$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft File: aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json) Hash identifier: bdcsGrMt5ZgTh8FCpIcp+nnwlGBek3Z8L+d71YipH50= Subject key identifier: 90:B1:0C:8D:31:EB:A4:5F:6F:2C:3F:EE:0E:A8:B7:35:69:51:FF:3B Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Certificate serial: 0694 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft Manifest number: 068F Signing time: Fri 30 May 2025 22:27:11 +0000 Manifest this update: Fri 30 May 2025 22:27:10 +0000 Manifest next update: Fri 06 Jun 2025 22:27:10 +0000 Files and hashes: 1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: YE5vXNzt5t+1JBRFej4zLTvFJN8f6lxLpTqAUS/Iz3Q=) 2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: qir+UT8zyDGjYz1YRKkq2v/pYcPeSxEZXiWVhwGwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1684 (0x694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Validity Not Before: May 30 22:27:10 2025 GMT Not After : Jun 6 22:27:10 2025 GMT Subject: CN=683a30bf-a34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:2f:e7:1a:e5:a8:6c:83:35:bc:a9:da:d3: 0d:25:f3:81:84:b8:cd:57:8d:25:dd:2d:4d:f1:95: 81:d0:62:74:68:46:c3:35:f1:2e:62:7b:d5:98:eb: 10:b6:4b:9d:84:7e:a2:10:ed:7e:b8:ff:f9:ae:08: 74:26:96:9b:b8:50:9b:cc:06:e7:21:7d:ff:2d:53: 3f:7c:77:41:23:86:8d:6e:21:7d:79:49:ec:bd:ee: dd:f2:2f:1b:c2:cb:e7:03:ca:b9:8f:74:33:1d:a0: 1f:15:e6:d4:31:08:98:2d:67:a1:4e:e6:73:f8:6b: 5d:8e:1b:e6:d2:fc:a9:6b:45:c8:4a:21:7e:db:ae: 5a:ea:d9:b2:ca:54:1b:c0:44:1c:0e:c2:1e:bf:29: 30:ba:6b:d6:2f:b0:fb:ec:c8:a1:8c:42:d2:0a:6c: f5:91:ae:fd:00:9d:19:14:96:0b:e3:86:a5:99:a8: 1f:5c:af:83:7b:3d:49:51:7e:87:43:18:bd:3d:65: fe:c9:a4:09:08:92:fe:e7:54:7b:73:6a:bc:42:8d: 84:58:2c:c3:8d:19:f0:aa:1f:53:03:80:25:0f:90: 72:f5:98:84:24:df:be:b9:e9:09:4d:14:c7:5f:5b: a9:9d:a2:ca:8f:8c:ba:4f:0a:bd:16:c7:ed:f2:51: c5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B1:0C:8D:31:EB:A4:5F:6F:2C:3F:EE:0E:A8:B7:35:69:51:FF:3B X509v3 Authority Key Identifier: keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:6a:df:c0:16:84:b7:bb:56:b6:ef:b8:4c:9d:a9:46:8c:2c: 58:6e:40:bb:77:54:d3:01:26:ed:0c:5e:c5:0f:ae:76:4f:3f: 04:ca:73:3b:fc:35:ec:6f:3f:c9:70:e3:21:e1:48:05:56:cf: b3:67:5b:78:b5:ba:e9:33:07:0d:d3:7a:9c:5a:42:5f:96:e2: df:bc:1a:90:9d:50:8b:dc:87:f5:3c:26:19:90:ad:48:47:e0: 86:50:be:71:d5:19:de:b7:ef:14:ad:02:f2:9f:84:e5:ff:1a: 1d:85:f8:43:6f:eb:79:f7:2e:57:e4:7c:2b:93:78:e0:c1:83: 1f:03:d9:ff:0d:3b:0e:34:6b:22:a9:75:0c:4d:50:df:93:6b: 75:04:38:a6:74:83:88:da:e6:e8:9e:ba:6f:7e:db:82:8e:ae: 47:9b:e9:ba:9d:b7:68:c7:32:5e:4b:93:0b:68:ac:22:81:a2: 17:1e:c2:7d:e9:e2:c1:b6:a8:c2:9a:f3:77:21:54:0f:69:8c: a9:aa:d7:bd:e7:bb:56:cf:a6:40:1b:22:1f:85:65:ba:b9:49: 18:fa:05:34:ca:08:24:8b:25:76:2c:bc:42:de:91:62:26:50: ec:b7:a5:bb:4b:df:9c:83:04:12:51:9f:96:3f:0e:c5:68:96: d9:b9:0a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzRUUxMTAvBgNVBAUTKDY5NkFGMjNEOTMyOTVDMkY1RkRERjMyQTk1NTEzQjJE REJCRkNFMUIwHhcNMjUwNTMwMjIyNzEwWhcNMjUwNjA2MjIyNzEwWjAYMRYwFAYD VQQDEw02ODNhMzBiZi1hMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqQv5xrlqGyDNbyp2tMNJfOBhLjNV40l3S1N8ZWB0GJ0aEbDNfEuYnvVmOsQ tkudhH6iEO1+uP/5rgh0JpabuFCbzAbnIX3/LVM/fHdBI4aNbiF9eUnsve7d8i8b wsvnA8q5j3QzHaAfFebUMQiYLWehTuZz+Gtdjhvm0vypa0XISiF+265a6tmyylQb wEQcDsIevykwumvWL7D77MihjELSCmz1ka79AJ0ZFJYL44almagfXK+Dez1JUX6H Qxi9PWX+yaQJCJL+51R7c2q8Qo2EWCzDjRnwqh9TA4AlD5By9ZiEJN++uekJTRTH X1upnaLKj4y6Twq9Fsft8lHFTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCxDI0x 66Rfbyw/7g6otzVpUf87MB8GA1UdIwQYMBaAFGlq8j2TKVwvX93zKpVROy3bv84b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNFRS81Qjk3QThCODcw MTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhDOWYzZk1xbFZFN0xkdV96 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcnlQWk1wWEM5ZjNmTXFsVkU3TGR1X3pocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNFRS81Qjk3QThCODcwMTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhD OWYzZk1xbFZFN0xkdV96aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3at/AFoS3u1a277hMnalGjCxYbkC7d1TTASbtDF7FD652Tz8EynM7 /DXsbz/JcOMh4UgFVs+zZ1t4tbrpMwcN03qcWkJfluLfvBqQnVCL3If1PCYZkK1I R+CGUL5x1Rnet+8UrQLyn4Tl/xodhfhDb+t59y5X5Hwrk3jgwYMfA9n/DTsONGsi qXUMTVDfk2t1BDimdIOI2ubonrpvftuCjq5Hm+m6nbdoxzJeS5MLaKwigaIXHsJ9 6eLBtqjCmvN3IVQPaYypqte957tWz6ZAGyIfhWW6uUkY+gU0yggkiyV2LLxC3pFi JlDst6W7S9+cgwQSUZ+WPw7FaJbZuQrB -----END CERTIFICATE-----Generated at Sat May 31 17:27:51 2025 by rpki-client