$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft File: _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json) Hash identifier: EhestiijymQlINDTfmTQhKrNDrcfjNxlj00bFFb0564= Subject key identifier: AB:B7:95:FD:EA:0D:C1:E6:37:1E:F1:7F:B7:45:7A:86:3B:1C:0F:BE Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E Certificate issuer: /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft Manifest number: 0214 Signing time: Sat 31 May 2025 02:10:00 +0000 Manifest this update: Sat 31 May 2025 02:10:00 +0000 Manifest next update: Sat 07 Jun 2025 02:10:00 +0000 Files and hashes: 1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: NymlKngbbBx0+jagOJARMpTSU0NGFuKhULZ0Rd6NDF4=) 2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: nwv4OnHIeiaOuT9R5A9U+o0snvNWMEn4+NiK+Y5blsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:09:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E Validity Not Before: May 31 02:10:00 2025 GMT Not After : Jun 7 02:10:00 2025 GMT Subject: CN=683a64f8-4332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:31:69:51:e1:41:3f:08:d5:fd:be:89:21: 77:78:b2:48:8f:99:9d:62:07:85:e5:6a:a2:a0:dc: 2d:07:1e:06:a3:93:61:54:48:75:e9:85:aa:b0:3f: 77:cd:04:40:33:fa:dd:bf:bb:64:cb:a8:90:06:b0: ff:fe:0c:d8:d3:e4:f5:cc:c6:8c:1f:df:5b:05:d4: d8:5b:83:2e:90:af:3b:45:63:1f:f9:c5:aa:40:46: 48:27:01:f3:78:42:9d:2d:38:eb:f3:68:12:7f:c4: bd:7d:e0:4e:f0:14:95:fe:64:98:93:57:21:9a:78: ed:8e:24:a8:94:c3:d0:aa:af:31:09:30:2c:c6:26: 55:76:a1:44:7d:a1:0b:cc:34:e2:4c:48:b5:f4:0e: a0:e2:e9:d7:67:76:1b:1e:01:00:67:c6:47:37:a6: 2b:c1:1b:96:bf:d7:73:ea:82:56:05:48:a2:6b:95: f8:fe:81:d6:d3:db:67:bd:21:d4:a6:7e:66:28:cb: ed:14:cb:5b:6a:e2:e7:44:d2:47:0e:ed:18:12:cc: 28:4a:d6:18:7d:d6:c7:c7:f6:21:0d:e1:0c:f3:32: 8a:d7:3f:d4:86:e4:b2:94:3d:bf:47:02:b5:ca:68: fd:ff:41:5d:d5:4e:a3:6c:75:2e:f6:46:04:5f:80: ae:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B7:95:FD:EA:0D:C1:E6:37:1E:F1:7F:B7:45:7A:86:3B:1C:0F:BE X509v3 Authority Key Identifier: keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b6:23:24:9b:6a:65:54:b0:0d:ce:0a:c4:38:ed:c8:e0:80: cc:a8:83:55:ca:76:64:7f:29:a5:36:38:c7:d7:cf:49:ff:6b: ac:c0:35:f8:60:42:20:e6:9e:7f:b9:06:95:b0:44:e5:94:4a: e4:b1:ec:4a:92:29:b2:06:23:ff:3c:ad:4b:c0:27:d2:4f:4d: 7f:45:1d:29:b8:30:62:eb:04:39:a4:a2:e6:90:5b:44:5b:f1: 94:e7:9c:4b:e0:9a:f4:ec:b0:65:36:e2:32:ff:46:86:d8:47: 1f:ef:c8:80:49:a5:60:b3:24:5c:30:d6:ca:b8:92:20:b0:55: 55:33:21:03:17:49:07:11:1a:f6:5d:93:97:4a:f4:5d:8b:14: 38:84:5b:ac:e2:05:30:65:93:c1:80:6d:07:e2:a3:6b:d1:93: a1:1f:79:0b:7e:d7:e2:c0:72:c4:86:cc:35:40:96:9a:c2:fc: 59:d1:fa:dc:77:e8:62:fc:3c:dd:ba:b7:fa:cb:ac:7a:6c:26: 83:90:c7:11:9f:88:2b:69:34:69:69:ac:b4:a8:68:b8:c5:5a: 2c:ca:63:20:88:fb:61:8a:f4:ed:aa:8b:98:63:9d:21:49:69: fb:d8:30:79:aa:32:81:0e:51:02:1c:3f:dd:92:6c:c4:b1:b8: 92:a5:4c:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIxRjUxMTAvBgNVBAUTKEZGM0UwRTBGQTdGRjI1N0RCRDg2RTYyQjEyOUE5OTRE OEE0OUQ4NEUwHhcNMjUwNTMxMDIxMDAwWhcNMjUwNjA3MDIxMDAwWjAYMRYwFAYD VQQDEw02ODNhNjRmOC00MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKoxaVHhQT8I1f2+iSF3eLJIj5mdYgeF5WqioNwtBx4Go5NhVEh16YWqsD93 zQRAM/rdv7tky6iQBrD//gzY0+T1zMaMH99bBdTYW4MukK87RWMf+cWqQEZIJwHz eEKdLTjr82gSf8S9feBO8BSV/mSYk1chmnjtjiSolMPQqq8xCTAsxiZVdqFEfaEL zDTiTEi19A6g4unXZ3YbHgEAZ8ZHN6YrwRuWv9dz6oJWBUiia5X4/oHW09tnvSHU pn5mKMvtFMtbauLnRNJHDu0YEswoStYYfdbHx/YhDeEM8zKK1z/UhuSylD2/RwK1 ymj9/0Fd1U6jbHUu9kYEX4CuyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKu3lf3q DcHmNx7xf7dFeoY7HA++MB8GA1UdIwQYMBaAFP8+Dg+n/yV9vYbmKxKamU2KSdhO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjFGNS8wRDIxM0VEQzMz RkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pYMjlodVlyRXBxWlRZcEoy RTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL196NE9ENmZfSlgyOWh1WXJFcHFaVFlwSjJFNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjFGNS8wRDIxM0VEQzMzRkQxMUVEQUJGN0NGNEJDNEY5QUUwMi9fejRPRDZmX0pY MjlodVlyRXBxWlRZcEoyRTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAetiMkm2plVLANzgrEOO3I4IDMqINVynZkfymlNjjH189J/2uswDX4 YEIg5p5/uQaVsETllErksexKkimyBiP/PK1LwCfST01/RR0puDBi6wQ5pKLmkFtE W/GU55xL4Jr07LBlNuIy/0aG2Ecf78iASaVgsyRcMNbKuJIgsFVVMyEDF0kHERr2 XZOXSvRdixQ4hFus4gUwZZPBgG0H4qNr0ZOhH3kLftfiwHLEhsw1QJaawvxZ0frc d+hi/Dzdurf6y6x6bCaDkMcRn4graTRpaay0qGi4xVosymMgiPthivTtqouYY50h SWn72DB5qjKBDlECHD/dkmzEsbiSpUxB -----END CERTIFICATE-----Generated at Sat May 31 17:17:30 2025 by rpki-client