$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: JQ07jycA/SzIFgVG1/rbVSx3fs/wHR2zQQKdwE0GsBA= Subject key identifier: 4D:F0:52:A0:06:51:E5:BE:36:DB:D7:CE:62:55:4D:E5:C4:37:C2:2B Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 2B Signing time: Sat 31 May 2025 07:19:52 +0000 Manifest this update: Sat 31 May 2025 07:19:51 +0000 Manifest next update: Sat 07 Jun 2025 07:19:51 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: QHaYAQBsT4+JFA10/QtpP97LGEKTDNbvQ1oVxnYKrfk=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: May 31 07:19:51 2025 GMT Not After : Jun 7 07:19:51 2025 GMT Subject: CN=683aad98-f159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d7:84:6a:17:b0:b7:f2:a1:fc:47:72:71:93: 1c:43:92:3a:7d:84:07:18:91:99:30:e0:95:d4:54: d9:5b:5c:2b:39:2f:22:83:22:34:61:7f:77:de:62: 02:d6:63:d7:cf:9c:8c:a5:fa:89:02:7e:25:a4:3a: 61:98:75:89:32:fd:c0:19:fa:1f:97:fa:9b:0e:1e: 73:53:e6:89:fa:a0:2b:0e:c3:9d:bd:bb:92:a4:45: bc:36:87:89:2e:2d:69:eb:67:cc:6f:07:c7:25:c5: e0:ea:a5:6e:a8:06:34:30:91:73:a0:cc:68:c6:62: 7a:70:f4:96:ae:af:24:5a:86:01:d9:21:e9:98:a8: a5:80:0c:92:9a:2a:9d:2a:a9:16:04:ec:91:89:d7: 0c:a4:65:6f:ea:a5:2d:e9:52:61:7e:7a:73:69:d7: c7:7f:4c:fd:b8:3e:b4:1a:8c:5d:9e:0d:ef:6d:80: 17:37:c8:5e:85:4c:e2:c6:18:69:5a:74:79:fc:25: 5d:5a:40:fc:56:6b:59:60:05:14:24:95:22:ae:25: f2:d8:4e:b4:08:b7:90:a6:f7:80:cf:7d:4b:6c:86: 91:4e:14:60:83:9f:e1:9c:2d:9b:72:79:d2:a6:b1: a4:bb:58:92:36:85:bb:16:f3:95:93:30:42:0d:50: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F0:52:A0:06:51:E5:BE:36:DB:D7:CE:62:55:4D:E5:C4:37:C2:2B X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:94:48:25:d4:02:31:b9:6f:1f:ed:a1:85:03:41:95:af:cb: 2c:35:a4:22:2f:60:9c:57:39:46:73:18:a2:55:fc:56:ba:9e: 6f:d5:85:4f:fa:39:0e:43:2c:33:64:80:3e:c5:bd:47:60:5f: 5e:f1:b0:56:78:2b:09:4b:4b:ba:e5:ca:ee:af:73:df:49:8e: 9a:2f:36:3d:4b:50:bc:13:32:cb:b6:a1:14:b0:76:7b:7e:89: c8:9e:38:e1:29:31:eb:65:b3:62:25:80:8b:46:b4:a4:37:ce: 77:d5:95:c1:43:c1:4b:27:6f:fa:00:9b:c1:09:a7:69:e5:53: 93:11:f8:0f:f7:d8:d6:29:d6:49:bd:b1:8b:a0:d2:51:d9:23: 6c:5b:e7:be:02:3c:22:69:d1:1b:96:d1:40:bf:da:77:99:a1: f4:87:47:9a:ac:8a:e8:4a:64:04:66:69:8a:4f:b5:47:32:78: d2:48:cf:6b:ff:bb:8b:23:cf:6e:d1:1d:01:50:8e:40:ee:b9: 31:5b:12:0d:50:bb:6d:ef:89:7c:65:4c:f5:31:8f:9b:ed:3d: fa:46:b1:49:6b:e4:ba:63:26:77:37:cd:89:c6:07:62:1a:e5: 95:0a:1d:19:d2:3a:8e:34:2b:5e:dc:e1:6d:ac:a8:e8:2b:e9: 3d:62:44:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzQ4ODExMC8GA1UEBRMoQ0Q0MURCQzE4OTc4REQzODRENEY1QzhGOEY5NkI0MEU3 MURFRTY0MTAeFw0yNTA1MzEwNzE5NTFaFw0yNTA2MDcwNzE5NTFaMBgxFjAUBgNV BAMTDTY4M2FhZDk4LWYxNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG14RqF7C38qH8R3JxkxxDkjp9hAcYkZkw4JXUVNlbXCs5LyKDIjRhf3feYgLW Y9fPnIyl+okCfiWkOmGYdYky/cAZ+h+X+psOHnNT5on6oCsOw529u5KkRbw2h4ku LWnrZ8xvB8clxeDqpW6oBjQwkXOgzGjGYnpw9JauryRahgHZIemYqKWADJKaKp0q qRYE7JGJ1wykZW/qpS3pUmF+enNp18d/TP24PrQajF2eDe9tgBc3yF6FTOLGGGla dHn8JV1aQPxWa1lgBRQklSKuJfLYTrQIt5Cm94DPfUtshpFOFGCDn+GcLZtyedKm saS7WJI2hbsW85WTMEINULmXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTfBSoAZR 5b4229fOYlVN5cQ3wiswHwYDVR0jBBgwFoAUzUHbwYl43ThNT1yPj5a0DnHe5kEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NDg4Lzc5MDNBQkJDRkYx MTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVr RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvelVIYndZbDQzVGhOVDF5UGo1YTBEbkhlNWtFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NDg4Lzc5MDNBQkJDRkYxMTExRUZBMThFQjk2MEM0RjlBRTAyL3pVSGJ3WWw0M1Ro TlQxeVBqNWEwRG5IZTVrRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFCUSCXUAjG5bx/toYUDQZWvyyw1pCIvYJxXOUZzGKJV/Fa6nm/VhU/6 OQ5DLDNkgD7FvUdgX17xsFZ4KwlLS7rlyu6vc99JjpovNj1LULwTMsu2oRSwdnt+ icieOOEpMetls2IlgItGtKQ3znfVlcFDwUsnb/oAm8EJp2nlU5MR+A/32NYp1km9 sYug0lHZI2xb574CPCJp0RuW0UC/2neZofSHR5qsiuhKZARmaYpPtUcyeNJIz2v/ u4sjz27RHQFQjkDuuTFbEg1Qu23viXxlTPUxj5vtPfpGsUlr5LpjJnc3zYnGB2Ia 5ZUKHRnSOo40K17c4W2sqOgr6T1iROc= -----END CERTIFICATE-----Generated at Sat May 31 17:46:24 2025 by rpki-client