$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json) Hash identifier: 03W/Ye9MLoEpF/h4VfODtgBo+0AKD1ZbnELimkTcNKc= Subject key identifier: 27:ED:AA:DE:C1:F8:D2:C5:2D:00:1A:26:36:F2:B2:96:37:6C:D4:64 Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Certificate serial: 1B25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft Manifest number: 1B0D Signing time: Fri 30 May 2025 16:28:49 +0000 Manifest this update: Fri 30 May 2025 16:28:49 +0000 Manifest next update: Fri 06 Jun 2025 16:28:49 +0000 Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: g8AqQFx1pvdMgCrqwsuT1JzrrlPr2w2zU/2GmIg+Z7E=) 2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6949 (0x1b25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8 Validity Not Before: May 30 16:28:49 2025 GMT Not After : Jun 6 16:28:49 2025 GMT Subject: CN=6839dcc1-1b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:09:de:18:1e:c0:29:75:f8:87:16:9b:2c: a0:f5:6a:46:18:85:02:b4:6b:cd:c2:25:5a:88:02: 1d:6e:4d:01:9f:b6:db:c3:d1:ae:09:76:99:41:40: 90:d7:ce:d2:7f:58:8c:6b:d1:5b:79:8a:d0:59:88: d9:53:8d:24:86:73:cf:35:8c:70:c0:d2:9a:3f:c1: e7:d2:78:28:4d:7a:5a:b5:28:d6:dd:cb:e2:40:7f: 68:26:2f:93:ba:82:2d:b0:ef:f8:d8:af:3d:82:f0: 8f:d6:c8:d9:4b:9a:03:a3:5a:e8:54:c5:d9:fe:66: b3:0a:0a:3b:52:a2:c8:d5:da:7f:07:eb:9f:fa:16: 62:5b:b9:cd:bc:86:c1:11:17:be:8d:bc:fd:a9:5a: d7:3e:71:b9:ba:a0:3d:27:6b:f5:e7:99:13:77:eb: d1:d8:71:90:c4:26:8d:29:fd:0e:a0:05:1d:45:0a: 38:67:c6:ef:98:25:27:b6:d8:ac:a2:0f:10:e2:bd: fd:57:cb:b1:c3:8e:bf:0e:8c:5b:21:e7:26:dd:b0: f1:d2:8b:35:d5:c8:0a:7c:92:df:29:e7:cf:8a:e6: 18:26:65:5a:4d:4d:0e:60:a5:5b:58:1a:7c:81:e8: 8e:85:57:53:db:28:56:37:01:54:6f:cc:ca:1f:da: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:ED:AA:DE:C1:F8:D2:C5:2D:00:1A:26:36:F2:B2:96:37:6C:D4:64 X509v3 Authority Key Identifier: keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:96:6d:19:53:64:e7:bd:2a:cb:d5:09:1a:6a:ce:ba:44:78: 28:70:da:84:af:20:1f:25:5f:e3:b0:8b:7a:17:01:bd:a2:ea: af:b7:38:ec:01:88:e0:33:3b:45:d2:7a:46:de:db:c6:5c:0c: 49:1f:97:c3:70:97:28:44:39:42:13:d2:73:17:fe:eb:65:15: 87:61:bc:09:29:72:95:8a:6c:f3:5c:99:08:9f:d1:59:c8:c2: d9:cd:e7:29:fd:ed:2e:4b:42:72:af:65:e8:e5:d9:5e:7a:36: 1e:c6:cd:ca:2f:9d:4a:ab:e9:fe:dc:ea:cd:13:ce:5c:d7:45: c9:e3:66:15:c7:c8:eb:88:c3:7e:db:e0:06:dd:44:ac:b0:f7: 28:63:ae:4b:fa:97:76:03:88:3d:28:5e:7a:15:b9:f7:7e:76: 3d:4a:5a:c1:d2:4e:6d:d8:37:cf:d7:19:d4:88:2a:bd:30:ec: ce:1c:f8:0d:13:01:ec:62:95:c3:31:99:e7:2f:c4:8d:25:e5: f9:a0:42:c9:4c:55:71:97:0f:1e:34:cb:2f:43:61:9a:81:ce: 76:be:21:3a:5e:32:28:3b:24:6b:4e:a5:67:3a:ed:ad:67:b9: ef:42:56:a5:a7:22:ad:31:86:13:cd:8b:1a:4c:2a:da:f9:3a: 07:01:24:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGyUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE4Q0IxMTAvBgNVBAUTKEZGMzI3OEEzQUQ1OEIxOEE1NDZFM0ZFRENENTM3ODQw NTI3NzY3QTgwHhcNMjUwNTMwMTYyODQ5WhcNMjUwNjA2MTYyODQ5WjAYMRYwFAYD VQQDEw02ODM5ZGNjMS0xYjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3UcJ3hgewCl1+IcWmyyg9WpGGIUCtGvNwiVaiAIdbk0Bn7bbw9GuCXaZQUCQ 187Sf1iMa9FbeYrQWYjZU40khnPPNYxwwNKaP8Hn0ngoTXpatSjW3cviQH9oJi+T uoItsO/42K89gvCP1sjZS5oDo1roVMXZ/mazCgo7UqLI1dp/B+uf+hZiW7nNvIbB ERe+jbz9qVrXPnG5uqA9J2v155kTd+vR2HGQxCaNKf0OoAUdRQo4Z8bvmCUnttis og8Q4r39V8uxw46/DoxbIecm3bDx0os11cgKfJLfKefPiuYYJmVaTU0OYKVbWBp8 geiOhVdT2yhWNwFUb8zKH9pgGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCftqt7B +NLFLQAaJjbyspY3bNRkMB8GA1UdIwQYMBaAFP8yeKOtWLGKVG4/7c1TeEBSd2eo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QThDQi9DOEIwRjRGMjIx QzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZcFVial90elZONFFGSjNa NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196SjRvNjFZc1lwVWJqX3R6Vk40UUZKM1o2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QThDQi9DOEIwRjRGMjIxQzExMUU3OTU0RTg3MTdDNEY5QUUwMi9feko0bzYxWXNZ cFVial90elZONFFGSjNaNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOlm0ZU2TnvSrL1Qkaas66RHgocNqEryAfJV/jsIt6FwG9ouqvtzjs AYjgMztF0npG3tvGXAxJH5fDcJcoRDlCE9JzF/7rZRWHYbwJKXKVimzzXJkIn9FZ yMLZzecp/e0uS0Jyr2Xo5dleejYexs3KL51Kq+n+3OrNE85c10XJ42YVx8jriMN+ 2+AG3USssPcoY65L+pd2A4g9KF56Fbn3fnY9SlrB0k5t2DfP1xnUiCq9MOzOHPgN EwHsYpXDMZnnL8SNJeX5oELJTFVxlw8eNMsvQ2Gagc52viE6XjIoOyRrTqVnOu2t Z7nvQlalpyKtMYYTzYsaTCra+ToHASTF -----END CERTIFICATE-----Generated at Sat May 31 17:08:58 2025 by rpki-client