$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json) Hash identifier: qTgqkAZc6Mfxms8OlVTwUZ2ODxftmOgve2w5tnn0W8k= Subject key identifier: 3A:DD:D3:03:BE:95:B8:08:70:8A:77:1E:02:E5:41:D1:6F:1B:22:25 Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 0144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft Manifest number: 0141 Signing time: Sat 03 May 2025 03:45:02 +0000 Manifest this update: Sat 03 May 2025 03:45:02 +0000 Manifest next update: Sat 10 May 2025 03:45:02 +0000 Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: 5s4hT3AYHNOX7ujhH+I+i5+eMNzzGUB1sp+hfgn6lnU=) 2: 78CAEF00404711EEBE56794DC4F9AE02.roa (hash: LjB+g92HCwppfWiC4D7Vha1hvTw5esNjOr6rwAvYW2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 324 (0x144) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: May 3 03:45:02 2025 GMT Not After : May 10 03:45:02 2025 GMT Subject: CN=6815913e-25fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:73:cd:35:a9:03:31:f9:a7:37:51:47:e0: 98:32:04:03:6b:cb:76:d2:c3:9c:a5:26:30:27:57: 41:4e:f4:ee:d3:d8:e9:7a:99:f3:c0:45:5d:86:13: c4:3a:bc:8c:5d:30:71:b8:78:7b:ad:89:3e:02:31: 2b:94:62:fe:86:b8:9a:05:7b:4c:3e:e4:8d:49:a8: 01:8b:9c:58:9a:49:92:1c:fc:ec:75:48:06:c1:8a: 70:11:41:54:55:76:eb:58:00:ea:32:ff:36:c3:8b: b3:47:81:12:b8:88:52:c1:12:62:c2:bf:e0:f4:b7: 8e:83:39:3e:44:c2:4c:6e:e8:f4:67:de:16:27:ff: d7:d1:73:37:40:9c:d9:d0:f4:07:c5:34:48:2f:f5: 8b:bb:6e:1b:3d:3b:b2:04:d6:1e:82:48:6d:2e:d5: 49:39:7d:b2:2d:99:f8:58:b8:1f:0a:18:7e:25:98: 8f:47:b6:64:db:25:23:1d:b9:ed:c8:62:5d:4e:2d: 09:f8:4e:2e:2c:e5:5b:af:b8:7d:bf:f6:2b:5e:48: b1:62:1a:73:b6:e9:49:37:88:fb:98:b8:d2:e1:92: f2:bd:86:17:51:45:69:f5:ea:ba:d2:d7:f8:9a:90: 1d:0e:3b:09:40:7b:c6:d4:92:57:b6:4d:ab:4f:18: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DD:D3:03:BE:95:B8:08:70:8A:77:1E:02:E5:41:D1:6F:1B:22:25 X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7d:bb:b1:a3:1c:45:dc:eb:50:1d:ef:cf:45:37:bb:d4:05: ea:5a:97:39:92:11:1e:65:0a:d6:08:f5:98:1f:68:64:a0:1a: e5:ae:68:1b:49:d0:f6:0d:d5:82:89:44:3a:fa:a2:50:86:84: 44:49:3f:67:bd:5c:54:13:07:fb:0a:1d:53:3f:d5:e5:b7:b4: 63:5a:01:d2:66:c2:03:90:4a:b6:70:5b:f7:47:a9:96:77:b2: ef:9d:24:8a:d7:2b:2b:cb:30:db:b4:4d:cd:cf:bb:bb:ad:70: 19:20:37:00:cd:6f:66:bf:04:35:24:c3:42:c2:7c:7d:15:ab: 12:96:57:9f:b0:fe:f9:0a:e5:66:31:fe:ea:2c:4e:c5:7d:c2: d0:a1:4e:7e:9f:a4:ab:aa:78:b9:08:10:90:39:0c:ba:c9:69: 44:3b:b4:30:13:2b:4b:ff:31:72:85:f3:1b:ff:c8:cf:1c:48: 50:d4:30:74:50:e9:41:06:31:b9:8e:a7:21:6f:a6:fd:fb:d4: 51:c9:17:35:3d:e2:38:c3:7b:85:aa:25:b5:37:98:11:2c:be: 66:bb:9a:a1:4c:35:4c:90:67:c1:48:72:01:c7:67:51:58:ce: 6c:4b:26:e2:4f:58:08:0a:ec:26:1c:e7:f2:ed:14:e0:00:e3: e5:09:54:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjUwNTAzMDM0NTAyWhcNMjUwNTEwMDM0NTAyWjAYMRYwFAYD VQQDEw02ODE1OTEzZS0yNWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GZzzTWpAzH5pzdRR+CYMgQDa8t20sOcpSYwJ1dBTvTu09jpepnzwEVdhhPE OryMXTBxuHh7rYk+AjErlGL+hriaBXtMPuSNSagBi5xYmkmSHPzsdUgGwYpwEUFU VXbrWADqMv82w4uzR4ESuIhSwRJiwr/g9LeOgzk+RMJMbuj0Z94WJ//X0XM3QJzZ 0PQHxTRIL/WLu24bPTuyBNYegkhtLtVJOX2yLZn4WLgfChh+JZiPR7Zk2yUjHbnt yGJdTi0J+E4uLOVbr7h9v/YrXkixYhpztulJN4j7mLjS4ZLyvYYXUUVp9eq60tf4 mpAdDjsJQHvG1JJXtk2rTxihdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrd0wO+ lbgIcIp3HgLlQdFvGyIlMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJ TE0zejUzcFREblA5UVE0M2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBffbuxoxxF3OtQHe/PRTe71AXqWpc5khEeZQrWCPWYH2hkoBrlrmgb SdD2DdWCiUQ6+qJQhoREST9nvVxUEwf7Ch1TP9Xlt7RjWgHSZsIDkEq2cFv3R6mW d7LvnSSK1ysryzDbtE3Nz7u7rXAZIDcAzW9mvwQ1JMNCwnx9FasSllefsP75CuVm Mf7qLE7FfcLQoU5+n6Srqni5CBCQOQy6yWlEO7QwEytL/zFyhfMb/8jPHEhQ1DB0 UOlBBjG5jqchb6b9+9RRyRc1PeI4w3uFqiW1N5gRLL5mu5qhTDVMkGfBSHIBx2dR WM5sSybiT1gICuwmHOfy7RTgAOPlCVRe -----END CERTIFICATE-----Generated at Mon May 5 02:30:19 2025 by rpki-client