63:ac:14:71:c8:40:c9:30: f1:85:b7:0e:2d:aa:45:4c:3f:8b:05:ba:af:7f:bd: 54:cf:b1:90:d3:f3:f9:ca:2d:61:ea:aa:00:2a:95: 20:56:c5:d2:87:da:29:73:07:85:65:9c:59:c5:23: 12:ea:6b:dc:d3:b8:9f:83:dd:33:dc:ff:97:9d:6a: 7e:ba:af:79:21:8c:72:16:0f:60:4b:cc:38:c4:42: 05:a6:c2:5a:e4:a8:59:9f:c7:70:73:64:69:1c:b7: 0e:a3:55:3e:31:4b:aa:10:e5:f0:58:aa:b2:37:d3: 5f:ef:9f:c8:e3:ef:14:10:da:c3:77:a1:f0:05:01: 1e:b3:c0:60:b1:71:58:7e:97:e3:a8:2e:c2:1a:66: 13:37:35:46:b9:a9:bd:af:e2:ca:95:fc:24:ec:12: 70:9d:f2:c6:e3:fe:39:9b:42:d1:80:e1:c8:99:e0: 3c:5e:47:dd:0b:a0:2e:ba:2f:ea:2a:61:f9:75:8f: fe:97:81:9e:68:7a:d8:c9:64:d1:e4:16:83:5a:13: 4d:1c:e7:d3:84:de:a5:7f:2c:ce:97:92:a3:7d:bc: 41:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F0:98:A6:80:52:FA:2C:F7:B5:23:C0:65:D0:F7:E0:39:4F:E5:4B X509v3 Authority Key Identifier: keyid:72:93:55:AA:03:78:F6:D4:F4:05:6E:66:26:BB:C9:BE:30:C9:D8:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpNVqgN49tT0BW5mJrvJvjDJ2PA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755D7/40F9EFA48FD411EEB0858749C4F9AE02/cpNVqgN49tT0BW5mJrvJvjDJ2PA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:17:f4:59:df:8b:cb:fc:5e:4d:c9:bc:20:64:75:88:7b:0e: be:01:5f:bc:8a:18:a1:0e:4b:8d:86:dd:b1:65:17:3f:09:f6: bf:52:42:6c:06:02:32:01:ad:f0:4a:9f:a0:3a:7a:10:78:ac: a8:49:3d:9e:78:e2:a7:42:52:3f:e9:de:93:ff:a2:bc:85:48: f9:0e:89:b1:40:1b:9b:b7:45:42:66:49:d7:ce:5e:a4:36:41: 0b:26:40:25:ba:11:72:ce:41:f8:c7:ad:f0:92:cd:95:a1:ed: fe:13:27:b3:63:c1:bc:cf:38:0f:71:79:5b:b8:3a:11:43:bd: 73:2d:9a:fd:b1:be:a4:fd:27:d3:df:19:15:f8:dd:de:ed:70: 86:04:1c:4f:60:50:a4:d9:45:db:94:0d:c8:50:05:42:4b:cf: bf:a2:87:33:2d:8c:f5:2f:59:71:99:70:8a:35:64:34:7b:f9: 9b:15:98:5f:de:00:f7:6e:96:8b:ae:56:c6:77:7b:0b:8d:78: c5:1b:fc:5a:a1:7e:55:ad:69:37:08:aa:04:b9:d3:c0:6e:56: 0c:b2:ae:ce:82:3f:87:e1:9c:e7:ff:48:b7:81:a5:30:44:5e: 43:c6:a4:82:05:19:ca:42:c5:c2:1e:98:89:ad:dd:10:b8:7b: 9c:8b:74:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1RDcxMTAvBgNVBAUTKDcyOTM1NUFBMDM3OEY2RDRGNDA1NkU2NjI2QkJDOUJF MzBDOUQ4RjAwHhcNMjUwNTMxMDQyNjMwWhcNMjUwNjA3MDQyNjI5WjAYMRYwFAYD VQQDEw02ODNhODRmNi1lYThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzIWVgmkelxnfchL+juE+yZGHcDu1lODfx/qQcDi52qI2hZSiY6wUcchAyTDx hbcOLapFTD+LBbqvf71Uz7GQ0/P5yi1h6qoAKpUgVsXSh9opcweFZZxZxSMS6mvc 07ifg90z3P+XnWp+uq95IYxyFg9gS8w4xEIFpsJa5KhZn8dwc2RpHLcOo1U+MUuq EOXwWKqyN9Nf75/I4+8UENrDd6HwBQEes8BgsXFYfpfjqC7CGmYTNzVGuam9r+LK lfwk7BJwnfLG4/45m0LRgOHImeA8XkfdC6Auui/qKmH5dY/+l4GeaHrYyWTR5BaD WhNNHOfThN6lfyzOl5KjfbxBXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/wmKaA Uvos97UjwGXQ9+A5T+VLMB8GA1UdIwQYMBaAFHKTVaoDePbU9AVuZia7yb4wydjw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTVENy80MEY5RUZBNDhG RDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0VDBCVzVtSnJ2SnZqREoy UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwTlZxZ040OXRUMEJXNW1KcnZKdmpESjJQQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTVENy80MEY5RUZBNDhGRDQxMUVFQjA4NTg3NDlDNEY5QUUwMi9jcE5WcWdONDl0 VDBCVzVtSnJ2SnZqREoyUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRF/RZ34vL/F5NybwgZHWIew6+AV+8ihihDkuNht2xZRc/Cfa/UkJs BgIyAa3wSp+gOnoQeKyoST2eeOKnQlI/6d6T/6K8hUj5DomxQBubt0VCZknXzl6k NkELJkAluhFyzkH4x63wks2Voe3+EyezY8G8zzgPcXlbuDoRQ71zLZr9sb6k/SfT 3xkV+N3e7XCGBBxPYFCk2UXblA3IUAVCS8+/ooczLYz1L1lxmXCKNWQ0e/mbFZhf 3gD3bpaLrlbGd3sLjXjFG/xaoX5VrWk3CKoEudPAblYMsq7Ogj+H4Zzn/0i3gaUw RF5DxqSCBRnKQsXCHpiJrd0QuHuci3SA -----END CERTIFICATE-----Generated at Sat May 31 17:53:17 2025 by rpki-client