$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft File: CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json) Hash identifier: zR3HMUdZ0pNVCQ3xxSo2f/Ud9H8SFeUVESQoB2Soqys= Subject key identifier: 5F:78:9A:8F:24:00:0E:C2:A0:63:A8:9B:FD:EA:D8:39:E8:BE:29:EA Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E Certificate issuer: /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft Manifest number: 0177 Signing time: Sat 31 May 2025 03:59:29 +0000 Manifest this update: Sat 31 May 2025 03:59:28 +0000 Manifest next update: Sat 07 Jun 2025 03:59:28 +0000 Files and hashes: 1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: CCjd7bik+SHhtU9wuQ15CsY5LQ4IMxhVp0D7Y4A2jd4=) 2: C720A07A3AB711F0A910C36CC4F9AE02.roa (hash: xFvPPfgMjusuKz/2TdbQZuzxjIVcgMZKU8w82vWIIXI=) 3: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E Validity Not Before: May 31 03:59:28 2025 GMT Not After : Jun 7 03:59:28 2025 GMT Subject: CN=683a7ea1-0a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:1c:83:ee:c7:ed:c2:87:53:d3:2d:2c:e6: 8b:55:68:f3:92:29:d2:ce:a9:43:eb:64:1d:68:08: 48:4a:df:da:f7:d4:34:03:f5:68:51:eb:e7:b4:d8: 65:28:89:97:5a:3d:61:b2:a3:95:2e:24:a8:d8:f8: 56:ee:24:8a:d4:0b:6c:a6:99:7e:a6:41:d4:0d:64: 8f:ef:3c:02:5e:33:2a:c7:51:f4:86:e6:00:5b:36: 13:42:ac:d7:96:78:91:11:0c:03:0f:9f:da:f1:18: 2c:cf:ee:76:cb:b0:d9:bb:01:af:db:09:ff:07:33: 95:7c:28:9a:a7:f3:8e:e2:85:70:7e:cd:de:aa:e8: 47:09:ef:1a:6d:20:b7:62:30:d8:19:21:14:a5:55: 74:59:1d:8f:7c:90:5f:f9:7d:c3:ff:be:ed:94:f4: da:2b:89:ed:14:57:3a:c9:a6:34:56:d6:a8:b3:02: 56:23:9f:ae:53:46:1c:ef:e3:eb:e8:55:3a:83:a9: 7e:be:fb:0c:05:43:0b:0c:17:ad:56:3a:fa:3c:ca: 48:df:e8:c3:f7:33:50:2b:e6:66:6b:4a:14:0d:7e: 10:cf:d2:0d:30:99:fa:ff:1b:76:e4:8a:31:25:ad: ec:db:d2:f7:db:19:29:91:e5:70:a8:c7:67:d0:65: ab:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:78:9A:8F:24:00:0E:C2:A0:63:A8:9B:FD:EA:D8:39:E8:BE:29:EA X509v3 Authority Key Identifier: keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:46:25:3f:df:2e:2d:e6:5e:60:6a:ab:87:6b:e3:8b:74:30: 2c:32:ce:50:6e:10:4a:31:7b:f0:56:ff:cb:1d:c8:2f:e3:c6: ef:e1:ab:7f:c2:e5:e0:e2:e2:60:86:02:ba:f3:93:a1:ae:6d: cd:e3:fd:89:c2:3e:d5:ca:ce:98:9b:e9:83:a6:04:41:40:96: a8:44:8d:d1:48:90:37:2c:15:c3:c5:28:ce:8a:70:0e:cf:8a: 84:d1:09:ae:56:a7:a1:90:1a:fd:f8:c2:f8:5d:84:91:67:85: 30:a4:c1:76:11:9e:56:64:25:f7:a6:ed:e4:4d:e6:09:9e:ba: 6a:49:0f:fb:ed:f7:7d:c9:34:d5:40:cb:f6:2a:56:c0:62:a4: 66:6c:a7:a1:d9:a6:13:00:1d:ac:9e:e5:14:c0:f3:cd:3e:22: 57:e8:e0:96:98:d6:f5:e9:f4:fd:b9:d9:17:a5:a6:e6:38:f7: 05:da:da:97:9d:41:1d:5f:d6:28:3c:6d:ca:b8:d6:d9:b8:f8: 1b:02:86:b0:23:30:33:a1:db:1b:1c:21:b9:f9:89:5a:a8:60: d6:e5:a3:3c:96:4b:4c:62:36:fd:5e:e2:07:33:4f:6f:3c:1b: 80:f9:68:00:ae:29:3f:c0:4b:95:54:ce:bc:21:2b:03:8a:4b: d1:0c:7c:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB OTI2RUY2NkUwHhcNMjUwNTMxMDM1OTI4WhcNMjUwNjA3MDM1OTI4WjAYMRYwFAYD VQQDEw02ODNhN2VhMS0wYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DYcg+7H7cKHU9MtLOaLVWjzkinSzqlD62QdaAhISt/a99Q0A/VoUevntNhl KImXWj1hsqOVLiSo2PhW7iSK1Atsppl+pkHUDWSP7zwCXjMqx1H0huYAWzYTQqzX lniREQwDD5/a8Rgsz+52y7DZuwGv2wn/BzOVfCiap/OO4oVwfs3equhHCe8abSC3 YjDYGSEUpVV0WR2PfJBf+X3D/77tlPTaK4ntFFc6yaY0VtaoswJWI5+uU0Yc7+Pr 6FU6g6l+vvsMBUMLDBetVjr6PMpI3+jD9zNQK+Zma0oUDX4Qz9INMJn6/xt25Iox Ja3s29L32xkpkeVwqMdn0GWrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF94mo8k AA7CoGOom/3q2DnovinqMB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw SVZkUXBJdkFNYTJwSnU5bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbRiU/3y4t5l5gaquHa+OLdDAsMs5QbhBKMXvwVv/LHcgv48bv4at/ wuXg4uJghgK685Ohrm3N4/2Jwj7Vys6Ym+mDpgRBQJaoRI3RSJA3LBXDxSjOinAO z4qE0QmuVqehkBr9+ML4XYSRZ4UwpMF2EZ5WZCX3pu3kTeYJnrpqSQ/77fd9yTTV QMv2KlbAYqRmbKeh2aYTAB2snuUUwPPNPiJX6OCWmNb16fT9udkXpabmOPcF2tqX nUEdX9YoPG3KuNbZuPgbAoawIzAzodsbHCG5+YlaqGDW5aM8lktMYjb9XuIHM09v PBuA+WgArik/wEuVVM68ISsDikvRDHwb -----END CERTIFICATE-----Generated at Sat May 31 15:06:09 2025 by rpki-client