$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft File: Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json) Hash identifier: /INh6CLGvAWf8K7y9k/6R60CBjL9w9cT3dATRYj26U8= Subject key identifier: 73:01:ED:A5:E8:BF:DE:79:83:C2:46:4F:C8:50:2C:9A:85:91:0B:09 Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 Certificate issuer: /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft Manifest number: 010C Signing time: Sat 31 May 2025 04:35:29 +0000 Manifest this update: Sat 31 May 2025 04:35:29 +0000 Manifest next update: Sat 07 Jun 2025 04:35:29 +0000 Files and hashes: 1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: Z3F8q5KbiQ9WvKEe/LtmBxBtE3sy2EZ6YrVfI2hAsI4=) 2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: 7+HziPW8bdU4fmbvKj0ZUtapknCkvsD+7VoRTrV2tSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44 Validity Not Before: May 31 04:35:29 2025 GMT Not After : Jun 7 04:35:29 2025 GMT Subject: CN=683a8711-a951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:0f:b0:fd:a5:6c:84:5d:01:4c:12:89:b2: 1a:85:6e:f5:44:28:a9:03:d7:07:91:56:e7:33:9b: d1:81:22:16:b8:3e:b8:76:66:0b:5c:77:3a:6d:78: 3a:90:94:4d:15:59:0c:e6:12:e3:d1:60:c6:5c:93: b2:4f:a5:b9:2d:4b:e0:19:21:af:40:a0:07:d0:89: 84:96:1b:15:db:fe:f9:d2:9d:bb:0f:a2:55:29:5d: 73:7c:7c:c8:75:ac:8f:c0:5a:2f:96:63:a8:0c:72: 75:a9:5f:ce:db:c1:ae:0c:6a:f9:f2:ea:76:77:05: d6:9a:75:2f:6c:3f:85:c8:7a:22:1f:f6:eb:63:cc: b4:c8:9f:10:60:59:dc:e1:86:02:80:18:2d:84:fc: a0:3a:71:b9:c4:43:55:0e:aa:d7:78:7f:d0:a4:a6: 45:c3:58:f0:c0:8e:70:58:a1:3f:c6:73:64:ac:c4: db:93:34:73:eb:18:ac:f3:41:5f:2f:63:30:c2:67: 05:24:0e:8c:e5:ab:5a:c3:69:4d:46:02:a9:45:c9: 0c:fa:84:61:c3:50:3d:27:a0:c4:00:bd:de:95:68: 69:36:2e:61:87:3e:a5:23:f3:36:e7:fc:5a:11:d2: c9:4c:64:3a:44:1e:af:26:e6:1e:28:68:cb:d3:89: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:ED:A5:E8:BF:DE:79:83:C2:46:4F:C8:50:2C:9A:85:91:0B:09 X509v3 Authority Key Identifier: keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:52:1b:90:00:af:30:4c:cc:27:cc:84:d0:4b:49:f5:7a:f7: 05:5c:78:e9:83:e3:df:c0:91:1e:4c:25:41:a0:78:ad:cb:bd: e4:51:35:ce:57:91:76:14:13:ae:ff:0b:42:cf:e9:51:58:2b: aa:2d:be:52:69:de:b8:98:4d:d3:2f:ed:86:76:32:9f:98:47: 44:06:4c:c4:b6:b1:ec:38:c4:73:5e:50:e9:c1:a9:c9:9b:4c: 84:77:01:c8:24:e9:e4:10:7c:46:1a:de:6d:b4:ca:cf:19:ed: 99:d1:8d:56:03:ce:d2:2c:a9:ae:ed:c8:4f:82:e7:4c:e3:e2: 06:3c:a7:14:9e:4f:c8:fb:ab:c2:da:59:6e:a0:96:d4:8f:96: 7c:ac:ba:52:4c:49:5f:fc:20:78:9d:70:4c:38:84:48:b2:14: 79:86:94:b1:c8:b9:3a:7b:fb:4d:51:ac:45:ca:26:fb:0f:0b: 75:fa:88:6e:29:a0:a1:d4:b8:18:86:eb:76:d2:c6:41:97:d2: 03:81:5e:8e:7f:4f:87:73:2f:b8:fc:24:37:08:aa:73:2f:c1: 0a:1d:3b:03:09:8e:70:92:a2:0c:7f:c7:25:19:15:b1:44:b0: 12:c4:a8:27:59:b0:ec:4d:17:25:e7:93:df:71:af:48:43:29: d0:ef:10:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YzNTIxMTAvBgNVBAUTKDBBQjdGMzZBN0RERTRFMTFGNEIwMTU5N0RGMERFN0Ey OUE4MEJDNDQwHhcNMjUwNTMxMDQzNTI5WhcNMjUwNjA3MDQzNTI5WjAYMRYwFAYD VQQDEw02ODNhODcxMS1hOTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJcPsP2lbIRdAUwSibIahW71RCipA9cHkVbnM5vRgSIWuD64dmYLXHc6bXg6 kJRNFVkM5hLj0WDGXJOyT6W5LUvgGSGvQKAH0ImElhsV2/750p27D6JVKV1zfHzI dayPwFovlmOoDHJ1qV/O28GuDGr58up2dwXWmnUvbD+FyHoiH/brY8y0yJ8QYFnc 4YYCgBgthPygOnG5xENVDqrXeH/QpKZFw1jwwI5wWKE/xnNkrMTbkzRz6xis80Ff L2MwwmcFJA6M5ataw2lNRgKpRckM+oRhw1A9J6DEAL3elWhpNi5hhz6lI/M25/xa EdLJTGQ6RB6vJuYeKGjL04mAFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMB7aXo v955g8JGT8hQLJqFkQsJMB8GA1UdIwQYMBaAFAq382p93k4R9LAVl98N56KagLxE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjM1Mi8zRDlEN0Y1RUEx RkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRoSDBzQldYM3czbm9wcUF2 RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyZnphbjNlVGhIMHNCV1gzdzNub3BxQXZFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjM1Mi8zRDlEN0Y1RUExRkIxMUVFQTM2MDkyNUFDNEY5QUUwMi9DcmZ6YW4zZVRo SDBzQldYM3czbm9wcUF2RVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOUhuQAK8wTMwnzITQS0n1evcFXHjpg+PfwJEeTCVBoHity73kUTXO V5F2FBOu/wtCz+lRWCuqLb5Sad64mE3TL+2GdjKfmEdEBkzEtrHsOMRzXlDpwanJ m0yEdwHIJOnkEHxGGt5ttMrPGe2Z0Y1WA87SLKmu7chPgudM4+IGPKcUnk/I+6vC 2lluoJbUj5Z8rLpSTElf/CB4nXBMOIRIshR5hpSxyLk6e/tNUaxFyib7Dwt1+ohu KaCh1LgYhut20sZBl9IDgV6Of0+Hcy+4/CQ3CKpzL8EKHTsDCY5wkqIMf8clGRWx RLASxKgnWbDsTRcl55Pfca9IQynQ7xBU -----END CERTIFICATE-----Generated at Sat May 31 17:00:23 2025 by rpki-client