$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: nqnR9rXv7uur2DsNDqpHgDrai7oatiDIP6H9rT6BhCg= Subject key identifier: 89:BA:4A:05:24:E2:9C:7C:58:07:7A:44:4C:7B:BA:24:CD:78:36:7E Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 018A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 0182 Signing time: Thu 03 Jul 2025 03:45:12 +0000 Manifest this update: Thu 03 Jul 2025 03:45:12 +0000 Manifest next update: Thu 10 Jul 2025 03:45:12 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: aPlYg6SBYxzUn8AjNP6xy08VG+N0hZKDCEkh/HEzowk=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: +NXIJ3XAp8BvWngt2c/RnkPBxhwMNcZtq308qJwKx8k=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: Wkz//5KDfJfxYrwNIm5g/VaiBGq0PmVllCjJzHHJxNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jul 3 03:45:12 2025 GMT Not After : Jul 10 03:45:12 2025 GMT Subject: CN=6865fcc8-8e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:22:0a:e8:41:e1:6c:c2:a4:b0:da:02:33: 79:bc:71:44:8a:75:af:bd:ac:2a:7f:f0:fe:bf:79: 58:a3:0f:cd:1d:96:7c:43:0d:ae:98:cc:c9:98:b6: b1:07:9b:d3:16:7c:b5:70:c2:c4:78:c4:6d:46:0b: 4c:87:ed:f0:c9:c4:e3:1b:3a:bd:f6:cc:8c:4e:71: a0:08:98:44:e1:01:1c:d9:65:b0:fc:27:81:7a:a1: 21:d2:b5:09:97:11:43:a1:0f:de:12:f8:b3:96:8c: c0:23:22:e6:c0:99:59:80:bf:65:a2:7c:8a:a1:59: 96:07:23:28:7a:aa:75:74:27:04:0f:17:17:09:23: 6e:f1:8a:f9:76:70:00:77:63:aa:a2:3a:85:4a:5d: c7:90:f7:23:df:d8:3d:b0:1f:7a:f0:83:d3:e8:16: 14:22:31:ea:73:bd:e4:df:13:40:14:a1:04:5c:4f: 3a:d0:42:b0:c3:81:03:07:d3:03:f5:5d:5b:3d:8c: a4:c2:0b:be:c8:44:e5:7b:92:67:78:77:cd:6b:08: 0c:2e:ba:f5:27:e7:90:fa:ac:6f:1c:f9:18:e8:07: bf:2f:8c:3e:a2:db:9b:bb:34:95:9c:f3:1f:9e:6f: c0:1c:fb:b5:5e:29:e7:9f:32:1e:70:97:05:70:5a: 86:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BA:4A:05:24:E2:9C:7C:58:07:7A:44:4C:7B:BA:24:CD:78:36:7E X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4f:0e:cf:6d:ce:9a:af:a6:d4:42:c8:e4:fa:d1:23:54:b8: e0:7e:f6:94:50:f4:a5:4c:6f:86:f2:00:e5:4a:59:29:b9:38: ff:f0:f5:0c:1c:34:40:ce:da:42:c2:3c:49:1c:b5:42:3b:41: c7:8e:81:47:0a:4c:c2:e7:71:8e:62:8d:57:a2:a4:27:27:20: 51:7f:c5:d4:1a:2b:02:5e:4c:28:4c:53:45:b7:38:31:56:41: 7a:5f:b3:5c:74:c6:2c:e6:90:dc:23:67:48:bf:92:4e:0a:78: 48:6c:89:23:92:68:2d:32:8c:53:e4:4d:e0:6f:59:99:97:7b: 6c:e4:f2:77:dd:97:c1:17:f7:50:72:c9:2a:f1:75:37:41:34: 46:dc:d2:9f:51:9c:ea:4a:c3:fa:a4:00:50:63:01:11:f6:7b: 33:6b:b0:d5:de:e2:c1:62:4c:d8:03:cb:8b:34:c1:d7:8d:3a: 65:7d:62:bb:22:e0:3d:7a:36:0e:d8:2a:5d:5e:6f:24:c4:2b: 71:97:a5:21:76:ea:6e:7d:72:0a:a6:60:ff:ff:01:59:c6:5e: 8f:b8:af:2e:f7:4d:73:e4:40:72:01:98:96:f3:4a:21:5f:b1: c7:49:f0:9c:2b:59:a8:92:ae:b4:87:99:cd:fa:4a:3c:d2:8b: 22:fd:9f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwNzAzMDM0NTEyWhcNMjUwNzEwMDM0NTEyWjAYMRYwFAYD VQQDEw02ODY1ZmNjOC04ZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+0iCuhB4WzCpLDaAjN5vHFEinWvvawqf/D+v3lYow/NHZZ8Qw2umMzJmLax B5vTFny1cMLEeMRtRgtMh+3wycTjGzq99syMTnGgCJhE4QEc2WWw/CeBeqEh0rUJ lxFDoQ/eEvizlozAIyLmwJlZgL9lonyKoVmWByMoeqp1dCcEDxcXCSNu8Yr5dnAA d2OqojqFSl3HkPcj39g9sB968IPT6BYUIjHqc73k3xNAFKEEXE860EKww4EDB9MD 9V1bPYykwgu+yETle5JneHfNawgMLrr1J+eQ+qxvHPkY6Ae/L4w+otubuzSVnPMf nm/AHPu1XinnnzIecJcFcFqGmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIm6SgUk 4px8WAd6REx7uiTNeDZ+MB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvTw7Pbc6ar6bUQsjk+tEjVLjgfvaUUPSlTG+G8gDlSlkpuTj/8PUM HDRAztpCwjxJHLVCO0HHjoFHCkzC53GOYo1XoqQnJyBRf8XUGisCXkwoTFNFtzgx VkF6X7NcdMYs5pDcI2dIv5JOCnhIbIkjkmgtMoxT5E3gb1mZl3ts5PJ33ZfBF/dQ cskq8XU3QTRG3NKfUZzqSsP6pABQYwER9nsza7DV3uLBYkzYA8uLNMHXjTplfWK7 IuA9ejYO2CpdXm8kxCtxl6UhdupufXIKpmD//wFZxl6PuK8u901z5EByAZiW80oh X7HHSfCcK1mokq60h5nN+ko80osi/Z/Z -----END CERTIFICATE-----Generated at Fri Jul 4 17:48:53 2025 by rpki-client