$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json) Hash identifier: x2agrOey6TbUavdBXrpFreoxBCB7g09ibYaKulwBKR8= Subject key identifier: 94:B4:2E:AF:31:22:39:06:80:39:07:74:B0:87:13:54:02:0C:40:B6 Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft Manifest number: EE Signing time: Sat 31 May 2025 04:56:55 +0000 Manifest this update: Sat 31 May 2025 04:56:54 +0000 Manifest next update: Sat 07 Jun 2025 04:56:54 +0000 Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: cGmOejr6bMHEGFb8oS1SOGHJ+i5woS/WQ4Ox3hP0PrI=) 2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=) 3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4 Validity Not Before: May 31 04:56:54 2025 GMT Not After : Jun 7 04:56:54 2025 GMT Subject: CN=683a8c16-43e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:32:f6:1a:28:cc:b5:5d:bc:5b:ed:55:db:44: d7:58:ee:83:3e:37:5e:1b:0a:8c:a2:3d:fe:c0:81: 54:d1:81:c2:7f:fa:8c:0d:2c:15:f5:04:20:6d:67: c3:e1:aa:f3:11:de:22:33:29:4a:33:d3:45:08:b1: 85:77:82:3e:6c:cf:be:61:05:32:2e:15:bb:85:66: d2:09:df:8c:c7:d2:0e:63:3f:da:d8:03:cc:ce:11: 0d:f1:15:5f:c9:79:80:d3:75:f7:f9:cc:03:9d:45: fe:2a:6b:66:b8:ab:5a:44:9e:cd:88:ff:96:5d:78: 65:9f:e0:d7:f6:c6:75:76:66:2c:f6:42:2e:bc:f1: f2:ab:2f:49:35:80:bc:97:16:fa:39:af:39:ee:c1: 6f:d6:9f:f8:63:46:77:29:80:53:a4:45:2a:6e:b4: 1d:4e:69:36:37:8e:ca:d2:8b:9b:17:c4:00:10:71: 8c:96:c8:f0:0e:1f:fd:15:fc:af:4b:f9:18:00:0b: 79:a4:7c:f3:de:20:c6:68:da:64:1f:c4:fa:5b:5a: 5f:f1:7d:be:68:0a:80:0b:06:d1:79:bb:bd:24:62: c3:ed:05:3b:f6:e8:93:97:a6:64:e1:27:b1:a6:58: 47:5b:8f:61:07:46:03:2a:3a:27:6b:65:25:e4:02: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B4:2E:AF:31:22:39:06:80:39:07:74:B0:87:13:54:02:0C:40:B6 X509v3 Authority Key Identifier: keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:46:ef:53:47:cd:36:c3:34:88:19:75:af:7f:e1:66:90:47: fa:24:90:cf:b3:d5:d0:c6:37:44:fd:30:31:e9:30:c0:51:26: 3b:e6:74:ba:da:90:b3:b6:b6:be:08:20:eb:77:c3:d3:39:f7: 43:e0:c4:fb:d6:aa:fc:ae:8b:55:80:cd:4a:29:4b:d1:9d:af: e6:45:27:b2:db:97:6a:31:8e:ab:9a:38:18:d0:ff:b4:ef:75: 0b:27:34:28:23:ca:dd:21:a4:b3:14:f3:6a:5f:00:44:fa:cd: 2b:76:22:8a:0e:d7:2b:4e:85:9c:25:40:d2:4f:7a:39:29:62: 6f:1a:86:9f:50:fa:bc:77:9d:d8:51:82:e9:e9:68:11:ee:d0: 60:a4:9d:a3:f0:d1:83:fc:3f:e3:bd:53:fe:77:42:a4:16:dc: 94:0f:f0:ff:1c:03:f2:73:bb:aa:b7:2e:9b:be:fa:f5:4c:44: 28:02:d6:af:3b:d8:5a:83:c5:18:8e:06:b3:dd:17:16:e3:f6: 9f:d0:e9:b3:5d:1d:06:73:57:a5:dd:ea:67:92:a2:08:a3:1d: 37:9a:4e:4f:1a:d1:f3:0a:b8:9f:01:e3:d3:62:23:bc:13:b7: b3:06:55:25:89:f5:1f:ec:b2:e1:42:0a:8b:55:9a:99:0e:ef: 92:5f:84:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE1MEYxMTAvBgNVBAUTKDY2M0Y0RDVGQzgyNzBBNDQyMEZFMUU2MUY5MUFERkE4 MzdGRjFFRTQwHhcNMjUwNTMxMDQ1NjU0WhcNMjUwNjA3MDQ1NjU0WjAYMRYwFAYD VQQDEw02ODNhOGMxNi00M2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtzL2GijMtV28W+1V20TXWO6DPjdeGwqMoj3+wIFU0YHCf/qMDSwV9QQgbWfD 4arzEd4iMylKM9NFCLGFd4I+bM++YQUyLhW7hWbSCd+Mx9IOYz/a2APMzhEN8RVf yXmA03X3+cwDnUX+KmtmuKtaRJ7NiP+WXXhln+DX9sZ1dmYs9kIuvPHyqy9JNYC8 lxb6Oa857sFv1p/4Y0Z3KYBTpEUqbrQdTmk2N47K0oubF8QAEHGMlsjwDh/9Ffyv S/kYAAt5pHzz3iDGaNpkH8T6W1pf8X2+aAqACwbRebu9JGLD7QU79uiTl6Zk4Sex plhHW49hB0YDKjona2Ul5AKBJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS0Lq8x IjkGgDkHdLCHE1QCDEC2MB8GA1UdIwQYMBaAFGY/TV/IJwpEIP4eYfka36g3/x7k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTUwRi81NzcxOTg1NEQx MzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNrUWdfaDVoLVJyZnFEZl9I dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqOU5YOGduQ2tRZ19oNWgtUnJmcURmX0h1US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTUwRi81NzcxOTg1NEQxMzMxMUVFQUEyMERDODRDNEY5QUUwMi9aajlOWDhnbkNr UWdfaDVoLVJyZnFEZl9IdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCERu9TR802wzSIGXWvf+FmkEf6JJDPs9XQxjdE/TAx6TDAUSY75nS6 2pCztra+CCDrd8PTOfdD4MT71qr8rotVgM1KKUvRna/mRSey25dqMY6rmjgY0P+0 73ULJzQoI8rdIaSzFPNqXwBE+s0rdiKKDtcrToWcJUDST3o5KWJvGoafUPq8d53Y UYLp6WgR7tBgpJ2j8NGD/D/jvVP+d0KkFtyUD/D/HAPyc7uqty6bvvr1TEQoAtav O9hag8UYjgaz3RcW4/af0OmzXR0Gc1el3epnkqIIox03mk5PGtHzCrifAePTYiO8 E7ezBlUlifUf7LLhQgqLVZqZDu+SX4RK -----END CERTIFICATE-----Generated at Sat May 31 17:24:50 2025 by rpki-client