$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: 8lMgpFfhDCWwwtymT8fizML8pcgnKl8oup3tXv8wvYM= Subject key identifier: 13:35:EA:8B:2C:E3:77:32:09:4B:DB:24:27:37:8C:53:A8:95:B4:CE Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 01DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 01DA Signing time: Sat 07 Jun 2025 02:29:05 +0000 Manifest this update: Sat 07 Jun 2025 02:29:04 +0000 Manifest next update: Sat 14 Jun 2025 02:29:04 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: CQuO3zYNC+Tbg9msYbRinC15uMvHbytC4Sqa2OnIZTI=) 2: 6ABFAA607C5A11EDB5D8DA67C4F9AE02.roa (hash: UPzNqHZtzAjVZqphmOfv2Hp1UJdFW2/M83hc9R8RBqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 02:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 478 (0x1de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Jun 7 02:29:04 2025 GMT Not After : Jun 14 02:29:04 2025 GMT Subject: CN=6843a3f0-81f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:75:56:ce:ae:f2:ee:3a:4a:04:65:1c:38: 5f:23:95:e9:d2:4b:75:64:b8:fb:43:9e:24:5b:39: 7c:86:e2:87:82:22:63:8b:a0:38:7f:e2:f6:5b:d3: 22:c7:39:ec:a1:ed:69:86:fe:4f:d4:b3:72:1f:22: dc:dd:19:c7:ad:57:cf:7b:2c:42:45:f2:6b:26:6e: 94:90:74:bb:e3:fd:b5:1c:0a:5b:0a:d7:a4:0b:86: 54:ed:86:e9:7e:a5:dc:25:9b:61:d4:35:64:4c:dd: 06:6c:9a:28:0e:91:b8:35:da:ad:ca:5b:04:c5:1b: cd:df:d3:ab:ca:f2:a8:ec:0a:f0:bd:07:ab:34:10: 5c:cd:7a:b3:11:eb:c3:82:cf:0a:0c:14:30:4d:6b: 31:03:22:da:ff:85:43:ef:a8:37:a5:98:e8:7a:b0: 26:a0:24:9f:c1:0f:b0:26:2e:01:5a:3b:4f:bf:4a: f8:0a:f8:d1:15:a2:ef:f5:c3:47:d9:01:aa:2c:ca: a4:38:6a:39:d3:45:5d:07:88:e6:0a:06:c9:eb:7b: b2:89:81:ee:ed:f7:a1:98:e5:31:1a:10:72:0b:2c: 3a:4c:2b:dc:28:bf:35:e2:03:61:41:f5:09:0c:d6: 1a:36:95:8b:80:f8:9b:fa:f5:56:dc:d1:ed:1e:dd: ca:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:35:EA:8B:2C:E3:77:32:09:4B:DB:24:27:37:8C:53:A8:95:B4:CE X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:aa:6d:77:d6:89:de:a7:48:d1:62:48:77:41:79:a2:5e:18: 24:9b:89:bd:83:73:28:b4:d0:5e:d2:7e:34:d3:cf:61:d4:c0: bc:d4:66:46:3f:e3:85:7b:f8:8a:04:b3:f1:7f:df:a0:0a:82: 2d:be:e7:08:72:fe:4a:12:a5:cc:71:7e:e1:56:b1:4b:55:35: 19:01:dc:7e:ef:25:4d:d7:e1:9d:be:28:b0:4c:b2:98:f7:ea: 66:49:3a:c7:87:47:c1:37:db:4b:63:0e:48:63:01:a3:6b:7f: 80:cf:55:b5:8e:ce:8c:ae:b9:d0:11:30:66:32:5e:f7:66:e6: 3c:d4:0d:9e:64:81:f3:93:a2:65:4c:81:9c:d5:60:a9:fa:ff: eb:b1:d1:50:e9:80:9c:e6:fd:65:69:82:4a:e6:0c:ee:90:66: be:51:c5:69:eb:1b:39:e6:4a:53:49:83:07:bd:82:21:71:c6: 88:03:23:1f:0d:ee:cd:d7:46:23:63:53:84:43:43:ee:05:d8: 69:5e:bf:d4:3a:8c:fc:b3:dc:cc:18:8c:97:4a:f1:ef:27:3b: 64:c9:d9:be:0b:75:35:b6:a6:b9:5b:8b:91:b6:c4:4c:57:72: fd:f0:d1:c7:1a:05:eb:26:6a:ba:8f:4f:d2:65:e5:06:26:7e: 47:7f:3b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUwNjA3MDIyOTA0WhcNMjUwNjE0MDIyOTA0WjAYMRYwFAYD VQQDEw02ODQzYTNmMC04MWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl+B1Vs6u8u46SgRlHDhfI5Xp0kt1ZLj7Q54kWzl8huKHgiJji6A4f+L2W9Mi xznsoe1phv5P1LNyHyLc3RnHrVfPeyxCRfJrJm6UkHS74/21HApbCtekC4ZU7Ybp fqXcJZth1DVkTN0GbJooDpG4NdqtylsExRvN39OryvKo7ArwvQerNBBczXqzEevD gs8KDBQwTWsxAyLa/4VD76g3pZjoerAmoCSfwQ+wJi4BWjtPv0r4CvjRFaLv9cNH 2QGqLMqkOGo500VdB4jmCgbJ63uyiYHu7fehmOUxGhByCyw6TCvcKL814gNhQfUJ DNYaNpWLgPib+vVW3NHtHt3KEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBM16oss 43cyCUvbJCc3jFOolbTOMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNqm131onep0jRYkh3QXmiXhgkm4m9g3MotNBe0n40089h1MC81GZG P+OFe/iKBLPxf9+gCoItvucIcv5KEqXMcX7hVrFLVTUZAdx+7yVN1+GdviiwTLKY 9+pmSTrHh0fBN9tLYw5IYwGja3+Az1W1js6MrrnQETBmMl73ZuY81A2eZIHzk6Jl TIGc1WCp+v/rsdFQ6YCc5v1laYJK5gzukGa+UcVp6xs55kpTSYMHvYIhccaIAyMf De7N10YjY1OEQ0PuBdhpXr/UOoz8s9zMGIyXSvHvJztkydm+C3U1tqa5W4uRtsRM V3L98NHHGgXrJmq6j0/SZeUGJn5Hfzvj -----END CERTIFICATE-----Generated at Sat Jun 7 17:25:26 2025 by rpki-client