$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: TAyb8FOyVpqRXRz5ej7dCsMtJJ+nSRzDCHtF6MouwK8= Subject key identifier: C8:CA:2F:B8:87:90:14:F3:35:5B:18:C3:2F:A7:0C:5C:75:C3:A4:6C Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 02FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 02F6 Signing time: Sat 31 May 2025 01:28:32 +0000 Manifest this update: Sat 31 May 2025 01:28:31 +0000 Manifest next update: Sat 07 Jun 2025 01:28:31 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: JsVoyllYbg1XqyJg8BA7YvNKAzI05Sye8h4SxioIXnk=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: ScBhfI+tDJwM84UfKu4S2Ej+l19uK9BKKc4lKatvgAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 762 (0x2fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: May 31 01:28:31 2025 GMT Not After : Jun 7 01:28:31 2025 GMT Subject: CN=683a5b40-ea0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:26:00:f9:e0:fa:18:af:fa:c0:ed:a7:a2:3c: ad:7b:ac:0e:09:64:a8:ab:8f:47:09:fe:6c:64:89: 44:69:9e:71:7c:22:28:20:17:36:64:cb:1a:99:0d: 2c:27:11:76:7e:bf:f4:aa:df:a9:66:bc:4b:2c:1a: fd:bd:00:4c:a3:dd:48:0f:c4:c5:bf:bb:f9:d7:f1: c5:b1:36:06:3a:8c:1b:fa:d8:c1:86:4c:00:bb:f3: a3:8b:f0:71:82:df:90:45:68:f0:d2:ca:bf:7c:26: d8:dd:78:48:ce:85:ec:f6:0a:83:0a:65:74:03:c8: 9e:22:b2:08:39:fb:1d:4b:59:52:53:3f:e1:10:56: 5d:57:d8:55:38:07:49:f1:d1:9c:de:8d:3b:b4:de: 29:e4:46:04:cf:0d:cc:f2:be:3f:d7:50:9e:76:e1: d5:2b:4e:ee:b2:35:a4:d4:b0:e7:73:e9:23:83:1f: e5:9d:e8:78:10:33:d3:93:c4:6e:51:91:c0:46:28: 79:3e:42:bb:8d:fe:19:ee:fd:a5:be:a0:01:2f:e7: a6:20:4e:36:77:c7:7d:64:ba:7d:0b:1f:e1:3c:26: 47:45:9f:58:54:be:60:3f:55:15:58:b0:9e:a2:32: 9f:9e:7f:5c:98:52:ed:07:84:e8:5c:5a:80:e4:ad: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:2F:B8:87:90:14:F3:35:5B:18:C3:2F:A7:0C:5C:75:C3:A4:6C X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:dd:cb:dc:64:fd:f9:5d:0f:31:7d:cc:9c:8c:dd:fe:3e:70: ad:75:b7:4b:8d:20:89:5b:a4:68:36:70:80:38:9d:94:f5:39: a0:1a:c5:6d:3c:17:cb:d8:09:ef:05:c4:30:38:5d:0a:9e:f0: 6d:7a:ce:d9:19:31:eb:6f:b3:bd:e1:d3:4a:d6:46:03:a6:1e: 14:56:ad:85:46:65:47:b6:ae:6f:6c:ee:4a:e0:98:cf:76:d4: 82:09:cb:5b:e0:c0:d8:e1:17:3e:20:21:19:50:77:63:7b:13: 11:1a:ee:fd:06:6e:23:85:ed:49:60:fc:12:bc:41:d2:29:cb: 93:23:c3:02:92:ae:bf:e0:42:89:50:b2:6e:19:0f:c4:bf:8a: 26:d5:76:3f:28:3e:fb:9b:6e:dd:df:a0:66:a9:0d:f6:62:89: 24:70:ca:08:81:87:29:32:f8:31:10:4d:91:d6:a2:75:df:6f: 19:f5:37:51:67:48:fb:f9:87:23:f3:4b:ee:b1:75:c4:d4:f7: 02:ff:5d:7e:83:4d:3a:23:8c:1f:1b:82:eb:d6:6b:fe:88:9a: 1d:99:8c:86:1b:c1:0f:97:03:9d:10:e1:13:bf:11:04:76:c6: f2:5e:4c:fd:f8:a4:56:78:8b:c5:43:77:62:51:2d:fd:be:5f: a0:52:85:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjUwNTMxMDEyODMxWhcNMjUwNjA3MDEyODMxWjAYMRYwFAYD VQQDEw02ODNhNWI0MC1lYTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7iYA+eD6GK/6wO2nojyte6wOCWSoq49HCf5sZIlEaZ5xfCIoIBc2ZMsamQ0s JxF2fr/0qt+pZrxLLBr9vQBMo91ID8TFv7v51/HFsTYGOowb+tjBhkwAu/Oji/Bx gt+QRWjw0sq/fCbY3XhIzoXs9gqDCmV0A8ieIrIIOfsdS1lSUz/hEFZdV9hVOAdJ 8dGc3o07tN4p5EYEzw3M8r4/11CeduHVK07usjWk1LDnc+kjgx/lneh4EDPTk8Ru UZHARih5PkK7jf4Z7v2lvqABL+emIE42d8d9ZLp9Cx/hPCZHRZ9YVL5gP1UVWLCe ojKfnn9cmFLtB4ToXFqA5K3bMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjKL7iH kBTzNVsYwy+nDFx1w6RsMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS3cvcZP35XQ8xfcycjN3+PnCtdbdLjSCJW6RoNnCAOJ2U9TmgGsVt PBfL2AnvBcQwOF0KnvBtes7ZGTHrb7O94dNK1kYDph4UVq2FRmVHtq5vbO5K4JjP dtSCCctb4MDY4Rc+ICEZUHdjexMRGu79Bm4jhe1JYPwSvEHSKcuTI8MCkq6/4EKJ ULJuGQ/Ev4om1XY/KD77m27d36BmqQ32YokkcMoIgYcpMvgxEE2R1qJ1328Z9TdR Z0j7+Ycj80vusXXE1PcC/11+g006I4wfG4Lr1mv+iJodmYyGG8EPlwOdEOETvxEE dsbyXkz9+KRWeIvFQ3diUS39vl+gUoW9 -----END CERTIFICATE-----Generated at Sat May 31 17:34:27 2025 by rpki-client