$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft File: ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft (raw, json) Hash identifier: 9oePtCTSAIDPfg19zBie1e/0L4Jy3bzGxv4MWskxP4I= Subject key identifier: 53:FA:8D:FE:FE:F5:23:A6:A6:64:AC:10:59:36:98:42:92:96:BD:4D Authority key identifier: 71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 Certificate issuer: /CN=A91DE570/serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft Manifest number: 01DE Signing time: Sat 31 May 2025 02:27:23 +0000 Manifest this update: Sat 31 May 2025 02:27:22 +0000 Manifest next update: Sat 07 Jun 2025 02:27:22 +0000 Files and hashes: 1: ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl (hash: FPPJHKMy11QNKcbWwqHV2rTEHW7ZheyHQSki96s+Eew=) 2: B46C8BFA89AD11ED93CAB75FC4F9AE02.roa (hash: 3BIidzXw3SbxxirE9B5rO+NW6ewizhq6UX39Bo2kTKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE570, serialNumber=71C127D1C06AFC7C454DD1093EB2CB7E12D787C0 Validity Not Before: May 31 02:27:22 2025 GMT Not After : Jun 7 02:27:22 2025 GMT Subject: CN=683a690a-8640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:0d:51:a5:59:09:18:d2:b5:89:3f:98:04: 6b:c7:87:d2:ac:59:c8:b9:86:24:d4:c5:7a:fb:b7: 31:14:99:3d:77:9a:d5:33:40:0b:a6:55:2f:5b:cd: 14:3a:62:a8:05:f8:58:29:d8:79:e6:72:a8:cb:5d: 85:57:02:45:7e:da:4c:56:0e:b6:6a:cc:ba:0d:78: fd:f6:de:ee:07:e6:b6:44:87:de:c7:b8:79:4b:93: 46:2d:85:b3:81:44:44:80:30:6e:0c:9a:0b:aa:f4: 47:72:a4:e9:61:d2:66:0d:4d:8d:8a:37:9e:f4:a7: 4a:1d:13:2d:f9:96:6a:5a:9c:1d:2f:02:d3:77:91: f6:0f:3a:4d:52:7c:88:af:20:1a:64:67:b2:14:64: 77:ce:62:c6:52:3c:60:8a:73:1f:34:44:26:76:89: 7c:d7:11:94:a3:41:6f:53:b3:cf:fe:43:1c:8e:de: d9:0a:e7:42:36:44:3f:46:ec:55:75:a1:fc:d4:39: 28:51:9e:2d:97:9c:e3:c7:06:92:5d:2d:df:67:fe: d1:fa:fe:87:74:8c:ad:e8:18:14:e9:a1:61:cb:69: 04:51:3e:fd:29:2f:c8:fb:7d:f0:49:25:ea:e5:d3: 9e:96:81:4a:85:12:e6:bf:e2:ea:e2:31:11:b0:17: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FA:8D:FE:FE:F5:23:A6:A6:64:AC:10:59:36:98:42:92:96:BD:4D X509v3 Authority Key Identifier: keyid:71:C1:27:D1:C0:6A:FC:7C:45:4D:D1:09:3E:B2:CB:7E:12:D7:87:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccEn0cBq_HxFTdEJPrLLfhLXh8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE570/C2CB119C658311ED96002C2CC4F9AE02/ccEn0cBq_HxFTdEJPrLLfhLXh8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:cd:c2:31:f5:c4:11:da:4f:0b:c8:ae:ad:a8:a9:91:a4:21: 1d:7e:59:61:17:9d:29:8f:25:1b:da:be:fd:6d:30:11:aa:eb: 2c:c1:78:c1:01:5b:42:cf:da:5c:1d:f7:77:ef:68:ff:44:71: 52:97:d7:a4:e9:b4:81:0b:51:d5:79:88:04:bc:d5:f8:fa:06: 6c:01:96:e3:fe:51:3e:a3:62:05:8d:18:a6:80:e0:de:fe:46: 80:89:30:69:90:12:11:9f:ea:09:53:c5:97:cd:2e:95:3a:ee: 17:69:a0:86:93:63:33:39:77:93:0a:50:7b:94:20:9a:85:cb: 42:10:9a:da:f5:27:75:12:48:5b:3e:fc:ac:65:43:15:16:3d: 1c:4b:03:2e:2a:77:bb:52:16:ef:44:12:6e:25:91:24:f7:26: 13:67:79:e9:a3:86:3c:32:d5:6e:00:59:d7:2b:6b:eb:7e:23: 44:d2:88:bb:86:ae:08:28:bc:a8:5d:77:ed:ba:ed:b3:0e:af: 11:49:0a:9f:14:66:94:1e:a7:ab:f1:86:83:2d:8a:26:97:60: 47:d6:97:4d:ec:5d:a3:24:2e:a0:ab:b6:27:a8:ad:76:36:39: 46:9d:01:94:25:39:fb:67:86:a7:e5:fb:77:9e:07:66:b0:03: f6:56:95:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1NzAxMTAvBgNVBAUTKDcxQzEyN0QxQzA2QUZDN0M0NTRERDEwOTNFQjJDQjdF MTJENzg3QzAwHhcNMjUwNTMxMDIyNzIyWhcNMjUwNjA3MDIyNzIyWjAYMRYwFAYD VQQDEw02ODNhNjkwYS04NjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWkNUaVZCRjStYk/mARrx4fSrFnIuYYk1MV6+7cxFJk9d5rVM0ALplUvW80U OmKoBfhYKdh55nKoy12FVwJFftpMVg62asy6DXj99t7uB+a2RIfex7h5S5NGLYWz gUREgDBuDJoLqvRHcqTpYdJmDU2Nijee9KdKHRMt+ZZqWpwdLwLTd5H2DzpNUnyI ryAaZGeyFGR3zmLGUjxginMfNEQmdol81xGUo0FvU7PP/kMcjt7ZCudCNkQ/RuxV daH81DkoUZ4tl5zjxwaSXS3fZ/7R+v6HdIyt6BgU6aFhy2kEUT79KS/I+33wSSXq 5dOeloFKhRLmv+Lq4jERsBe/DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFP6jf7+ 9SOmpmSsEFk2mEKSlr1NMB8GA1UdIwQYMBaAFHHBJ9HAavx8RU3RCT6yy34S14fA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTU3MC9DMkNCMTE5QzY1 ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9IeEZUZEVKUHJMTGZoTFho OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NjRW4wY0JxX0h4RlRkRUpQckxMZmhMWGg4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTU3MC9DMkNCMTE5QzY1ODMxMUVEOTYwMDJDMkNDNEY5QUUwMi9jY0VuMGNCcV9I eEZUZEVKUHJMTGZoTFhoOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJzcIx9cQR2k8LyK6tqKmRpCEdfllhF50pjyUb2r79bTARqusswXjB AVtCz9pcHfd372j/RHFSl9ek6bSBC1HVeYgEvNX4+gZsAZbj/lE+o2IFjRimgODe /kaAiTBpkBIRn+oJU8WXzS6VOu4XaaCGk2MzOXeTClB7lCCahctCEJra9Sd1Ekhb PvysZUMVFj0cSwMuKne7UhbvRBJuJZEk9yYTZ3npo4Y8MtVuAFnXK2vrfiNE0oi7 hq4IKLyoXXftuu2zDq8RSQqfFGaUHqer8YaDLYoml2BH1pdN7F2jJC6gq7YnqK12 NjlGnQGUJTn7Z4an5ft3ngdmsAP2VpWP -----END CERTIFICATE-----Generated at Sat May 31 17:24:43 2025 by rpki-client