$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: dOpJooe7A2YjOzrsI5B1gK0+PrhgEXkefAp8qL5hoc4= Subject key identifier: 76:D7:29:17:18:F0:4F:F7:5D:91:61:22:36:70:4D:2E:B5:92:8C:18 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 0360 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 035C Signing time: Fri 09 May 2025 00:45:37 +0000 Manifest this update: Fri 09 May 2025 00:45:36 +0000 Manifest next update: Fri 16 May 2025 00:45:36 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: 5Qjz96R5ZCoMtE46c7+OY4iFX5vCIi5UPazx0z06mKQ=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 95fJ03bboSIkCN0DBXqmsgAZgIidDy4lfSJOy1nx1H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 00:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 864 (0x360) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: May 9 00:45:36 2025 GMT Not After : May 16 00:45:36 2025 GMT Subject: CN=681d5030-cb40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:81:a2:90:af:5d:33:9d:41:09:60:b8:c1: f0:53:08:f8:db:b6:82:f6:84:f2:58:b5:5c:a1:60: 90:9d:dd:c2:0d:05:df:54:2c:3f:0e:d9:d2:3a:10: 59:3d:3a:bf:c6:df:22:71:2c:a7:6b:84:84:d0:cd: 14:60:7a:84:db:83:78:dd:65:87:72:43:0d:77:bd: b5:36:1a:eb:39:5d:44:44:e7:5c:e8:e8:76:79:07: 4b:36:04:02:05:65:27:53:5e:04:26:94:db:42:9a: 18:c7:8f:70:f6:10:fa:27:7c:44:c2:79:d5:26:e7: 07:f7:92:dc:37:bb:27:32:b6:57:7b:12:92:d8:15: 60:46:50:88:e2:33:c7:a1:8a:5b:3f:8f:33:e0:d8: eb:4c:41:ee:28:6b:92:e2:bc:a2:4b:8c:03:5f:82: f7:97:d3:c1:d6:ee:d4:c7:df:cc:b8:98:9d:25:03: d6:44:f2:6a:03:ae:2f:98:10:4d:09:c4:3c:64:70: 40:63:44:65:6e:26:41:14:45:ea:b8:bc:8d:23:e0: 53:90:16:80:0a:4d:69:09:e1:43:f9:d9:94:d8:ea: fb:b5:c9:de:4b:d8:0c:13:99:7a:45:e5:7b:0d:74: 53:4b:d8:84:b5:05:77:7c:cd:b9:41:9b:62:51:a8: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:29:17:18:F0:4F:F7:5D:91:61:22:36:70:4D:2E:B5:92:8C:18 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ee:30:6f:c9:59:4d:66:64:d6:df:41:9f:39:85:05:31:ec: 5d:4a:87:fe:bb:bd:6b:c6:eb:1d:4b:65:49:cc:4f:1e:13:60: ae:04:5d:14:51:07:a9:e8:d0:d9:b0:cb:9d:43:dc:e4:d7:5c: 28:7a:5a:06:14:2f:1f:56:0f:4f:93:04:ac:63:ed:b5:99:96: 3e:ef:9b:df:ca:be:ce:da:05:68:ff:b7:fc:ef:81:cf:21:82: 10:f0:dd:92:d3:e7:ce:69:4d:57:9c:26:26:5c:b1:d7:4b:dc: ca:40:29:19:e1:c9:07:ec:1d:58:87:a7:2e:10:fa:23:18:cf: 9c:33:e9:56:37:81:a3:10:7c:a3:71:95:bc:e8:fe:42:4c:82: 3b:0a:9a:2a:e5:f5:57:86:19:63:94:2f:d2:f4:f5:3f:38:66: c3:20:b5:b2:2d:a0:1f:91:e5:4a:56:53:02:d1:9b:ef:4e:9a: 84:29:77:bb:9f:76:b1:35:57:29:06:56:8d:56:11:49:f7:b9: 6e:9f:96:37:f2:4e:8f:ea:6b:e0:34:88:66:7b:50:ce:e0:4c: be:0b:b9:e6:e9:a9:d5:d2:36:aa:24:19:ce:02:87:c3:51:cb: ca:86:c0:cb:80:eb:3b:05:a7:a2:3c:e0:30:44:18:b7:20:7e: dd:bd:f9:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwNTA5MDA0NTM2WhcNMjUwNTE2MDA0NTM2WjAYMRYwFAYD VQQDEw02ODFkNTAzMC1jYjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5SBopCvXTOdQQlguMHwUwj427aC9oTyWLVcoWCQnd3CDQXfVCw/DtnSOhBZ PTq/xt8icSyna4SE0M0UYHqE24N43WWHckMNd721NhrrOV1EROdc6Oh2eQdLNgQC BWUnU14EJpTbQpoYx49w9hD6J3xEwnnVJucH95LcN7snMrZXexKS2BVgRlCI4jPH oYpbP48z4NjrTEHuKGuS4ryiS4wDX4L3l9PB1u7Ux9/MuJidJQPWRPJqA64vmBBN CcQ8ZHBAY0RlbiZBFEXquLyNI+BTkBaACk1pCeFD+dmU2Or7tcneS9gME5l6ReV7 DXRTS9iEtQV3fM25QZtiUai6VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbXKRcY 8E/3XZFhIjZwTS61kowYMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl7jBvyVlNZmTW30GfOYUFMexdSof+u71rxusdS2VJzE8eE2CuBF0U UQep6NDZsMudQ9zk11woeloGFC8fVg9PkwSsY+21mZY+75vfyr7O2gVo/7f874HP IYIQ8N2S0+fOaU1XnCYmXLHXS9zKQCkZ4ckH7B1Yh6cuEPojGM+cM+lWN4GjEHyj cZW86P5CTII7Cpoq5fVXhhljlC/S9PU/OGbDILWyLaAfkeVKVlMC0ZvvTpqEKXe7 n3axNVcpBlaNVhFJ97lun5Y38k6P6mvgNIhme1DO4Ey+C7nm6anV0jaqJBnOAofD UcvKhsDLgOs7BaeiPOAwRBi3IH7dvfmi -----END CERTIFICATE-----Generated at Sat May 10 07:32:03 2025 by rpki-client