$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: yImeySGcvXzaL/SRzlG/FgnJ3VnK79cVjp1kfZK+jdE= Subject key identifier: 2B:F8:44:A6:7D:80:64:95:8C:A2:5A:93:93:80:11:A7:2C:3D:A4:F5 Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 01C4 Signing time: Sat 31 May 2025 02:43:14 +0000 Manifest this update: Sat 31 May 2025 02:43:13 +0000 Manifest next update: Sat 07 Jun 2025 02:43:13 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: Rr1LfwoZqfG6KRDsMnvg09+XPd5DNzccsTpF5gva0v4=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: May 31 02:43:13 2025 GMT Not After : Jun 7 02:43:13 2025 GMT Subject: CN=683a6cc2-2dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:2f:0c:e8:68:61:2b:d8:2d:8d:e0:76:22: 22:61:1e:12:1e:64:c3:6e:80:a5:76:31:af:4f:c8: 41:c6:2c:9f:03:87:fb:3f:da:53:1a:7f:09:ed:ab: ea:22:60:29:02:34:36:a5:13:9f:4e:06:4f:a3:df: 2a:f4:c1:e1:5f:8f:39:2e:47:f9:00:82:ed:ce:15: 4b:d6:6d:9c:36:07:d8:f9:fb:45:c9:07:c3:07:de: 25:7c:34:1e:23:e4:d3:05:8c:f3:cb:de:0b:2a:d2: d5:d6:9e:b6:d7:e8:e2:8f:5f:11:73:51:f7:ca:38: e5:d1:2a:fa:3e:54:49:2c:13:39:22:89:ff:5a:51: 8b:4a:54:1b:34:c6:8b:24:35:a6:22:3a:99:f0:09: ee:42:66:f9:db:42:58:e6:07:1b:a9:7e:53:66:61: de:ce:6c:07:13:71:a6:61:db:4f:90:cf:36:8c:a8: 88:bf:34:d4:c1:6d:f6:00:2d:87:10:bf:31:f8:7c: b6:5f:47:ff:c2:3c:3e:66:2c:d9:0e:16:44:0f:17: f7:33:49:b5:43:1c:01:c3:29:30:0e:fb:23:ef:d7: b2:3c:97:3f:10:5a:73:27:23:8c:50:a3:09:02:94: b5:ba:b6:bd:81:62:15:4b:88:3e:6b:17:65:a5:73: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F8:44:A6:7D:80:64:95:8C:A2:5A:93:93:80:11:A7:2C:3D:A4:F5 X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d3:1b:b9:94:bf:38:f4:c1:df:44:fa:1a:05:b9:3c:9c:5b: 5a:cf:9a:04:a2:9d:90:eb:83:0b:45:33:c9:47:ce:db:71:a4: 8b:b2:50:32:6f:23:96:80:36:7e:34:52:f0:e5:25:52:8e:07: 1f:1b:08:e7:b8:95:56:0d:31:fc:b8:06:5d:d6:f7:8d:3e:dd: 59:c4:7e:be:9c:a7:af:e8:d4:d2:4d:67:2c:01:cd:12:e3:f0: 39:ec:8c:b2:47:b3:a8:27:a0:5c:ad:23:3c:f5:00:cf:cf:18: 78:35:8a:62:c0:fd:05:ba:bc:15:2b:6c:66:4c:dd:b3:74:01: e7:67:36:5d:ad:c0:6a:6f:bd:f3:e8:1d:77:58:ad:63:83:19: a9:a2:11:d0:96:30:fd:b9:30:44:36:b4:33:07:c4:91:df:c4: ab:5c:89:0d:41:dc:67:94:bd:c2:e4:b6:c4:2d:53:54:10:da: e6:6e:19:c2:a4:91:84:e4:9f:ac:1f:71:9f:63:c1:7b:f2:89: 20:54:d3:50:a2:c4:d5:06:22:ba:9b:ac:fd:ac:d9:cf:d8:37: e2:b0:50:46:cc:69:e1:a5:dc:67:61:96:24:c7:32:6e:d5:50: d0:17:3a:f1:6b:f8:b2:64:d9:98:85:88:6b:7d:0a:8b:7e:20: d3:0f:38:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjUwNTMxMDI0MzEzWhcNMjUwNjA3MDI0MzEzWjAYMRYwFAYD VQQDEw02ODNhNmNjMi0yZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu10vDOhoYSvYLY3gdiIiYR4SHmTDboCldjGvT8hBxiyfA4f7P9pTGn8J7avq ImApAjQ2pROfTgZPo98q9MHhX485Lkf5AILtzhVL1m2cNgfY+ftFyQfDB94lfDQe I+TTBYzzy94LKtLV1p621+jij18Rc1H3yjjl0Sr6PlRJLBM5Ion/WlGLSlQbNMaL JDWmIjqZ8AnuQmb520JY5gcbqX5TZmHezmwHE3GmYdtPkM82jKiIvzTUwW32AC2H EL8x+Hy2X0f/wjw+ZizZDhZEDxf3M0m1QxwBwykwDvsj79eyPJc/EFpzJyOMUKMJ ApS1ura9gWIVS4g+axdlpXNa+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv4RKZ9 gGSVjKJak5OAEacsPaT1MB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+0xu5lL849MHfRPoaBbk8nFtaz5oEop2Q64MLRTPJR87bcaSLslAy byOWgDZ+NFLw5SVSjgcfGwjnuJVWDTH8uAZd1veNPt1ZxH6+nKev6NTSTWcsAc0S 4/A57IyyR7OoJ6BcrSM89QDPzxh4NYpiwP0FurwVK2xmTN2zdAHnZzZdrcBqb73z 6B13WK1jgxmpohHQljD9uTBENrQzB8SR38SrXIkNQdxnlL3C5LbELVNUENrmbhnC pJGE5J+sH3GfY8F78okgVNNQosTVBiK6m6z9rNnP2DfisFBGzGnhpdxnYZYkxzJu 1VDQFzrxa/iyZNmYhYhrfQqLfiDTDzgk -----END CERTIFICATE-----Generated at Sat May 31 16:52:11 2025 by rpki-client