$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: dyV7x26eRmDdBV8X24rmflMnrwSbRHfei0UkRKUnXN0= Subject key identifier: CF:8D:F0:33:8F:3C:A2:30:AE:16:02:77:E4:FB:C4:FE:42:F6:4B:E4 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1D71 Signing time: Wed 04 Jun 2025 16:10:39 +0000 Manifest this update: Wed 04 Jun 2025 16:10:39 +0000 Manifest next update: Wed 11 Jun 2025 16:10:39 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: G3o5HY6CJlrdJ6ziawGkkVza19umOfy+w1gR21o7BFg=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: NAFJJXNP6W1IL/8p5XX1DsTHhpW+KT2jLZylfntYa8I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 16:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7561 (0x1d89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Jun 4 16:10:39 2025 GMT Not After : Jun 11 16:10:39 2025 GMT Subject: CN=68406fff-854d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:61:40:83:2c:d6:2e:ad:6f:1d:a0:46:32: ec:66:04:0f:aa:41:aa:77:09:19:01:a4:69:d0:a9: d9:43:3b:f2:8e:dd:d8:8e:bb:e0:f2:92:48:8d:e5: d6:4d:62:7e:94:ee:9a:d9:4e:4a:8d:cc:3c:97:e7: 91:6f:0c:9b:ee:99:23:2e:13:90:ca:c1:89:ea:31: ab:8d:18:f1:e8:49:5f:23:6c:c2:c7:de:55:d0:a4: 7e:d2:70:12:54:47:82:50:40:41:6f:2a:32:36:2a: 4b:98:66:13:32:59:e5:67:ea:41:3c:ee:9a:c2:d3: 6c:22:ca:e4:00:11:88:76:08:92:31:06:b1:0f:4c: ba:aa:56:c5:23:88:d3:60:45:0e:e2:81:70:d7:7b: bd:29:d7:d2:90:03:f3:d4:e5:1d:8b:9d:ba:dd:bd: 26:40:90:09:a0:94:fe:bb:50:e5:f2:b1:5e:3a:0e: 0b:1c:40:9f:42:65:16:20:ec:09:4f:f8:fd:bd:ed: eb:27:9d:b5:91:5b:0f:8e:95:8f:d2:6c:59:69:e4: dd:df:dc:60:f1:5b:7e:5f:21:55:35:e1:d3:97:6a: 25:c8:10:55:09:4c:de:d3:7c:86:d8:b5:92:7b:c9: 68:8a:75:cc:53:ec:2c:0d:be:f4:a5:5a:ca:a0:41: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8D:F0:33:8F:3C:A2:30:AE:16:02:77:E4:FB:C4:FE:42:F6:4B:E4 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:a5:cd:b5:17:c8:f3:f0:95:73:e6:f7:28:4b:b9:2a:3c:16: c6:6f:44:fa:7a:dd:ac:e7:79:6a:f5:ab:b7:1b:5c:de:63:aa: c8:a8:74:b3:f5:1b:2b:d7:af:ed:4c:47:24:a9:ab:6d:42:46: a5:de:40:f6:46:a1:f0:9f:d1:2f:ba:3c:41:63:79:50:1e:94: 6e:ea:59:da:f6:ef:a9:15:5c:45:ba:71:9f:77:5d:62:eb:7a: 9c:0c:00:5e:ba:e5:a1:af:4f:8d:8b:7c:0c:89:2d:e9:f0:46: 62:fa:c0:5a:d1:a2:d3:d7:f7:9e:41:7b:b8:9b:4c:a8:22:2d: 30:f8:a8:c0:63:79:f6:02:9d:86:96:a7:f5:47:37:33:2d:aa: ee:be:c0:db:35:0a:8c:cf:ba:cf:45:8c:fb:ac:e4:d7:90:85: 2b:9c:61:4e:1a:4f:47:40:0d:5f:da:a1:c0:e1:ca:db:7d:d9: 0c:c4:e9:cd:d2:8e:b6:f5:13:7b:4e:d4:71:fd:d5:4a:e5:fc: 2e:fb:49:7d:ef:de:72:d6:f5:b8:95:c8:0f:27:21:a0:40:15: ab:7e:fe:ba:24:07:59:e2:a8:d1:67:c6:66:0d:54:9f:53:ed: 24:b3:4b:66:7c:63:9b:e5:7e:85:f5:82:0b:0f:9d:46:00:7e: 7b:95:a9:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUwNjA0MTYxMDM5WhcNMjUwNjExMTYxMDM5WjAYMRYwFAYD VQQDEw02ODQwNmZmZi04NTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWJhQIMs1i6tbx2gRjLsZgQPqkGqdwkZAaRp0KnZQzvyjt3Yjrvg8pJIjeXW TWJ+lO6a2U5Kjcw8l+eRbwyb7pkjLhOQysGJ6jGrjRjx6ElfI2zCx95V0KR+0nAS VEeCUEBBbyoyNipLmGYTMlnlZ+pBPO6awtNsIsrkABGIdgiSMQaxD0y6qlbFI4jT YEUO4oFw13u9KdfSkAPz1OUdi5263b0mQJAJoJT+u1Dl8rFeOg4LHECfQmUWIOwJ T/j9ve3rJ521kVsPjpWP0mxZaeTd39xg8Vt+XyFVNeHTl2olyBBVCUze03yG2LWS e8loinXMU+wsDb70pVrKoEEZcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+N8DOP PKIwrhYCd+T7xP5C9kvkMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwpc21F8jz8JVz5vcoS7kqPBbGb0T6et2s53lq9au3G1zeY6rIqHSz 9Rsr16/tTEckqattQkal3kD2RqHwn9EvujxBY3lQHpRu6lna9u+pFVxFunGfd11i 63qcDABeuuWhr0+Ni3wMiS3p8EZi+sBa0aLT1/eeQXu4m0yoIi0w+KjAY3n2Ap2G lqf1RzczLaruvsDbNQqMz7rPRYz7rOTXkIUrnGFOGk9HQA1f2qHA4crbfdkMxOnN 0o629RN7TtRx/dVK5fwu+0l9795y1vW4lcgPJyGgQBWrfv66JAdZ4qjRZ8ZmDVSf U+0ks0tmfGOb5X6F9YILD51GAH57lanQ -----END CERTIFICATE-----Generated at Thu Jun 5 20:03:50 2025 by rpki-client