$ rpki-client -vvf rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft File: z0dmQoBPz_nXCSiWNYNV1awA6nM.mft (raw, json) Hash identifier: yvso0LTV3T3l9epVRRaHWJQK7QDo73+lgMeJbPw4jc0= Subject key identifier: D2:FF:49:24:66:FF:0C:79:78:02:6A:37:81:8C:64:8E:D8:A8:0A:30 Authority key identifier: CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 Certificate issuer: /CN=A917AAD4/serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft Manifest number: 013F Signing time: Sat 31 May 2025 03:58:46 +0000 Manifest this update: Sat 31 May 2025 03:58:46 +0000 Manifest next update: Sat 07 Jun 2025 03:58:46 +0000 Files and hashes: 1: z0dmQoBPz_nXCSiWNYNV1awA6nM.crl (hash: Gal4nAtDV0Smik3aJrgYP2gohL/B78OSm3f/bt1QrnU=) 2: 49467E2251BB11EEA3C7487DC4F9AE02.roa (hash: 1BeURRtwvSUrpkIj6xn/5BXwfH6TF/4NRVSxl/lQeog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:58:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AAD4, serialNumber=CF476642804FCFF9D7092896358355D5AC00EA73 Validity Not Before: May 31 03:58:46 2025 GMT Not After : Jun 7 03:58:46 2025 GMT Subject: CN=683a7e76-a941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:f7:64:c2:af:1a:25:91:ab:3a:a6:0d:d7: 76:57:20:81:43:fc:01:9f:01:27:d4:26:58:ca:ed: 0a:e2:f3:96:ed:b8:8d:97:ec:b0:b8:42:38:f6:50: e2:19:90:b3:c7:e3:ee:46:40:bf:18:28:d8:4d:93: 40:90:19:bb:f0:79:ef:02:bf:95:8c:69:8d:e2:e3: b6:f4:53:45:a4:fd:5e:95:13:13:12:4e:3c:8e:ea: 42:83:5f:f9:bc:44:52:ee:c6:66:28:7c:3d:e3:fc: 2b:f8:cc:4a:63:8a:e1:6e:52:90:aa:e5:dd:cb:f0: 4f:42:f1:d9:ad:eb:e4:20:5b:df:3c:a9:ee:b9:b0: 67:f4:f4:87:27:8c:df:17:4b:ba:70:53:27:b2:a8: c8:80:c4:74:a1:12:de:6f:bc:1b:cd:73:f1:35:e2: f2:fc:7c:e5:cd:1d:16:33:44:6c:81:f3:47:46:fa: 18:d3:43:11:e6:f5:79:ed:b2:33:bd:d8:8e:9e:f3: 96:81:45:e0:da:23:cd:d0:7c:69:79:d6:58:cf:fa: 5e:bb:72:c9:6d:2a:26:de:98:b0:73:c1:79:56:a0: 3f:46:2b:c4:30:d6:cb:35:e8:3b:49:8e:75:a3:45: 70:d1:6a:f0:0b:fd:32:21:01:f5:fc:55:43:91:97: 69:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:49:24:66:FF:0C:79:78:02:6A:37:81:8C:64:8E:D8:A8:0A:30 X509v3 Authority Key Identifier: keyid:CF:47:66:42:80:4F:CF:F9:D7:09:28:96:35:83:55:D5:AC:00:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0dmQoBPz_nXCSiWNYNV1awA6nM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AAD4/0DD8F79E51BA11EE84EF9C5FC4F9AE02/z0dmQoBPz_nXCSiWNYNV1awA6nM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:70:61:31:95:a1:9b:37:9f:13:91:9d:93:60:5c:3e:7a:93: d5:04:97:42:7c:ff:fd:41:b7:86:5c:4c:32:91:45:1d:02:ac: b8:02:43:a9:2d:3f:85:41:cc:a9:65:1e:4f:6f:67:24:8c:9a: d7:14:83:d2:4c:0d:6c:52:32:13:1a:1a:40:e3:b6:c7:5a:fb: 6b:db:c1:6d:b3:84:2a:27:72:1e:a8:ae:7f:84:8a:72:03:46: 3e:e0:ec:02:f5:c0:38:44:88:96:a3:b0:ba:0f:3d:8c:b2:f4: 31:88:ad:60:92:87:00:3d:94:e9:c9:cc:eb:1a:4d:f6:f5:24: 7b:c6:d1:13:34:b7:78:0a:44:e1:6f:90:c4:e5:e0:da:3d:4f: 42:df:29:f4:01:99:55:4f:d6:f8:37:b2:e0:d4:02:7d:ab:ab: d0:a1:ca:59:b3:6f:bb:37:7c:23:d6:99:f9:6c:85:ac:04:77: 96:e8:8b:d8:a4:aa:48:63:64:55:b9:b1:48:85:3f:19:65:ab: 35:dd:5d:55:3d:49:f4:22:2b:e6:e9:7a:88:f9:08:56:8c:5d: e5:83:ef:ec:1e:74:71:e9:cd:99:5f:0b:1d:d9:6e:e1:a9:7a: cb:c3:04:a6:97:50:0b:a6:85:37:02:45:d6:92:8f:d1:63:72: 08:b7:8a:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FBRDQxMTAvBgNVBAUTKENGNDc2NjQyODA0RkNGRjlENzA5Mjg5NjM1ODM1NUQ1 QUMwMEVBNzMwHhcNMjUwNTMxMDM1ODQ2WhcNMjUwNjA3MDM1ODQ2WjAYMRYwFAYD VQQDEw02ODNhN2U3Ni1hOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtb3ZMKvGiWRqzqmDdd2VyCBQ/wBnwEn1CZYyu0K4vOW7biNl+ywuEI49lDi GZCzx+PuRkC/GCjYTZNAkBm78HnvAr+VjGmN4uO29FNFpP1elRMTEk48jupCg1/5 vERS7sZmKHw94/wr+MxKY4rhblKQquXdy/BPQvHZrevkIFvfPKnuubBn9PSHJ4zf F0u6cFMnsqjIgMR0oRLeb7wbzXPxNeLy/HzlzR0WM0RsgfNHRvoY00MR5vV57bIz vdiOnvOWgUXg2iPN0HxpedZYz/peu3LJbSom3piwc8F5VqA/RivEMNbLNeg7SY51 o0Vw0WrwC/0yIQH1/FVDkZdpDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNL/SSRm /wx5eAJqN4GMZI7YqAowMB8GA1UdIwQYMBaAFM9HZkKAT8/51wkoljWDVdWsAOpz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUFENC8wREQ4Rjc5RTUx QkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpfblhDU2lXTllOVjFhd0E2 bk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owZG1Rb0JQel9uWENTaVdOWU5WMWF3QTZuTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUFENC8wREQ4Rjc5RTUxQkExMUVFODRFRjlDNUZDNEY5QUUwMi96MGRtUW9CUHpf blhDU2lXTllOVjFhd0E2bk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXcGExlaGbN58TkZ2TYFw+epPVBJdCfP/9QbeGXEwykUUdAqy4AkOp LT+FQcypZR5Pb2ckjJrXFIPSTA1sUjITGhpA47bHWvtr28Fts4QqJ3IeqK5/hIpy A0Y+4OwC9cA4RIiWo7C6Dz2MsvQxiK1gkocAPZTpyczrGk329SR7xtETNLd4CkTh b5DE5eDaPU9C3yn0AZlVT9b4N7Lg1AJ9q6vQocpZs2+7N3wj1pn5bIWsBHeW6IvY pKpIY2RVubFIhT8ZZas13V1VPUn0Iivm6XqI+QhWjF3lg+/sHnRx6c2ZXwsd2W7h qXrLwwSml1ALpoU3AkXWko/RY3IIt4oW -----END CERTIFICATE-----Generated at Sat May 31 16:42:00 2025 by rpki-client