$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: exs+6BlUHImPU5hSK8bLj4Hv7KriZxCZ6tbVmo5vPGQ= Subject key identifier: 56:F2:26:E8:02:E8:29:15:C6:CA:BE:DE:D8:36:10:B7:95:31:E7:04 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 031E Signing time: Sat 29 Mar 2025 01:22:43 +0000 Manifest this update: Sat 29 Mar 2025 01:22:42 +0000 Manifest next update: Sat 05 Apr 2025 01:22:42 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: l5lgydZalOPkMGD+MgNme/sjifk9X+EhfN8YnWiR0SA=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6 Validity Not Before: Mar 29 01:22:42 2025 GMT Not After : Apr 5 01:22:42 2025 GMT Subject: CN=67e74b63-c75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:ba:de:d8:54:46:11:e3:b9:8b:94:85:4c: 6c:8c:5a:69:b4:c5:d2:09:ce:1f:1a:ff:1c:a9:47: 58:f4:e0:56:71:7d:9f:ea:37:c0:1f:cf:d5:11:f5: 12:d3:e9:de:e2:30:ed:62:cc:87:bd:f3:8c:70:3c: 18:a5:db:26:c6:32:9a:90:9a:e6:b9:61:cf:d4:80: af:bf:50:26:9a:b0:36:2d:e7:5f:e2:8e:53:a0:1c: d8:b5:90:14:ec:f6:5e:81:98:ed:50:f9:fe:16:02: c8:41:bc:c5:6b:32:40:1c:8f:e5:3d:b1:87:aa:b2: e8:a9:3b:a1:d9:87:58:8d:e3:5e:6d:3a:f1:c8:8a: 50:5d:66:46:ef:a9:3a:c0:0a:35:e7:6c:c2:c2:1f: a1:b0:02:63:0c:8f:2f:ac:dc:77:6d:2f:c5:6a:16: e8:83:12:e8:51:4b:c0:22:a6:4b:ef:1d:93:08:ae: b8:fe:bd:4f:bf:61:b3:a6:1d:e4:c0:15:66:b9:2c: 63:e7:45:73:9a:69:23:ec:fd:52:74:90:92:30:7c: b1:4c:ec:46:ac:46:4f:87:b6:2d:c7:e8:5d:c1:9b: df:c9:10:ad:07:de:8a:8d:4f:65:37:25:42:56:26: b7:44:5d:f5:b0:bd:d4:f6:ca:95:11:81:92:df:8c: 4e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F2:26:E8:02:E8:29:15:C6:CA:BE:DE:D8:36:10:B7:95:31:E7:04 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:30:04:a4:26:5c:ca:97:a7:8a:38:6b:6e:48:98:62:bc:50: 12:93:95:71:f6:78:87:b0:fc:e8:6b:4b:4a:ee:50:27:c6:d9: 1e:bb:76:81:bf:ea:45:1e:40:7d:54:f9:06:56:f0:54:eb:24: c2:af:da:fe:be:88:2b:f7:b6:5a:da:03:ec:3c:59:9f:41:73: 11:e3:d4:e9:5e:d2:c4:07:ef:63:d8:80:37:09:bf:51:4d:11: 47:7f:5e:69:18:f6:e7:2f:a6:af:07:d2:bc:07:df:5a:65:ea: 1e:0f:01:a0:a3:71:93:aa:c0:bd:0a:2f:56:dc:d4:46:a4:27: 62:10:30:72:7b:8c:31:f8:0b:81:04:6c:84:0a:43:86:46:1c: aa:8e:52:82:77:3a:27:1c:68:8f:42:01:46:57:fd:38:bd:69: ff:d5:60:83:7b:08:53:92:5f:ca:61:4b:04:f4:18:4f:3a:7a: 24:3a:20:4d:d2:52:17:d7:26:5e:93:da:79:59:bb:b5:e2:8c: f5:a4:a4:4a:de:32:5f:50:2b:91:b2:d1:5e:a8:34:c6:5d:06: 0b:bf:a2:29:d7:31:2e:0f:3a:9b:9c:4f:c6:96:9e:40:6a:0e: 7e:9d:21:a4:b7:4a:2f:96:bf:4e:c8:33:aa:30:c8:01:7a:04: 8f:b0:f5:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwMzI5MDEyMjQyWhcNMjUwNDA1MDEyMjQyWjAYMRYwFAYD VQQDEw02N2U3NGI2My1jNzVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulS63thURhHjuYuUhUxsjFpptMXSCc4fGv8cqUdY9OBWcX2f6jfAH8/VEfUS 0+ne4jDtYsyHvfOMcDwYpdsmxjKakJrmuWHP1ICvv1AmmrA2Ledf4o5ToBzYtZAU 7PZegZjtUPn+FgLIQbzFazJAHI/lPbGHqrLoqTuh2YdYjeNebTrxyIpQXWZG76k6 wAo152zCwh+hsAJjDI8vrNx3bS/FahbogxLoUUvAIqZL7x2TCK64/r1Pv2Gzph3k wBVmuSxj50Vzmmkj7P1SdJCSMHyxTOxGrEZPh7Ytx+hdwZvfyRCtB96KjU9lNyVC Via3RF31sL3U9sqVEYGS34xOswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbyJugC 6CkVxsq+3tg2ELeVMecEMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8MASkJlzKl6eKOGtuSJhivFASk5Vx9niHsPzoa0tK7lAnxtkeu3aB v+pFHkB9VPkGVvBU6yTCr9r+vogr97Za2gPsPFmfQXMR49TpXtLEB+9j2IA3Cb9R TRFHf15pGPbnL6avB9K8B99aZeoeDwGgo3GTqsC9Ci9W3NRGpCdiEDBye4wx+AuB BGyECkOGRhyqjlKCdzonHGiPQgFGV/04vWn/1WCDewhTkl/KYUsE9BhPOnokOiBN 0lIX1yZek9p5Wbu14oz1pKRK3jJfUCuRstFeqDTGXQYLv6Ip1zEuDzqbnE/Glp5A ag5+nSGkt0ovlr9OyDOqMMgBegSPsPWf -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:09 2025 by rpki-client