$ rpki-client -vvf rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft File: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft (raw, json) Hash identifier: fVmHU1R6ZCjpaJmUPjL50A0Hy+Re1CtgA4hyd2n7I1M= Subject key identifier: 97:F3:2A:D7:0D:43:50:EC:7C:D6:69:4D:69:C0:BA:02:72:BB:56:8F Authority key identifier: E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73 Certificate issuer: /CN=A9141796/serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft Manifest number: 01A7 Signing time: Sat 31 May 2025 03:05:08 +0000 Manifest this update: Sat 31 May 2025 03:05:07 +0000 Manifest next update: Sat 07 Jun 2025 03:05:07 +0000 Files and hashes: 1: 55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl (hash: p8I2eMwBfgRbCkm3G0Iu+FsLi/wqK5Kummd1D0GFOGU=) 2: F1AA5BA0BC4111EF8F383127C4F9AE02.roa (hash: +rUdM3wh1FXG613eiD9jDQJWUNXhMVJzOG+9o6Mm79Y=) 3: 0B361848BC4211EF86E55A27C4F9AE02.roa (hash: +70dFn9ZrCVpNqZl9fsRZTQ+BGQRhum5n4ikWMTy4M0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141796, serialNumber=E79CD208E94DE950BE3EA9FAA6EF807B4E905973 Validity Not Before: May 31 03:05:07 2025 GMT Not After : Jun 7 03:05:07 2025 GMT Subject: CN=683a71e4-9a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5f:99:d2:d5:99:47:e4:90:d5:d3:6c:6a:5e: e2:d9:92:f5:6d:ae:47:f1:80:fe:53:b5:98:94:ed: bc:fe:3e:0a:4f:a0:7f:fa:db:5f:df:fd:9b:4d:07: 15:d7:41:f7:52:a9:6e:9e:cf:b5:ec:a1:36:71:7b: 53:22:a7:63:3c:68:9a:57:56:a7:7e:02:43:ee:85: b4:18:e4:56:2e:58:ff:9f:cd:0e:c4:ff:fb:43:55: 6c:07:ec:2e:3a:d0:24:1d:55:d7:1b:e1:a9:cd:26: 8c:35:eb:84:41:75:f6:2d:bc:d8:2d:83:20:e9:50: 9f:92:34:a9:cf:0c:06:d1:7d:3a:da:c8:f4:89:cf: 49:1f:80:2d:1f:0f:0a:2f:a9:42:03:95:6a:cc:1b: f3:57:53:71:c2:c7:ad:39:f8:fe:2a:f6:07:71:88: 3d:8a:1c:7f:3d:e0:2c:1c:ec:1f:82:e7:c5:b5:2f: 87:c7:bc:c8:ec:da:2c:03:ab:2c:85:3a:bc:10:81: 27:f3:bc:0d:fe:53:1a:99:39:ab:d9:8c:80:49:ce: 49:f0:71:52:d6:68:f4:1a:a2:de:de:71:21:da:10: 9a:e3:95:5a:4b:97:ce:6a:55:66:67:21:c1:8a:45: 30:73:9d:b3:b1:37:1c:30:60:b8:73:66:46:56:75: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F3:2A:D7:0D:43:50:EC:7C:D6:69:4D:69:C0:BA:02:72:BB:56:8F X509v3 Authority Key Identifier: keyid:E7:9C:D2:08:E9:4D:E9:50:BE:3E:A9:FA:A6:EF:80:7B:4E:90:59:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/55zSCOlN6VC-Pqn6pu-Ae06QWXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141796/E743523CC94711ED8ACC653DC4F9AE02/55zSCOlN6VC-Pqn6pu-Ae06QWXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:6e:ca:cf:c2:d2:c6:92:d9:ec:64:da:84:e2:8c:e9:28:e4: 72:12:6e:4e:1c:00:01:cc:22:ef:68:22:b7:80:5a:db:c6:ab: 50:6c:02:d5:98:13:06:f3:0d:a3:65:cd:60:6e:07:95:30:b7: aa:bd:a5:ef:24:42:85:af:14:a4:0d:61:c2:4a:5b:43:42:13: 9f:72:94:a3:a3:e5:d4:35:30:a7:40:61:64:5e:ee:59:c1:e9: 00:b6:7c:7c:82:18:bc:d7:8f:5a:08:40:75:b2:44:8d:fa:0d: a5:e3:7e:84:dd:0d:83:4e:70:74:19:2d:5b:d2:82:89:5f:b9: 2a:54:0a:0a:da:33:48:d8:cd:1b:18:9a:0b:b1:3c:99:49:36: c5:84:97:eb:2b:21:01:36:00:66:4e:f1:9a:b6:c3:cd:9f:55: ef:50:36:fe:f4:f8:bf:ec:ed:ac:54:be:75:40:b2:c0:ca:ed: 93:54:7c:57:09:a7:0b:c4:bf:85:67:81:00:be:c3:84:cb:9e: 48:bb:4b:be:21:45:3a:1d:c0:f7:98:09:88:0e:19:14:c0:8c: 0b:33:a2:08:ff:27:85:e6:8b:29:a4:2a:f4:c1:ba:19:32:32: b7:0f:f3:85:03:f8:bf:cb:96:1b:5c:bc:a6:d4:a8:82:e4:17: 2c:87:5d:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3OTYxMTAvBgNVBAUTKEU3OUNEMjA4RTk0REU5NTBCRTNFQTlGQUE2RUY4MDdC NEU5MDU5NzMwHhcNMjUwNTMxMDMwNTA3WhcNMjUwNjA3MDMwNTA3WjAYMRYwFAYD VQQDEw02ODNhNzFlNC05YTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4F+Z0tWZR+SQ1dNsal7i2ZL1ba5H8YD+U7WYlO28/j4KT6B/+ttf3/2bTQcV 10H3Uqluns+17KE2cXtTIqdjPGiaV1anfgJD7oW0GORWLlj/n80OxP/7Q1VsB+wu OtAkHVXXG+GpzSaMNeuEQXX2LbzYLYMg6VCfkjSpzwwG0X062sj0ic9JH4AtHw8K L6lCA5VqzBvzV1NxwsetOfj+KvYHcYg9ihx/PeAsHOwfgufFtS+Hx7zI7NosA6ss hTq8EIEn87wN/lMamTmr2YyASc5J8HFS1mj0GqLe3nEh2hCa45VaS5fOalVmZyHB ikUwc52zsTccMGC4c2ZGVnWKnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfzKtcN Q1DsfNZpTWnAugJyu1aPMB8GA1UdIwQYMBaAFOec0gjpTelQvj6p+qbvgHtOkFlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTc5Ni9FNzQzNTIzQ0M5 NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZWQy1QcW42cHUtQWUwNlFX WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU1elNDT2xONlZDLVBxbjZwdS1BZTA2UVdYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTc5Ni9FNzQzNTIzQ0M5NDcxMUVEOEFDQzY1M0RDNEY5QUUwMi81NXpTQ09sTjZW Qy1QcW42cHUtQWUwNlFXWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4bsrPwtLGktnsZNqE4ozpKORyEm5OHAABzCLvaCK3gFrbxqtQbALV mBMG8w2jZc1gbgeVMLeqvaXvJEKFrxSkDWHCSltDQhOfcpSjo+XUNTCnQGFkXu5Z wekAtnx8ghi8149aCEB1skSN+g2l436E3Q2DTnB0GS1b0oKJX7kqVAoK2jNI2M0b GJoLsTyZSTbFhJfrKyEBNgBmTvGatsPNn1XvUDb+9Pi/7O2sVL51QLLAyu2TVHxX CacLxL+FZ4EAvsOEy55Iu0u+IUU6HcD3mAmIDhkUwIwLM6II/yeF5osppCr0wboZ MjK3D/OFA/i/y5YbXLym1KiC5Bcsh13J -----END CERTIFICATE-----Generated at Sat May 31 16:29:38 2025 by rpki-client