$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: b2EpYsWhb/OERc3q428GkkpZDmd55VvSq5frI1FXrec= Subject key identifier: C1:76:1C:1E:7A:90:D2:4B:B6:18:E9:07:BC:8A:59:BB:EF:9C:11:10 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: A3 Signing time: Sat 31 May 2025 06:00:17 +0000 Manifest this update: Sat 31 May 2025 06:00:17 +0000 Manifest next update: Sat 07 Jun 2025 06:00:17 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: NptAlEBaP353bwVTbTeVwbKAytymiS0tUCp5/DNUg2k=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: May 31 06:00:17 2025 GMT Not After : Jun 7 06:00:17 2025 GMT Subject: CN=683a9af1-ec99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:eb:a5:5d:8e:06:63:fb:f0:f0:a4:0c:a6: 4e:6b:8e:8a:c3:6a:64:c8:cb:8f:5b:17:81:b4:de: b1:12:b8:94:2a:f9:c7:e4:03:b7:3d:3d:3d:99:4f: ec:52:1c:9e:2d:e1:03:3c:cb:94:b3:d5:10:d2:7b: 1c:e6:84:4f:cc:fb:d3:a1:94:38:6f:ae:b1:41:fa: 2f:da:48:c7:68:3a:f4:c2:e8:77:7e:76:df:81:5d: 76:be:6a:ce:82:72:3e:da:8d:a6:a3:e7:59:2d:6b: 8f:90:92:36:21:22:32:2a:cd:7e:98:32:ee:59:51: 7b:22:e3:45:20:28:25:1b:f9:dd:5e:15:61:ca:c6: df:67:f3:ba:45:f6:a4:d0:2e:65:fe:14:dc:f8:00: 68:04:f1:47:71:da:fe:d2:42:b2:d7:3c:91:31:66: 9a:99:c5:40:41:b8:9c:06:66:c3:90:4d:37:e3:5c: 87:b3:02:18:60:bb:90:f7:3d:98:82:41:00:16:3c: 72:83:c1:f7:38:f1:1e:90:61:7f:34:9d:cb:70:b9: ff:75:c8:a8:92:d0:d1:7f:c2:e7:77:f8:35:6d:f0: 47:a5:fb:f4:e7:bd:e9:7d:96:b8:f3:3a:66:c2:62: e4:af:09:ec:bd:f1:b7:09:a6:2f:6f:ed:1a:65:48: 49:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:76:1C:1E:7A:90:D2:4B:B6:18:E9:07:BC:8A:59:BB:EF:9C:11:10 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:9f:ef:8b:22:c9:a2:4d:c9:eb:76:03:9f:55:d1:fe:f2:92: a0:b7:0c:ba:e4:6b:ea:ec:75:ae:f5:1b:6e:ca:f1:a1:ae:09: 44:ec:09:1a:8d:8c:a8:d9:9b:31:1c:27:bc:ca:8b:04:a2:ee: 2d:5b:15:29:7b:82:a8:23:7b:10:b8:bc:41:e8:90:3c:4c:28: 36:b8:61:44:5d:6d:ea:ba:9c:3e:e4:fa:a9:02:c3:3c:bd:f0: fb:dc:5a:55:af:37:fc:78:6b:3f:41:74:54:aa:90:69:7d:62: 68:6c:6f:37:6f:0d:6e:02:05:2c:2c:63:86:12:5e:fe:20:86: cd:1e:dd:18:df:28:87:eb:cc:2a:a4:ed:fa:e0:09:9d:8e:47: c2:50:ae:bb:a8:8d:0a:61:7b:cd:cc:d5:1c:d2:a2:1a:28:c3: 22:89:62:87:27:09:25:98:39:6b:00:b7:6e:11:be:c5:d2:59: 60:ec:16:7a:8d:ca:31:2f:27:55:64:92:fc:66:55:0f:5c:11: fe:02:3b:85:43:fe:7a:fc:d7:94:13:75:69:5f:57:20:44:8a: 5f:b6:4b:73:66:6c:be:45:ba:0e:6f:9b:ac:ad:f0:b1:65:4a: 9a:4e:ee:5c:08:3e:d8:78:a4:29:63:9b:d9:19:a7:43:48:fa: 01:da:11:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwNTMxMDYwMDE3WhcNMjUwNjA3MDYwMDE3WjAYMRYwFAYD VQQDEw02ODNhOWFmMS1lYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SzrpV2OBmP78PCkDKZOa46Kw2pkyMuPWxeBtN6xEriUKvnH5AO3PT09mU/s UhyeLeEDPMuUs9UQ0nsc5oRPzPvToZQ4b66xQfov2kjHaDr0wuh3fnbfgV12vmrO gnI+2o2mo+dZLWuPkJI2ISIyKs1+mDLuWVF7IuNFICglG/ndXhVhysbfZ/O6Rfak 0C5l/hTc+ABoBPFHcdr+0kKy1zyRMWaamcVAQbicBmbDkE0341yHswIYYLuQ9z2Y gkEAFjxyg8H3OPEekGF/NJ3LcLn/dcioktDRf8Lnd/g1bfBHpfv0573pfZa48zpm wmLkrwnsvfG3CaYvb+0aZUhJSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF2HB56 kNJLthjpB7yKWbvvnBEQMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrn++LIsmiTcnrdgOfVdH+8pKgtwy65Gvq7HWu9RtuyvGhrglE7Aka jYyo2ZsxHCe8yosEou4tWxUpe4KoI3sQuLxB6JA8TCg2uGFEXW3qupw+5PqpAsM8 vfD73FpVrzf8eGs/QXRUqpBpfWJobG83bw1uAgUsLGOGEl7+IIbNHt0Y3yiH68wq pO364AmdjkfCUK67qI0KYXvNzNUc0qIaKMMiiWKHJwklmDlrALduEb7F0llg7BZ6 jcoxLydVZJL8ZlUPXBH+AjuFQ/56/NeUE3VpX1cgRIpftktzZmy+RboOb5usrfCx ZUqaTu5cCD7YeKQpY5vZGadDSPoB2hEI -----END CERTIFICATE-----Generated at Sat May 31 17:16:21 2025 by rpki-client