$ rpki-client -vvf rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft File: pRz7iig43CPyh2RKRzXvwT2MMRM.mft (raw, json) Hash identifier: jKvL6Ybc0MdEbFJbahhFPOvedU+lpZJY/sgQy431qSU= Subject key identifier: 9E:5C:35:0A:FA:69:98:7B:5B:EA:7D:4C:6F:EF:79:24:F1:66:5E:A5 Authority key identifier: A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 Certificate issuer: /CN=A9197724/serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft Manifest number: 74 Signing time: Sun 01 Jun 2025 06:32:12 +0000 Manifest this update: Sun 01 Jun 2025 06:32:11 +0000 Manifest next update: Sun 08 Jun 2025 06:32:11 +0000 Files and hashes: 1: pRz7iig43CPyh2RKRzXvwT2MMRM.crl (hash: lq+m2vLME0AkQhLGYE0Wz+UTDhTZLvsBmZzWEJ+yd+c=) 2: A2C3AA7E904E11EF9FC6B922C4F9AE02.roa (hash: bRFbzj6pr/OF3ESUy9ky5waEguFBGACn3nS0+utKTXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:32:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197724, serialNumber=A51CFB8A2838DC23F287644A4735EFC13D8C3113 Validity Not Before: Jun 1 06:32:11 2025 GMT Not After : Jun 8 06:32:11 2025 GMT Subject: CN=683bf3ec-5ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:db:c5:63:24:7c:24:c8:66:b6:c7:b1:0c: 01:ff:de:0a:32:4e:d2:60:a2:49:71:c6:ce:75:dd: d3:f7:85:23:9f:4e:40:57:be:f0:c5:d8:3e:60:25: dd:15:ee:7a:1d:03:bc:cf:1f:68:be:cb:ce:0d:3a: b8:98:88:72:60:19:b9:50:9a:88:53:be:1e:6f:01: 7f:de:11:c5:29:bc:07:2e:4f:84:40:23:ca:0b:ff: 0a:c3:b7:68:ae:d5:8b:88:dd:c4:05:15:ea:66:f7: 86:c0:c6:f7:19:63:aa:67:e6:66:3d:be:ce:6a:83: 48:cb:0f:c2:da:2d:d0:f0:13:9c:d0:97:dd:e5:3e: f1:9c:55:25:44:9d:d2:ec:a9:fb:84:37:e1:f6:8c: a2:8b:d6:20:dd:0f:01:fd:32:a7:f3:6a:21:9a:df: 7e:9d:a2:55:87:62:fa:78:d2:53:ec:ed:62:c2:b5: f0:fd:ef:1d:08:87:3d:30:f9:7b:28:3a:59:81:90: 39:2b:1a:c4:7e:4d:37:a5:f7:80:7a:3b:ee:f9:8f: f3:6d:e8:36:37:41:4c:57:a1:e4:cf:f4:26:17:0d: 3e:1a:08:be:8f:d8:51:19:8d:62:a9:22:6e:5d:ff: 74:1e:83:66:1b:a1:54:1a:53:bd:6c:fa:20:c7:c4: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5C:35:0A:FA:69:98:7B:5B:EA:7D:4C:6F:EF:79:24:F1:66:5E:A5 X509v3 Authority Key Identifier: keyid:A5:1C:FB:8A:28:38:DC:23:F2:87:64:4A:47:35:EF:C1:3D:8C:31:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pRz7iig43CPyh2RKRzXvwT2MMRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197724/56C67076904D11EFA1103864C4F9AE02/pRz7iig43CPyh2RKRzXvwT2MMRM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ae:17:70:5e:30:54:ff:32:0b:59:9c:13:43:a6:e8:5e:0d: 3d:69:a3:33:6e:13:3c:72:d1:44:43:c3:06:65:93:69:2e:4b: 57:7c:da:a1:29:eb:a6:fb:70:b2:de:54:15:8f:31:7f:8d:bc: 78:06:2b:87:eb:44:16:d6:9d:6c:24:1d:62:5e:24:74:fb:4e: 5d:b4:d3:1d:f6:af:b9:2a:a2:d1:01:ed:41:bd:59:72:bb:18: 92:9f:4c:1c:b3:93:00:ab:61:13:57:c7:2b:d3:b5:6d:db:d4: 2c:03:5b:85:83:59:bb:7d:f4:4c:13:ce:ca:f3:9b:d9:d4:4b: 91:5a:23:92:f3:82:f9:0a:28:9d:bf:2a:b3:62:6b:74:15:0b: 11:90:f9:bc:b9:47:e3:7c:72:34:89:1e:de:7e:f6:cd:60:9b: 06:0a:6e:11:30:b0:45:09:a9:3a:f7:16:e1:8e:a7:a8:62:2a: 01:84:27:90:df:d0:22:cf:f5:d1:63:7a:7c:91:eb:6e:ec:9e: 6c:ce:02:c2:16:21:9a:60:58:6b:93:a0:9d:d4:23:f1:4b:b0: ab:ff:e4:48:84:41:1f:19:e8:9f:a8:d3:b0:e9:d0:f0:dd:ee: d7:bb:d2:b2:b6:6f:a9:a8:52:99:71:9b:e0:d0:7f:8f:4c:40: 4a:1c:d1:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NzcyNDExMC8GA1UEBRMoQTUxQ0ZCOEEyODM4REMyM0YyODc2NDRBNDczNUVGQzEz RDhDMzExMzAeFw0yNTA2MDEwNjMyMTFaFw0yNTA2MDgwNjMyMTFaMBgxFjAUBgNV BAMTDTY4M2JmM2VjLTVhYjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC40dvFYyR8JMhmtsexDAH/3goyTtJgoklxxs513dP3hSOfTkBXvvDF2D5gJd0V 7nodA7zPH2i+y84NOriYiHJgGblQmohTvh5vAX/eEcUpvAcuT4RAI8oL/wrDt2iu 1YuI3cQFFepm94bAxvcZY6pn5mY9vs5qg0jLD8LaLdDwE5zQl93lPvGcVSVEndLs qfuEN+H2jKKL1iDdDwH9MqfzaiGa336dolWHYvp40lPs7WLCtfD97x0Ihz0w+Xso OlmBkDkrGsR+TTel94B6O+75j/Nt6DY3QUxXoeTP9CYXDT4aCL6P2FEZjWKpIm5d /3Qeg2YboVQaU71s+iDHxN7jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnlw1Cvpp mHtb6n1Mb+95JPFmXqUwHwYDVR0jBBgwFoAUpRz7iig43CPyh2RKRzXvwT2MMRMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3NzI0LzU2QzY3MDc2OTA0 RDExRUZBMTEwMzg2NEM0RjlBRTAyL3BSejdpaWc0M0NQeWgyUktSelh2d1QyTU1S TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcFJ6N2lpZzQzQ1B5aDJSS1J6WHZ3VDJNTVJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk3 NzI0LzU2QzY3MDc2OTA0RDExRUZBMTEwMzg2NEM0RjlBRTAyL3BSejdpaWc0M0NQ eWgyUktSelh2d1QyTU1STS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGyuF3BeMFT/MgtZnBNDpuheDT1pozNuEzxy0URDwwZlk2kuS1d82qEp 66b7cLLeVBWPMX+NvHgGK4frRBbWnWwkHWJeJHT7Tl200x32r7kqotEB7UG9WXK7 GJKfTByzkwCrYRNXxyvTtW3b1CwDW4WDWbt99EwTzsrzm9nUS5FaI5LzgvkKKJ2/ KrNia3QVCxGQ+by5R+N8cjSJHt5+9s1gmwYKbhEwsEUJqTr3FuGOp6hiKgGEJ5Df 0CLP9dFjenyR627snmzOAsIWIZpgWGuToJ3UI/FLsKv/5EiEQR8Z6J+o07Dp0PDd 7te70rK2b6moUplxm+DQf49MQEoc0cs= -----END CERTIFICATE-----Generated at Mon Jun 2 20:53:38 2025 by rpki-client