$ rpki-client -vvf rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft File: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft (raw, json) Hash identifier: 59Z9fStWrRkGi+9Z4JGouAU8b+1UPY9nqrwV110YVYg= Subject key identifier: 7B:43:F6:A3:84:C3:FB:BC:C0:F2:88:9F:8A:F6:3D:E5:8E:EC:97:6C Authority key identifier: C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E Certificate issuer: /CN=A9184BE6/serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Certificate serial: 0D88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft Manifest number: 0D82 Signing time: Mon 12 May 2025 17:50:24 +0000 Manifest this update: Mon 12 May 2025 17:50:23 +0000 Manifest next update: Mon 19 May 2025 17:50:23 +0000 Files and hashes: 1: xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl (hash: qPtgwKNSjw3uDlBf9xjY43bI2Gcqcu9fqG7GRNrrmzI=) 2: AA2DE134C48A11E9804AA581C4F9AE02.roa (hash: kFWfFvMf8UzdUKp7Sm2Crxx6xTlM+hUx3GB42JsMyUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:50:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3464 (0xd88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184BE6, serialNumber=C51F7BFD945D007779B7F1FF425DBF27B9C2982E Validity Not Before: May 12 17:50:23 2025 GMT Not After : May 19 17:50:23 2025 GMT Subject: CN=682234df-db5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:79:d7:44:4c:3a:42:d3:97:6d:8f:b6:da:cc: 2f:07:54:75:c7:db:fa:a5:06:66:fa:a9:bd:4e:72: 0e:14:0f:7b:9a:64:57:92:8b:a2:14:90:aa:79:80: fb:f6:47:26:f8:90:47:ea:fc:d8:ca:14:8a:ec:ce: 68:f6:2a:4d:09:16:9d:00:c9:bf:59:3e:4e:68:89: d2:6f:b9:0d:5f:cd:08:91:46:4c:bb:80:59:8d:3d: f2:b7:d5:44:1e:94:36:2d:d5:e8:14:ff:e1:8b:a9: 6d:78:68:cb:8e:54:20:27:06:0e:f2:0e:0f:63:f2: 1b:4e:a8:bc:94:ba:51:5f:6e:ef:27:86:5c:3e:c4: 31:df:46:e3:71:33:bc:ed:cd:d3:6c:ac:df:5a:28: 89:57:54:02:11:e7:14:64:80:64:25:8f:e8:d1:7a: 8b:19:0b:a3:74:c7:23:45:9f:b2:4c:e9:81:fa:0c: de:e9:bb:4b:27:0f:25:c4:22:fa:89:9b:a2:18:a2: 2c:ff:19:c2:2f:30:d3:a4:74:d0:42:59:f2:89:c9: 07:2c:3c:bf:e0:93:94:54:26:d9:fd:c2:a0:19:86: 69:fc:d1:3d:ef:65:84:cb:22:af:07:b3:98:e9:a3: ba:c7:54:02:4f:97:be:56:fd:46:5b:eb:44:96:14: a1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:43:F6:A3:84:C3:FB:BC:C0:F2:88:9F:8A:F6:3D:E5:8E:EC:97:6C X509v3 Authority Key Identifier: keyid:C5:1F:7B:FD:94:5D:00:77:79:B7:F1:FF:42:5D:BF:27:B9:C2:98:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184BE6/EE8BCAA4C48911E9BB8A9580C4F9AE02/xR97_ZRdAHd5t_H_Ql2_J7nCmC4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:a5:15:ef:e8:93:64:59:de:fc:ea:03:b7:76:64:6b:a9:79: 2a:cf:70:01:95:8a:c9:9e:19:13:64:2c:8d:5a:ab:dd:8d:26: 8c:28:0d:a2:32:94:bd:76:b9:40:a0:2f:86:88:ad:d2:13:88: 01:3e:75:0b:cb:3f:e8:ef:ef:0d:6d:e4:8d:c3:57:16:cc:49: 03:3f:15:d9:99:89:fc:bc:d0:32:67:ee:ea:a9:80:39:e2:64: 28:d4:c0:f6:5a:fd:7b:2a:98:7f:20:c7:1f:fa:1f:f4:c2:b0: 1b:1a:33:91:2b:ab:f8:95:59:d0:ae:f1:45:20:68:d4:a2:5b: 5e:3a:87:8d:d3:b4:a1:fa:93:6a:c6:5c:40:ba:36:32:4c:95: e8:f9:2e:83:ff:23:35:43:42:3a:1a:df:b0:bc:91:e3:53:39: 9a:c8:c7:68:af:e3:b2:1f:e1:93:01:c6:1f:0f:e0:03:be:cd: 07:18:6d:68:1f:7b:e1:f4:3c:9f:19:34:4a:f1:aa:92:b0:14: e4:44:37:eb:04:8a:19:05:cf:66:ca:0b:9d:11:71:bb:e4:d3: 4a:7d:be:52:e7:ae:11:3a:b2:c9:b8:7f:93:9d:ae:cd:7f:71: 9f:a7:3a:f6:18:33:10:db:af:59:2e:c8:a8:24:16:10:4a:70: f8:23:91:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRCRTYxMTAvBgNVBAUTKEM1MUY3QkZEOTQ1RDAwNzc3OUI3RjFGRjQyNURCRjI3 QjlDMjk4MkUwHhcNMjUwNTEyMTc1MDIzWhcNMjUwNTE5MTc1MDIzWjAYMRYwFAYD VQQDEw02ODIyMzRkZi1kYjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3nXREw6QtOXbY+22swvB1R1x9v6pQZm+qm9TnIOFA97mmRXkouiFJCqeYD7 9kcm+JBH6vzYyhSK7M5o9ipNCRadAMm/WT5OaInSb7kNX80IkUZMu4BZjT3yt9VE HpQ2LdXoFP/hi6lteGjLjlQgJwYO8g4PY/IbTqi8lLpRX27vJ4ZcPsQx30bjcTO8 7c3TbKzfWiiJV1QCEecUZIBkJY/o0XqLGQujdMcjRZ+yTOmB+gze6btLJw8lxCL6 iZuiGKIs/xnCLzDTpHTQQlnyickHLDy/4JOUVCbZ/cKgGYZp/NE972WEyyKvB7OY 6aO6x1QCT5e+Vv1GW+tElhShjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHtD9qOE w/u8wPKIn4r2PeWO7JdsMB8GA1UdIwQYMBaAFMUfe/2UXQB3ebfx/0Jdvye5wpgu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEJFNi9FRThCQ0FBNEM0 ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFIZDV0X0hfUWwyX0o3bkNt QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hSOTdfWlJkQUhkNXRfSF9RbDJfSjduQ21DNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEJFNi9FRThCQ0FBNEM0ODkxMUU5QkI4QTk1ODBDNEY5QUUwMi94Ujk3X1pSZEFI ZDV0X0hfUWwyX0o3bkNtQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHpRXv6JNkWd786gO3dmRrqXkqz3ABlYrJnhkTZCyNWqvdjSaMKA2i MpS9drlAoC+GiK3SE4gBPnULyz/o7+8NbeSNw1cWzEkDPxXZmYn8vNAyZ+7qqYA5 4mQo1MD2Wv17Kph/IMcf+h/0wrAbGjORK6v4lVnQrvFFIGjUolteOoeN07Sh+pNq xlxAujYyTJXo+S6D/yM1Q0I6Gt+wvJHjUzmayMdor+OyH+GTAcYfD+ADvs0HGG1o H3vh9DyfGTRK8aqSsBTkRDfrBIoZBc9mygudEXG75NNKfb5S564ROrLJuH+Tna7N f3Gfpzr2GDMQ269ZLsioJBYQSnD4I5HN -----END CERTIFICATE-----Generated at Wed May 14 09:03:10 2025 by rpki-client