$ rpki-client -vvf rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft File: cpJvxg98GEph1zvQlKpqOGtjACo.mft (raw, json) Hash identifier: qwUMmjHaa/l1URKEEPjMgFkl12NgWdz8nrE5XTwrCH4= Subject key identifier: C3:09:4B:33:47:2D:52:20:37:CD:29:A6:62:2F:3D:E8:5E:22:44:6E Authority key identifier: 72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A Certificate issuer: /CN=A91805CE/serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft Manifest number: 0110 Signing time: Sat 31 May 2025 04:39:13 +0000 Manifest this update: Sat 31 May 2025 04:39:13 +0000 Manifest next update: Sat 07 Jun 2025 04:39:13 +0000 Files and hashes: 1: cpJvxg98GEph1zvQlKpqOGtjACo.crl (hash: FibT1Y8dCrnFw4+q3djdrScPZZtyO/jhfgzvxMAw+cc=) 2: 9E194914B3EC11EE8B2EE910C4F9AE02.roa (hash: eBM1U0C9BAgz3z+X5mRsroakC5anBwEWYdlHygNX0ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:39:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91805CE, serialNumber=72926FC60F7C184A61D73BD094AA6A386B63002A Validity Not Before: May 31 04:39:13 2025 GMT Not After : Jun 7 04:39:13 2025 GMT Subject: CN=683a87f1-fb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:77:d2:0a:d5:6f:7c:62:70:c6:f9:9c:75:6a: 7a:44:21:7c:12:0b:b9:79:cb:85:21:65:24:43:b5: ff:51:6e:0f:60:d4:f5:02:a9:28:11:2e:cd:d5:80: 53:50:12:9e:ec:92:92:67:13:e8:97:6c:59:9b:4e: cf:ed:56:7c:12:91:4c:1b:b5:7e:0b:25:7f:7c:fb: 67:82:ff:d1:80:ec:72:ca:a3:07:ed:4b:f9:a1:09: 2a:82:66:fc:de:e2:7e:44:9e:df:a9:92:9a:60:5e: a8:5a:74:b3:e9:0d:e6:e2:cd:a3:0a:9d:6c:44:38: de:f3:fd:41:36:a0:57:0a:65:f3:13:5a:34:36:40: f6:4c:4f:65:1a:fe:28:28:98:6d:62:09:e4:09:6f: 36:69:ec:5f:11:e6:76:0b:b0:1a:33:af:1f:dd:7d: 2a:d2:db:e9:73:fe:78:3b:90:8b:2a:6a:a6:b3:85: 62:b5:19:a6:86:c1:e8:a3:02:70:58:f5:54:8c:56: 5f:05:4f:a3:ba:10:e4:db:dc:47:c9:94:1b:b4:76: d7:47:70:8a:5c:8a:fa:b6:71:73:0e:d5:e5:52:3b: af:43:2e:c5:4b:0f:de:13:26:6c:44:1b:f6:7c:f0: 3a:bd:eb:af:a1:49:21:2b:b7:bd:bc:67:4e:be:9c: 8e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:09:4B:33:47:2D:52:20:37:CD:29:A6:62:2F:3D:E8:5E:22:44:6E X509v3 Authority Key Identifier: keyid:72:92:6F:C6:0F:7C:18:4A:61:D7:3B:D0:94:AA:6A:38:6B:63:00:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cpJvxg98GEph1zvQlKpqOGtjACo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91805CE/0EB09D36AE7411EE8CED235CC4F9AE02/cpJvxg98GEph1zvQlKpqOGtjACo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:13:3b:ac:85:51:b8:ad:aa:b3:09:3f:a4:00:06:72:ee:15: 02:48:12:f3:21:45:dc:d0:59:7e:61:e4:16:93:86:17:6a:b6: e4:3d:5a:51:60:f0:f1:da:0e:d3:dc:67:66:c1:72:4b:6c:57: 50:57:8b:f4:d2:c7:ba:6a:68:01:ae:51:f7:82:b7:d5:de:25: d8:7f:a0:b6:8b:fe:7c:e5:b5:c6:d0:8b:f4:47:ef:d5:9e:1e: 48:5e:03:2a:1d:cc:ad:57:3e:1a:90:9e:23:9f:84:eb:04:8b: 0f:9b:bb:f0:e0:bd:82:39:30:e1:bd:34:2f:02:09:5b:a3:5a: 58:3f:91:d4:d8:28:58:aa:3d:3c:1d:49:bd:b6:7b:1f:ec:88: 0b:2f:8e:92:94:25:02:e1:66:8f:3b:77:d3:cf:fd:aa:8f:13: ab:60:cc:ed:83:f9:58:2f:ad:7c:f6:92:db:8b:cf:e4:d7:ba: a6:a8:b3:8a:4c:dd:c3:d5:3f:a9:69:14:07:c3:e4:8b:e2:c4: be:f4:19:38:b5:13:03:fc:a2:0e:d6:b8:bf:42:9e:03:11:94: 39:dc:c6:d5:2f:14:01:e4:d3:14:3e:79:e7:f5:aa:93:bb:de: 09:5c:0b:23:f0:e2:f8:67:8f:87:10:d5:42:7f:95:64:9b:95: 9d:cb:35:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA1Q0UxMTAvBgNVBAUTKDcyOTI2RkM2MEY3QzE4NEE2MUQ3M0JEMDk0QUE2QTM4 NkI2MzAwMkEwHhcNMjUwNTMxMDQzOTEzWhcNMjUwNjA3MDQzOTEzWjAYMRYwFAYD VQQDEw02ODNhODdmMS1mYjc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3fSCtVvfGJwxvmcdWp6RCF8Egu5ecuFIWUkQ7X/UW4PYNT1AqkoES7N1YBT UBKe7JKSZxPol2xZm07P7VZ8EpFMG7V+CyV/fPtngv/RgOxyyqMH7Uv5oQkqgmb8 3uJ+RJ7fqZKaYF6oWnSz6Q3m4s2jCp1sRDje8/1BNqBXCmXzE1o0NkD2TE9lGv4o KJhtYgnkCW82aexfEeZ2C7AaM68f3X0q0tvpc/54O5CLKmqms4VitRmmhsHoowJw WPVUjFZfBU+juhDk29xHyZQbtHbXR3CKXIr6tnFzDtXlUjuvQy7FSw/eEyZsRBv2 fPA6veuvoUkhK7e9vGdOvpyOwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMMJSzNH LVIgN80ppmIvPeheIkRuMB8GA1UdIwQYMBaAFHKSb8YPfBhKYdc70JSqajhrYwAq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDVDRS8wRUIwOUQzNkFF NzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdFcGgxenZRbEtwcU9HdGpB Q28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NwSnZ4Zzk4R0VwaDF6dlFsS3BxT0d0akFDby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDVDRS8wRUIwOUQzNkFFNzQxMUVFOENFRDIzNUNDNEY5QUUwMi9jcEp2eGc5OEdF cGgxenZRbEtwcU9HdGpBQ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+EzushVG4raqzCT+kAAZy7hUCSBLzIUXc0Fl+YeQWk4YXarbkPVpR YPDx2g7T3GdmwXJLbFdQV4v00se6amgBrlH3grfV3iXYf6C2i/585bXG0Iv0R+/V nh5IXgMqHcytVz4akJ4jn4TrBIsPm7vw4L2COTDhvTQvAglbo1pYP5HU2ChYqj08 HUm9tnsf7IgLL46SlCUC4WaPO3fTz/2qjxOrYMztg/lYL6189pLbi8/k17qmqLOK TN3D1T+paRQHw+SL4sS+9Bk4tRMD/KIO1ri/Qp4DEZQ53MbVLxQB5NMUPnnn9aqT u94JXAsj8OL4Z4+HENVCf5Vkm5WdyzXJ -----END CERTIFICATE-----Generated at Sat May 31 16:46:51 2025 by rpki-client