$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft File: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json) Hash identifier: ihkWrV005sNhZ7r4AN8lUEj33XMCjAC3zTHsbo1js/Q= Subject key identifier: 2E:36:2B:4D:26:2E:3C:67:F2:60:F1:6D:DC:4C:6F:D4:CA:9C:E2:8C Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 Certificate issuer: /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Certificate serial: 44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft Manifest number: 44 Signing time: Tue 13 May 2025 06:35:56 +0000 Manifest this update: Tue 13 May 2025 06:35:55 +0000 Manifest next update: Tue 20 May 2025 06:35:55 +0000 Files and hashes: 1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: CD/b5+eKjBikhpNReSLN8cklBzgdvP6e1hSTTP1+ECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68 (0x44) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Validity Not Before: May 13 06:35:55 2025 GMT Not After : May 20 06:35:55 2025 GMT Subject: CN=6822e84b-68dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:9f:f6:55:b2:dd:ca:96:82:a6:d6:4c:a9: 03:cb:26:49:73:b6:39:f2:ce:92:c1:f2:3f:31:e5: 3c:b0:48:26:94:56:6b:d7:5e:00:8f:88:8f:de:29: e3:89:58:d1:5c:54:0d:f6:24:69:8d:b6:73:42:54: 14:c7:41:d8:f1:3a:7b:7a:80:b5:38:ca:c3:c3:69: 6a:98:0c:bb:38:2e:27:cd:c1:c3:75:24:c7:7a:65: d1:52:ff:29:5d:5b:f2:c8:5f:3f:19:48:c6:39:c7: da:64:a1:97:e4:3d:69:87:4e:e9:35:4f:4b:66:d3: c0:1f:21:ca:20:e9:63:21:81:53:fe:42:ac:1c:fb: 9c:00:58:2e:99:51:58:05:56:ca:5b:3a:e8:f3:e5: 55:92:d8:02:d2:4c:eb:2f:0b:b6:d5:f2:e2:0a:a3: 93:9b:5d:4c:9d:8b:10:b8:1b:dd:50:91:75:aa:5f: be:13:c3:d4:da:7a:4e:6e:6b:bb:66:77:99:10:22: 69:97:9d:f6:fb:0d:10:f3:22:51:05:e7:f9:60:bf: 5f:be:32:67:d4:a2:f4:e5:15:e1:31:99:8b:a3:af: 9f:ee:84:0f:96:16:f9:42:e7:b5:55:59:9f:90:b6: d4:50:b5:87:31:ca:87:44:43:cb:72:27:64:7d:2f: 06:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:36:2B:4D:26:2E:3C:67:F2:60:F1:6D:DC:4C:6F:D4:CA:9C:E2:8C X509v3 Authority Key Identifier: keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:c9:ab:b8:fe:69:2b:01:45:bc:26:a9:c9:1c:6d:bb:94:d9: 41:50:db:a4:ea:b7:d6:21:09:82:59:1f:0a:4d:73:36:3b:c5: cf:c1:63:e1:fd:39:ed:8b:80:d8:e8:95:5e:b1:e6:63:67:c9: 69:8a:b6:0f:90:50:1f:aa:1a:e7:11:aa:7d:97:b0:87:e5:93: 26:46:43:a3:f1:56:de:33:ad:56:f8:81:a5:61:de:3f:29:cb: 6d:7a:85:01:ec:73:f4:75:40:91:b5:9a:ed:bf:b4:01:c8:70: d9:51:7a:20:41:de:ad:37:de:01:70:90:0a:47:86:23:5e:21: 80:d3:ca:1b:56:f3:07:e0:89:dd:1a:a3:51:92:0a:97:a2:f9: 63:96:28:80:0b:01:bd:d7:4b:7a:7f:7e:88:4d:94:81:9d:53: b4:cf:fe:82:4c:16:c4:6a:3c:02:c9:5d:45:7f:27:b2:95:f7: 17:70:ee:7f:c3:15:68:ab:cb:5e:3e:bc:2d:27:b5:1e:e9:6b: 17:36:7c:b3:6d:7a:d9:74:a3:80:2f:e0:68:a7:b7:d6:d7:da: da:20:ae:32:a3:ac:6f:de:6b:af:1f:43:2b:f5:e4:d7:b7:3b: fb:5e:0b:27:de:6f:8c:91:e1:6d:b5:38:9d:61:fe:2a:94:53: e7:c9:17:6a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjUzNjExMC8GA1UEBRMoRjMzNjdENzQ0NDgzOTlDMThFRjY3QzdDOTg2MTA3Qjgx NEIxMkQ2NDAeFw0yNTA1MTMwNjM1NTVaFw0yNTA1MjAwNjM1NTVaMBgxFjAUBgNV BAMTDTY4MjJlODRiLTY4ZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBz5/2VbLdypaCptZMqQPLJklztjnyzpLB8j8x5TywSCaUVmvXXgCPiI/eKeOJ WNFcVA32JGmNtnNCVBTHQdjxOnt6gLU4ysPDaWqYDLs4LifNwcN1JMd6ZdFS/yld W/LIXz8ZSMY5x9pkoZfkPWmHTuk1T0tm08AfIcog6WMhgVP+Qqwc+5wAWC6ZUVgF VspbOujz5VWS2ALSTOsvC7bV8uIKo5ObXUydixC4G91QkXWqX74Tw9Taek5ua7tm d5kQImmXnfb7DRDzIlEF5/lgv1++MmfUovTlFeExmYujr5/uhA+WFvlC57VVWZ+Q ttRQtYcxyodEQ8tyJ2R9LwYLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULjYrTSYu PGfyYPFt3Exv1Mqc4owwHwYDVR0jBBgwFoAU8zZ9dESDmcGO9nx8mGEHuBSxLWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2L0EzMDVGNEU0Qzk5 QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHpaOWRFU0RtY0dPOW54OG1HRUh1QlN4TFdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTM2L0EzMDVGNEU0Qzk5QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNH TzlueDhtR0VIdUJTeExXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHnJq7j+aSsBRbwmqckcbbuU2UFQ26Tqt9YhCYJZHwpNczY7xc/BY+H9 Oe2LgNjolV6x5mNnyWmKtg+QUB+qGucRqn2XsIflkyZGQ6PxVt4zrVb4gaVh3j8p y216hQHsc/R1QJG1mu2/tAHIcNlReiBB3q033gFwkApHhiNeIYDTyhtW8wfgid0a o1GSCpei+WOWKIALAb3XS3p/fohNlIGdU7TP/oJMFsRqPALJXUV/J7KV9xdw7n/D FWiry14+vC0ntR7paxc2fLNtetl0o4Av4Gint9bX2togrjKjrG/ea68fQyv15Ne3 O/teCyfeb4yR4W21OJ1h/iqUU+fJF2o= -----END CERTIFICATE-----Generated at Tue May 13 14:56:50 2025 by rpki-client