$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: EZjbAn/sWI0e+rxlNdMf0TR7ho2Jt0X/ZsFIrybJRUI= Subject key identifier: 93:BA:A8:64:62:D9:54:1B:5A:39:0E:E6:D0:C1:04:D8:99:26:E5:52 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 0F Signing time: Sat 31 May 2025 07:37:51 +0000 Manifest this update: Sat 31 May 2025 07:37:50 +0000 Manifest next update: Sat 07 Jun 2025 07:37:50 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: 2al6mfsNfwTRyA4fZMyMFGarctwE6fX5TtHGQvXGL2o=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: May 31 07:37:50 2025 GMT Not After : Jun 7 07:37:50 2025 GMT Subject: CN=683ab1ce-58fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:70:e8:0b:ce:37:3e:cf:c6:5a:0a:4a:56:21: 17:65:eb:57:29:34:39:e7:67:6c:6c:fc:92:23:16: 12:aa:6b:0e:d7:68:18:80:cd:6c:ac:5a:5f:5d:0f: 3e:9a:13:31:48:03:48:2c:1a:62:7a:4b:63:25:93: f3:34:9c:90:7b:f5:c7:bb:92:4d:e3:ac:9e:60:92: 7f:93:f3:03:da:27:a3:de:43:a7:3f:a7:15:33:93: 36:73:3b:3e:23:17:34:cc:6f:7f:9d:3f:7c:36:e7: 39:b3:92:4c:7d:5e:9d:30:02:63:14:78:6f:34:bc: f7:07:77:22:91:2d:bf:60:2b:82:47:78:14:77:08: 36:8d:cb:8b:a0:d9:8f:bf:dd:bc:b0:f6:14:b8:5b: 68:38:c1:1b:0f:5f:89:b6:31:95:59:a8:fd:c8:ae: f2:ca:4f:7e:ca:e9:7b:97:e2:74:b0:34:b1:c5:c2: 26:27:7f:64:8d:4a:0b:ff:09:4f:67:e4:a7:55:2d: 7c:6f:12:41:42:33:dd:70:80:7e:ae:2b:54:15:8a: 02:69:39:2b:c7:0d:9f:0d:41:8f:64:a7:20:ea:43: b6:52:5b:4d:32:37:34:a0:03:98:3e:1d:f8:55:e4: f3:6a:b0:0e:a2:af:fa:f4:80:b0:14:49:52:d0:9c: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:BA:A8:64:62:D9:54:1B:5A:39:0E:E6:D0:C1:04:D8:99:26:E5:52 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:83:07:8a:7b:9c:dd:cd:9a:66:e2:cd:e2:3e:d2:d0:46:09: f1:e9:1b:7b:8c:4e:ff:1a:13:22:03:fd:de:1f:34:65:0b:f8: 55:b0:e7:23:84:19:3b:9e:c4:7e:a3:31:d6:65:bd:8b:de:a6: dc:a2:35:8a:05:47:a9:75:ca:dd:df:1c:81:5e:f9:63:53:c4: 37:21:03:8d:e4:d4:66:30:ea:82:74:12:b5:ef:9f:38:45:5b: f1:4e:02:7b:e3:0d:b5:23:70:1f:40:f5:99:39:64:13:f4:8b: f3:05:dd:9f:1e:c3:5b:02:94:4f:3a:2f:35:28:65:39:a7:1f: ae:e9:9f:a8:82:8f:d5:2e:b1:f3:8e:ba:df:2f:eb:9c:04:3a: 79:f8:4b:e7:d2:51:a2:9e:af:23:39:ae:57:ec:6d:80:9f:95: 73:05:e5:c6:cf:e7:58:f4:1c:e9:66:8f:08:51:41:31:0c:da: df:e4:2e:41:18:a4:16:04:b5:fb:8c:76:7c:a6:fc:5a:75:b0: 81:c0:2f:88:1f:3f:8d:42:0f:25:f9:a5:20:df:da:64:8e:d2: 98:6b:88:8f:16:47:6c:84:d3:76:df:bd:3f:da:0c:97:d1:5e: 1d:f3:78:f6:96:e8:8a:87:9b:8d:6c:3f:bb:28:08:7d:00:ab: 03:fc:46:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTA1MzEwNzM3NTBaFw0yNTA2MDcwNzM3NTBaMBgxFjAUBgNV BAMTDTY4M2FiMWNlLTU4ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD0cOgLzjc+z8ZaCkpWIRdl61cpNDnnZ2xs/JIjFhKqaw7XaBiAzWysWl9dDz6a EzFIA0gsGmJ6S2Mlk/M0nJB79ce7kk3jrJ5gkn+T8wPaJ6PeQ6c/pxUzkzZzOz4j FzTMb3+dP3w25zmzkkx9Xp0wAmMUeG80vPcHdyKRLb9gK4JHeBR3CDaNy4ug2Y+/ 3byw9hS4W2g4wRsPX4m2MZVZqP3IrvLKT37K6XuX4nSwNLHFwiYnf2SNSgv/CU9n 5KdVLXxvEkFCM91wgH6uK1QVigJpOSvHDZ8NQY9kpyDqQ7ZSW00yNzSgA5g+HfhV 5PNqsA6ir/r0gLAUSVLQnIRjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUk7qoZGLZ VBtaOQ7m0MEE2Jkm5VIwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACyDB4p7nN3NmmbizeI+0tBGCfHpG3uMTv8aEyID/d4fNGUL+FWw5yOE GTuexH6jMdZlvYveptyiNYoFR6l1yt3fHIFe+WNTxDchA43k1GYw6oJ0ErXvnzhF W/FOAnvjDbUjcB9A9Zk5ZBP0i/MF3Z8ew1sClE86LzUoZTmnH67pn6iCj9UusfOO ut8v65wEOnn4S+fSUaKeryM5rlfsbYCflXMF5cbP51j0HOlmjwhRQTEM2t/kLkEY pBYEtfuMdnym/Fp1sIHAL4gfP41CDyX5pSDf2mSO0phriI8WR2yE03bfvT/aDJfR Xh3zePaW6IqHm41sP7soCH0AqwP8Rqk= -----END CERTIFICATE-----Generated at Sat May 31 16:34:05 2025 by rpki-client