$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft File: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json) Hash identifier: 315I9XBg4XtyONHurkvXpzvwg6D0g7BJWBEw/tIp1WY= Subject key identifier: 98:25:7A:F5:17:F3:C8:3D:DE:1A:B3:D3:21:5B:6C:30:B6:AC:72:9C Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 Certificate issuer: /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Certificate serial: 4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft Manifest number: 4C Signing time: Sat 31 May 2025 06:51:25 +0000 Manifest this update: Sat 31 May 2025 06:51:24 +0000 Manifest next update: Sat 07 Jun 2025 06:51:24 +0000 Files and hashes: 1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: VWrQQFEl8rp4WWo6Acfb1vQEhXCMkV1qmD5tNyR8jYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76 (0x4c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Validity Not Before: May 31 06:51:24 2025 GMT Not After : Jun 7 06:51:24 2025 GMT Subject: CN=683aa6ed-8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:df:3d:a5:c1:10:d7:44:cf:e9:90:ef:3c: d6:4b:4e:96:37:da:36:2f:27:07:59:db:0b:ea:a1: ba:73:bb:3f:73:7a:85:8b:95:33:08:c9:03:45:3f: a3:78:1f:cb:aa:7f:9e:5f:2e:a5:ed:0e:c2:5e:78: 78:de:fb:07:aa:3b:15:01:1c:c6:8d:b1:97:69:b8: 2a:f5:2a:95:c2:53:4e:83:9b:bd:2f:9e:3f:81:ef: 68:5b:d0:a7:77:19:93:43:83:60:8b:dd:98:7a:d1: aa:aa:86:38:d4:ae:4c:1e:ee:ea:5d:fb:a5:dd:8c: 6e:70:a4:7f:be:eb:e0:1a:d6:53:08:c3:39:8b:b5: 27:87:db:3c:dc:e5:b3:be:32:f1:36:f2:dd:d2:ce: b4:93:4b:58:8b:5a:18:93:36:39:27:8a:19:86:a1: bd:ae:f1:d5:74:b0:20:26:cc:cc:58:ff:e5:65:27: ed:52:29:b6:4a:51:a0:a1:03:bc:a3:f0:e3:cf:b6: 57:cb:1a:72:7b:2e:51:20:d1:c3:0c:8e:f7:a2:8c: a1:ab:e8:e5:0d:de:20:3e:4f:21:c8:a9:16:44:62: 64:d4:5a:53:82:9b:30:73:d6:65:09:3b:8a:ee:28: b0:5d:53:4b:c5:5b:65:95:3b:f6:e1:12:31:0d:40: d8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:25:7A:F5:17:F3:C8:3D:DE:1A:B3:D3:21:5B:6C:30:B6:AC:72:9C X509v3 Authority Key Identifier: keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:22:60:e0:fd:cb:9f:db:c7:9b:2b:bf:0f:e3:f4:b9:48:f2: 24:f3:c0:e6:6a:f7:11:07:8f:d4:6f:eb:09:ba:a7:94:8e:dd: 8c:30:c0:f7:2f:9e:0f:f6:d1:68:5b:8a:72:d1:a5:83:33:06: 47:a9:53:68:5c:78:8a:e9:74:7e:bf:ae:2e:4c:74:78:93:e7: 97:d8:18:e0:39:1c:8e:a9:6f:a6:ff:e6:27:6c:46:e9:9b:d2: 13:72:ec:a0:72:2d:a6:04:ac:ba:bf:f6:55:6e:41:3f:5d:0a: 67:83:95:e6:40:8f:7b:b7:22:38:bd:b8:dd:c1:12:92:80:c9: f7:83:e8:c1:7b:32:14:6e:23:7b:64:fa:86:77:ca:a0:bd:04: de:62:1c:1b:51:84:de:97:93:4f:66:df:dd:36:bd:c8:a6:ed: d3:30:a1:7c:c1:cc:1a:2a:de:0f:70:71:f8:9b:8c:92:0a:43: 72:b1:ab:61:9c:96:2d:99:2a:67:12:69:a8:93:a3:2b:db:90: 71:0c:5b:77:6b:b9:05:d6:3b:fb:bc:44:6e:59:6b:6e:6a:2d: 05:df:f1:b8:b8:87:03:5d:88:28:77:59:ac:6f:0e:fa:a4:d7: 3c:47:21:6b:49:58:8a:26:a5:f0:6d:d8:15:19:d6:ec:24:49: 8c:2e:d0:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjUzNjExMC8GA1UEBRMoRjMzNjdENzQ0NDgzOTlDMThFRjY3QzdDOTg2MTA3Qjgx NEIxMkQ2NDAeFw0yNTA1MzEwNjUxMjRaFw0yNTA2MDcwNjUxMjRaMBgxFjAUBgNV BAMTDTY4M2FhNmVkLThjNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzuN89pcEQ10TP6ZDvPNZLTpY32jYvJwdZ2wvqobpzuz9zeoWLlTMIyQNFP6N4 H8uqf55fLqXtDsJeeHje+weqOxUBHMaNsZdpuCr1KpXCU06Dm70vnj+B72hb0Kd3 GZNDg2CL3Zh60aqqhjjUrkwe7upd+6XdjG5wpH++6+Aa1lMIwzmLtSeH2zzc5bO+ MvE28t3SzrSTS1iLWhiTNjknihmGob2u8dV0sCAmzMxY/+VlJ+1SKbZKUaChA7yj 8OPPtlfLGnJ7LlEg0cMMjveijKGr6OUN3iA+TyHIqRZEYmTUWlOCmzBz1mUJO4ru KLBdU0vFW2WVO/bhEjENQNhZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmCV69Rfz yD3eGrPTIVtsMLascpwwHwYDVR0jBBgwFoAU8zZ9dESDmcGO9nx8mGEHuBSxLWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2L0EzMDVGNEU0Qzk5 QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHpaOWRFU0RtY0dPOW54OG1HRUh1QlN4TFdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTM2L0EzMDVGNEU0Qzk5QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNH TzlueDhtR0VIdUJTeExXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADoiYOD9y5/bx5srvw/j9LlI8iTzwOZq9xEHj9Rv6wm6p5SO3YwwwPcv ng/20WhbinLRpYMzBkepU2hceIrpdH6/ri5MdHiT55fYGOA5HI6pb6b/5idsRumb 0hNy7KByLaYErLq/9lVuQT9dCmeDleZAj3u3Iji9uN3BEpKAyfeD6MF7MhRuI3tk +oZ3yqC9BN5iHBtRhN6Xk09m3902vcim7dMwoXzBzBoq3g9wcfibjJIKQ3Kxq2Gc li2ZKmcSaaiToyvbkHEMW3druQXWO/u8RG5Za25qLQXf8bi4hwNdiCh3WaxvDvqk 1zxHIWtJWIompfBt2BUZ1uwkSYwu0DI= -----END CERTIFICATE-----Generated at Sat May 31 17:02:18 2025 by rpki-client