$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft File: dBZmaL52tzdXYxblXZ5kOeZxz0c.mft (raw, json) Hash identifier: gZQyJdCQmEdonXvAeVgcUImA0N07Ja75Qx2wVvDBgQ4= Subject key identifier: 62:2D:0F:BE:AC:12:72:1D:25:5E:C2:85:8E:F1:87:5C:C9:7D:59:73 Authority key identifier: 74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 Certificate issuer: /CN=A91CD281/serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft Manifest number: 2A Signing time: Tue 13 May 2025 06:56:34 +0000 Manifest this update: Tue 13 May 2025 06:56:34 +0000 Manifest next update: Tue 20 May 2025 06:56:34 +0000 Files and hashes: 1: dBZmaL52tzdXYxblXZ5kOeZxz0c.crl (hash: MNKaL7GoJBobrZJXw1eJYxB1QiObkkUTZo3VI6eMWzA=) 2: 7CC6D634F27311EF9AAECC3CC4F9AE02.roa (hash: VAI7zkNz19dGI6fGQU68XKDlsZjsYQpjUZnb2rSND4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD281, serialNumber=74166668BE76B737576316E55D9E6439E671CF47 Validity Not Before: May 13 06:56:34 2025 GMT Not After : May 20 06:56:34 2025 GMT Subject: CN=6822ed22-850a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:a7:e9:87:88:ed:bf:32:f3:68:89:34:69: 9f:1f:59:b2:70:dc:87:91:f6:6b:b4:8c:a9:d6:ea: b6:da:7a:1f:c4:e0:31:3d:ac:ed:d6:b7:68:fc:e3: 10:54:10:47:55:b1:7a:d8:a2:09:3a:b4:a1:b9:b5: a4:71:c1:b8:b6:fc:09:ac:4e:1c:1b:7b:b1:5e:d8: 3a:10:6c:4b:83:ff:05:7d:3a:59:ec:1f:00:06:85: e2:db:01:47:70:d6:86:b0:95:f8:37:dd:13:17:c3: 50:3c:93:8f:c4:13:8b:ad:a3:37:a1:41:9a:a4:e8: 3d:7e:ca:1a:5d:11:97:af:86:29:2c:1b:d3:4a:92: 45:0a:46:b3:d1:86:5c:37:7b:1a:c6:f9:6e:df:25: 2b:ee:a1:ca:2b:76:78:de:b2:29:d8:a4:d1:50:4f: d2:a7:2a:61:43:d7:4d:7a:93:61:40:ee:0c:47:91: 9a:53:4b:bb:80:52:d6:5a:f4:0d:22:ec:8a:67:0e: cc:02:55:5e:ff:7a:1a:85:03:c4:31:d7:ff:f7:fc: f7:d1:d1:db:72:02:df:09:cc:d5:84:6f:4a:29:b0: eb:c8:3e:19:30:83:43:21:58:4e:04:41:5b:ab:85: a2:c8:8a:92:80:64:0f:7a:6c:00:65:59:b4:cc:21: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:2D:0F:BE:AC:12:72:1D:25:5E:C2:85:8E:F1:87:5C:C9:7D:59:73 X509v3 Authority Key Identifier: keyid:74:16:66:68:BE:76:B7:37:57:63:16:E5:5D:9E:64:39:E6:71:CF:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dBZmaL52tzdXYxblXZ5kOeZxz0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD281/FB4216E8F27011EF9BF8B535C4F9AE02/dBZmaL52tzdXYxblXZ5kOeZxz0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:59:95:07:b5:db:39:38:e4:9b:5a:7c:6a:c7:e8:be:1e:ea: 50:8f:2e:66:eb:11:7b:40:f8:15:8a:ef:71:e8:fb:2b:e3:d7: 35:b8:a9:52:4e:86:d1:26:36:2a:53:1b:a6:cc:c6:2d:fe:9c: fd:68:43:0e:9a:31:93:0c:39:6f:b5:9a:f6:e2:4a:b5:79:93: 44:7d:70:76:fc:3a:99:1f:58:69:ea:fe:2d:5c:17:cb:d7:1e: 53:58:3f:25:8f:ad:71:ac:28:68:7a:b7:21:3e:b9:60:53:d1: 1b:4a:5d:8b:b4:b1:93:e5:eb:52:9e:a8:60:45:01:0a:77:55: 3c:45:12:b5:f9:68:62:70:04:82:16:d2:a4:8d:2e:10:d1:d5: 85:50:80:82:01:7a:4f:4b:b5:70:f9:a8:d0:6f:56:db:bf:5e: b9:9e:46:0f:e4:bb:f9:40:ca:f1:07:24:42:64:62:c0:11:20: 16:68:26:cd:3b:3e:f4:ff:40:8b:19:eb:1a:84:58:70:59:39: 9f:3a:2c:00:8c:56:57:bf:bd:ca:b8:ff:6d:c8:07:74:42:2d: 5f:9e:11:52:76:47:6e:3a:34:b7:85:05:17:5b:c1:9b:7a:db: 85:f4:6b:ca:ad:0a:95:e7:be:d0:8c:c4:ab:45:3b:ee:59:72: 7b:6d:13:a3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RDI4MTExMC8GA1UEBRMoNzQxNjY2NjhCRTc2QjczNzU3NjMxNkU1NUQ5RTY0MzlF NjcxQ0Y0NzAeFw0yNTA1MTMwNjU2MzRaFw0yNTA1MjAwNjU2MzRaMBgxFjAUBgNV BAMTDTY4MjJlZDIyLTg1MGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxlqfph4jtvzLzaIk0aZ8fWbJw3IeR9mu0jKnW6rbaeh/E4DE9rO3Wt2j84xBU EEdVsXrYogk6tKG5taRxwbi2/AmsThwbe7Fe2DoQbEuD/wV9OlnsHwAGheLbAUdw 1oawlfg33RMXw1A8k4/EE4utozehQZqk6D1+yhpdEZevhiksG9NKkkUKRrPRhlw3 exrG+W7fJSvuocordnjesinYpNFQT9KnKmFD1016k2FA7gxHkZpTS7uAUtZa9A0i 7IpnDswCVV7/ehqFA8Qx1//3/PfR0dtyAt8JzNWEb0opsOvIPhkwg0MhWE4EQVur haLIipKAZA96bABlWbTMIUaNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYi0PvqwS ch0lXsKFjvGHXMl9WXMwHwYDVR0jBBgwFoAUdBZmaL52tzdXYxblXZ5kOeZxz0cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNEMjgxL0ZCNDIxNkU4RjI3 MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpkWFl4YmxYWjVrT2VaeHow Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZEJabWFMNTJ0emRYWXhibFhaNWtPZVp4ejBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNE MjgxL0ZCNDIxNkU4RjI3MDExRUY5QkY4QjUzNUM0RjlBRTAyL2RCWm1hTDUydHpk WFl4YmxYWjVrT2VaeHowYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHxZlQe12zk45JtafGrH6L4e6lCPLmbrEXtA+BWK73Ho+yvj1zW4qVJO htEmNipTG6bMxi3+nP1oQw6aMZMMOW+1mvbiSrV5k0R9cHb8OpkfWGnq/i1cF8vX HlNYPyWPrXGsKGh6tyE+uWBT0RtKXYu0sZPl61KeqGBFAQp3VTxFErX5aGJwBIIW 0qSNLhDR1YVQgIIBek9LtXD5qNBvVtu/XrmeRg/ku/lAyvEHJEJkYsARIBZoJs07 PvT/QIsZ6xqEWHBZOZ86LACMVle/vcq4/23IB3RCLV+eEVJ2R246NLeFBRdbwZt6 24X0a8qtCpXnvtCMxKtFO+5ZcnttE6M= -----END CERTIFICATE-----Generated at Wed May 14 12:49:42 2025 by rpki-client