$ rpki-client -vvf rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft File: 2z39hs6_6u06rxXeruaWUjR0aik.mft (raw, json) Hash identifier: ambMamx+mt2FvMbECGXo2KGDRU1k09a4iTbosB2QAqI= Subject key identifier: 49:71:8A:5A:49:78:76:9D:19:BC:0E:E7:62:8C:B6:80:AA:24:39:35 Authority key identifier: DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 Certificate issuer: /CN=A9171BF0/serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft Manifest number: 5F Signing time: Sat 17 May 2025 06:34:33 +0000 Manifest this update: Sat 17 May 2025 06:34:32 +0000 Manifest next update: Sat 24 May 2025 06:34:32 +0000 Files and hashes: 1: 2z39hs6_6u06rxXeruaWUjR0aik.crl (hash: z2QTkbKDZorYPmzKM6t73dsb90q8sbnkCF5UV8iTTj0=) 2: 12004368A41611EFA0D7CD42C4F9AE02.roa (hash: 9YzGJkxen0bF7ZOSO15+u2xKU2H/RKyzN947mBYbnYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171BF0, serialNumber=DB3DFD86CEBFEAED3AAF15DEAEE6965234746A29 Validity Not Before: May 17 06:34:32 2025 GMT Not After : May 24 06:34:32 2025 GMT Subject: CN=68282df9-ac5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:e2:1c:b8:71:17:c1:ba:2c:de:dc:78:14: 99:15:c6:b5:e4:8a:fc:49:3e:7d:9c:d4:50:54:78: 04:50:9b:91:f7:31:76:14:af:1c:ae:20:ee:b3:27: 3f:15:13:07:f6:20:9c:00:d8:88:b9:73:8d:16:6d: 73:1a:39:06:48:a1:a5:95:61:d4:d3:88:33:0b:71: 05:b7:5a:37:1a:3f:f9:3d:9c:44:e9:a4:35:fe:84: d2:24:ca:f4:e0:4f:6b:98:51:f3:e8:56:2c:8b:40: 5a:65:b0:e2:29:ac:b6:08:d5:51:1a:b3:d4:81:75: 52:9c:fc:32:44:70:6e:88:c3:49:83:5d:6b:45:45: 01:e4:f9:f1:26:e0:03:0a:df:64:45:1c:86:fb:b3: 9e:c4:a9:2b:d2:10:f0:c0:ad:8c:45:0c:b7:ce:0a: 34:91:64:fb:3e:b0:49:b2:5a:55:14:7b:01:37:ed: 72:ca:11:48:6e:1a:91:d0:bc:e2:6c:b8:ae:be:f8: 34:b0:5c:98:47:6c:49:59:4c:f1:22:84:9a:55:cb: 71:46:1d:fb:bd:69:93:ff:b2:c5:66:fe:2c:f0:12: 07:6e:0a:81:29:3d:9c:59:f9:59:17:a2:5c:b5:34: f1:40:4d:27:ab:c6:64:7b:20:9f:5b:98:e9:ce:95: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:71:8A:5A:49:78:76:9D:19:BC:0E:E7:62:8C:B6:80:AA:24:39:35 X509v3 Authority Key Identifier: keyid:DB:3D:FD:86:CE:BF:EA:ED:3A:AF:15:DE:AE:E6:96:52:34:74:6A:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2z39hs6_6u06rxXeruaWUjR0aik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171BF0/A78F1B12A41511EFA14FBD3FC4F9AE02/2z39hs6_6u06rxXeruaWUjR0aik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ce:ef:3e:e0:f6:e2:fe:14:c9:a1:b6:0b:84:0b:2d:1f:67: 08:4a:69:23:25:e5:99:9c:8e:92:f6:bf:22:1f:fa:95:00:11: 36:87:87:2b:5d:b4:0e:1c:a3:71:56:49:23:f5:06:32:43:e8: 6d:24:27:f3:f8:7e:da:89:f0:88:9e:5c:82:3c:2e:2b:2d:49: 1f:b5:a7:b4:66:13:60:dc:af:12:e0:53:f1:3f:2e:b5:92:12: 40:3a:b3:09:f5:aa:e1:a8:a1:8f:75:e6:40:f2:04:9d:da:9e: 5d:94:09:0b:2e:3e:de:12:53:85:ff:bd:93:8f:15:8f:95:8f: 1d:22:bc:4b:b5:72:b6:77:59:1d:d2:ff:e2:73:7f:e3:e8:91: 47:52:db:96:11:25:85:02:51:7a:28:98:b4:78:50:89:a4:9b: 7e:1d:53:11:1c:d1:ce:87:06:68:ce:99:f3:87:3b:c9:3b:a8: 3b:8a:51:fd:7b:df:17:4a:d6:fb:e6:35:29:16:3a:93:11:b6: 03:f3:42:6d:0b:10:ac:cb:b0:69:3c:c6:e3:a1:21:45:55:49: 8c:f9:b9:e9:74:f0:2a:e0:87:3e:1a:cd:b8:c4:81:7a:9d:d5: cd:06:de:b9:19:e0:54:c1:e1:ea:72:11:c8:28:1e:33:48:1d: e0:5b:97:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MUJGMDExMC8GA1UEBRMoREIzREZEODZDRUJGRUFFRDNBQUYxNURFQUVFNjk2NTIz NDc0NkEyOTAeFw0yNTA1MTcwNjM0MzJaFw0yNTA1MjQwNjM0MzJaMBgxFjAUBgNV BAMTDTY4MjgyZGY5LWFjNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4MeIcuHEXwbos3tx4FJkVxrXkivxJPn2c1FBUeARQm5H3MXYUrxyuIO6zJz8V Ewf2IJwA2Ii5c40WbXMaOQZIoaWVYdTTiDMLcQW3WjcaP/k9nETppDX+hNIkyvTg T2uYUfPoViyLQFplsOIprLYI1VEas9SBdVKc/DJEcG6Iw0mDXWtFRQHk+fEm4AMK 32RFHIb7s57EqSvSEPDArYxFDLfOCjSRZPs+sEmyWlUUewE37XLKEUhuGpHQvOJs uK6++DSwXJhHbElZTPEihJpVy3FGHfu9aZP/ssVm/izwEgduCoEpPZxZ+VkXoly1 NPFATSerxmR7IJ9bmOnOlTOnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSXGKWkl4 dp0ZvA7nYoy2gKokOTUwHwYDVR0jBBgwFoAU2z39hs6/6u06rxXeruaWUjR0aikw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxQkYwL0E3OEYxQjEyQTQx NTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUwNnJ4WGVydWFXVWpSMGFp ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnozOWhzNl82dTA2cnhYZXJ1YVdValIwYWlrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx QkYwL0E3OEYxQjEyQTQxNTExRUZBMTRGQkQzRkM0RjlBRTAyLzJ6MzloczZfNnUw NnJ4WGVydWFXVWpSMGFpay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG7O7z7g9uL+FMmhtguECy0fZwhKaSMl5ZmcjpL2vyIf+pUAETaHhytd tA4co3FWSSP1BjJD6G0kJ/P4ftqJ8IieXII8ListSR+1p7RmE2DcrxLgU/E/LrWS EkA6swn1quGooY915kDyBJ3anl2UCQsuPt4SU4X/vZOPFY+Vjx0ivEu1crZ3WR3S /+Jzf+PokUdS25YRJYUCUXoomLR4UImkm34dUxEc0c6HBmjOmfOHO8k7qDuKUf17 3xdK1vvmNSkWOpMRtgPzQm0LEKzLsGk8xuOhIUVVSYz5uel08Crghz4azbjEgXqd 1c0G3rkZ4FTB4epyEcgoHjNIHeBbl5g= -----END CERTIFICATE-----Generated at Sat May 17 11:17:14 2025 by rpki-client