$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json) Hash identifier: SvOj01UJ/UKc3C7BIqELXK85oSePlpUbMBtKNr6LYnM= Subject key identifier: EF:D9:EF:95:98:D8:28:3E:B5:2E:CD:26:6D:40:49:1F:BD:1F:2C:F2 Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 0322 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft Manifest number: 031D Signing time: Thu 15 May 2025 01:11:05 +0000 Manifest this update: Thu 15 May 2025 01:11:05 +0000 Manifest next update: Thu 22 May 2025 01:11:05 +0000 Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: ujUkeFaT8r31re0+Ia+c/O8LkmILNbQXVoevMvCnrtY=) 2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: qH/kmALWQxd9w+o7ml/PHWheO95UYxgo26aceJX0/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 01:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 802 (0x322) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: May 15 01:11:05 2025 GMT Not After : May 22 01:11:05 2025 GMT Subject: CN=68253f29-62f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:22:5b:7e:24:dc:a3:fa:0d:1d:51:43:15: 69:a1:db:c6:98:de:ce:6c:ec:a9:9a:e6:37:0f:bd: 9b:74:97:b1:56:27:5e:b1:5f:7d:56:e8:ba:32:35: 23:77:57:10:1a:02:9d:73:2f:c4:43:3f:49:38:9e: 1a:95:26:b3:45:15:49:6b:33:5f:e1:02:3c:1e:f7: d1:e2:b3:95:cf:45:72:ad:af:36:bc:39:95:cf:65: 9a:60:7b:c9:0f:43:58:6f:33:18:e0:74:45:da:ff: d4:ee:86:8c:1f:ba:40:b4:bc:80:ea:ee:72:8e:12: c1:3e:b8:50:81:61:c0:72:cb:ba:36:66:6a:7d:4d: a6:8d:b8:e4:c5:d6:ff:93:ce:cc:91:bc:ac:cf:b0: 20:ed:26:5a:c1:7c:f0:48:a3:41:bf:70:47:22:aa: 20:b8:c2:1d:b6:76:7b:c2:99:09:87:1d:67:e8:f1: 51:2c:75:d7:cd:51:e5:b9:66:29:0a:a0:ec:7e:6e: f1:45:7f:71:be:2a:d4:e4:c4:a4:b1:56:c9:41:88: ff:9a:0d:4d:03:4e:f3:0c:2b:f4:56:3e:70:90:b9: 8b:ed:b7:a0:24:39:60:76:b7:86:83:27:d0:d7:e6: 19:86:53:dc:25:24:01:d6:c2:cb:8b:50:16:39:45: 06:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:EF:95:98:D8:28:3E:B5:2E:CD:26:6D:40:49:1F:BD:1F:2C:F2 X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:a1:6e:2a:2b:46:a8:8d:a7:c3:a6:47:53:c8:c6:34:9c:8e: 36:a0:c9:af:a1:95:16:6e:65:59:4e:75:00:2e:71:81:ce:1e: a5:28:26:d6:a5:c8:60:35:ac:0d:14:86:d7:b5:93:7e:ff:37: 1d:a5:95:a7:95:a7:a8:95:8b:a2:8d:6a:25:f8:db:19:79:03: b0:ef:13:48:d1:5d:30:63:da:6c:f0:65:8a:ad:44:7c:53:c3: 9e:4f:90:3a:e8:54:d5:bc:c2:52:a5:53:22:28:c5:18:09:ca: bf:5c:44:01:43:d4:9d:09:05:b6:10:15:36:bf:ba:3d:67:48: 41:8b:b6:f7:c4:8a:0d:94:b2:27:f4:1b:dd:5c:6c:42:d2:56: 66:80:47:88:0e:4b:1d:83:4f:65:2c:15:9c:f1:10:75:22:b7: 54:ca:63:86:25:e7:e0:4b:c7:b8:d0:33:b2:d6:fa:aa:61:48: 59:ac:c6:e3:44:5e:5f:23:eb:0b:aa:38:dd:c5:47:23:71:d5: 01:e0:8b:0b:b1:3e:d6:98:7c:43:0e:7b:2d:2e:46:7b:0e:9c: 69:9e:da:3a:8d:48:70:63:cc:c5:1d:e5:bc:42:7d:35:ee:d0: 53:19:9e:49:f8:a6:ac:90:ae:1c:c0:4a:8c:18:85:3d:7b:8e: 2d:7a:65:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjUwNTE1MDExMTA1WhcNMjUwNTIyMDExMTA1WjAYMRYwFAYD VQQDEw02ODI1M2YyOS02MmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz7wiW34k3KP6DR1RQxVpodvGmN7ObOypmuY3D72bdJexVidesV99Vui6MjUj d1cQGgKdcy/EQz9JOJ4alSazRRVJazNf4QI8HvfR4rOVz0Vyra82vDmVz2WaYHvJ D0NYbzMY4HRF2v/U7oaMH7pAtLyA6u5yjhLBPrhQgWHAcsu6NmZqfU2mjbjkxdb/ k87Mkbysz7Ag7SZawXzwSKNBv3BHIqoguMIdtnZ7wpkJhx1n6PFRLHXXzVHluWYp CqDsfm7xRX9xvirU5MSksVbJQYj/mg1NA07zDCv0Vj5wkLmL7begJDlgdreGgyfQ 1+YZhlPcJSQB1sLLi1AWOUUG2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/Z75WY 2Cg+tS7NJm1ASR+9HyzyMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1 M3FGcDdicEtRQ0tONGh2WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzoW4qK0aojafDpkdTyMY0nI42oMmvoZUWbmVZTnUALnGBzh6lKCbW pchgNawNFIbXtZN+/zcdpZWnlaeolYuijWol+NsZeQOw7xNI0V0wY9ps8GWKrUR8 U8OeT5A66FTVvMJSpVMiKMUYCcq/XEQBQ9SdCQW2EBU2v7o9Z0hBi7b3xIoNlLIn 9BvdXGxC0lZmgEeIDksdg09lLBWc8RB1IrdUymOGJefgS8e40DOy1vqqYUhZrMbj RF5fI+sLqjjdxUcjcdUB4IsLsT7WmHxDDnstLkZ7Dpxpnto6jUhwY8zFHeW8Qn01 7tBTGZ5J+KaskK4cwEqMGIU9e44temWP -----END CERTIFICATE-----Generated at Thu May 15 19:14:51 2025 by rpki-client