$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json) Hash identifier: cEwPWNpoWQG86U1yR7iSL/MzGWdY1LQAn0cMpDTDn+4= Subject key identifier: 6E:CF:94:25:5E:6E:A4:A7:1A:72:9F:4D:EE:FF:A4:DB:B8:23:95:97 Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft Manifest number: 014E Signing time: Sat 31 May 2025 03:51:22 +0000 Manifest this update: Sat 31 May 2025 03:51:22 +0000 Manifest next update: Sat 07 Jun 2025 03:51:22 +0000 Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: NQhfEJ897sAl5Il95M5wxMZ6LCIvF8v4GCsHhmZGJ4U=) 2: 78CAEF00404711EEBE56794DC4F9AE02.roa (hash: LjB+g92HCwppfWiC4D7Vha1hvTw5esNjOr6rwAvYW2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:51:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: May 31 03:51:22 2025 GMT Not After : Jun 7 03:51:22 2025 GMT Subject: CN=683a7cba-3107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f2:da:fe:f4:48:d3:48:5f:cc:01:a1:e9:96: 48:e2:dc:6c:46:bb:73:ae:2b:68:42:b3:56:ad:d6: 44:4d:9e:1f:1e:d7:c6:cf:69:00:3d:e8:3a:0d:ba: 16:1a:20:c5:a9:4d:b3:4d:a5:13:57:6d:bd:29:36: d6:f8:1c:b9:04:2b:02:ee:0c:ae:92:bb:c8:26:5b: 73:f4:5c:d6:3b:46:1a:43:97:d4:d6:46:b2:b4:a0: ab:f0:49:74:a3:80:75:c3:a3:ff:1c:d8:54:12:c5: a5:f5:c5:9d:55:a8:77:fd:91:17:d0:f0:b0:9e:0b: 79:79:7d:ea:22:9e:90:0e:4b:12:62:8a:3b:e7:a2: 18:f7:bf:af:81:b0:d8:e9:c9:79:d7:62:8c:e1:e2: 63:0b:10:08:33:51:b7:f1:96:42:df:b5:2d:01:53: 04:b7:ca:8d:6e:13:d6:d6:0e:95:d4:c6:08:5e:68: e7:5a:a0:4a:c5:67:91:8b:ae:cc:95:05:33:4a:74: e2:84:9b:68:e2:ba:e2:7b:f8:b7:e6:48:75:ae:f0: 0e:4c:b9:ed:c4:6f:15:e5:8f:b4:f3:2d:69:f3:8b: 1b:6f:f8:68:52:e6:fb:3c:64:6c:4d:88:b1:63:fa: ae:a0:be:7a:0b:3e:80:d4:19:9c:c6:f9:2a:5d:fc: 1b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CF:94:25:5E:6E:A4:A7:1A:72:9F:4D:EE:FF:A4:DB:B8:23:95:97 X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:c8:17:15:e2:77:c7:94:e8:99:07:93:60:0c:c6:c3:b1:7a: bd:cc:a7:66:fd:9c:3f:97:18:b6:54:ed:1f:90:91:1b:93:59: cc:b4:9c:1b:cf:b9:49:5d:30:23:fa:9b:53:ae:c9:35:04:cf: df:57:ef:2b:4f:5c:25:65:b3:8d:79:55:64:71:91:a6:5c:9e: 55:ab:0e:b1:ef:f8:a6:09:68:b1:a1:df:69:d9:bd:3c:1b:66: 54:9a:7d:1f:2f:a8:03:6c:81:2f:49:b0:48:63:ba:17:88:e9: 29:28:63:fd:93:ee:0b:32:3c:a7:dd:bc:c5:11:d9:8c:ce:1b: d1:99:55:c7:6c:ab:df:b0:cc:c5:ca:cd:9c:8a:8d:23:e0:4f: 47:6a:d3:5d:cf:52:b7:0a:6c:79:9b:75:3b:2e:bf:89:73:14: 2f:e7:d8:f4:f4:1f:62:b3:e1:d2:d3:69:da:04:5a:72:d7:83: 09:12:09:e9:16:57:1d:52:e5:60:b4:4c:fe:eb:b6:07:73:e4: c8:d0:21:f2:15:af:e0:99:4b:2e:20:ca:c8:a3:e2:a1:10:79: 9c:bd:d8:ab:55:f1:21:64:c0:b0:02:6f:75:29:0a:3a:33:7f: e2:c4:54:b3:b6:d5:89:6e:08:ac:ad:68:8d:7a:47:2a:8c:15: b6:30:48:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjUwNTMxMDM1MTIyWhcNMjUwNjA3MDM1MTIyWjAYMRYwFAYD VQQDEw02ODNhN2NiYS0zMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvLa/vRI00hfzAGh6ZZI4txsRrtzritoQrNWrdZETZ4fHtfGz2kAPeg6DboW GiDFqU2zTaUTV229KTbW+By5BCsC7gyukrvIJltz9FzWO0YaQ5fU1kaytKCr8El0 o4B1w6P/HNhUEsWl9cWdVah3/ZEX0PCwngt5eX3qIp6QDksSYoo756IY97+vgbDY 6cl512KM4eJjCxAIM1G38ZZC37UtAVMEt8qNbhPW1g6V1MYIXmjnWqBKxWeRi67M lQUzSnTihJto4rrie/i35kh1rvAOTLntxG8V5Y+08y1p84sbb/hoUub7PGRsTYix Y/quoL56Cz6A1BmcxvkqXfwbcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7PlCVe bqSnGnKfTe7/pNu4I5WXMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJ TE0zejUzcFREblA5UVE0M2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlyBcV4nfHlOiZB5NgDMbDsXq9zKdm/Zw/lxi2VO0fkJEbk1nMtJwb z7lJXTAj+ptTrsk1BM/fV+8rT1wlZbONeVVkcZGmXJ5Vqw6x7/imCWixod9p2b08 G2ZUmn0fL6gDbIEvSbBIY7oXiOkpKGP9k+4LMjyn3bzFEdmMzhvRmVXHbKvfsMzF ys2cio0j4E9HatNdz1K3Cmx5m3U7Lr+JcxQv59j09B9is+HS02naBFpy14MJEgnp FlcdUuVgtEz+67YHc+TI0CHyFa/gmUsuIMrIo+KhEHmcvdirVfEhZMCwAm91KQo6 M3/ixFSzttWJbgisrWiNekcqjBW2MEjm -----END CERTIFICATE-----Generated at Sat May 31 16:29:32 2025 by rpki-client