$ rpki-client -vvf rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft File: AZgxEf1vCyfiQEY7aKehmEXHuwo.mft (raw, json) Hash identifier: zFAOKaFnAI3VfuO8+2UTtLuiFO7/CwQcOcC4zlZxNH8= Subject key identifier: 4D:C3:C9:97:FB:E7:EA:7B:60:58:49:07:90:A2:83:8C:2D:14:E6:9F Authority key identifier: 01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A Certificate issuer: /CN=A91513B0/serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Certificate serial: 0508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft Manifest number: 04FA Signing time: Fri 30 May 2025 23:54:35 +0000 Manifest this update: Fri 30 May 2025 23:54:35 +0000 Manifest next update: Fri 06 Jun 2025 23:54:35 +0000 Files and hashes: 1: AZgxEf1vCyfiQEY7aKehmEXHuwo.crl (hash: I1K6rdZc4wQxk06LdYnfMZi4mAd6jjqtBy6GxtaSCN4=) 2: 4FE459C8B97211EFA7B7E47DC4F9AE02.roa (hash: m7WV1VKI7ClZpgbpWthM6Ip2WNf7bXuqABVjburQENc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:54:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1288 (0x508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513B0, serialNumber=01983111FD6F0B27E240463B68A7A19845C7BB0A Validity Not Before: May 30 23:54:35 2025 GMT Not After : Jun 6 23:54:35 2025 GMT Subject: CN=683a453b-11b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ff:a5:16:f1:4b:2f:ec:b2:df:ef:35:0a:62: 55:1f:0f:c3:8d:66:aa:11:a4:0c:bc:ab:dd:51:6c: c4:f7:8e:c1:1b:b8:f5:a3:9a:7f:0c:c9:9e:dd:a5: 08:5c:26:27:ea:4d:52:bf:1c:2b:1f:fd:35:f0:a9: 48:14:9b:ec:7f:06:e2:61:f5:80:ce:a3:1a:de:3d: 2c:d1:6b:60:50:38:52:9f:f8:27:98:c4:21:57:f2: e5:c0:91:85:6c:c8:d2:68:b0:66:1e:2e:c7:7f:99: 75:8d:97:48:97:b9:91:8c:dc:fc:a3:c2:66:9d:b1: 2e:c9:cf:fb:77:1c:79:ea:db:2c:6b:1e:58:8b:6a: af:e8:b4:49:c1:3a:b4:2c:9e:62:66:f4:e6:7d:3c: ad:66:27:8b:eb:8b:66:36:b9:7f:2e:87:f5:75:a0: e0:8b:0c:66:2d:82:47:e0:fe:86:05:31:0b:4b:84: 58:d1:de:6c:46:e3:d2:cc:35:00:96:95:c3:8d:9e: 25:36:95:e7:86:fb:82:38:c2:2e:56:70:dc:ee:a5: 2a:07:6b:e9:58:af:d7:db:e1:f3:79:4d:24:85:1d: 14:71:15:4a:f6:ad:de:0c:53:c9:71:fc:58:c0:47: 59:c7:4b:47:31:77:da:19:e2:59:5d:5b:4b:26:6e: 3a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C3:C9:97:FB:E7:EA:7B:60:58:49:07:90:A2:83:8C:2D:14:E6:9F X509v3 Authority Key Identifier: keyid:01:98:31:11:FD:6F:0B:27:E2:40:46:3B:68:A7:A1:98:45:C7:BB:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZgxEf1vCyfiQEY7aKehmEXHuwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513B0/138E1430144F11EC8917D00CC4F9AE02/AZgxEf1vCyfiQEY7aKehmEXHuwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:33:47:09:77:a1:92:4d:5b:b9:54:f7:18:f3:82:fe:5e:6a: 5d:bb:f7:cf:4c:4d:5e:63:7f:46:1e:f9:17:76:de:8b:24:5a: ba:6b:f8:63:1c:c1:0a:29:46:93:9d:c4:8b:17:aa:41:c0:13: a1:3e:ab:55:53:c1:f6:ec:84:a5:a5:4f:73:41:cb:78:f8:c4: e3:73:98:26:b5:6a:8e:f9:52:b4:4b:47:10:9a:52:87:28:6e: 12:33:de:b7:82:66:65:39:df:8b:ab:f4:7c:05:8d:4e:07:bf: 49:24:9b:b2:ae:ae:8e:e0:de:bf:a5:54:f4:c8:0b:14:bc:3d: 8e:32:2d:86:5c:71:19:43:ef:56:4d:80:c3:b0:98:32:22:1a: 80:aa:a7:71:5b:70:dc:36:90:02:b1:10:7c:2e:50:f9:78:65: 2f:bf:d4:c3:bd:95:e1:13:b7:54:ff:7b:43:7f:1f:9f:07:3c: 8c:3f:c0:6b:07:fd:c0:33:2e:4c:21:af:f2:96:73:94:b0:c0: ee:f3:70:e3:13:7b:21:b1:10:8e:29:88:9f:d4:e4:1c:b7:dd: 09:fa:b3:e8:80:04:28:44:4b:c5:67:d4:bc:fe:9e:c0:10:05: 80:ae:de:40:00:df:fb:15:a4:39:b3:04:b3:f0:3e:99:3f:13: 0e:a8:f8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzQjAxMTAvBgNVBAUTKDAxOTgzMTExRkQ2RjBCMjdFMjQwNDYzQjY4QTdBMTk4 NDVDN0JCMEEwHhcNMjUwNTMwMjM1NDM1WhcNMjUwNjA2MjM1NDM1WjAYMRYwFAYD VQQDEw02ODNhNDUzYi0xMWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2v+lFvFLL+yy3+81CmJVHw/DjWaqEaQMvKvdUWzE947BG7j1o5p/DMme3aUI XCYn6k1SvxwrH/018KlIFJvsfwbiYfWAzqMa3j0s0WtgUDhSn/gnmMQhV/LlwJGF bMjSaLBmHi7Hf5l1jZdIl7mRjNz8o8JmnbEuyc/7dxx56tssax5Yi2qv6LRJwTq0 LJ5iZvTmfTytZieL64tmNrl/Lof1daDgiwxmLYJH4P6GBTELS4RY0d5sRuPSzDUA lpXDjZ4lNpXnhvuCOMIuVnDc7qUqB2vpWK/X2+HzeU0khR0UcRVK9q3eDFPJcfxY wEdZx0tHMXfaGeJZXVtLJm46hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3DyZf7 5+p7YFhJB5Cig4wtFOafMB8GA1UdIwQYMBaAFAGYMRH9bwsn4kBGO2inoZhFx7sK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNCMC8xMzhFMTQzMDE0 NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5ZmlRRVk3YUtlaG1FWEh1 d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FaZ3hFZjF2Q3lmaVFFWTdhS2VobUVYSHV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNCMC8xMzhFMTQzMDE0NEYxMUVDODkxN0QwMENDNEY5QUUwMi9BWmd4RWYxdkN5 ZmlRRVk3YUtlaG1FWEh1d28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPM0cJd6GSTVu5VPcY84L+Xmpdu/fPTE1eY39GHvkXdt6LJFq6a/hj HMEKKUaTncSLF6pBwBOhPqtVU8H27ISlpU9zQct4+MTjc5gmtWqO+VK0S0cQmlKH KG4SM963gmZlOd+Lq/R8BY1OB79JJJuyrq6O4N6/pVT0yAsUvD2OMi2GXHEZQ+9W TYDDsJgyIhqAqqdxW3DcNpACsRB8LlD5eGUvv9TDvZXhE7dU/3tDfx+fBzyMP8Br B/3AMy5MIa/ylnOUsMDu83DjE3shsRCOKYif1OQct90J+rPogAQoREvFZ9S8/p7A EAWArt5AAN/7FaQ5swSz8D6ZPxMOqPh5 -----END CERTIFICATE-----Generated at Sat May 31 14:48:15 2025 by rpki-client