$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft File: d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json) Hash identifier: AkFo2WdyVZ23SSdaeUh31QnAxvAnjgrbd4EZXJgeErU= Subject key identifier: B7:18:F8:2E:E5:4F:BF:C7:CA:F7:3D:5D:4A:23:0E:9F:54:CC:A0:7E Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D Certificate issuer: /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D Certificate serial: 0936 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft Manifest number: 0936 Signing time: Sat 10 May 2025 19:57:48 +0000 Manifest this update: Sat 10 May 2025 19:57:48 +0000 Manifest next update: Sat 17 May 2025 19:57:48 +0000 Files and hashes: 1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: BfzONpV6E472L3MokMZHCEh/Jlm9AHhpheaT5ijTAZ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 19:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2358 (0x936) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCF26, serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D Validity Not Before: May 10 19:57:48 2025 GMT Not After : May 17 19:57:48 2025 GMT Subject: CN=681fafbc-7c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:b0:ce:23:df:b9:9f:d3:8d:90:39:3e:6e: 6f:22:36:ab:40:73:b7:6a:3c:60:3b:45:d4:e0:1c: 72:80:eb:22:bf:bb:b0:f5:a2:45:a4:f7:6b:74:e4: ee:23:65:09:6d:c4:ef:af:2f:9b:5c:b8:2a:ae:c0: 7b:cf:3a:ba:07:4e:17:f5:f1:2d:3c:8f:74:78:51: c3:76:9c:c7:50:6b:0a:82:af:ee:51:7f:61:c3:20: 54:21:7e:67:a6:ea:4e:41:eb:b4:61:32:02:13:41: c2:8c:f3:c2:5f:10:ff:0d:5d:cd:e0:49:35:ea:de: 35:b6:23:87:f4:8f:e9:69:96:3f:a2:78:6b:14:5b: 31:57:ec:5e:cc:cf:5e:d4:cf:b9:fb:9e:6d:15:3e: fe:6f:6a:95:e6:2d:e0:65:b9:ac:d5:9d:9d:bd:fd: 20:e4:38:af:db:2c:0f:b5:3a:81:a6:ab:ec:ab:bf: 19:9d:6d:ff:d4:9f:fe:dc:f2:0d:fb:cf:a5:1c:bd: 5e:e0:e8:2b:48:f1:a7:4d:6b:3f:bf:56:07:e0:0e: 1d:ac:c7:52:92:5d:6a:66:ad:8b:eb:9a:56:e3:3d: 75:f9:b0:d9:d7:c5:56:81:13:ae:21:b0:f3:62:b9: e0:e0:d8:21:79:31:4e:c7:ed:a5:e8:8a:a7:59:1a: 3a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:F8:2E:E5:4F:BF:C7:CA:F7:3D:5D:4A:23:0E:9F:54:CC:A0:7E X509v3 Authority Key Identifier: keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4b:e9:64:4d:94:ef:a2:73:09:0d:84:b7:dc:dd:94:82:a4: 44:c8:d9:25:8d:b5:69:7f:71:1c:1d:77:ad:fb:0f:4c:34:51: f4:72:d3:7a:bb:07:03:2b:4c:36:05:e6:ee:f4:60:32:e6:f1: a0:04:fa:03:06:9c:cf:7c:6f:85:d7:90:58:b7:f9:f0:fd:a5: 8e:34:1b:ef:6f:c1:02:4b:12:a5:1e:59:18:57:d3:c0:9c:cf: 1c:50:80:12:9b:f9:ee:6e:b5:16:e7:5a:4e:c1:48:9b:c0:6f: ce:38:e5:4a:df:c6:a6:1e:09:15:b3:c9:8b:c3:65:6c:3b:54: ef:02:c9:cf:1e:f3:86:ce:e1:db:81:ad:cc:84:ab:74:62:b1: f6:4a:16:95:88:f6:0e:fe:c5:bc:3c:81:f5:90:30:76:df:8d: b8:b9:1d:2e:4b:2a:1f:2d:e6:49:e5:74:ca:63:5d:9d:cf:28: 2f:7a:ff:c9:0d:7c:45:74:00:f8:a7:87:ad:f6:8e:a3:24:9e: f2:56:d7:99:22:01:59:13:9f:41:42:cd:07:3b:52:0d:f9:da: d9:c5:b9:81:39:e5:d6:24:d5:58:a0:ba:64:70:12:44:a4:b7: 5f:76:bf:97:af:75:cd:bd:10:af:31:3f:fa:cf:c9:3a:4f:60: f2:da:38:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NGMjYxMTAvBgNVBAUTKDc3QTY1NTQ3MUZCQTc2N0U2QkRGRENGRUNERThEMDQ3 NzAxMDA5NkQwHhcNMjUwNTEwMTk1NzQ4WhcNMjUwNTE3MTk1NzQ4WjAYMRYwFAYD VQQDEw02ODFmYWZiYy03YzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYGwziPfuZ/TjZA5Pm5vIjarQHO3ajxgO0XU4BxygOsiv7uw9aJFpPdrdOTu I2UJbcTvry+bXLgqrsB7zzq6B04X9fEtPI90eFHDdpzHUGsKgq/uUX9hwyBUIX5n pupOQeu0YTICE0HCjPPCXxD/DV3N4Ek16t41tiOH9I/paZY/onhrFFsxV+xezM9e 1M+5+55tFT7+b2qV5i3gZbms1Z2dvf0g5Div2ywPtTqBpqvsq78ZnW3/1J/+3PIN +8+lHL1e4OgrSPGnTWs/v1YH4A4drMdSkl1qZq2L65pW4z11+bDZ18VWgROuIbDz Yrng4NgheTFOx+2l6IqnWRo6SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcY+C7l T7/Hyvc9XUojDp9UzKB+MB8GA1UdIwQYMBaAFHemVUcfunZ+a9/c/s3o0EdwEAlt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0YyNi83MkMxOUIwNjk5 N0MxMUVBOEYwOTg5NjFDNEY5QUUwMi9kNlpWUngtNmRuNXIzOXotemVqUVIzQVFD VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q2WlZSeC02ZG41cjM5ei16ZWpRUjNBUUNXMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0YyNi83MkMxOUIwNjk5N0MxMUVBOEYwOTg5NjFDNEY5QUUwMi9kNlpWUngtNmRu NXIzOXotemVqUVIzQVFDVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPS+lkTZTvonMJDYS33N2UgqREyNkljbVpf3EcHXet+w9MNFH0ctN6 uwcDK0w2Bebu9GAy5vGgBPoDBpzPfG+F15BYt/nw/aWONBvvb8ECSxKlHlkYV9PA nM8cUIASm/nubrUW51pOwUibwG/OOOVK38amHgkVs8mLw2VsO1TvAsnPHvOGzuHb ga3MhKt0YrH2ShaViPYO/sW8PIH1kDB23424uR0uSyofLeZJ5XTKY12dzygvev/J DXxFdAD4p4et9o6jJJ7yVteZIgFZE59BQs0HO1IN+drZxbmBOeXWJNVYoLpkcBJE pLdfdr+Xr3XNvRCvMT/6z8k6T2Dy2ji8 -----END CERTIFICATE-----Generated at Sun May 11 13:38:11 2025 by rpki-client