$ rpki-client -vvf rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft File: CqcW6oHMxdteS6chFMNCmhnW2V8.mft (raw, json) Hash identifier: PkPIycgR0LRbq8vj3+XTV1E2cAsjMvc2Z5hncIJfbGg= Subject key identifier: B0:90:28:2C:02:56:C4:EA:00:22:30:C0:5B:13:83:C5:51:D7:5A:D5 Authority key identifier: 0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F Certificate issuer: /CN=A91CED30/serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Certificate serial: 0107 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft Manifest number: 0105 Signing time: Sat 31 May 2025 04:38:52 +0000 Manifest this update: Sat 31 May 2025 04:38:51 +0000 Manifest next update: Sat 07 Jun 2025 04:38:51 +0000 Files and hashes: 1: CqcW6oHMxdteS6chFMNCmhnW2V8.crl (hash: wj7A+ucXcwjpQKdrLd3Zn8+CsCppW4orzAJApW0eXtw=) 2: E188F6AEAE1F11EE9E818D16C4F9AE02.roa (hash: pJb5BTsbuqpgQP5Gvhc/gW9a2gX+v1FlOBgvzyj/io0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 263 (0x107) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CED30, serialNumber=0AA716EA81CCC5DB5E4BA72114C3429A19D6D95F Validity Not Before: May 31 04:38:51 2025 GMT Not After : Jun 7 04:38:51 2025 GMT Subject: CN=683a87dc-6393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:ca:2b:92:dd:bc:25:26:b0:34:7b:e6:71: 9f:42:ac:65:4b:80:e0:a9:4d:3d:4d:10:fe:3f:bd: 62:80:4a:a3:e4:d4:3b:73:56:bd:28:30:55:64:a1: 60:97:64:d7:da:22:93:c4:6e:14:1f:78:7b:65:02: 81:7c:8f:1e:df:28:09:7f:37:23:fe:79:05:f8:bd: b4:fd:3e:b3:07:1e:33:86:d0:ba:b3:76:21:cb:77: 2a:2e:a0:86:46:ca:49:54:12:95:b0:de:fd:ad:d4: 61:c2:f0:79:d9:dc:2f:77:ca:19:b7:8b:8d:74:91: ea:44:77:a8:a8:eb:ee:99:2e:9c:89:68:6e:4c:37: b8:6f:ff:5b:7e:35:53:18:74:67:14:81:45:e7:73: d4:29:2a:7a:36:05:43:83:a9:38:19:54:37:17:fe: f8:ca:6a:ea:29:7c:16:f7:c2:39:2e:b1:6c:27:4b: 81:b3:59:f1:66:1e:3b:b2:5f:55:7e:f7:2b:06:5d: 38:b4:6e:fc:9c:99:cb:8d:08:4d:02:19:fd:5c:2e: 8d:8f:53:53:aa:4a:aa:61:87:d8:16:05:49:5e:0d: 33:6b:5b:10:de:74:ce:a2:72:84:eb:ed:97:06:5c: d9:37:31:a0:87:38:54:d6:aa:92:12:5d:b5:86:0b: 00:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:90:28:2C:02:56:C4:EA:00:22:30:C0:5B:13:83:C5:51:D7:5A:D5 X509v3 Authority Key Identifier: keyid:0A:A7:16:EA:81:CC:C5:DB:5E:4B:A7:21:14:C3:42:9A:19:D6:D9:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CqcW6oHMxdteS6chFMNCmhnW2V8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CED30/C77455C0AE1E11EEA7EA0A77C4F9AE02/CqcW6oHMxdteS6chFMNCmhnW2V8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:96:cc:71:b3:d6:07:c0:bf:49:d8:ee:52:4f:05:d2:6f:17: bd:f1:7f:3b:e7:a3:8b:9a:13:1e:f1:8a:35:2a:5e:52:1f:d0: b5:dc:1c:da:63:71:5c:10:58:ba:e9:61:be:36:5b:e3:b7:4a: 6d:f7:84:a4:8f:16:dd:1a:de:ae:04:c9:13:c6:ae:32:b1:ee: d6:10:de:b5:e1:45:a2:67:76:e1:5f:e7:e6:7d:29:d5:8b:2e: 97:8a:2f:2e:bc:a2:30:02:98:b0:58:9e:76:90:2d:61:ab:69: 38:24:9c:ea:77:3c:ac:24:b4:29:13:21:cc:c5:a6:99:b3:29: d3:f9:84:4d:5e:98:07:fe:2e:19:77:ab:b7:10:6e:41:8e:79: 61:7f:1e:89:ad:34:5c:4c:11:94:97:dd:a2:ab:55:c0:5f:b8: 57:4f:89:ee:27:04:55:fa:c3:7b:32:c4:17:aa:f0:55:49:1b: 86:41:ce:2f:a7:61:34:6c:7a:f8:97:0e:8d:06:1e:94:bd:52: 44:ef:fb:16:ce:68:1e:a4:80:2d:a9:72:4f:d4:e8:d5:56:c7: e7:09:fd:bc:2c:9c:ee:19:a4:10:cb:f8:a7:a0:8d:4b:bd:15: 8a:1e:da:7e:2f:22:a4:2d:25:ab:62:af:c0:28:ac:ad:9d:f1: 1c:a9:d6:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VEMzAxMTAvBgNVBAUTKDBBQTcxNkVBODFDQ0M1REI1RTRCQTcyMTE0QzM0MjlB MTlENkQ5NUYwHhcNMjUwNTMxMDQzODUxWhcNMjUwNjA3MDQzODUxWjAYMRYwFAYD VQQDEw02ODNhODdkYy02MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyDKK5LdvCUmsDR75nGfQqxlS4DgqU09TRD+P71igEqj5NQ7c1a9KDBVZKFg l2TX2iKTxG4UH3h7ZQKBfI8e3ygJfzcj/nkF+L20/T6zBx4zhtC6s3Yhy3cqLqCG RspJVBKVsN79rdRhwvB52dwvd8oZt4uNdJHqRHeoqOvumS6ciWhuTDe4b/9bfjVT GHRnFIFF53PUKSp6NgVDg6k4GVQ3F/74ymrqKXwW98I5LrFsJ0uBs1nxZh47sl9V fvcrBl04tG78nJnLjQhNAhn9XC6Nj1NTqkqqYYfYFgVJXg0za1sQ3nTOonKE6+2X BlzZNzGghzhU1qqSEl21hgsAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCQKCwC VsTqACIwwFsTg8VR11rVMB8GA1UdIwQYMBaAFAqnFuqBzMXbXkunIRTDQpoZ1tlf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUQzMC9DNzc0NTVDMEFF MUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhkdGVTNmNoRk1OQ21oblcy VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NxY1c2b0hNeGR0ZVM2Y2hGTU5DbWhuVzJWOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUQzMC9DNzc0NTVDMEFFMUUxMUVFQTdFQTBBNzdDNEY5QUUwMi9DcWNXNm9ITXhk dGVTNmNoRk1OQ21oblcyVjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwlsxxs9YHwL9J2O5STwXSbxe98X8756OLmhMe8Yo1Kl5SH9C13Bza Y3FcEFi66WG+Nlvjt0pt94SkjxbdGt6uBMkTxq4yse7WEN614UWiZ3bhX+fmfSnV iy6Xii8uvKIwApiwWJ52kC1hq2k4JJzqdzysJLQpEyHMxaaZsynT+YRNXpgH/i4Z d6u3EG5Bjnlhfx6JrTRcTBGUl92iq1XAX7hXT4nuJwRV+sN7MsQXqvBVSRuGQc4v p2E0bHr4lw6NBh6UvVJE7/sWzmgepIAtqXJP1OjVVsfnCf28LJzuGaQQy/inoI1L vRWKHtp+LyKkLSWrYq/AKKytnfEcqdZE -----END CERTIFICATE-----Generated at Sat May 31 17:06:25 2025 by rpki-client