$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft File: iWZCPuKkFWMfevMU5NiEAHqEaLY.mft (raw, json) Hash identifier: c5gUkbkC0pBe6BYTZ0GLdK2/ZfYD/DLK0rEYcAy6jDc= Subject key identifier: 67:9A:37:FD:67:EA:A2:ED:57:9D:A1:CA:1C:0B:32:18:68:88:2E:E0 Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 Certificate issuer: /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft Manifest number: 37 Signing time: Sat 31 May 2025 07:08:42 +0000 Manifest this update: Sat 31 May 2025 07:08:42 +0000 Manifest next update: Sat 07 Jun 2025 07:08:42 +0000 Files and hashes: 1: iWZCPuKkFWMfevMU5NiEAHqEaLY.crl (hash: Roya3ztZoF6AwTq4JUh8tZEOlA/YL+ppia//ZP+HZW8=) 2: 0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (hash: gvmSDCYZSC63LrY5JrPQoisd5tgDkXkEX0SCy3pFzuY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:08:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6 Validity Not Before: May 31 07:08:42 2025 GMT Not After : Jun 7 07:08:42 2025 GMT Subject: CN=683aaafa-0588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:86:ab:7a:5a:5c:6a:97:5b:9b:cd:bd:c0: d7:5f:d2:27:4d:f5:73:75:ed:23:c2:ec:d4:55:2b: 2d:f8:a4:53:fb:4d:c7:b2:53:e9:38:ea:fa:d2:5e: 75:8e:6d:19:9e:10:46:5f:b4:f9:a1:18:b2:76:52: 3b:a7:10:52:8a:bc:09:e8:5b:3f:6a:9e:57:06:11: 38:a3:ec:77:09:ca:2a:27:ca:ed:95:a1:86:ad:4e: c5:6f:f1:13:ec:ff:09:b7:39:ba:e1:f2:6d:b2:eb: 3b:cc:c8:03:67:35:11:0c:c9:e2:7e:ab:13:49:78: 8b:c1:1e:e8:8a:bb:65:4b:7c:c9:53:53:35:4f:52: 40:6b:48:cd:ad:1a:d4:07:b2:41:31:a9:67:f5:ba: f9:d0:9c:a8:16:af:6d:15:fd:67:f6:00:93:c6:a6: 3e:2c:fb:55:d7:b8:b0:c8:1a:9a:4c:25:c0:44:da: 69:1b:de:cd:b9:3d:2e:d0:f1:5e:2e:a3:28:dc:f4: bd:78:6b:07:10:82:86:24:62:8c:8c:39:8a:b2:79: 55:38:91:11:95:82:57:79:e4:c9:b0:7b:4c:0a:44: 57:3a:38:e6:bd:0d:93:de:e1:93:fc:28:1b:e9:e4: 8d:57:e8:bf:60:8a:a7:ee:d8:2c:10:20:2c:9d:27: 69:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9A:37:FD:67:EA:A2:ED:57:9D:A1:CA:1C:0B:32:18:68:88:2E:E0 X509v3 Authority Key Identifier: keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:41:37:cb:a0:de:00:3f:d8:9a:f9:31:cb:f5:86:12:af:b6: 84:f3:0a:a1:3e:0e:28:9e:00:fc:cb:0e:af:8b:f1:0d:63:2e: 24:26:80:ab:09:c5:a9:f1:62:bc:01:72:0a:69:39:ee:25:39: f9:5f:cd:ef:2d:80:2d:63:4a:44:5a:80:73:02:59:ae:dc:0d: b5:93:51:d3:cf:ff:85:d4:63:08:99:e2:3e:d1:6a:54:02:05: 7f:ec:e0:ca:6b:af:11:98:b8:68:cf:52:c7:07:ee:53:f8:ea: 5c:0f:ef:84:5a:ab:37:cc:ae:c9:b0:b1:92:ef:56:e0:cb:db: 8a:fa:d6:0a:0b:83:d9:03:26:21:af:88:41:c9:db:b8:14:1a: 41:f6:5a:72:09:58:5f:d0:59:cd:67:33:e4:88:61:12:ce:3d: 9d:50:d7:78:d1:82:da:3d:20:4f:ab:ee:60:3d:b1:44:06:ac: 41:52:b3:ea:4d:30:69:d9:9b:bf:9d:39:e1:c7:44:f1:f7:5f: aa:1b:78:d1:cb:49:ef:35:a8:db:60:28:7a:46:39:cd:f3:19: 40:62:d3:67:04:6e:e0:03:f9:2f:93:cd:41:ff:f8:2f:a1:c7: ab:de:a6:cf:c8:db:74:6c:d8:f3:96:91:eb:11:63:66:9a:ac: 79:b5:bb:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTFDQjExMC8GA1UEBRMoODk2NjQyM0VFMkE0MTU2MzFGN0FGMzE0RTREODg0MDA3 QTg0NjhCNjAeFw0yNTA1MzEwNzA4NDJaFw0yNTA2MDcwNzA4NDJaMBgxFjAUBgNV BAMTDTY4M2FhYWZhLTA1ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9kYarelpcapdbm829wNdf0idN9XN17SPC7NRVKy34pFP7TceyU+k46vrSXnWO bRmeEEZftPmhGLJ2UjunEFKKvAnoWz9qnlcGETij7HcJyionyu2VoYatTsVv8RPs /wm3Obrh8m2y6zvMyANnNREMyeJ+qxNJeIvBHuiKu2VLfMlTUzVPUkBrSM2tGtQH skExqWf1uvnQnKgWr20V/Wf2AJPGpj4s+1XXuLDIGppMJcBE2mkb3s25PS7Q8V4u oyjc9L14awcQgoYkYoyMOYqyeVU4kRGVgld55Mmwe0wKRFc6OOa9DZPe4ZP8KBvp 5I1X6L9giqfu2CwQICydJ2nTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ5o3/Wfq ou1XnaHKHAsyGGiILuAwHwYDVR0jBBgwFoAUiWZCPuKkFWMfevMU5NiEAHqEaLYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MUNCLzY1MEU2MDBBRUE1 QTExRUZCODRBRTQ2OEM0RjlBRTAyL2lXWkNQdUtrRldNZmV2TVU1TmlFQUhxRWFM WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaVdaQ1B1S2tGV01mZXZNVTVOaUVBSHFFYUxZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MUNCLzY1MEU2MDBBRUE1QTExRUZCODRBRTQ2OEM0RjlBRTAyL2lXWkNQdUtrRldN ZmV2TVU1TmlFQUhxRWFMWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMhBN8ug3gA/2Jr5Mcv1hhKvtoTzCqE+DiieAPzLDq+L8Q1jLiQmgKsJ xanxYrwBcgppOe4lOflfze8tgC1jSkRagHMCWa7cDbWTUdPP/4XUYwiZ4j7RalQC BX/s4MprrxGYuGjPUscH7lP46lwP74RaqzfMrsmwsZLvVuDL24r61goLg9kDJiGv iEHJ27gUGkH2WnIJWF/QWc1nM+SIYRLOPZ1Q13jRgto9IE+r7mA9sUQGrEFSs+pN MGnZm7+dOeHHRPH3X6obeNHLSe81qNtgKHpGOc3zGUBi02cEbuAD+S+TzUH/+C+h x6veps/I23Rs2POWkesRY2aarHm1u0I= -----END CERTIFICATE-----Generated at Sat May 31 17:47:20 2025 by rpki-client