$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft File: cQovxyPTd706pfsnGkrolOV6dFQ.mft (raw, json) Hash identifier: n2VmfSR7SOJo1ZqEGWKdV/rN5vhPzjXvU6D1TmeWJYA= Subject key identifier: D4:9D:73:19:F1:4B:A0:31:62:8B:D8:BB:C9:95:FD:76:FA:D5:07:CC Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Certificate serial: 0374 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft Manifest number: 036E Signing time: Sat 31 May 2025 01:07:43 +0000 Manifest this update: Sat 31 May 2025 01:07:43 +0000 Manifest next update: Sat 07 Jun 2025 01:07:43 +0000 Files and hashes: 1: cQovxyPTd706pfsnGkrolOV6dFQ.crl (hash: 7N8HosOAlNgemVpTa1MANnxdl5KLHJp2DzmraUFpSUU=) 2: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (hash: 4I3Yc+oHBu75hPbHWxPxeRv9eI1vw2aVJaFMOmOjLHw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 884 (0x374) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91976E2, serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454 Validity Not Before: May 31 01:07:43 2025 GMT Not After : Jun 7 01:07:43 2025 GMT Subject: CN=683a565f-9872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a0:30:43:fc:a3:cf:d3:28:bd:3a:2c:00:b7: 12:ce:75:90:d9:ca:fc:84:79:42:40:6b:03:f4:1a: 50:f4:44:81:41:a4:77:dd:32:46:ce:ab:35:95:20: 1c:8a:b2:84:f2:b0:89:f5:e2:39:4d:99:43:a3:da: 0e:94:fc:bb:8c:4d:6c:6a:9f:ba:77:d9:2e:6f:56: 6e:96:a6:54:a4:81:9d:ae:fb:44:b6:2e:d2:92:02: 9f:ed:98:ff:53:b0:96:59:02:91:54:74:65:c0:83: 4c:64:7b:84:d8:17:9c:6a:ae:60:0d:f9:b3:58:d4: 70:f8:57:9d:5b:d4:1b:73:0c:a0:84:b7:6b:3d:c8: 48:96:d4:a3:e1:2a:de:d0:6d:da:e8:27:8c:dd:2b: 1c:e8:54:c6:f7:88:48:c5:a5:c2:2e:34:58:57:f6: 43:22:4d:7a:dd:bb:4a:fd:7b:f9:a4:d2:d1:cb:57: 98:6d:6c:de:36:ea:0a:ee:a1:38:03:09:c5:7f:00: 65:5c:16:68:a8:52:21:84:4b:0b:d9:60:31:db:10: bf:77:eb:66:e5:88:96:2d:6a:83:0d:32:50:2d:69: 4f:8c:94:42:93:b3:89:18:3a:2c:f7:58:89:56:81: 82:8c:b0:5c:4d:ba:38:ee:21:6f:ba:24:b7:f5:8b: 3b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9D:73:19:F1:4B:A0:31:62:8B:D8:BB:C9:95:FD:76:FA:D5:07:CC X509v3 Authority Key Identifier: keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c8:b2:a2:11:0c:c1:a5:e6:07:10:08:84:4d:68:69:9b:e6: bf:f3:41:6c:04:b0:8f:a4:e1:ff:2f:ca:41:fd:61:a5:2f:9f: 8f:d1:99:86:97:0d:93:fe:1f:f3:3b:68:19:f3:fd:29:ca:1a: f4:87:4f:4c:8d:36:81:a9:8d:66:96:43:a9:68:e6:df:f8:e1: a0:e7:37:46:0a:af:96:f2:2e:82:a9:92:47:2b:b7:fb:33:f9: b5:bf:e3:c5:0f:04:be:c8:96:d1:c0:6b:40:8b:cc:5f:ef:f9: a7:45:36:59:82:32:00:ea:b2:84:be:db:d1:09:ec:99:e7:17: 9c:15:c1:9c:87:72:fb:58:e8:10:22:7c:dc:71:4d:25:16:e6: 3a:8c:98:9c:b8:97:48:c7:20:d6:c3:a8:83:e5:50:f2:36:6d: c5:10:10:99:89:cd:d0:8d:c0:d8:77:00:a9:ad:a0:bb:45:17: c8:fb:e8:45:94:a5:a7:d3:ea:a9:e9:87:78:05:82:c8:c2:d8: 22:34:89:15:00:de:54:43:ae:b6:39:a9:c8:7b:f0:07:d4:13: f6:3e:be:5a:f6:98:38:d4:3a:6a:02:31:57:fc:ad:b9:d7:7e: 6c:cf:db:b7:e4:29:62:3f:98:67:66:39:9b:09:c1:0a:7d:43: cc:70:1e:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc2RTIxMTAvBgNVBAUTKDcxMEEyRkM3MjNEMzc3QkQzQUE1RkIyNzFBNEFFODk0 RTU3QTc0NTQwHhcNMjUwNTMxMDEwNzQzWhcNMjUwNjA3MDEwNzQzWjAYMRYwFAYD VQQDEw02ODNhNTY1Zi05ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4aAwQ/yjz9MovTosALcSznWQ2cr8hHlCQGsD9BpQ9ESBQaR33TJGzqs1lSAc irKE8rCJ9eI5TZlDo9oOlPy7jE1sap+6d9kub1ZulqZUpIGdrvtEti7SkgKf7Zj/ U7CWWQKRVHRlwINMZHuE2Becaq5gDfmzWNRw+FedW9QbcwyghLdrPchIltSj4Sre 0G3a6CeM3Ssc6FTG94hIxaXCLjRYV/ZDIk163btK/Xv5pNLRy1eYbWzeNuoK7qE4 AwnFfwBlXBZoqFIhhEsL2WAx2xC/d+tm5YiWLWqDDTJQLWlPjJRCk7OJGDos91iJ VoGCjLBcTbo47iFvuiS39Ys7kwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSdcxnx S6AxYovYu8mV/Xb61QfMMB8GA1UdIwQYMBaAFHEKL8cj03e9OqX7JxpK6JTlenRU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzZFMi80N0M0NEFEOEFF ODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3MDZwZnNuR2tyb2xPVjZk RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NRb3Z4eVBUZDcwNnBmc25Ha3JvbE9WNmRGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzZFMi80N0M0NEFEOEFFODkxMUVDOEE4RDMzNjhDNEY5QUUwMi9jUW92eHlQVGQ3 MDZwZnNuR2tyb2xPVjZkRlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqyLKiEQzBpeYHEAiETWhpm+a/80FsBLCPpOH/L8pB/WGlL5+P0ZmG lw2T/h/zO2gZ8/0pyhr0h09MjTaBqY1mlkOpaObf+OGg5zdGCq+W8i6CqZJHK7f7 M/m1v+PFDwS+yJbRwGtAi8xf7/mnRTZZgjIA6rKEvtvRCeyZ5xecFcGch3L7WOgQ InzccU0lFuY6jJicuJdIxyDWw6iD5VDyNm3FEBCZic3QjcDYdwCpraC7RRfI++hF lKWn0+qp6Yd4BYLIwtgiNIkVAN5UQ662OanIe/AH1BP2Pr5a9pg41DpqAjFX/K25 135sz9u35CliP5hnZjmbCcEKfUPMcB4A -----END CERTIFICATE-----Generated at Sat May 31 16:56:09 2025 by rpki-client