$ rpki-client -vvf rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft File: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft (raw, json) Hash identifier: mOfPdQ4hl7y1BqT+BMH52QzCuJ7n+klbQckw6zhSKgY= Subject key identifier: 09:8C:A2:75:AD:BE:C0:BB:52:73:95:64:5B:B8:1F:7C:B2:04:27:85 Authority key identifier: 0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A Certificate issuer: /CN=A918E0B2/serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Certificate serial: 0555 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft Manifest number: 054B Signing time: Fri 30 May 2025 23:37:11 +0000 Manifest this update: Fri 30 May 2025 23:37:10 +0000 Manifest next update: Fri 06 Jun 2025 23:37:10 +0000 Files and hashes: 1: Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl (hash: Bfg+60BjgHtFxljO6MtGYkIyvjl+MoTESympdJUbVEo=) 2: 63E3EB3EEF6611EB9A7EFE0EC4F9AE02.roa (hash: EqiHTn4Bvx29MtI27T1i2scxIu1sELWg2VCi9UdcIbA=) 3: 64720824EF6611EB9A7EFE0EC4F9AE02.roa (hash: pMhtrW7+OEb1a5aMFUrv7KoBkS+JHvtrZZHpxKICBfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1365 (0x555) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E0B2, serialNumber=0B3EBA88F1ADA1A1B50891B26531A3E709BF659A Validity Not Before: May 30 23:37:10 2025 GMT Not After : Jun 6 23:37:10 2025 GMT Subject: CN=683a4126-bccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bf:e0:ee:5a:4d:d5:da:a3:93:9b:8c:10:e6: bc:e6:f4:87:1a:16:b9:cd:56:aa:ed:b3:68:21:f9: f5:69:0e:8e:95:ba:6b:18:42:0e:d9:ca:6f:e7:ff: 4c:2c:9c:87:a0:73:f3:ab:0b:62:17:8f:d0:62:19: 43:e4:2a:4e:d5:47:70:79:d6:14:f3:1b:ac:60:99: 7f:a7:a8:9e:ad:fa:db:ea:be:89:ee:c4:bf:aa:91: 61:c7:f4:a3:06:7f:0a:a7:ce:2e:c0:16:fe:25:45: 5d:7b:09:11:33:5b:74:bf:1a:38:cd:16:ea:1d:e3: c8:43:f0:73:4d:67:8d:3f:a0:8c:67:36:50:39:64: 0b:ac:12:a0:f6:30:62:49:c5:8e:27:ea:74:08:1b: 5f:57:02:0a:63:0e:54:a4:d1:c8:09:f6:7c:32:4a: 83:ce:52:62:28:66:0d:19:f8:f8:76:08:00:1d:b9: 78:07:00:14:87:b2:89:e3:f3:33:94:3b:68:f3:27: b8:fd:97:55:4f:fd:27:cb:75:18:b6:81:d4:2d:04: 0b:cd:cc:97:b5:9d:22:3d:94:5d:3c:3e:14:16:48: bc:e7:d8:ad:ca:2b:4c:49:73:91:c7:af:00:e4:7d: 67:3a:c3:10:0d:21:91:51:f5:62:b6:a2:e6:ed:c3: f2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:A2:75:AD:BE:C0:BB:52:73:95:64:5B:B8:1F:7C:B2:04:27:85 X509v3 Authority Key Identifier: keyid:0B:3E:BA:88:F1:AD:A1:A1:B5:08:91:B2:65:31:A3:E7:09:BF:65:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E0B2/67042C18EF6411EB833FC80DC4F9AE02/Cz66iPGtoaG1CJGyZTGj5wm_ZZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a8:6a:92:8b:6e:11:f0:02:b4:42:06:91:f3:47:cb:e3:c8: 59:1e:f4:6e:d7:dc:c0:2b:9e:f9:dd:f6:87:40:93:e5:75:1d: 83:89:29:2b:f7:c2:a5:39:8c:52:ba:39:91:52:12:8b:e9:82: 2d:fe:49:09:2f:ec:44:62:19:8b:af:c4:58:9b:bd:82:62:ee: 50:92:eb:2e:f5:54:ef:bc:5e:e1:46:56:90:95:ea:38:3e:40: 31:13:32:b4:56:2f:ca:d1:d7:81:19:f2:e1:c9:c6:40:a1:5d: 27:0b:59:4b:15:b4:b3:6b:a1:12:b0:4a:27:38:9d:a4:85:95: 2e:30:49:d8:fb:3b:5f:6a:61:5c:ed:53:ce:8b:96:6e:b9:2a: 3b:11:fa:3f:8a:1c:29:24:71:6e:ab:ca:72:9f:12:27:9b:b6: 8a:63:d6:cf:97:80:9e:04:78:e5:b3:33:51:3a:b2:8e:a4:a7: d4:94:24:9b:39:29:4f:2e:a8:ee:46:68:7b:28:e5:00:35:22: 2d:67:f8:8b:d9:07:5c:c5:73:b7:a1:2d:ca:4a:8d:6a:48:5e: 22:da:e1:d1:e5:6c:92:eb:00:cd:d8:d4:0c:07:d1:eb:49:1d: a3:cc:6c:66:4f:98:f3:01:5e:6d:38:1e:3f:29:86:27:26:9f: 04:c7:de:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEUwQjIxMTAvBgNVBAUTKDBCM0VCQTg4RjFBREExQTFCNTA4OTFCMjY1MzFBM0U3 MDlCRjY1OUEwHhcNMjUwNTMwMjMzNzEwWhcNMjUwNjA2MjMzNzEwWjAYMRYwFAYD VQQDEw02ODNhNDEyNi1iY2NmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7/g7lpN1dqjk5uMEOa85vSHGha5zVaq7bNoIfn1aQ6OlbprGEIO2cpv5/9M LJyHoHPzqwtiF4/QYhlD5CpO1UdwedYU8xusYJl/p6ierfrb6r6J7sS/qpFhx/Sj Bn8Kp84uwBb+JUVdewkRM1t0vxo4zRbqHePIQ/BzTWeNP6CMZzZQOWQLrBKg9jBi ScWOJ+p0CBtfVwIKYw5UpNHICfZ8MkqDzlJiKGYNGfj4dggAHbl4BwAUh7KJ4/Mz lDto8ye4/ZdVT/0ny3UYtoHULQQLzcyXtZ0iPZRdPD4UFki859ityitMSXORx68A 5H1nOsMQDSGRUfVitqLm7cPylQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmMonWt vsC7UnOVZFu4H3yyBCeFMB8GA1UdIwQYMBaAFAs+uojxraGhtQiRsmUxo+cJv2Wa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTBCMi82NzA0MkMxOEVG NjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9hRzFDSkd5WlRHajV3bV9a Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6NjZpUEd0b2FHMUNKR3laVEdqNXdtX1paby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTBCMi82NzA0MkMxOEVGNjQxMUVCODMzRkM4MERDNEY5QUUwMi9DejY2aVBHdG9h RzFDSkd5WlRHajV3bV9aWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoqGqSi24R8AK0QgaR80fL48hZHvRu19zAK5753faHQJPldR2DiSkr 98KlOYxSujmRUhKL6YIt/kkJL+xEYhmLr8RYm72CYu5Qkusu9VTvvF7hRlaQleo4 PkAxEzK0Vi/K0deBGfLhycZAoV0nC1lLFbSza6ESsEonOJ2khZUuMEnY+ztfamFc 7VPOi5ZuuSo7Efo/ihwpJHFuq8pynxInm7aKY9bPl4CeBHjlszNROrKOpKfUlCSb OSlPLqjuRmh7KOUANSItZ/iL2QdcxXO3oS3KSo1qSF4i2uHR5WyS6wDN2NQMB9Hr SR2jzGxmT5jzAV5tOB4/KYYnJp8Ex95w -----END CERTIFICATE-----Generated at Sat May 31 17:42:38 2025 by rpki-client