$ rpki-client -vvf rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft File: dzKJlNE-mJVBnIEGa6YRgdGCtog.mft (raw, json) Hash identifier: wT0CDK3lbStrdKILJ55I1BV7F58iZ+MCimgZ4XAlofQ= Subject key identifier: 6E:11:A4:C9:FA:61:52:5F:F3:A2:F7:DB:D2:6C:47:81:29:E3:98:9D Authority key identifier: 77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 Certificate issuer: /CN=A91F71E8/serialNumber=77328994D13E9895419C81066BA61181D182B688 Certificate serial: 11E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft Manifest number: 1A0C Signing time: Fri 30 May 2025 17:21:37 +0000 Manifest this update: Fri 30 May 2025 17:21:37 +0000 Manifest next update: Fri 06 Jun 2025 17:21:37 +0000 Files and hashes: 1: dzKJlNE-mJVBnIEGa6YRgdGCtog.crl (hash: lGN3wGq6GpcD8kpiFvJ2NVHt/tVbYtbRjYGCcJLxJx4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4584 (0x11e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F71E8, serialNumber=77328994D13E9895419C81066BA61181D182B688 Validity Not Before: May 30 17:21:37 2025 GMT Not After : Jun 6 17:21:37 2025 GMT Subject: CN=6839e921-6f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:29:8f:0d:10:a8:71:3f:a7:13:9e:15:17: cc:31:f7:6e:14:dc:fc:b0:8c:19:fa:3b:dd:da:d1: 2c:93:67:6d:37:61:7e:3d:d7:de:f0:5b:98:b9:39: 75:75:d2:41:42:77:f6:10:c3:a9:08:cb:bd:5e:d6: bd:2a:4e:f8:43:09:5d:ba:a5:23:fe:20:61:28:ee: f0:93:0f:14:22:1c:4b:be:35:16:b4:f5:97:d8:2d: 48:f4:e1:1b:ae:b0:b8:b5:36:7f:da:f0:ba:9a:ae: 6d:aa:b2:cb:42:96:49:76:5c:87:8e:a5:26:b7:6c: 04:76:1d:7e:d6:ad:e6:68:c8:e0:bc:6e:21:af:96: 6a:4b:70:ab:3d:3f:26:73:3e:5f:9e:c0:78:1c:22: 58:ec:e1:ac:fe:22:2b:4d:5e:3c:1a:c5:7a:6c:c3: 0c:d5:5d:58:2d:59:86:b7:6c:60:2d:52:84:89:8e: 1d:f1:7e:57:81:c9:db:77:a2:fe:c6:9d:f0:ed:41: e6:4c:74:5b:d1:9a:9d:94:fc:ec:0d:3f:cf:36:88: 9c:03:b1:2b:f4:c8:ad:5b:dd:8f:a4:f4:3b:c5:80: 31:84:65:1d:63:06:ce:b0:13:5b:a2:ed:bc:47:1f: a7:93:5f:9f:d9:fc:40:97:1f:7d:0c:3e:4e:cc:bb: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:11:A4:C9:FA:61:52:5F:F3:A2:F7:DB:D2:6C:47:81:29:E3:98:9D X509v3 Authority Key Identifier: keyid:77:32:89:94:D1:3E:98:95:41:9C:81:06:6B:A6:11:81:D1:82:B6:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzKJlNE-mJVBnIEGa6YRgdGCtog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F71E8/62B787A0EEE411E89E665D4DC4F9AE02/dzKJlNE-mJVBnIEGa6YRgdGCtog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:7b:29:0c:d8:ba:da:e7:44:66:5e:c7:09:a9:39:ed:43:47: 77:61:a4:67:1b:0c:35:ab:de:66:96:93:0c:37:6d:3f:d9:e9: de:e9:c5:43:94:43:75:56:8a:72:dc:bd:95:fc:4c:cf:cc:c3: 6d:e3:5d:f1:56:f7:a9:59:1c:12:b9:9d:12:bd:05:ad:f5:79: 93:d0:e0:07:f6:91:21:82:82:f2:4e:4f:1e:62:4e:4a:ea:3d: 98:ae:be:d4:20:ab:27:51:cf:83:b2:9d:4d:97:9d:eb:19:98: 7a:b0:b0:8c:91:b4:07:a2:98:38:79:ae:b8:73:67:65:c2:4f: 30:94:09:8c:40:02:60:37:40:a6:fc:07:b5:fb:6b:64:0a:5b: 32:49:8e:24:04:35:01:b1:f8:ac:77:81:3c:0a:9d:87:2e:33: a9:96:71:ed:cf:da:19:47:60:e8:0c:39:86:dc:63:87:be:47: ec:79:e2:1a:f0:a9:c8:48:9e:6f:b0:cc:d4:ca:2c:5f:44:38: 83:b6:4e:d4:98:ac:46:50:c3:50:06:53:dd:5e:c3:3e:4e:b2: 9c:62:ab:5b:3b:0c:ff:b8:ea:ba:91:e1:4a:c3:62:74:44:cf: 5b:f3:ef:d8:b3:9b:f5:13:41:70:51:e2:45:88:30:73:f8:df: 31:eb:48:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcxRTgxMTAvBgNVBAUTKDc3MzI4OTk0RDEzRTk4OTU0MTlDODEwNjZCQTYxMTgx RDE4MkI2ODgwHhcNMjUwNTMwMTcyMTM3WhcNMjUwNjA2MTcyMTM3WjAYMRYwFAYD VQQDEw02ODM5ZTkyMS02ZjkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCcpjw0QqHE/pxOeFRfMMfduFNz8sIwZ+jvd2tEsk2dtN2F+Pdfe8FuYuTl1 ddJBQnf2EMOpCMu9Xta9Kk74QwlduqUj/iBhKO7wkw8UIhxLvjUWtPWX2C1I9OEb rrC4tTZ/2vC6mq5tqrLLQpZJdlyHjqUmt2wEdh1+1q3maMjgvG4hr5ZqS3CrPT8m cz5fnsB4HCJY7OGs/iIrTV48GsV6bMMM1V1YLVmGt2xgLVKEiY4d8X5Xgcnbd6L+ xp3w7UHmTHRb0ZqdlPzsDT/PNoicA7Er9MitW92PpPQ7xYAxhGUdYwbOsBNbou28 Rx+nk1+f2fxAlx99DD5OzLuF1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4RpMn6 YVJf86L329JsR4Ep45idMB8GA1UdIwQYMBaAFHcyiZTRPpiVQZyBBmumEYHRgraI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzFFOC82MkI3ODdBMEVF RTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1KVkJuSUVHYTZZUmdkR0N0 b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2R6S0psTkUtbUpWQm5JRUdhNllSZ2RHQ3RvZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzFFOC82MkI3ODdBMEVFRTQxMUU4OUU2NjVENERDNEY5QUUwMi9kektKbE5FLW1K VkJuSUVHYTZZUmdkR0N0b2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyeykM2Lra50RmXscJqTntQ0d3YaRnGww1q95mlpMMN20/2ene6cVD lEN1Vopy3L2V/EzPzMNt413xVvepWRwSuZ0SvQWt9XmT0OAH9pEhgoLyTk8eYk5K 6j2Yrr7UIKsnUc+Dsp1Nl53rGZh6sLCMkbQHopg4ea64c2dlwk8wlAmMQAJgN0Cm /Ae1+2tkClsySY4kBDUBsfisd4E8Cp2HLjOplnHtz9oZR2DoDDmG3GOHvkfseeIa 8KnISJ5vsMzUyixfRDiDtk7UmKxGUMNQBlPdXsM+TrKcYqtbOwz/uOq6keFKw2J0 RM9b8+/Ys5v1E0FwUeJFiDBz+N8x60hT -----END CERTIFICATE-----Generated at Sat May 31 16:52:15 2025 by rpki-client