$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: Ux31J+ZA4G3TxpfsN7Ucbo0L8c7FORF9JDLP/O185rA= Subject key identifier: C4:23:D3:98:5F:A1:90:C4:E4:05:47:91:82:41:D5:D3:98:CD:3A:52 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: C9 Signing time: Sat 31 May 2025 05:21:26 +0000 Manifest this update: Sat 31 May 2025 05:21:26 +0000 Manifest next update: Sat 07 Jun 2025 05:21:26 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: 6KLjuwRrn6bJlbDERWW8sgd3A9C27Abk2DIGNYNDnfo=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: yRSzHrzurf6XSOu6xC9tCIXU5IVd5pxNWSd3g3cqSyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: May 31 05:21:26 2025 GMT Not After : Jun 7 05:21:26 2025 GMT Subject: CN=683a91d6-ca5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:05:29:9a:ef:eb:a4:21:ac:4d:bc:21:81: 00:79:24:0f:7e:a4:f8:f3:37:30:a5:69:86:a9:75: 9b:35:45:d2:e9:7c:4e:10:7c:9e:25:24:4a:c1:2c: 3a:ca:8c:fc:56:0f:d4:7d:8b:68:69:ee:c9:81:69: b7:20:81:a3:a9:1f:e2:b7:8b:e7:3d:48:78:15:01: 40:24:e4:10:d2:c3:7b:51:48:28:fa:5c:db:ea:ac: 05:c1:61:f1:59:0c:09:1d:1a:9f:0d:e4:70:f2:3a: 98:6d:eb:a9:29:45:5a:d6:b8:96:04:63:f6:0c:52: 3a:a5:3c:d5:ef:b0:65:0f:0d:fa:67:43:ad:8d:73: da:e4:44:0f:e8:3b:11:b1:a5:24:64:fd:40:06:53: 10:e4:37:b3:7e:d6:50:58:fb:de:8d:30:81:d4:2a: 64:35:7e:b9:b9:6e:05:86:e9:88:8f:f1:80:2d:5c: 09:a0:cd:33:84:03:d8:20:2f:95:8e:7a:d9:65:32: 4b:d2:84:09:e0:19:58:af:39:b3:60:46:62:19:61: d4:c0:1a:64:4a:32:a3:50:d7:21:be:94:1d:50:ab: 54:8e:9d:21:a5:b5:17:a6:d8:89:54:1e:88:df:0a: 26:a4:64:1a:38:b2:40:17:17:30:4e:ec:37:af:2a: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:23:D3:98:5F:A1:90:C4:E4:05:47:91:82:41:D5:D3:98:CD:3A:52 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a8:9e:d7:c4:e3:ae:a9:a3:ea:da:e0:4a:99:2a:f5:3d:82: 2e:5c:79:99:f4:e3:bb:f5:b4:ed:32:da:1b:44:d2:16:8b:52: 05:ad:da:5b:ec:d6:55:fe:ed:64:59:e2:16:f6:18:4d:9a:72: b3:f3:c2:25:21:f4:8c:00:1a:2b:57:9f:03:1e:56:79:b7:f1: 4e:1d:5a:49:e2:be:85:c9:c6:32:f7:dd:6f:0c:ed:88:65:fe: ba:89:21:06:38:f6:41:d9:ef:85:d5:d3:20:1b:cb:27:70:dc: f4:ce:4c:0f:e0:9b:52:0e:5b:09:ca:53:fb:2d:f9:43:2e:4b: b3:87:a5:91:da:67:d0:2f:e2:78:66:98:8c:49:6d:88:63:4c: 7a:a0:59:e4:8d:e1:db:e5:ec:d0:b9:7b:3e:c1:f4:76:bc:0d: b3:b4:dc:30:ac:8d:27:2e:2a:a8:bb:5e:a8:b5:ad:50:f0:0b: 62:b9:5b:c9:4d:28:9c:16:1e:38:84:3e:25:f4:3e:3f:06:e5: 58:7c:38:a6:95:b9:12:00:d7:5c:07:cf:82:21:48:70:4d:b4: 4a:28:01:16:e0:a8:2f:88:a1:f5:ea:4d:14:1b:06:b3:b8:f9: 75:c0:6d:aa:f2:d7:8a:54:c9:0b:df:95:c4:20:73:33:dd:8c: 99:4d:46:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUwNTMxMDUyMTI2WhcNMjUwNjA3MDUyMTI2WjAYMRYwFAYD VQQDEw02ODNhOTFkNi1jYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuV4FKZrv66QhrE28IYEAeSQPfqT48zcwpWmGqXWbNUXS6XxOEHyeJSRKwSw6 yoz8Vg/UfYtoae7JgWm3IIGjqR/it4vnPUh4FQFAJOQQ0sN7UUgo+lzb6qwFwWHx WQwJHRqfDeRw8jqYbeupKUVa1riWBGP2DFI6pTzV77BlDw36Z0OtjXPa5EQP6DsR saUkZP1ABlMQ5DezftZQWPvejTCB1CpkNX65uW4FhumIj/GALVwJoM0zhAPYIC+V jnrZZTJL0oQJ4BlYrzmzYEZiGWHUwBpkSjKjUNchvpQdUKtUjp0hpbUXptiJVB6I 3wompGQaOLJAFxcwTuw3ryqDDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQj05hf oZDE5AVHkYJB1dOYzTpSMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWqJ7XxOOuqaPq2uBKmSr1PYIuXHmZ9OO79bTtMtobRNIWi1IFrdpb 7NZV/u1kWeIW9hhNmnKz88IlIfSMABorV58DHlZ5t/FOHVpJ4r6FycYy991vDO2I Zf66iSEGOPZB2e+F1dMgG8sncNz0zkwP4JtSDlsJylP7LflDLkuzh6WR2mfQL+J4 ZpiMSW2IY0x6oFnkjeHb5ezQuXs+wfR2vA2ztNwwrI0nLiqou16ota1Q8AtiuVvJ TSicFh44hD4l9D4/BuVYfDimlbkSANdcB8+CIUhwTbRKKAEW4KgviKH16k0UGwaz uPl1wG2q8teKVMkL35XEIHMz3YyZTUYh -----END CERTIFICATE-----Generated at Sat May 31 16:47:45 2025 by rpki-client