$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: SOATUZYrKIYnpj2ZSEWJRnwbFH+3o7igW2l4wwX7tnI= Subject key identifier: 3A:63:23:1F:A9:4A:13:50:14:E0:C3:F3:48:15:E8:AF:8C:25:CB:28 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: 90 Signing time: Sat 31 May 2025 06:28:21 +0000 Manifest this update: Sat 31 May 2025 06:28:21 +0000 Manifest next update: Sat 07 Jun 2025 06:28:21 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: 8J2jf1BKmZE+eFhtrIK/RscQn6kxq5JJYCGJfP5ZFb8=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: YhVERhvtXXcrFTyDSv5Qa1F1feLk9QH6JfzQdvzKgMI=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: x/GxynEkpXLSNWmZVbITUGXMZJMGzB1C/0SmBXF5ZvU=) 4: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: i/EZaFvZG8APBZoGgzEqNCc2JUzVAPKb3k4/6st6F+k=) 5: 6AA381F62A8011F087319941C4F9AE02.roa (hash: edOe4Pd+g7p8X6EYnFF9uJf2QAgork21e9Vqmz6PKRs=) 6: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: +ZgXH0MqLEQm5yXWS3q+WYKasl3Na26eLGiM5UthVjU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: May 31 06:28:21 2025 GMT Not After : Jun 7 06:28:21 2025 GMT Subject: CN=683aa185-2ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:98:37:6c:62:12:fa:a7:12:7e:6f:fb:5c: 30:b9:2d:a4:41:df:07:8d:83:81:6d:50:2a:1a:8b: 14:03:5a:de:2e:f5:87:34:8f:6c:74:57:43:7f:b9: fc:95:a7:e0:52:3f:29:c9:25:73:97:3a:7d:db:c3: ae:9f:15:7e:06:56:f3:da:ba:cc:1f:a6:b2:39:1b: 4e:27:7d:20:8e:fd:10:97:73:9d:68:86:1b:e7:f2: 4c:b4:44:d8:1d:d3:05:87:21:84:d6:49:f3:6b:85: db:22:99:06:a5:56:da:c3:09:1c:97:23:2b:e3:04: 4e:a6:ee:4b:dd:67:5c:24:fd:ac:2d:4d:c8:18:13: 9e:4f:38:f0:e1:43:40:fe:ca:b4:74:9b:90:54:4f: a5:f4:90:c2:bf:01:ff:2c:0c:42:4f:bc:66:5b:c7: cf:5e:bd:8a:e9:d3:a6:e0:c2:ee:36:01:9f:18:a3: 32:b1:de:89:40:21:dd:4e:df:7c:ed:58:b0:68:96: 9d:48:a4:c9:f5:a4:2a:10:fe:a7:d0:64:d3:02:78: 78:7c:bf:46:a0:a6:44:df:69:9d:6b:88:eb:82:31: a8:17:59:21:ab:57:3f:61:9a:21:4f:c7:fc:55:f4: 17:e3:2f:da:f5:b9:a4:c3:52:53:59:79:34:33:5c: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:63:23:1F:A9:4A:13:50:14:E0:C3:F3:48:15:E8:AF:8C:25:CB:28 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:66:90:e0:34:47:cd:84:44:02:98:dd:b8:95:c3:47:bb:ed: 19:5e:41:1f:9c:91:75:ff:09:c7:e6:db:8e:ab:79:9e:77:bf: e6:d2:79:63:21:fc:db:a1:93:53:98:d0:fa:98:bd:b1:d1:b0: 5d:ce:bf:f9:11:01:1e:6c:3a:ab:97:18:fe:be:7e:a0:d4:e5: 90:c6:e7:05:b3:99:7d:9b:41:b2:8e:dd:b1:5a:71:cb:3b:c4: 73:de:53:a1:78:5d:74:4c:ea:b9:d6:da:dc:cf:ba:b4:cb:c7: 11:5b:0b:9e:c6:3d:70:c8:46:82:91:fd:48:14:36:0b:7e:0c: f3:bd:4a:22:d5:48:1e:ba:f3:b8:b0:7a:7f:da:c8:7a:4e:8e: b3:19:0a:a3:c4:15:2a:b2:8a:73:88:3b:db:ee:3d:f9:20:cf: 62:39:1e:59:09:67:8f:35:77:b3:92:66:a5:18:b7:b3:41:d4: be:80:22:a9:eb:cc:22:0b:fd:65:eb:22:f6:66:f5:17:5e:2e: 02:e5:ba:72:12:88:79:32:a0:5f:c6:ae:2b:19:03:c8:a5:a6: 9e:9e:76:c8:d9:4e:0c:ac:27:bd:3f:eb:23:e1:dd:6a:62:ec: 29:c0:ff:2e:e9:96:1c:df:c5:77:2f:95:22:34:80:0e:50:8e: b3:3e:94:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUwNTMxMDYyODIxWhcNMjUwNjA3MDYyODIxWjAYMRYwFAYD VQQDEw02ODNhYTE4NS0yYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XSYN2xiEvqnEn5v+1wwuS2kQd8HjYOBbVAqGosUA1reLvWHNI9sdFdDf7n8 lafgUj8pySVzlzp928OunxV+Blbz2rrMH6ayORtOJ30gjv0Ql3OdaIYb5/JMtETY HdMFhyGE1knza4XbIpkGpVbawwkclyMr4wROpu5L3WdcJP2sLU3IGBOeTzjw4UNA /sq0dJuQVE+l9JDCvwH/LAxCT7xmW8fPXr2K6dOm4MLuNgGfGKMysd6JQCHdTt98 7ViwaJadSKTJ9aQqEP6n0GTTAnh4fL9GoKZE32mda4jrgjGoF1khq1c/YZohT8f8 VfQX4y/a9bmkw1JTWXk0M1xwsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpjIx+p ShNQFODD80gV6K+MJcsoMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEZpDgNEfNhEQCmN24lcNHu+0ZXkEfnJF1/wnH5tuOq3med7/m0nlj IfzboZNTmND6mL2x0bBdzr/5EQEebDqrlxj+vn6g1OWQxucFs5l9m0Gyjt2xWnHL O8Rz3lOheF10TOq51trcz7q0y8cRWwuexj1wyEaCkf1IFDYLfgzzvUoi1UgeuvO4 sHp/2sh6To6zGQqjxBUqsopziDvb7j35IM9iOR5ZCWePNXezkmalGLezQdS+gCKp 68wiC/1l6yL2ZvUXXi4C5bpyEoh5MqBfxq4rGQPIpaaennbI2U4MrCe9P+sj4d1q YuwpwP8u6ZYc38V3L5UiNIAOUI6zPpRK -----END CERTIFICATE-----Generated at Sat May 31 17:42:41 2025 by rpki-client