$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: INoloj1p1IIB6dV6tcpN3VeYZVM9mejIg/LJF/1BRTs= Subject key identifier: F3:A4:95:1B:84:9F:0C:BB:1A:72:3C:85:A2:B8:58:68:6D:5D:6E:2B Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: 81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: 7D Signing time: Sun 01 Jun 2025 06:27:49 +0000 Manifest this update: Sun 01 Jun 2025 06:27:48 +0000 Manifest next update: Sun 08 Jun 2025 06:27:48 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: vL6rOVlJ42n68hgX4ZTl33eJe9EhjTtZSm+boqpDbi8=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 129 (0x81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Jun 1 06:27:48 2025 GMT Not After : Jun 8 06:27:48 2025 GMT Subject: CN=683bf2e4-6c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:c6:99:66:77:af:d6:f5:06:83:7b:9d:64: f4:5e:07:68:ee:04:ed:f2:6e:1d:6a:43:96:70:9b: 66:a7:b3:c8:6e:6a:56:41:fe:fd:10:dd:ba:5a:29: d4:1d:b4:7e:b5:d1:60:12:ce:71:ca:05:15:60:26: 75:2c:c8:22:5a:14:d1:e4:1d:87:12:e6:65:47:a9: 11:ba:d3:b7:de:eb:fe:59:65:56:a9:ea:67:8f:3c: f8:c1:1d:ae:9f:e1:3a:0c:fb:c1:87:60:4d:c2:88: f2:0c:3d:d6:10:c9:62:14:43:c5:06:03:55:84:02: 09:44:57:91:20:ca:06:12:9f:8a:42:d1:6f:b7:95: f3:6d:97:aa:b9:36:e9:c5:13:64:40:85:21:4d:75: 0a:d2:6d:ed:88:bf:3f:02:45:20:a1:67:42:68:3b: e0:46:32:c8:91:46:d5:06:c1:72:11:8b:99:0d:62: c9:7e:1a:63:0f:d9:24:21:73:01:0f:a2:66:1c:ff: 3d:8e:6b:23:4f:6d:fe:54:5f:8b:72:78:39:c8:ab: 4e:db:d6:6d:95:0a:ad:18:bf:75:61:8b:27:49:9d: d8:a7:fc:a6:3a:27:40:56:7a:98:2e:7f:3c:32:d3: 08:72:15:0f:08:e9:48:a2:e8:5f:0a:92:46:a2:23: c1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A4:95:1B:84:9F:0C:BB:1A:72:3C:85:A2:B8:58:68:6D:5D:6E:2B X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:95:1c:5f:fc:81:8e:e3:1f:c6:4c:d7:47:2e:54:ea:15:2b: c6:68:95:e8:ee:e0:a0:ec:a4:a6:84:89:e9:b2:31:85:60:fb: ef:c5:aa:e8:2d:e1:74:6e:46:0c:e9:2b:3a:e9:08:ed:f5:c7: af:71:d5:6c:1b:4b:03:e8:2a:3d:3a:c4:ee:81:d4:01:f8:d1: a7:f9:a5:3b:aa:bc:2a:70:22:f3:0e:a2:7a:5a:67:53:e6:14: 60:b8:5e:dc:0a:12:fd:a5:70:32:97:b7:53:36:aa:e2:7a:26: 22:78:91:f1:1e:c4:fa:ec:d4:10:be:2f:fc:05:cf:79:bb:5c: f0:e4:bd:24:6d:45:4f:dd:14:d3:7c:de:26:01:d8:97:fd:3a: d0:51:02:38:f1:da:77:07:11:4a:64:25:7a:e1:6a:df:01:01: 93:8d:0b:59:33:f5:5f:37:3a:ea:83:9c:79:63:d3:92:c2:63: c4:d3:a9:06:08:7c:ea:4c:99:49:56:86:16:7f:98:5b:3e:27: ee:f0:41:e2:1a:a0:d5:63:c6:99:2c:1c:6a:09:16:98:e8:ff: 02:a8:2a:f6:a9:7d:5f:ed:ab:65:fa:7c:19:4d:95:a0:91:47: b6:3e:04:f3:6f:40:36:8b:f4:15:30:67:a2:71:d4:de:24:ff: b0:4e:e9:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUwNjAxMDYyNzQ4WhcNMjUwNjA4MDYyNzQ4WjAYMRYwFAYD VQQDEw02ODNiZjJlNC02YzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqnGmWZ3r9b1BoN7nWT0Xgdo7gTt8m4dakOWcJtmp7PIbmpWQf79EN26WinU HbR+tdFgEs5xygUVYCZ1LMgiWhTR5B2HEuZlR6kRutO33uv+WWVWqepnjzz4wR2u n+E6DPvBh2BNwojyDD3WEMliFEPFBgNVhAIJRFeRIMoGEp+KQtFvt5XzbZequTbp xRNkQIUhTXUK0m3tiL8/AkUgoWdCaDvgRjLIkUbVBsFyEYuZDWLJfhpjD9kkIXMB D6JmHP89jmsjT23+VF+Lcng5yKtO29ZtlQqtGL91YYsnSZ3Yp/ymOidAVnqYLn88 MtMIchUPCOlIouhfCpJGoiPBXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOklRuE nwy7GnI8haK4WGhtXW4rMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBslRxf/IGO4x/GTNdHLlTqFSvGaJXo7uCg7KSmhInpsjGFYPvvxaro LeF0bkYM6Ss66Qjt9cevcdVsG0sD6Co9OsTugdQB+NGn+aU7qrwqcCLzDqJ6WmdT 5hRguF7cChL9pXAyl7dTNqrieiYieJHxHsT67NQQvi/8Bc95u1zw5L0kbUVP3RTT fN4mAdiX/TrQUQI48dp3BxFKZCV64WrfAQGTjQtZM/VfNzrqg5x5Y9OSwmPE06kG CHzqTJlJVoYWf5hbPifu8EHiGqDVY8aZLBxqCRaY6P8CqCr2qX1f7atl+nwZTZWg kUe2PgTzb0A2i/QVMGeicdTeJP+wTukk -----END CERTIFICATE-----Generated at Mon Jun 2 21:34:22 2025 by rpki-client