$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft File: CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft (raw, json) Hash identifier: fFvvGewoZbJztIF+0u45OipGyf5+IhzTs2F8RC5Xmrg= Subject key identifier: 21:F0:9F:D9:F9:DE:2A:D3:B9:9D:C1:A1:60:CD:CC:1B:5F:B5:F3:DA Authority key identifier: 09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C Certificate issuer: /CN=A91EEA5F/serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft Manifest number: B9 Signing time: Sat 31 May 2025 05:31:22 +0000 Manifest this update: Sat 31 May 2025 05:31:21 +0000 Manifest next update: Sat 07 Jun 2025 05:31:21 +0000 Files and hashes: 1: CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl (hash: jlTU/7c6r0FZwxK1CdvwYtyCtT0pVCLZUlycD/3Osy4=) 2: BE16D82423EC11EF8684D033C4F9AE02.roa (hash: xNwwVLbU+ydl+nMnNKKzooZcZgz88s1ddBpMaFQs7IA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA5F, serialNumber=09C7D9E7F263DB0B8B8201E7D293CADECB97CF8C Validity Not Before: May 31 05:31:21 2025 GMT Not After : Jun 7 05:31:21 2025 GMT Subject: CN=683a9429-e244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:ff:c5:6f:6e:e6:36:0e:e7:26:e6:d2:00: 82:38:46:f0:b3:fe:1c:44:8f:6b:46:9d:9d:55:6e: 02:f3:4f:88:d6:47:59:86:4d:78:2d:b7:ab:e6:80: b4:9b:8f:d7:ba:cb:85:1d:2b:64:10:fe:9a:74:c8: 97:92:87:8c:f9:e4:ad:60:25:42:f0:20:68:99:6b: 9d:e5:11:75:a8:8a:0d:ab:db:ce:0e:9c:55:44:68: a6:fb:5f:49:68:e8:7e:a9:0e:1b:1a:99:01:22:24: 32:a9:e6:ab:16:49:2c:29:e5:fa:cd:b2:47:fe:df: b4:4e:e7:19:85:1d:c0:99:ac:6b:38:1f:ea:20:73: f6:fc:d2:12:ca:4c:e0:33:17:b9:4e:71:e3:49:70: b4:ee:7c:47:71:43:15:75:d6:7b:30:31:0d:03:6e: d8:d3:5b:8c:f7:08:40:e3:d0:d4:28:90:91:5b:f9: 7a:42:1a:45:5e:9e:d2:a8:4a:45:21:0d:8f:84:c6: 35:22:9c:a3:4c:b2:e5:69:37:99:72:f1:34:25:c1: 52:8f:55:ce:17:b0:aa:9e:66:98:9a:e9:fd:e7:ba: c4:ae:92:f4:48:61:a8:2d:0e:cd:6f:78:78:61:d7: 6c:08:11:e2:f7:90:51:74:7d:9a:c3:71:64:87:4e: c8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:9F:D9:F9:DE:2A:D3:B9:9D:C1:A1:60:CD:CC:1B:5F:B5:F3:DA X509v3 Authority Key Identifier: keyid:09:C7:D9:E7:F2:63:DB:0B:8B:82:01:E7:D2:93:CA:DE:CB:97:CF:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcfZ5_Jj2wuLggHn0pPK3suXz4w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA5F/4B5906B823EC11EFA4551826C4F9AE02/CcfZ5_Jj2wuLggHn0pPK3suXz4w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:9b:b9:66:0f:e4:54:88:14:16:0e:32:29:77:ee:c3:41:e7: 26:44:32:ef:93:46:d8:70:e7:54:88:f3:6e:46:03:47:65:bd: 35:c7:6f:13:71:a5:fe:ef:3f:f3:80:e2:60:d1:c2:7c:74:09: 5d:b8:2c:1f:3b:f0:6e:b7:4f:c1:b3:d7:ee:de:8b:3c:be:ff: 36:03:c0:47:e2:68:9d:f9:74:9f:b6:5d:8a:94:56:a9:20:ae: 71:3a:44:57:86:93:39:a8:b0:01:f9:11:e2:08:aa:b5:50:de: 9a:ba:73:70:13:4b:3a:be:f9:a2:5e:5c:ae:61:49:24:23:25: 02:b0:74:6f:3a:27:cc:ab:fb:31:d7:a6:9f:4d:48:5b:af:39: 8a:5e:f0:2d:ab:fc:a5:02:d7:ac:10:0a:13:07:28:90:de:cb: 41:c7:76:d3:c4:87:e9:0b:90:3d:ec:bf:21:7c:50:3a:df:44: cb:51:af:ea:4f:32:81:24:fa:38:dc:41:92:49:e7:ae:f1:9d: 26:3b:0e:26:9d:14:f3:e8:1e:23:6a:82:00:90:4e:2e:c3:60: f3:66:fc:7e:ec:ce:56:f5:5b:65:b9:d4:0f:cf:02:5d:f2:3f: 4e:dd:45:65:61:50:76:38:a8:a1:78:60:dc:8a:b8:0d:97:dd: 63:df:20:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNUYxMTAvBgNVBAUTKDA5QzdEOUU3RjI2M0RCMEI4QjgyMDFFN0QyOTNDQURF Q0I5N0NGOEMwHhcNMjUwNTMxMDUzMTIxWhcNMjUwNjA3MDUzMTIxWjAYMRYwFAYD VQQDEw02ODNhOTQyOS1lMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9b/xW9u5jYO5ybm0gCCOEbws/4cRI9rRp2dVW4C80+I1kdZhk14Lber5oC0 m4/XusuFHStkEP6adMiXkoeM+eStYCVC8CBomWud5RF1qIoNq9vODpxVRGim+19J aOh+qQ4bGpkBIiQyqearFkksKeX6zbJH/t+0TucZhR3AmaxrOB/qIHP2/NISykzg Mxe5TnHjSXC07nxHcUMVddZ7MDENA27Y01uM9whA49DUKJCRW/l6QhpFXp7SqEpF IQ2PhMY1IpyjTLLlaTeZcvE0JcFSj1XOF7CqnmaYmun957rErpL0SGGoLQ7Nb3h4 YddsCBHi95BRdH2aw3Fkh07I2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHwn9n5 3irTuZ3BoWDNzBtftfPaMB8GA1UdIwQYMBaAFAnH2efyY9sLi4IB59KTyt7Ll8+M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE1Ri80QjU5MDZCODIz RUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3dUxnZ0huMHBQSzNzdVh6 NHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjZlo1X0pqMnd1TGdnSG4wcFBLM3N1WHo0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE1Ri80QjU5MDZCODIzRUMxMUVGQTQ1NTE4MjZDNEY5QUUwMi9DY2ZaNV9KajJ3 dUxnZ0huMHBQSzNzdVh6NHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4m7lmD+RUiBQWDjIpd+7DQecmRDLvk0bYcOdUiPNuRgNHZb01x28T caX+7z/zgOJg0cJ8dAlduCwfO/But0/Bs9fu3os8vv82A8BH4mid+XSftl2KlFap IK5xOkRXhpM5qLAB+RHiCKq1UN6aunNwE0s6vvmiXlyuYUkkIyUCsHRvOifMq/sx 16afTUhbrzmKXvAtq/ylAtesEAoTByiQ3stBx3bTxIfpC5A97L8hfFA630TLUa/q TzKBJPo43EGSSeeu8Z0mOw4mnRTz6B4jaoIAkE4uw2DzZvx+7M5W9VtludQPzwJd 8j9O3UVlYVB2OKiheGDcirgNl91j3yDh -----END CERTIFICATE-----Generated at Sat May 31 17:50:41 2025 by rpki-client