$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: /kiMoNTS2B5XXiqxmQg7DyeiE+bIyGCdxJ14syvye/c= Subject key identifier: C7:25:9F:28:4F:FE:7C:16:F7:C6:A6:14:34:C2:92:D8:0A:15:C7:DF Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0D90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0D8A Signing time: Fri 30 May 2025 18:06:45 +0000 Manifest this update: Fri 30 May 2025 18:06:44 +0000 Manifest next update: Fri 06 Jun 2025 18:06:44 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: o5MXctT/eYJzHR5i6BBlQZ4jeGwJArMtXLf6ExXfuso=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: kFWfFvMf8UzdUKp7Sm2Crxx6xTlM+hUx3GB42JsMyUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3472 (0xd90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: May 30 18:06:44 2025 GMT Not After : Jun 6 18:06:44 2025 GMT Subject: CN=6839f3b4-2641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2a:de:dd:39:f1:21:05:2e:aa:32:a9:6e:87: 6b:ff:9a:4b:c6:54:a1:70:7f:f0:75:d0:4b:2f:1e: 46:85:b1:52:66:d7:d6:74:7e:de:b7:13:74:9d:9d: c4:80:cd:48:7d:60:ee:32:b1:bd:55:8d:2d:7f:bd: 06:97:7f:60:40:9e:8b:f1:83:d8:46:e6:db:75:f0: d9:dd:5a:9c:27:7b:7c:b2:73:93:06:45:f9:73:ce: 2e:41:f6:57:06:ef:d2:5e:c1:86:e2:61:2e:08:b1: cf:ef:38:40:44:00:d5:23:4a:2a:13:60:2f:45:d3: 6b:e6:85:62:f5:1e:9d:34:b3:ab:7c:bc:62:f2:e5: 9d:e0:92:60:15:b2:af:1a:75:91:f4:6c:39:9c:12: 82:34:81:a5:f2:7a:dc:78:e2:eb:14:80:c4:1c:58: d7:8c:af:e7:67:85:a6:f3:9e:60:aa:78:67:dc:9a: df:d2:e2:4c:49:57:3c:5a:0d:9d:db:7c:fd:f8:b9: f2:e7:77:9e:29:db:c4:dc:15:2e:85:ce:88:a4:20: 68:ba:02:7a:56:aa:9f:c6:69:e2:bd:17:0f:8c:77: 23:3b:95:21:74:85:41:10:35:23:70:d0:71:c1:9b: 62:f9:f7:e0:ac:c2:22:3f:82:76:a0:bf:32:96:40: 6f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:25:9F:28:4F:FE:7C:16:F7:C6:A6:14:34:C2:92:D8:0A:15:C7:DF X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:bf:12:26:9f:a9:95:2d:1b:73:b8:a4:8d:09:f6:f0:b4:c2: ec:13:68:66:d7:4d:1f:3d:7b:46:5f:4b:c7:2c:f6:37:ca:42: 51:0f:9d:1d:b1:fd:f6:a8:76:9b:96:91:80:45:5a:d1:d3:8b: 9c:bb:5b:c0:8b:6d:6d:4a:76:60:dc:9f:27:8c:2c:cc:03:bb: 49:02:c4:91:ea:46:75:fe:f3:a4:4a:63:bd:cc:73:9e:a1:92: 74:49:3c:ee:6b:ca:c3:8a:cb:bb:65:8c:21:06:e0:29:47:0a: 89:de:55:1f:10:0b:bb:42:65:17:ee:db:2c:6c:b5:ea:f7:f4: c3:0a:3e:4d:98:1a:85:e7:da:15:fd:bf:7b:bc:d5:85:6d:82: a7:67:fe:69:db:c5:93:f7:59:a9:de:35:10:55:4e:39:33:e1: 11:ff:e1:74:3a:9e:e4:95:31:b5:ca:4c:ae:5e:5a:b1:e4:f4: a1:1c:4b:41:75:5d:5d:a2:23:81:9e:72:74:3c:a1:a3:a9:af: 08:a4:cc:e7:6c:0e:cd:da:83:16:a5:08:36:b8:09:33:59:26: 1c:8d:83:1c:46:5f:6c:1d:29:e8:58:9f:f4:ee:ec:6b:b5:92: 7d:74:1e:7d:ab:57:69:ca:bd:b9:a2:34:26:bc:a4:aa:17:98: 51:2c:d8:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUwNTMwMTgwNjQ0WhcNMjUwNjA2MTgwNjQ0WjAYMRYwFAYD VQQDEw02ODM5ZjNiNC0yNjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ire3TnxIQUuqjKpbodr/5pLxlShcH/wddBLLx5GhbFSZtfWdH7etxN0nZ3E gM1IfWDuMrG9VY0tf70Gl39gQJ6L8YPYRubbdfDZ3VqcJ3t8snOTBkX5c84uQfZX Bu/SXsGG4mEuCLHP7zhARADVI0oqE2AvRdNr5oVi9R6dNLOrfLxi8uWd4JJgFbKv GnWR9Gw5nBKCNIGl8nrceOLrFIDEHFjXjK/nZ4Wm855gqnhn3Jrf0uJMSVc8Wg2d 23z9+Lny53eeKdvE3BUuhc6IpCBougJ6VqqfxmnivRcPjHcjO5UhdIVBEDUjcNBx wZti+ffgrMIiP4J2oL8ylkBvmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMclnyhP /nwW98amFDTCktgKFcffMB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOvxImn6mVLRtzuKSNCfbwtMLsE2hm100fPXtGX0vHLPY3ykJRD50d sf32qHablpGARVrR04ucu1vAi21tSnZg3J8njCzMA7tJAsSR6kZ1/vOkSmO9zHOe oZJ0STzua8rDisu7ZYwhBuApRwqJ3lUfEAu7QmUX7tssbLXq9/TDCj5NmBqF59oV /b97vNWFbYKnZ/5p28WT91mp3jUQVU45M+ER/+F0Op7klTG1ykyuXlqx5PShHEtB dV1doiOBnnJ0PKGjqa8IpMznbA7N2oMWpQg2uAkzWSYcjYMcRl9sHSnoWJ/07uxr tZJ9dB59q1dpyr25ojQmvKSqF5hRLNgQ -----END CERTIFICATE-----Generated at Sat May 31 14:59:32 2025 by rpki-client