$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: v5bjm0iWoEw18aM/WDlHxaf/yS7cVLtEL78j4SUi+Z0= Subject key identifier: 48:B9:F5:D7:D6:1E:7B:CB:F4:90:FB:8F:90:F2:56:A9:0D:24:37:6B Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0341 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 033D Signing time: Sat 31 May 2025 01:13:58 +0000 Manifest this update: Sat 31 May 2025 01:13:57 +0000 Manifest next update: Sat 07 Jun 2025 01:13:57 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: PUzlW1Y72tij3nCCKKgNglFV94jOKTKZ53CC18daEBI=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 833 (0x341) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: May 31 01:13:57 2025 GMT Not After : Jun 7 01:13:57 2025 GMT Subject: CN=683a57d5-38b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:6d:8e:d4:2a:83:81:cb:90:da:18:83:98: 88:9d:ae:64:dc:bc:b6:85:e2:6f:96:4a:e5:f3:49: 4d:b3:49:a7:95:bc:cc:aa:ac:79:a5:a9:7a:23:41: 77:fb:27:15:d9:35:26:cd:b3:f4:0b:cc:bd:08:e2: b0:cc:09:7d:3a:d3:3d:16:85:df:03:3f:f3:e9:79: 38:46:de:4e:9d:54:1e:3d:7f:aa:b8:22:c4:35:2b: 5b:f4:ae:9e:d9:3a:72:ea:4d:9a:1c:d5:33:2f:f9: b4:56:b6:48:ee:34:62:b7:84:06:20:ba:dd:1d:4c: d1:97:34:e4:3b:c7:62:54:fc:1c:d6:3b:7d:59:3a: 0a:48:36:64:94:36:c0:a7:5d:14:f1:49:a5:09:e4: 00:d8:1e:51:1a:2a:5c:ff:95:65:08:d2:50:1a:c3: 33:5c:2e:76:d1:eb:bc:97:82:09:d8:f6:74:bb:53: 55:b2:ff:1c:ce:41:4d:c7:d8:c9:de:f9:0b:5b:30: 78:bc:8a:a9:65:db:25:94:1e:49:96:60:6e:fa:07: c5:2f:d2:46:ad:57:8f:39:29:6c:79:1a:a5:89:34: 04:98:c7:a4:9a:eb:a9:39:53:a6:77:db:95:aa:ae: 64:3b:89:a3:15:28:d2:0c:aa:27:45:6b:fc:16:61: c8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B9:F5:D7:D6:1E:7B:CB:F4:90:FB:8F:90:F2:56:A9:0D:24:37:6B X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:2f:01:88:3d:6c:d9:78:ae:a3:b0:bc:c9:37:46:30:23:fb: 13:93:f5:79:67:cf:fe:f4:a9:d0:7b:6b:4a:67:f7:e7:1b:7f: f1:4c:16:55:d9:7c:9f:db:fe:be:97:8b:c6:89:69:33:a8:06: 0f:d5:84:18:23:8b:7d:b5:42:94:d9:94:f7:f9:24:18:c7:a8: 0f:2c:b8:3c:ec:75:2e:44:6b:c7:10:44:79:6d:c2:14:1e:d6: d6:a9:83:c7:52:65:6f:86:8b:80:28:9f:fc:2f:af:fb:b8:07: 67:a8:14:54:48:24:8c:e4:a5:c5:a0:40:8a:5c:61:8b:02:3b: ae:19:78:84:5d:fd:89:c2:a6:78:33:e0:26:41:d0:61:42:6e: dc:8c:3b:77:33:90:15:6a:23:d1:75:b1:45:e3:dc:a8:a5:c5: d1:29:27:1b:eb:a0:c3:cd:96:67:25:a5:be:25:fb:92:12:c0: 80:85:ea:45:51:07:89:2a:23:e1:26:12:ac:ce:b1:b7:c8:ad: 20:94:1c:94:94:34:cc:73:a6:cb:2f:fd:1b:1a:b3:1c:a4:d1: c4:3f:b8:ba:65:e0:d7:a8:39:c9:a3:8f:9e:26:51:93:cb:47: 6e:b4:0c:22:de:eb:74:5f:16:41:a1:40:e1:b7:a8:8e:cb:25: b5:c7:19:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwNTMxMDExMzU3WhcNMjUwNjA3MDExMzU3WjAYMRYwFAYD VQQDEw02ODNhNTdkNS0zOGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwU1tjtQqg4HLkNoYg5iIna5k3Ly2heJvlkrl80lNs0mnlbzMqqx5pal6I0F3 +ycV2TUmzbP0C8y9COKwzAl9OtM9FoXfAz/z6Xk4Rt5OnVQePX+quCLENStb9K6e 2Tpy6k2aHNUzL/m0VrZI7jRit4QGILrdHUzRlzTkO8diVPwc1jt9WToKSDZklDbA p10U8UmlCeQA2B5RGipc/5VlCNJQGsMzXC520eu8l4IJ2PZ0u1NVsv8czkFNx9jJ 3vkLWzB4vIqpZdsllB5JlmBu+gfFL9JGrVePOSlseRqliTQEmMekmuupOVOmd9uV qq5kO4mjFSjSDKonRWv8FmHIlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEi59dfW HnvL9JD7j5DyVqkNJDdrMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGLwGIPWzZeK6jsLzJN0YwI/sTk/V5Z8/+9KnQe2tKZ/fnG3/xTBZV 2Xyf2/6+l4vGiWkzqAYP1YQYI4t9tUKU2ZT3+SQYx6gPLLg87HUuRGvHEER5bcIU HtbWqYPHUmVvhouAKJ/8L6/7uAdnqBRUSCSM5KXFoECKXGGLAjuuGXiEXf2JwqZ4 M+AmQdBhQm7cjDt3M5AVaiPRdbFF49yopcXRKScb66DDzZZnJaW+JfuSEsCAhepF UQeJKiPhJhKszrG3yK0glByUlDTMc6bLL/0bGrMcpNHEP7i6ZeDXqDnJo4+eJlGT y0dutAwi3ut0XxZBoUDht6iOyyW1xxk4 -----END CERTIFICATE-----Generated at Sat May 31 17:34:28 2025 by rpki-client