$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json) Hash identifier: ANyy2dE9jQJPe5AeUnLKGkv9YzacD/cEOZtb9jJ1Ocs= Subject key identifier: 48:1B:39:74:8C:E9:88:05:B2:03:D0:E2:25:42:CE:43:6A:3E:09:16 Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft Manifest number: 33 Signing time: Sat 31 May 2025 07:14:47 +0000 Manifest this update: Sat 31 May 2025 07:14:46 +0000 Manifest next update: Sat 07 Jun 2025 07:14:46 +0000 Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: ppAiE/Z2vvImPX+ouuF4Q3mNnA6Sz+YMj1Zj5/vXdFk=) 2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: May 31 07:14:46 2025 GMT Not After : Jun 7 07:14:46 2025 GMT Subject: CN=683aac67-10b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:51:8b:be:03:9f:d5:89:0f:66:57:3b:3b:e3: 61:57:60:a3:9c:05:e2:39:fb:64:d8:ff:7d:d7:32: ca:ef:a8:2a:cc:90:62:87:e0:86:f1:94:2c:02:90: e7:16:ce:9c:6f:56:36:c7:48:cf:41:6b:41:c3:93: 72:81:92:4c:50:a2:13:3f:bf:e3:13:4b:3a:ca:df: 0e:5f:78:d1:89:39:e5:16:d4:43:a5:d1:74:05:87: 1f:28:17:a6:14:8c:14:19:ae:99:7c:49:9d:4b:65: 5a:ac:56:2b:67:b5:be:eb:2f:4f:54:d6:1f:30:cc: a8:c6:ce:ba:bf:55:39:43:0e:be:3b:b9:73:90:66: 4b:89:22:ba:e0:52:2f:48:46:aa:34:b4:9b:9b:17: e0:2f:7a:69:27:9d:18:4b:f6:87:bf:2e:d6:d3:5e: bd:bb:51:2f:b7:cb:80:62:a4:55:f8:15:8a:fd:32: 65:3e:bb:99:04:76:b4:94:3e:17:e8:32:96:b1:70: be:06:2d:8d:fd:9e:af:fb:30:86:b8:f5:bf:9f:a3: 3a:df:ef:5d:e5:98:a9:46:86:e4:74:88:48:29:94: fc:e3:92:75:84:b0:73:c6:65:17:1e:de:ba:5f:91: 7c:b6:0f:2d:e5:cf:75:0f:e8:bb:f7:73:82:51:66: a0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1B:39:74:8C:E9:88:05:B2:03:D0:E2:25:42:CE:43:6A:3E:09:16 X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:0b:d1:0a:0d:30:ee:1c:ad:cf:5b:81:6a:4e:22:6e:17:52: 4b:0d:17:25:c3:45:9e:8b:cf:c5:25:c5:dc:89:bf:cb:f4:1a: 92:2b:3b:0d:0c:7b:97:2b:76:16:03:82:f3:4d:49:8f:f3:e2: 2d:31:22:eb:72:8d:da:96:e3:ce:40:df:35:a6:e1:08:07:87: c0:6d:c9:bc:d5:e0:ca:1e:44:dd:7b:d1:1f:e5:0a:e1:a8:f2: 1f:be:73:09:24:b4:1b:b5:70:d2:d9:28:f5:73:4a:d8:2e:60: 42:a7:69:86:7e:59:bd:6a:b6:5e:e9:b3:af:ba:e4:37:ba:9a: 0d:00:5a:93:a0:39:7e:c2:d8:86:bf:19:1d:c4:fd:2d:12:33: c5:95:ee:0f:aa:ef:50:10:71:f1:0c:4e:bb:5a:2c:30:ac:73: 78:46:79:c0:e9:c5:32:b5:b0:ae:fe:3b:2e:84:ed:85:11:4b: 8d:f5:91:86:8a:16:7e:0b:37:48:92:17:74:fb:66:04:ba:5b: 97:ac:6c:d2:c5:c4:55:b4:90:93:f5:fa:d9:da:34:d8:de:a6: ef:44:11:ee:e7:88:84:74:29:c1:31:e1:9f:3c:40:26:81:92: 37:ed:a5:9b:c3:52:c0:4e:42:e6:5f:75:58:b3:39:90:45:85: f7:ae:ad:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MThDNzExMC8GA1UEBRMoRTM2OTI5MEZENzE5RTNFNDk4N0Q3MTlBNzNCMUVDNzdB QUFGNDlCNjAeFw0yNTA1MzEwNzE0NDZaFw0yNTA2MDcwNzE0NDZaMBgxFjAUBgNV BAMTDTY4M2FhYzY3LTEwYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZUYu+A5/ViQ9mVzs742FXYKOcBeI5+2TY/33XMsrvqCrMkGKH4IbxlCwCkOcW zpxvVjbHSM9Ba0HDk3KBkkxQohM/v+MTSzrK3w5feNGJOeUW1EOl0XQFhx8oF6YU jBQZrpl8SZ1LZVqsVitntb7rL09U1h8wzKjGzrq/VTlDDr47uXOQZkuJIrrgUi9I Rqo0tJubF+AvemknnRhL9oe/LtbTXr27US+3y4BipFX4FYr9MmU+u5kEdrSUPhfo MpaxcL4GLY39nq/7MIa49b+fozrf713lmKlGhuR0iEgplPzjknWEsHPGZRce3rpf kXy2Dy3lz3UP6Lv3c4JRZqC/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSBs5dIzp iAWyA9DiJULOQ2o+CRYwHwYDVR0jBBgwFoAU42kpD9cZ4+SYfXGac7Hsd6qvSbYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxOEM3L0Y5MzAwMUI2RjhD RjExRUY4MkQ4RDUyQkM0RjlBRTAyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNi WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNDJrcEQ5Y1o0LVNZZlhHYWM3SHNkNnF2U2JZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx OEM3L0Y5MzAwMUI2RjhDRjExRUY4MkQ4RDUyQkM0RjlBRTAyLzQya3BEOWNaNC1T WWZYR2FjN0hzZDZxdlNiWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIgL0QoNMO4crc9bgWpOIm4XUksNFyXDRZ6Lz8UlxdyJv8v0GpIrOw0M e5crdhYDgvNNSY/z4i0xIutyjdqW485A3zWm4QgHh8BtybzV4MoeRN170R/lCuGo 8h++cwkktBu1cNLZKPVzStguYEKnaYZ+Wb1qtl7ps6+65De6mg0AWpOgOX7C2Ia/ GR3E/S0SM8WV7g+q71AQcfEMTrtaLDCsc3hGecDpxTK1sK7+Oy6E7YURS431kYaK Fn4LN0iSF3T7ZgS6W5esbNLFxFW0kJP1+tnaNNjepu9EEe7niIR0KcEx4Z88QCaB kjftpZvDUsBOQuZfdVizOZBFhfeurXc= -----END CERTIFICATE-----Generated at Sat May 31 15:23:10 2025 by rpki-client