$ rpki-client -vvf rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft File: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft (raw, json) Hash identifier: bDPfiULB6BoAtlg+rf3D/IX2t7yz36TGCgWGhxTR1as= Subject key identifier: A6:6D:20:6C:26:13:8B:D8:CA:AC:13:7F:D7:AF:0E:AF:5B:25:D1:FA Authority key identifier: DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC Certificate issuer: /CN=A9179F6E/serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft Manifest number: 0445 Signing time: Sat 31 May 2025 00:27:38 +0000 Manifest this update: Sat 31 May 2025 00:27:38 +0000 Manifest next update: Sat 07 Jun 2025 00:27:37 +0000 Files and hashes: 1: 33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl (hash: mJp0ZxaoWGy34YGQIbEpPJ9yoZ+b/AkFd2WbAaCM92M=) 2: F5DED02A588511ECAC342433C4F9AE02.roa (hash: xHb5qsT7d30Z0+OLvEr0YMnNlt030IAKtfEq/tu+nEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179F6E, serialNumber=DF7526A88EA77094A62F1439FFB4208F502F4FEC Validity Not Before: May 31 00:27:38 2025 GMT Not After : Jun 7 00:27:37 2025 GMT Subject: CN=683a4cfa-ef1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5c:5f:ad:bf:d7:fa:c5:9f:01:cb:97:62:dc: 9b:55:ee:b8:72:78:79:af:fd:ac:60:39:6c:7d:76: 40:e8:24:96:1f:80:1a:82:b2:d0:28:e3:9f:a6:4a: 6d:6e:b0:fd:3b:4a:3d:12:70:e5:23:e3:3a:c1:ac: f0:d4:eb:d1:2e:9a:10:67:ef:66:08:1d:53:78:fd: b8:fc:b7:37:31:22:5e:75:fe:b5:e4:0f:d6:06:f1: c3:9c:f3:5a:39:39:6c:29:21:82:e3:d0:10:3f:37: 69:26:53:2c:f6:b6:7c:ed:13:8a:5e:7b:38:d1:63: fa:26:52:60:90:7c:f7:da:d4:07:b8:74:03:43:f0: b4:b5:42:45:1e:f2:de:f6:ea:e1:2f:d6:9c:28:06: b3:4e:96:c7:e9:3e:6e:f1:79:b3:b6:25:16:18:4c: 07:60:2f:97:42:6d:e1:6d:c2:2f:8c:ea:d1:61:cb: 94:7d:eb:d0:37:ea:83:d2:f7:dd:38:56:0f:e3:5b: 28:d2:3e:66:84:4b:19:1f:89:3d:f4:04:8a:ad:da: 9a:0d:02:c1:e1:38:a1:6e:bf:ef:2a:8d:3e:f5:25: 10:ca:a8:ff:5e:b5:b2:e7:fe:e2:59:0d:ac:d9:8b: 55:c3:a3:96:0e:a5:7f:ea:ff:62:4d:15:6b:7d:e2: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:6D:20:6C:26:13:8B:D8:CA:AC:13:7F:D7:AF:0E:AF:5B:25:D1:FA X509v3 Authority Key Identifier: keyid:DF:75:26:A8:8E:A7:70:94:A6:2F:14:39:FF:B4:20:8F:50:2F:4F:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179F6E/06358606588311ECBDBB4E6BC4F9AE02/33UmqI6ncJSmLxQ5_7Qgj1AvT-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8f:71:1d:37:f2:03:5e:e7:b9:b8:27:48:8d:e9:33:a2:c7: e0:5d:dc:d8:95:23:bd:17:9a:1b:78:ff:e5:c0:2a:34:54:a4: d8:1d:3a:25:fa:04:3f:9f:77:fe:a5:df:d6:e0:ac:7e:ae:0c: 2e:83:c4:24:1a:f4:a2:82:be:02:c5:1d:0e:d0:5e:5d:66:cc: 80:c1:e1:07:13:ce:c7:e2:a1:58:f8:1f:bd:c5:70:6b:fc:0a: 67:e4:bf:53:7a:17:53:24:21:be:d5:30:6c:5b:76:8c:fe:85: 3e:27:20:26:20:52:2e:2a:5b:ed:28:99:ea:11:68:3a:83:e0: 71:cb:6d:87:96:01:58:f6:7f:27:90:b9:92:d4:12:c8:c5:26: a0:b3:a7:f4:68:89:ee:1f:5d:e9:2e:cd:12:5a:cd:86:71:0e: ce:cc:9e:7d:3b:82:55:25:a2:54:8a:ee:98:bd:39:f6:4e:21: cd:9f:aa:1a:df:eb:5c:83:7a:1a:e3:12:79:f2:da:cd:66:39: e2:82:50:f4:66:30:62:75:7b:42:23:be:28:0b:89:ac:84:a2: b8:7e:27:5e:62:ae:94:34:6b:a6:87:36:3b:62:b6:60:15:f3: e3:55:4a:e0:85:50:43:4c:5d:0e:82:b9:2c:91:2e:41:44:60: 0b:35:84:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzlGNkUxMTAvBgNVBAUTKERGNzUyNkE4OEVBNzcwOTRBNjJGMTQzOUZGQjQyMDhG NTAyRjRGRUMwHhcNMjUwNTMxMDAyNzM4WhcNMjUwNjA3MDAyNzM3WjAYMRYwFAYD VQQDEw02ODNhNGNmYS1lZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Fxfrb/X+sWfAcuXYtybVe64cnh5r/2sYDlsfXZA6CSWH4AagrLQKOOfpkpt brD9O0o9EnDlI+M6wazw1OvRLpoQZ+9mCB1TeP24/Lc3MSJedf615A/WBvHDnPNa OTlsKSGC49AQPzdpJlMs9rZ87ROKXns40WP6JlJgkHz32tQHuHQDQ/C0tUJFHvLe 9urhL9acKAazTpbH6T5u8XmztiUWGEwHYC+XQm3hbcIvjOrRYcuUfevQN+qD0vfd OFYP41so0j5mhEsZH4k99ASKrdqaDQLB4Tihbr/vKo0+9SUQyqj/XrWy5/7iWQ2s 2YtVw6OWDqV/6v9iTRVrfeLhMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZtIGwm E4vYyqwTf9evDq9bJdH6MB8GA1UdIwQYMBaAFN91JqiOp3CUpi8UOf+0II9QL0/s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OUY2RS8wNjM1ODYwNjU4 ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNKU21MeFE1XzdRZ2oxQXZU LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzVW1xSTZuY0pTbUx4UTVfN1FnajFBdlQtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OUY2RS8wNjM1ODYwNjU4ODMxMUVDQkRCQjRFNkJDNEY5QUUwMi8zM1VtcUk2bmNK U21MeFE1XzdRZ2oxQXZULXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjj3EdN/IDXue5uCdIjekzosfgXdzYlSO9F5obeP/lwCo0VKTYHTol +gQ/n3f+pd/W4Kx+rgwug8QkGvSigr4CxR0O0F5dZsyAweEHE87H4qFY+B+9xXBr /Apn5L9TehdTJCG+1TBsW3aM/oU+JyAmIFIuKlvtKJnqEWg6g+Bxy22HlgFY9n8n kLmS1BLIxSags6f0aInuH13pLs0SWs2GcQ7OzJ59O4JVJaJUiu6YvTn2TiHNn6oa 3+tcg3oa4xJ58trNZjniglD0ZjBidXtCI74oC4mshKK4fideYq6UNGumhzY7YrZg FfPjVUrghVBDTF0OgrkskS5BRGALNYRy -----END CERTIFICATE-----Generated at Sat May 31 17:39:17 2025 by rpki-client