$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft File: f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json) Hash identifier: 0HO3LeCuWQfuB6lVtxDHTWKNek6byrbl2annbB8GlGw= Subject key identifier: F4:9B:AA:CC:79:42:04:AD:54:E2:F2:86:9E:C2:E6:A0:1F:87:15:9C Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 Certificate issuer: /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft Manifest number: 5A Signing time: Tue 03 Jun 2025 07:02:12 +0000 Manifest this update: Tue 03 Jun 2025 07:02:12 +0000 Manifest next update: Tue 10 Jun 2025 07:02:12 +0000 Files and hashes: 1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: w/3v6y+LO7O5DXgEb2BWEs2WWr5cOdmk4BPI1fFXrlU=) 2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: +OL0LwWDdzCSmXdG5gDsUEjfzy5Uq5zJxTv17RF0xXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 07:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7 Validity Not Before: Jun 3 07:02:12 2025 GMT Not After : Jun 10 07:02:12 2025 GMT Subject: CN=683e9df4-4036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:fc:e3:56:75:34:36:bf:b5:a5:45:d1:e6: 55:a1:f2:c4:e0:85:25:b8:b7:fe:44:55:89:fc:45: 32:48:e7:84:74:d2:22:ed:3b:4d:09:f7:6c:18:df: 49:c7:68:c5:01:57:be:71:82:19:dc:d3:e8:ef:e3: 41:1b:d8:c1:ce:7d:b7:23:03:96:e0:30:01:cb:f7: cc:6c:07:21:ca:13:34:8b:10:2a:f7:c8:17:4b:cc: 42:97:7e:1f:22:f4:6f:51:d7:e8:4a:e9:64:18:c3: 8f:e0:99:a5:4b:d3:f1:e8:5e:7b:58:8f:20:97:ea: b6:08:81:96:83:8b:12:82:38:7c:f0:96:ef:4b:1b: 49:50:3e:31:19:86:5d:f8:0a:fb:c5:c5:91:f3:33: 2a:53:01:6f:70:53:ce:be:f1:cc:62:4d:0b:07:6b: a6:e9:4b:11:86:1f:36:77:f6:de:ba:d2:33:f1:da: c1:71:40:f2:51:a7:07:b8:86:67:be:42:8b:96:69: d4:78:b8:8f:3f:3b:cd:df:d2:0a:e5:ca:60:8a:65: ae:26:98:90:11:da:61:de:36:7c:cf:26:83:ee:88: b4:41:f8:ed:9f:db:51:9c:b6:ec:83:92:c8:d9:af: e8:81:fa:3c:12:c6:f2:ee:0b:05:c8:40:44:27:07: 25:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9B:AA:CC:79:42:04:AD:54:E2:F2:86:9E:C2:E6:A0:1F:87:15:9C X509v3 Authority Key Identifier: keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:44:df:53:ff:ac:96:8c:1c:94:ec:a5:c4:ac:5d:67:97:62: 43:19:88:79:a7:26:0e:37:50:14:41:68:1f:3c:f4:8c:c2:fe: f6:04:0a:77:16:c5:99:7c:1a:72:ca:bb:42:88:cd:2f:8c:4a: 5e:55:8b:2e:4f:bc:96:9f:92:9d:8c:5e:0b:58:8f:a0:1d:3c: b6:86:ba:50:1a:e2:b6:79:54:89:11:74:80:79:08:d9:f8:e5: 40:3d:ff:3b:d2:6d:86:77:82:39:dd:c8:b4:bc:0a:52:6b:65: 9e:db:9b:77:e4:50:35:8d:a4:b8:7a:e7:74:d1:5c:50:a8:4d: 0b:c6:18:53:d4:44:94:3d:ba:d6:4b:83:e0:90:e4:33:8a:6a: d3:8e:41:14:de:96:a5:37:ad:0e:e3:6e:2d:35:3e:d6:9a:80: 6f:e4:90:b6:9a:4f:90:82:69:40:a9:bd:69:31:aa:a5:59:07: 10:43:80:8b:4a:47:ec:4e:bb:08:d0:8b:95:5d:3e:3a:a9:c4: 93:c3:65:7f:7e:fa:04:1f:07:78:3e:ba:80:37:03:3a:c0:93: 31:87:a6:e1:34:52:4f:c5:5b:59:42:94:b5:9b:98:1b:17:9e: 6a:ca:a2:f7:b7:cf:c1:9a:ef:a6:d8:36:4d:e6:69:03:bb:22: 00:31:bb:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoN0Y3NzU5MjA0MkUzQzg3QkU1NkVFRDgxRDlDQ0IwRTk3 NDAyQ0RENzAeFw0yNTA2MDMwNzAyMTJaFw0yNTA2MTAwNzAyMTJaMBgxFjAUBgNV BAMTDTY4M2U5ZGY0LTQwMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXA/zjVnU0Nr+1pUXR5lWh8sTghSW4t/5EVYn8RTJI54R00iLtO00J92wY30nH aMUBV75xghnc0+jv40Eb2MHOfbcjA5bgMAHL98xsByHKEzSLECr3yBdLzEKXfh8i 9G9R1+hK6WQYw4/gmaVL0/HoXntYjyCX6rYIgZaDixKCOHzwlu9LG0lQPjEZhl34 CvvFxZHzMypTAW9wU86+8cxiTQsHa6bpSxGGHzZ39t660jPx2sFxQPJRpwe4hme+ QouWadR4uI8/O83f0grlymCKZa4mmJAR2mHeNnzPJoPuiLRB+O2f21GctuyDksjZ r+iB+jwSxvLuCwXIQEQnByWvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9JuqzHlC BK1U4vKGnsLmoB+HFZwwHwYDVR0jBBgwFoAUf3dZIELjyHvlbu2B2cyw6XQCzdcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3LzE1OTA3QzIyQjgy MTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2bGJ1MkIyY3l3NlhRQ3pk Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvZjNkWklFTGp5SHZsYnUyQjJjeXc2WFFDemRjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3LzE1OTA3QzIyQjgyMTExRUZBQUU2RjU2N0M0RjlBRTAyL2YzZFpJRUxqeUh2 bGJ1MkIyY3l3NlhRQ3pkYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN1E31P/rJaMHJTspcSsXWeXYkMZiHmnJg43UBRBaB889IzC/vYECncW xZl8GnLKu0KIzS+MSl5Viy5PvJafkp2MXgtYj6AdPLaGulAa4rZ5VIkRdIB5CNn4 5UA9/zvSbYZ3gjndyLS8ClJrZZ7bm3fkUDWNpLh653TRXFCoTQvGGFPURJQ9utZL g+CQ5DOKatOOQRTelqU3rQ7jbi01PtaagG/kkLaaT5CCaUCpvWkxqqVZBxBDgItK R+xOuwjQi5VdPjqpxJPDZX9++gQfB3g+uoA3AzrAkzGHpuE0Uk/FW1lClLWbmBsX nmrKove3z8Ga76bYNk3maQO7IgAxu9c= -----END CERTIFICATE-----Generated at Wed Jun 4 00:17:53 2025 by rpki-client