$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: mG4AsuP5JfosS5qUpFycrwDKb/WgEdRHignbhDyv3f0= Subject key identifier: B9:40:F5:06:E5:C2:84:AA:61:AF:63:41:29:4B:2E:C2:76:61:8C:62 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 010A Signing time: Sat 31 May 2025 04:40:53 +0000 Manifest this update: Sat 31 May 2025 04:40:52 +0000 Manifest next update: Sat 07 Jun 2025 04:40:52 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: gIOdbaO9ZQ16AA0tS7audScNnE09pDSHajyObrvrsJc=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: May 31 04:40:52 2025 GMT Not After : Jun 7 04:40:52 2025 GMT Subject: CN=683a8854-4483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2f:79:d4:e0:f6:a9:56:63:8d:4d:0e:b9:b3: db:b1:c8:b2:9c:84:ea:a6:36:49:e1:e9:a1:7c:3d: 58:59:a2:f3:2b:6c:99:61:d5:77:ac:16:b8:b3:41: 63:93:38:79:4e:86:b4:63:35:d0:12:a8:3a:2b:bf: 13:64:4f:95:8c:30:80:1a:a9:2f:0b:85:cb:9c:ba: 70:9b:f0:20:1a:1b:bd:01:c3:e4:9b:76:8b:7c:fc: 2c:d2:72:cc:75:ec:99:99:a1:41:99:f1:f6:5a:a3: 01:ed:12:61:8e:1e:ac:14:6c:2d:77:3a:c2:f8:20: 3c:d9:c0:58:28:9d:e0:54:8a:b3:dc:51:55:8e:ac: fa:0e:4f:f7:86:fc:82:db:68:6e:a4:a0:87:35:14: b0:f6:3b:94:be:c1:3a:4d:0c:b5:9f:42:d2:e2:ed: f3:b8:be:21:8f:0e:c4:93:e3:11:5e:54:c4:30:b9: cf:c2:d4:32:af:92:dc:39:ce:92:1c:a7:7f:a6:1c: e9:44:6e:b3:63:6f:14:51:5b:2a:a5:3e:10:1a:2d: d3:3c:24:2f:04:01:10:fe:c3:4e:d3:4f:a1:9e:2b: 1a:ae:dc:4a:96:83:6c:44:62:4f:fb:0d:a2:82:c2: eb:4b:62:4f:6e:7f:24:0b:f3:32:4c:e5:15:26:6e: 72:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:F5:06:E5:C2:84:AA:61:AF:63:41:29:4B:2E:C2:76:61:8C:62 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7f:4b:b8:96:46:39:a2:88:03:4d:cf:f0:9f:f5:4b:41:6c: 2b:50:33:f8:83:0f:85:c6:9d:33:78:61:b3:b7:ce:d9:e1:e8: ee:cc:ce:6d:1b:4c:9e:0b:7f:d7:2a:b4:89:94:69:b5:b8:71: f7:6b:02:24:ee:94:0f:49:18:27:6a:94:58:6c:5f:2b:da:49: 58:93:78:2a:fe:55:f1:f5:d9:76:7f:a4:18:2b:3f:11:21:39: 19:35:ec:19:e2:d6:de:ff:ac:3e:e7:37:bb:9f:51:36:80:b9: e9:73:39:25:2b:8e:dd:55:31:91:36:93:94:14:c8:a7:e1:40: 43:26:fc:c9:12:aa:17:83:e0:4a:17:2b:a5:dc:49:10:91:91: e5:f4:f9:4d:71:df:fe:17:44:d3:8d:88:32:a8:4b:33:f4:00: d6:51:53:16:41:b1:00:0d:de:41:93:ca:e4:3e:78:0f:d1:21: 89:2c:e7:50:d9:6e:e7:52:78:af:ac:7b:5a:97:db:c6:38:55: 38:4b:98:69:f0:8c:6f:aa:2c:b2:93:76:00:59:7c:6a:96:27: 0f:63:d9:2b:8e:24:d2:09:9d:c3:90:b2:7a:97:4b:14:1e:52: c0:41:85:ba:ef:c4:2b:84:37:5e:74:39:ad:ee:53:69:d0:2a: 0f:c3:ff:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUwNTMxMDQ0MDUyWhcNMjUwNjA3MDQ0MDUyWjAYMRYwFAYD VQQDEw02ODNhODg1NC00NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4y951OD2qVZjjU0OubPbsciynITqpjZJ4emhfD1YWaLzK2yZYdV3rBa4s0Fj kzh5Toa0YzXQEqg6K78TZE+VjDCAGqkvC4XLnLpwm/AgGhu9AcPkm3aLfPws0nLM deyZmaFBmfH2WqMB7RJhjh6sFGwtdzrC+CA82cBYKJ3gVIqz3FFVjqz6Dk/3hvyC 22hupKCHNRSw9juUvsE6TQy1n0LS4u3zuL4hjw7Ek+MRXlTEMLnPwtQyr5LcOc6S HKd/phzpRG6zY28UUVsqpT4QGi3TPCQvBAEQ/sNO00+hnisartxKloNsRGJP+w2i gsLrS2JPbn8kC/MyTOUVJm5yeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlA9Qbl woSqYa9jQSlLLsJ2YYxiMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/f0u4lkY5oogDTc/wn/VLQWwrUDP4gw+Fxp0zeGGzt87Z4ejuzM5t G0yeC3/XKrSJlGm1uHH3awIk7pQPSRgnapRYbF8r2klYk3gq/lXx9dl2f6QYKz8R ITkZNewZ4tbe/6w+5ze7n1E2gLnpczklK47dVTGRNpOUFMin4UBDJvzJEqoXg+BK Fyul3EkQkZHl9PlNcd/+F0TTjYgyqEsz9ADWUVMWQbEADd5Bk8rkPngP0SGJLOdQ 2W7nUnivrHtal9vGOFU4S5hp8Ixvqiyyk3YAWXxqlicPY9krjiTSCZ3DkLJ6l0sU HlLAQYW678QrhDdedDmt7lNp0CoPw/9d -----END CERTIFICATE-----Generated at Sat May 31 17:47:19 2025 by rpki-client