$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: 6JB1BLOGkFAJG30DecT1AI+dZ4BLAHtqbXmAiYMXs48= Subject key identifier: 3B:65:AC:9B:BD:7E:8D:47:20:4D:1A:04:29:7C:EA:1A:AA:1B:6A:18 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 033A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 0336 Signing time: Thu 15 May 2025 01:04:46 +0000 Manifest this update: Thu 15 May 2025 01:04:45 +0000 Manifest next update: Thu 22 May 2025 01:04:45 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: w/vyc9MhFsDtLOFD69HNYvwWnKYB6JTdq2VXMbWak4M=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:04:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 826 (0x33a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: May 15 01:04:45 2025 GMT Not After : May 22 01:04:45 2025 GMT Subject: CN=68253dae-1e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:07:a2:dd:c0:77:6d:9e:bc:67:b8:f6:f2:d1: c2:74:23:26:8a:f4:50:cf:d7:0d:2f:bc:12:ba:ac: b9:40:a8:ea:0d:a5:a8:79:13:5d:4a:cc:22:9d:d0: bd:23:8d:62:a9:71:54:d2:fa:4a:71:e8:b7:d6:d3: 88:da:9b:68:55:cc:02:ee:93:ae:6c:e1:66:8d:0a: ac:fc:29:08:24:28:f6:83:f5:34:89:0b:25:f1:6a: 1a:fb:a7:60:01:78:51:7f:96:ba:3b:de:10:7e:f2: f2:c2:14:6f:e2:2b:28:4a:53:3c:5e:a7:6c:46:26: c4:23:fb:b4:57:16:81:c0:b5:56:11:ff:78:47:21: cd:44:7a:f4:61:c3:7b:da:7f:fa:58:a6:14:ab:1b: 4a:1f:16:80:ca:df:02:e2:f6:47:a4:ad:f5:41:58: 26:6f:23:70:c2:81:cc:e3:3e:5a:63:9a:44:fe:ea: b0:30:f7:fb:eb:84:3b:d0:f8:a9:3c:57:c4:37:e0: 37:a5:a4:a4:02:a5:50:d1:aa:75:80:5c:35:29:31: a3:a0:96:df:ec:84:dc:53:d9:33:80:ae:f5:00:f7: 43:6f:f0:4d:88:7d:a4:33:f2:db:15:fb:76:23:9f: a0:c5:d1:0c:69:f2:02:f5:06:38:15:1f:55:38:fc: f3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:AC:9B:BD:7E:8D:47:20:4D:1A:04:29:7C:EA:1A:AA:1B:6A:18 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:fc:1d:7c:63:e7:81:93:48:38:11:63:df:7b:12:6b:8c: f6:05:6e:0e:75:4c:aa:32:b8:71:39:7a:a1:ea:39:4a:7d:12: 4b:b4:6e:2a:03:9e:fe:b7:de:e1:3c:14:ee:4f:20:e9:84:12: f5:b0:78:cf:42:c3:21:b5:aa:e5:c5:65:f0:1a:b6:c3:89:0d: 7c:2c:1a:c3:a3:e8:c0:73:a1:36:c4:08:c5:bd:69:5c:4f:7b: 53:45:e8:0e:ef:be:8d:46:aa:6d:46:87:f6:05:c9:7c:10:5a: 87:38:05:9b:6b:e6:3a:e0:8e:ed:32:03:c1:f3:20:da:2f:9d: 0e:da:9f:80:59:b9:79:26:3a:3e:73:c0:90:80:c3:a8:da:55: e4:b2:a2:d1:a6:43:bf:f0:6f:79:fe:de:d5:c3:b9:7a:7c:e6: 3d:b7:95:e5:d9:74:bb:8b:9a:f4:77:24:69:8e:35:f8:95:14: dd:50:fb:67:20:40:6d:ca:44:09:1d:09:d5:3c:cb:7c:e2:11: d5:f8:1f:9e:a1:5f:c2:b8:ff:d1:bf:c2:c5:d9:74:89:14:8d: 36:cd:51:31:fd:2d:d8:a2:2e:bf:b1:be:ff:f0:49:be:c0:6c: 98:e2:57:fd:7e:3d:d9:10:4b:84:b8:1a:60:d3:5e:57:4c:e8: c5:a0:43:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwNTE1MDEwNDQ1WhcNMjUwNTIyMDEwNDQ1WjAYMRYwFAYD VQQDEw02ODI1M2RhZS0xZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5wei3cB3bZ68Z7j28tHCdCMmivRQz9cNL7wSuqy5QKjqDaWoeRNdSswindC9 I41iqXFU0vpKcei31tOI2ptoVcwC7pOubOFmjQqs/CkIJCj2g/U0iQsl8Woa+6dg AXhRf5a6O94QfvLywhRv4isoSlM8XqdsRibEI/u0VxaBwLVWEf94RyHNRHr0YcN7 2n/6WKYUqxtKHxaAyt8C4vZHpK31QVgmbyNwwoHM4z5aY5pE/uqwMPf764Q70Pip PFfEN+A3paSkAqVQ0ap1gFw1KTGjoJbf7ITcU9kzgK71APdDb/BNiH2kM/LbFft2 I5+gxdEMafIC9QY4FR9VOPzzMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtlrJu9 fo1HIE0aBCl86hqqG2oYMB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA7/wdfGPngZNIOBFj33sSa4z2BW4OdUyqMrhxOXqh6jlKfRJLtG4q A57+t97hPBTuTyDphBL1sHjPQsMhtarlxWXwGrbDiQ18LBrDo+jAc6E2xAjFvWlc T3tTRegO776NRqptRof2Bcl8EFqHOAWba+Y64I7tMgPB8yDaL50O2p+AWbl5Jjo+ c8CQgMOo2lXksqLRpkO/8G95/t7Vw7l6fOY9t5Xl2XS7i5r0dyRpjjX4lRTdUPtn IEBtykQJHQnVPMt84hHV+B+eoV/CuP/Rv8LF2XSJFI02zVEx/S3Yoi6/sb7/8Em+ wGyY4lf9fj3ZEEuEuBpg015XTOjFoEMr -----END CERTIFICATE-----Generated at Fri May 16 03:07:21 2025 by rpki-client