$ rpki-client -vvf rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft File: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft (raw, json) Hash identifier: 1lkb1SD6H42EAu10D1PXc9ifo44I0MEAMTYLEZOeEvw= Subject key identifier: 57:48:7E:CC:90:5A:97:F2:05:61:AE:F8:18:7E:BF:69:22:C4:15:5F Authority key identifier: 69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 Certificate issuer: /CN=A914FED3/serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Certificate serial: 0DFD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft Manifest number: 0DE7 Signing time: Fri 30 May 2025 18:02:56 +0000 Manifest this update: Fri 30 May 2025 18:02:56 +0000 Manifest next update: Fri 06 Jun 2025 18:02:56 +0000 Files and hashes: 1: aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl (hash: tBEw+0n9FnfT+RwQHvVzCWXMkG0JuaEUHNUQPm9Cq00=) 2: F9BDC484F7B011EB84345029C4F9AE02.roa (hash: QoxSmZFkmxLXEXsdlg7AEo5bS3bmundbYECPlf6m84c=) 3: 6E8576BC0F1911F0A007DF16C4F9AE02.roa (hash: Hd+fGLIKcj2CGWAhoQMpGvllKlGgq3bRAKOqU9WwZus=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3581 (0xdfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914FED3, serialNumber=699F51A9D9E1456D1601BE83D8B94AD59A438233 Validity Not Before: May 30 18:02:56 2025 GMT Not After : Jun 6 18:02:56 2025 GMT Subject: CN=6839f2d0-c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:e2:0d:90:0b:d8:28:ad:5a:4b:f9:cd:ee: 7c:09:7a:77:04:ab:c9:47:e4:e4:66:f9:20:c0:b6: 90:22:7a:86:71:c3:96:aa:18:4c:7b:61:42:0b:15: b0:de:d7:51:62:56:e6:84:1e:3a:a7:09:b2:00:92: d2:c4:3e:91:55:eb:d1:cf:c9:3b:8c:4b:8b:b0:80: 83:d0:3f:1e:7e:9c:6b:7f:fb:e3:aa:4c:2f:ab:a5: 1d:10:13:25:4c:b7:ce:c1:e2:95:ae:ef:25:88:5c: 7a:84:99:28:4b:c2:8b:56:fb:39:91:9b:01:8a:ce: 45:ea:d8:e4:be:f4:7c:87:45:fe:c2:42:b9:4e:f1: c8:23:a0:fc:74:4b:b6:63:57:3a:4f:1b:8d:15:91: cc:4a:38:e5:5e:a1:36:85:9e:f4:3f:1f:a5:ac:72: b8:b3:33:2a:2e:15:34:62:ca:b0:83:3f:b4:20:ae: 35:48:79:47:90:e0:84:5a:50:35:ce:b7:cc:d0:70: 2c:cd:fe:88:99:88:5e:89:bd:af:e9:53:8e:36:cf: 32:52:34:81:46:63:97:9d:80:44:95:d2:6f:4a:83: 96:a3:10:57:ff:cf:0f:ea:71:c2:f4:e4:e3:b2:7e: 2b:f2:a5:e6:f5:e8:a9:0d:2a:06:fb:e0:9b:bf:0d: 53:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:7E:CC:90:5A:97:F2:05:61:AE:F8:18:7E:BF:69:22:C4:15:5F X509v3 Authority Key Identifier: keyid:69:9F:51:A9:D9:E1:45:6D:16:01:BE:83:D8:B9:4A:D5:9A:43:82:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FED3/F8584F7CB38A11E987288166C4F9AE02/aZ9RqdnhRW0WAb6D2LlK1ZpDgjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d9:4c:50:8b:34:7b:c4:ea:59:de:57:fe:7d:49:df:67:b8:57: 0e:a6:57:c2:ce:a1:d3:65:1c:77:c9:47:8e:8b:07:4a:86:82: ce:48:25:fd:e5:05:4e:4e:cb:95:00:e7:40:f4:5d:81:67:98: 3e:85:2a:4d:b6:53:a0:b9:56:bf:3c:7a:1a:59:6a:c3:e0:6c: 76:c2:be:4f:ab:4c:14:57:41:fd:54:b2:c5:3c:2e:3c:06:0f: be:2d:c8:34:98:f6:5d:3e:f6:fc:3e:29:ec:40:62:58:0c:e1: a0:f4:e4:38:99:63:24:34:80:4b:64:f7:59:bd:93:e4:57:73: 73:cf:dc:d0:74:07:f2:15:bc:eb:97:f9:d3:26:c1:cf:43:ff: 03:a0:e1:58:0f:30:08:db:0b:44:71:17:4e:bb:32:ed:45:71: 19:5f:68:41:2f:43:04:7e:44:15:a7:5f:45:08:1a:f6:73:c4: 3e:77:ee:ac:2e:d7:d6:44:6c:78:8f:bd:fa:92:2c:c8:55:33: 7e:d1:9e:bb:e2:35:6e:64:fd:c9:41:75:33:76:ae:9b:0d:94: 78:8a:4c:47:02:a0:77:a4:d1:1a:87:05:a9:a1:ec:90:07:8c: 30:bd:a3:9a:b7:a7:eb:d8:7f:1d:29:63:55:2d:94:36:4c:9a: 2d:83:15:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEZFRDMxMTAvBgNVBAUTKDY5OUY1MUE5RDlFMTQ1NkQxNjAxQkU4M0Q4Qjk0QUQ1 OUE0MzgyMzMwHhcNMjUwNTMwMTgwMjU2WhcNMjUwNjA2MTgwMjU2WjAYMRYwFAYD VQQDEw02ODM5ZjJkMC1jOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsUHiDZAL2CitWkv5ze58CXp3BKvJR+TkZvkgwLaQInqGccOWqhhMe2FCCxWw 3tdRYlbmhB46pwmyAJLSxD6RVevRz8k7jEuLsICD0D8efpxrf/vjqkwvq6UdEBMl TLfOweKVru8liFx6hJkoS8KLVvs5kZsBis5F6tjkvvR8h0X+wkK5TvHII6D8dEu2 Y1c6TxuNFZHMSjjlXqE2hZ70Px+lrHK4szMqLhU0Ysqwgz+0IK41SHlHkOCEWlA1 zrfM0HAszf6ImYheib2v6VOONs8yUjSBRmOXnYBEldJvSoOWoxBX/88P6nHC9OTj sn4r8qXm9eipDSoG++Cbvw1ThwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFdIfsyQ WpfyBWGu+Bh+v2kixBVfMB8GA1UdIwQYMBaAFGmfUanZ4UVtFgG+g9i5StWaQ4Iz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RkVEMy9GODU4NEY3Q0Iz OEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJXMFdBYjZEMkxsSzFacERn ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FaOVJxZG5oUlcwV0FiNkQyTGxLMVpwRGdqTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RkVEMy9GODU4NEY3Q0IzOEExMUU5ODcyODgxNjZDNEY5QUUwMi9hWjlScWRuaFJX MFdBYjZEMkxsSzFacERnak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDZTFCLNHvE6lneV/59Sd9nuFcOplfCzqHTZRx3yUeOiwdKhoLOSCX9 5QVOTsuVAOdA9F2BZ5g+hSpNtlOguVa/PHoaWWrD4Gx2wr5Pq0wUV0H9VLLFPC48 Bg++Lcg0mPZdPvb8PinsQGJYDOGg9OQ4mWMkNIBLZPdZvZPkV3Nzz9zQdAfyFbzr l/nTJsHPQ/8DoOFYDzAI2wtEcRdOuzLtRXEZX2hBL0MEfkQVp19FCBr2c8Q+d+6s LtfWRGx4j736kizIVTN+0Z674jVuZP3JQXUzdq6bDZR4ikxHAqB3pNEahwWpoeyQ B4wwvaOat6fr2H8dKWNVLZQ2TJotgxXu -----END CERTIFICATE-----Generated at Sat May 31 17:46:30 2025 by rpki-client