$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: yqBzGwIEQXd3M1Zv8fauzGRXoa+5p3Zqia5td+gFcE4= Subject key identifier: CF:EA:58:5A:80:47:DC:1E:D6:2E:D7:0B:E7:43:3B:3B:6E:28:E9:89 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0171 Signing time: Sat 31 May 2025 03:31:47 +0000 Manifest this update: Sat 31 May 2025 03:31:46 +0000 Manifest next update: Sat 07 Jun 2025 03:31:46 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: CFAQ7bomvQUvxB17zMPcOJF88/RAoUNb8515qmZUhIM=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: +NXIJ3XAp8BvWngt2c/RnkPBxhwMNcZtq308qJwKx8k=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: Wkz//5KDfJfxYrwNIm5g/VaiBGq0PmVllCjJzHHJxNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: May 31 03:31:46 2025 GMT Not After : Jun 7 03:31:46 2025 GMT Subject: CN=683a7822-77dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3e:e7:6c:8f:9d:b8:32:6c:0f:af:13:90:38: 4f:bf:41:24:32:98:5b:4a:ce:33:09:83:0a:04:e5: ce:3a:61:b6:f1:56:0b:4c:31:77:68:57:31:15:c3: 7b:a9:79:3c:a9:aa:b7:43:7b:c2:b5:cc:44:83:83: 62:a7:a1:1d:73:3e:42:2c:16:65:d2:b4:4d:61:1d: fb:a8:9b:9d:92:e0:04:c7:57:c1:a6:58:24:88:90: 45:10:7a:5d:5e:a2:8d:c9:6f:a1:1f:84:5a:b1:ec: 9a:6b:84:77:a4:a3:f1:c0:c8:e1:ab:a5:bf:82:a3: 3e:c8:7c:02:6c:4b:c6:39:9d:49:64:97:98:78:ea: 8c:1c:3b:1f:3c:6f:6e:9f:3a:67:69:11:ff:d8:af: 89:f8:63:a9:59:85:ee:fc:78:b5:69:a9:8a:d0:48: 74:ae:d5:8e:39:89:b1:cf:db:e1:cd:9d:d2:9c:3c: ed:d1:45:8a:71:bf:94:a9:94:4a:11:10:ba:9e:e6: fd:f4:cd:0b:69:ed:f2:b2:17:53:b5:c9:4d:e1:59: 75:49:07:74:25:cf:fe:25:97:c6:ac:f5:d5:d5:b8: 8d:e8:50:55:43:08:3c:e7:b4:25:c1:59:de:0d:dd: e0:90:a0:a7:9d:cc:98:6b:be:7b:d3:1b:0a:f6:7d: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EA:58:5A:80:47:DC:1E:D6:2E:D7:0B:E7:43:3B:3B:6E:28:E9:89 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:92:e1:c7:bd:23:35:2a:d8:ba:71:d2:6d:c9:a0:69:ab:97: 10:17:67:c7:a2:74:ef:00:61:74:36:a4:cf:da:d2:48:88:d9: 44:f1:eb:1e:0b:c0:64:bf:0b:69:3e:00:8b:dd:dc:9d:05:37: 6d:74:cf:0c:48:f3:0a:39:12:5e:df:10:55:79:73:63:4d:c7: 17:f0:69:d2:2b:b7:ba:08:3e:c4:ed:67:80:0c:ce:35:9c:d6: 4f:de:53:bc:b4:86:7d:4b:9f:12:7a:17:56:1a:e1:f4:d4:b3: 4e:03:7a:6e:7a:b7:7d:51:a2:4d:1f:6c:0b:da:20:67:80:c4: c8:8c:0f:0a:5e:59:f9:ad:f5:07:28:41:26:84:27:d1:6c:09: 1c:df:83:d6:a4:86:c7:ef:09:c9:3f:89:ef:d2:38:14:34:31: 43:f7:5f:c3:58:8d:0c:78:c6:a2:a9:45:96:8e:31:e2:0e:2a: 59:d4:5f:10:95:df:8c:a3:9b:eb:ad:aa:d4:61:0b:54:2e:b2: d5:c3:d1:ed:e6:9e:78:a8:13:14:17:34:9a:53:23:e5:ca:28: 9a:c2:37:96:5e:98:5f:ba:6e:7d:8b:88:8c:a1:98:7f:52:c0: 96:77:c5:04:62:8a:b8:ab:e6:0c:e3:5a:9d:f4:cb:13:e7:03: 8e:38:5f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwNTMxMDMzMTQ2WhcNMjUwNjA3MDMzMTQ2WjAYMRYwFAYD VQQDEw02ODNhNzgyMi03N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwD7nbI+duDJsD68TkDhPv0EkMphbSs4zCYMKBOXOOmG28VYLTDF3aFcxFcN7 qXk8qaq3Q3vCtcxEg4Nip6Edcz5CLBZl0rRNYR37qJudkuAEx1fBplgkiJBFEHpd XqKNyW+hH4Raseyaa4R3pKPxwMjhq6W/gqM+yHwCbEvGOZ1JZJeYeOqMHDsfPG9u nzpnaRH/2K+J+GOpWYXu/Hi1aamK0Eh0rtWOOYmxz9vhzZ3SnDzt0UWKcb+UqZRK ERC6nub99M0Lae3yshdTtclN4Vl1SQd0Jc/+JZfGrPXV1biN6FBVQwg857QlwVne Dd3gkKCnncyYa7570xsK9n2/gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM/qWFqA R9we1i7XC+dDOztuKOmJMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIkuHHvSM1Kti6cdJtyaBpq5cQF2fHonTvAGF0NqTP2tJIiNlE8ese C8BkvwtpPgCL3dydBTdtdM8MSPMKORJe3xBVeXNjTccX8GnSK7e6CD7E7WeADM41 nNZP3lO8tIZ9S58SehdWGuH01LNOA3puerd9UaJNH2wL2iBngMTIjA8KXln5rfUH KEEmhCfRbAkc34PWpIbH7wnJP4nv0jgUNDFD91/DWI0MeMaiqUWWjjHiDipZ1F8Q ld+Mo5vrrarUYQtULrLVw9Ht5p54qBMUFzSaUyPlyiiawjeWXphfum59i4iMoZh/ UsCWd8UEYoq4q+YM41qd9MsT5wOOOF+x -----END CERTIFICATE-----Generated at Sat May 31 16:47:50 2025 by rpki-client