$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json) Hash identifier: IjJTXyCJ1BWxXSOxHi1GDfqhWVnEVgCiqzQmOMMeHtw= Subject key identifier: 5C:DD:26:A4:4B:E1:72:25:D2:8B:AA:91:98:F6:63:FD:2D:00:33:1E Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft Manifest number: 81 Signing time: Sun 11 May 2025 05:35:56 +0000 Manifest this update: Sun 11 May 2025 05:35:55 +0000 Manifest next update: Sun 18 May 2025 05:35:55 +0000 Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: a+jqLgsUb8pb1k5RrcP8PBeEWCUtectBPPTYupz6EOU=) 2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=) 3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2 Validity Not Before: May 11 05:35:55 2025 GMT Not After : May 18 05:35:55 2025 GMT Subject: CN=6820373c-64ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:57:84:88:cb:fe:14:d4:08:1b:5d:bc:91: 52:74:e7:2a:c2:1f:e0:be:68:8a:3a:48:34:74:2e: af:2e:45:95:d9:d9:9b:1f:40:be:c1:d6:8a:53:28: bc:e2:28:c1:9b:77:ca:96:28:c1:0d:18:e8:a4:93: 48:fa:ea:8d:93:22:05:e6:2e:39:05:dd:3e:1b:2c: 09:af:d8:4c:7d:0e:2a:08:b3:02:55:57:28:57:d7: d4:19:d4:8b:13:ec:55:20:46:8b:49:37:12:c4:21: 15:1c:2f:e3:58:e2:ca:41:99:cd:97:a1:1a:74:05: 52:4e:0e:77:26:3c:cd:d5:88:c9:e5:1d:98:12:96: 5f:18:3c:5d:54:5d:90:4c:ce:a9:8b:18:53:41:0b: 30:ca:55:67:0f:71:e4:5f:c7:a6:d1:f1:96:d1:64: 10:82:a9:b8:36:2a:f2:b3:6c:dc:3b:0e:f1:2d:73: 47:b4:db:a2:bd:c0:0a:44:b1:6c:00:0e:e7:b4:52: 3d:2c:a3:31:53:98:83:2c:48:50:d3:90:a3:d4:35: dc:84:09:6a:2c:ce:d2:34:db:a6:25:3f:1e:60:62: 52:43:a1:53:83:c1:06:39:45:41:36:06:16:0a:0f: 6f:8f:ba:a4:58:6a:b1:40:e1:08:5d:c2:04:fc:2d: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:26:A4:4B:E1:72:25:D2:8B:AA:91:98:F6:63:FD:2D:00:33:1E X509v3 Authority Key Identifier: keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:91:f2:06:0c:b1:5e:6a:f7:ea:3a:b4:04:6f:46:f2:3d:63: c2:b3:c5:a3:42:67:7f:df:2a:75:3c:0a:7e:bf:af:fb:fa:85: 06:60:b8:76:0f:56:37:fe:fc:b1:b4:ec:6e:84:91:8c:1f:b3: 52:da:0b:36:f9:59:e1:1d:a9:70:77:44:34:f8:38:7d:77:0d: 5f:c2:0f:d4:ba:46:30:09:cd:e6:5d:c6:e3:97:34:28:bf:c2: de:d5:e7:18:f1:24:d5:40:e2:aa:c9:ff:6c:3a:f0:8c:65:4c: eb:59:92:62:c6:52:a0:b5:c9:36:50:62:90:57:ac:e2:8c:22: 21:72:f6:64:75:e3:f2:7c:0b:6c:2b:60:cb:cd:a6:a3:a9:e1: f9:58:31:f1:47:7b:5a:a2:fd:57:2c:41:9c:a7:64:72:74:bd: a1:f5:58:fc:52:51:88:4e:11:be:3d:58:30:3e:58:d3:81:15: ba:68:8b:ea:3b:a7:a9:1b:1a:05:16:27:ec:c4:88:6d:ea:9b: 04:af:1a:87:e4:6c:60:77:7f:19:8a:7d:96:23:5b:15:ff:fd: 38:ac:29:72:29:22:b3:b1:f3:48:cc:bd:49:35:ed:ce:1a:f6: 5b:b7:5d:24:96:70:32:df:c3:0b:59:09:2c:92:39:08:7c:10: 17:fa:a9:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzgxOUExMTAvBgNVBAUTKDBCMzY2RTA3MENGRTcwMEU0NzdFRTQ3NEQ2Qzk1NDlE RDNCMzhCRjIwHhcNMjUwNTExMDUzNTU1WhcNMjUwNTE4MDUzNTU1WjAYMRYwFAYD VQQDEw02ODIwMzczYy02NGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqVXhIjL/hTUCBtdvJFSdOcqwh/gvmiKOkg0dC6vLkWV2dmbH0C+wdaKUyi8 4ijBm3fKlijBDRjopJNI+uqNkyIF5i45Bd0+GywJr9hMfQ4qCLMCVVcoV9fUGdSL E+xVIEaLSTcSxCEVHC/jWOLKQZnNl6EadAVSTg53JjzN1YjJ5R2YEpZfGDxdVF2Q TM6pixhTQQswylVnD3HkX8em0fGW0WQQgqm4Nirys2zcOw7xLXNHtNuivcAKRLFs AA7ntFI9LKMxU5iDLEhQ05Cj1DXchAlqLM7SNNumJT8eYGJSQ6FTg8EGOUVBNgYW Cg9vj7qkWGqxQOEIXcIE/C32ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzdJqRL 4XIl0ouqkZj2Y/0tADMeMB8GA1UdIwQYMBaAFAs2bgcM/nAOR37kdNbJVJ3Ts4vy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODE5QS81Rjg5RjQzMDg2 QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNBNUhmdVIwMXNsVW5kT3pp X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N6WnVCd3otY0E1SGZ1UjAxc2xVbmRPemlfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODE5QS81Rjg5RjQzMDg2QjExMUVGQUY2RUNCNTJDNEY5QUUwMi9Delp1Qnd6LWNB NUhmdVIwMXNsVW5kT3ppX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMkfIGDLFeavfqOrQEb0byPWPCs8WjQmd/3yp1PAp+v6/7+oUGYLh2 D1Y3/vyxtOxuhJGMH7NS2gs2+VnhHalwd0Q0+Dh9dw1fwg/UukYwCc3mXcbjlzQo v8Le1ecY8STVQOKqyf9sOvCMZUzrWZJixlKgtck2UGKQV6zijCIhcvZkdePyfAts K2DLzaajqeH5WDHxR3taov1XLEGcp2RydL2h9Vj8UlGIThG+PVgwPljTgRW6aIvq O6epGxoFFifsxIht6psErxqH5Gxgd38Zin2WI1sV//04rClyKSKzsfNIzL1JNe3O GvZbt10klnAy38MLWQkskjkIfBAX+qnV -----END CERTIFICATE-----Generated at Mon May 12 01:37:45 2025 by rpki-client