$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft File: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft (raw, json) Hash identifier: 6dW/4Sv/OKNTMnxlUo4yBmNMIddofCFNMGufyOzLZ5E= Subject key identifier: A9:2B:F9:7A:1B:CF:C6:74:93:53:F0:74:D6:A5:CB:9C:80:BC:86:7E Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Certificate serial: 044C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft Manifest number: 0424 Signing time: Sat 31 May 2025 00:37:52 +0000 Manifest this update: Sat 31 May 2025 00:37:51 +0000 Manifest next update: Sat 07 Jun 2025 00:37:51 +0000 Files and hashes: 1: d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl (hash: f8KwrTbB73T+KS+389f9rPQ8sMr+Dlm2ZERqeuANg6A=) 2: EEECC55A8C3611EFA07E612DC4F9AE02.roa (hash: S448nKM+pkzyKAVAq+QLZ6c2Rwj7lMGOSqjzi17yKYo=) 3: 216DB034DE9711EC9289256FC4F9AE02.roa (hash: +Y2vKS8CZ7xVCXV7DmrOc6o0OVVkIHves16LK2wsX2I=) 4: 204E25DADE9711EC9289256FC4F9AE02.roa (hash: Nm0NB5K/NvPqifGuFp/i7DvZfN/unt+xIyxa1mf1Ru8=) 5: E184C6F48F2C11EEA361B22FC4F9AE02.roa (hash: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=) 6: 1FBEA1EEDE9711EC9289256FC4F9AE02.roa (hash: wFyDTsNGRzgAv8mhqHHalbGpjw+H79Gqqrm8IklHVfE=) 7: E0C5B7148F2C11EEA361B22FC4F9AE02.roa (hash: Aqyl2hhEx5BpBctkE5rWM8Kv0ZDOqQAIfUrt5yWaYks=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1100 (0x44c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB81, serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892 Validity Not Before: May 31 00:37:51 2025 GMT Not After : Jun 7 00:37:51 2025 GMT Subject: CN=683a4f5f-9f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:d2:0f:3d:7f:09:b5:80:1c:9f:7a:63:80: de:23:4a:7c:51:79:5f:f4:63:63:95:06:6c:0f:be: 31:44:da:6b:aa:a2:fa:a6:46:df:7c:6a:fd:82:01: 42:b7:8b:0e:ee:b5:b5:a4:de:04:f0:24:95:a1:ab: 5f:1b:e4:80:1d:41:43:48:ad:e1:4c:e8:b5:07:4c: 8b:fe:89:8b:ac:69:1d:fb:23:cf:48:c4:64:fd:7e: 18:2b:0c:63:b2:ac:7f:0d:16:50:fc:fe:91:b0:df: b4:d9:4d:cd:36:a3:26:94:d6:26:6a:7e:eb:5d:da: 5f:ce:65:a5:2b:cc:e4:83:bb:52:70:f2:92:5a:83: 3b:d8:0a:a8:72:e0:47:b6:1e:c9:d5:a8:29:52:0b: b1:b8:fc:c8:90:78:4f:ef:a8:dc:80:7a:34:e0:d5: f0:1c:33:11:cb:f2:f3:d0:e7:d1:d5:34:61:69:64: b2:04:ee:b2:c1:2d:21:d1:af:f4:3d:6a:28:ae:95: dd:5e:61:19:4f:01:b4:aa:5c:a7:54:c7:fb:3d:d8: b2:23:4b:05:1a:e3:0c:fd:25:90:0d:a4:32:dd:0b: a3:9e:39:3b:6e:c7:63:62:01:94:94:4c:ce:90:fd: 61:6c:c5:da:bf:ff:49:b1:cd:d4:cb:5b:e9:a8:3e: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2B:F9:7A:1B:CF:C6:74:93:53:F0:74:D6:A5:CB:9C:80:BC:86:7E X509v3 Authority Key Identifier: keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:37:d0:1f:99:c1:df:c7:28:38:e9:29:eb:a0:2a:c3:01:d9: 16:08:5c:d0:ad:23:86:97:35:49:38:b3:fc:c4:c0:a0:7d:33: 66:af:80:6b:c3:38:d4:ff:cd:dd:24:b8:e5:d8:ad:f4:cb:f3: 75:4c:39:0d:d5:4f:e7:77:c6:45:32:3c:a0:cb:8c:64:ba:fc: 98:f0:a1:20:d4:1b:31:b1:95:8e:6f:8f:f8:1b:09:5c:51:c4: 7a:21:6f:f4:04:70:be:3c:57:38:5e:7a:71:0e:f3:a9:4e:91: 48:12:af:e3:57:70:29:e7:60:7c:10:f7:8c:f1:44:f9:d6:45: 36:7d:ef:a9:b8:9f:47:c4:bc:06:23:81:2f:a3:e4:6e:2f:1e: 5b:9a:c1:1e:2a:ba:8e:1d:22:0d:fc:c2:e6:34:d9:3e:71:2e: b7:c6:0e:93:b5:e5:80:b5:e3:3f:9e:17:e7:59:96:96:bf:f6: dc:03:5d:f3:af:2e:53:7c:52:24:60:75:1d:b2:20:2d:36:5f: 23:7d:7a:93:bb:fa:d7:44:85:82:a2:09:62:fa:51:5c:cf:aa: d4:9e:c1:33:02:31:a1:41:fc:e8:7c:c1:0a:49:32:3a:3d:2a: bf:61:fb:5c:3c:02:6c:d7:24:93:aa:14:33:6a:56:d3:c1:7a: 46:a2:e6:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC RUQ1RDk4OTIwHhcNMjUwNTMxMDAzNzUxWhcNMjUwNjA3MDAzNzUxWjAYMRYwFAYD VQQDEw02ODNhNGY1Zi05Zjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtfSDz1/CbWAHJ96Y4DeI0p8UXlf9GNjlQZsD74xRNprqqL6pkbffGr9ggFC t4sO7rW1pN4E8CSVoatfG+SAHUFDSK3hTOi1B0yL/omLrGkd+yPPSMRk/X4YKwxj sqx/DRZQ/P6RsN+02U3NNqMmlNYman7rXdpfzmWlK8zkg7tScPKSWoM72AqocuBH th7J1agpUguxuPzIkHhP76jcgHo04NXwHDMRy/Lz0OfR1TRhaWSyBO6ywS0h0a/0 PWoorpXdXmEZTwG0qlynVMf7PdiyI0sFGuMM/SWQDaQy3Qujnjk7bsdjYgGUlEzO kP1hbMXav/9Jsc3Uy1vpqD5ZowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkr+Xob z8Z0k1PwdNaly5yAvIZ+MB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUI4MS9DRjk2NjNDNjcwRjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xR cG11UEUyZ0xNRmktMWRtSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBN9AfmcHfxyg46SnroCrDAdkWCFzQrSOGlzVJOLP8xMCgfTNmr4Br wzjU/83dJLjl2K30y/N1TDkN1U/nd8ZFMjygy4xkuvyY8KEg1BsxsZWOb4/4Gwlc UcR6IW/0BHC+PFc4XnpxDvOpTpFIEq/jV3Ap52B8EPeM8UT51kU2fe+puJ9HxLwG I4Evo+RuLx5bmsEeKrqOHSIN/MLmNNk+cS63xg6TteWAteM/nhfnWZaWv/bcA13z ry5TfFIkYHUdsiAtNl8jfXqTu/rXRIWCogli+lFcz6rUnsEzAjGhQfzofMEKSTI6 PSq/YftcPAJs1ySTqhQzalbTwXpGouZ1 -----END CERTIFICATE-----Generated at Sat May 31 17:02:22 2025 by rpki-client