$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: NHsW+5ER902cmsqzEV4mpb8EPpZmMt8VdehfA4I5thU= Subject key identifier: C6:51:41:1E:B3:4A:99:C9:EA:99:E3:E5:98:2A:93:F4:80:7C:98:D7 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0168 Signing time: Sun 11 May 2025 02:52:00 +0000 Manifest this update: Sun 11 May 2025 02:51:59 +0000 Manifest next update: Sun 18 May 2025 02:51:59 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: EQRSBHTGP/Mt2hRxyt7kLLm6In3bvH+rucw4pBJ6Zw8=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: +NXIJ3XAp8BvWngt2c/RnkPBxhwMNcZtq308qJwKx8k=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: Wkz//5KDfJfxYrwNIm5g/VaiBGq0PmVllCjJzHHJxNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: May 11 02:51:59 2025 GMT Not After : May 18 02:51:59 2025 GMT Subject: CN=682010d0-2b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:58:a7:3a:e2:f8:7d:2a:51:1d:ff:9a:4c: 18:96:1e:5f:c2:f7:c6:cd:cb:0b:4b:ff:35:5f:c8: f2:f6:91:66:a6:bc:32:05:d1:79:c3:7b:f6:f4:fa: ce:ca:22:44:26:49:c2:df:17:5c:ed:64:45:2a:9e: 4f:6a:5d:91:60:64:0a:c5:dc:e2:54:0e:0d:2f:f0: d8:30:78:ab:e3:4c:9e:7e:2e:75:c0:7e:fb:5b:8a: 8e:2f:4d:66:cd:bc:0b:1c:4f:30:fc:62:22:3c:16: 76:1e:fc:7e:28:90:e0:b0:49:58:d4:39:2c:d8:89: b6:3b:b5:04:a6:a6:cb:17:4f:7c:f2:76:56:9a:2c: 26:30:37:d2:18:da:a0:da:1b:57:e3:7c:d2:f9:cb: 37:63:c4:63:cf:fc:f8:0d:23:21:ba:d7:01:3d:2f: c7:99:81:b0:7e:92:c2:99:8f:a0:c0:a7:63:e9:f1: 6e:71:66:ce:21:34:51:b4:cc:05:2f:13:78:d3:80: 38:a5:0e:9a:b8:bb:0a:73:ca:8d:5f:59:82:03:c0: cf:53:f2:27:62:ad:b7:ec:a9:b8:64:b4:a1:61:3c: 98:82:8c:3c:a6:68:45:70:a5:de:73:87:36:ed:38: 19:9b:b6:1c:e5:40:21:d4:ba:64:96:ec:7c:07:20: 1b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:51:41:1E:B3:4A:99:C9:EA:99:E3:E5:98:2A:93:F4:80:7C:98:D7 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:75:ca:aa:36:9c:ff:6c:81:c0:25:07:7f:e9:35:ec:fd:2e: 51:20:8f:f7:ae:9e:ce:94:ee:43:a7:69:8b:37:b4:a9:9e:54: 9a:9d:44:9f:59:00:e1:19:5f:4b:96:3c:46:08:19:31:41:3f: 8a:f2:b6:1b:4a:c9:5b:42:c9:51:f0:8c:b7:7b:f4:6c:3b:cf: 16:ce:1c:c4:13:15:8d:b8:e0:a1:69:53:9f:53:d8:03:2b:d2: dc:ee:9c:8c:42:63:d1:38:12:9f:f1:9b:74:9d:17:14:32:32: 78:6f:4f:a2:67:b7:0d:d1:03:a5:cd:6a:2b:17:d3:3e:1f:fa: bc:e3:af:4a:9f:28:14:80:20:25:34:e3:5b:38:d5:96:91:3c: fb:1d:d0:c3:e5:2e:36:da:94:8b:f5:85:c1:80:c4:23:20:6a: 3c:98:bd:77:ac:30:ef:50:55:d1:3f:cd:a1:31:84:12:c7:5e: 4b:10:20:56:55:94:17:48:44:fd:e6:52:b4:3d:37:ba:09:83: a8:5e:fb:e4:df:a9:8e:d5:b4:6f:23:55:46:ab:cf:a7:c0:c7: 61:fa:bb:fa:b1:31:84:bc:eb:4d:d4:bc:98:09:10:f6:ab:f4: b8:b2:a3:99:50:2a:8a:d9:03:eb:ce:17:28:74:8c:65:af:1b: 20:ad:c7:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwNTExMDI1MTU5WhcNMjUwNTE4MDI1MTU5WjAYMRYwFAYD VQQDEw02ODIwMTBkMC0yYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxkpYpzri+H0qUR3/mkwYlh5fwvfGzcsLS/81X8jy9pFmprwyBdF5w3v29PrO yiJEJknC3xdc7WRFKp5Pal2RYGQKxdziVA4NL/DYMHir40yefi51wH77W4qOL01m zbwLHE8w/GIiPBZ2Hvx+KJDgsElY1Dks2Im2O7UEpqbLF0988nZWmiwmMDfSGNqg 2htX43zS+cs3Y8Rjz/z4DSMhutcBPS/HmYGwfpLCmY+gwKdj6fFucWbOITRRtMwF LxN404A4pQ6auLsKc8qNX1mCA8DPU/InYq237Km4ZLShYTyYgow8pmhFcKXec4c2 7TgZm7Yc5UAh1Lpklux8ByAbLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZRQR6z SpnJ6pnj5Zgqk/SAfJjXMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIdcqqNpz/bIHAJQd/6TXs/S5RII/3rp7OlO5Dp2mLN7SpnlSanUSf WQDhGV9LljxGCBkxQT+K8rYbSslbQslR8Iy3e/RsO88WzhzEExWNuOChaVOfU9gD K9Lc7pyMQmPROBKf8Zt0nRcUMjJ4b0+iZ7cN0QOlzWorF9M+H/q8469KnygUgCAl NONbONWWkTz7HdDD5S422pSL9YXBgMQjIGo8mL13rDDvUFXRP82hMYQSx15LECBW VZQXSET95lK0PTe6CYOoXvvk36mO1bRvI1VGq8+nwMdh+rv6sTGEvOtN1LyYCRD2 q/S4sqOZUCqK2QPrzhcodIxlrxsgrcfj -----END CERTIFICATE-----Generated at Mon May 12 04:08:53 2025 by rpki-client