$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: j6Rut1dZKGuuscR/O88IaHupcDq/BJHRs4y9QMVepRI= Subject key identifier: 6D:4E:D9:94:50:7F:5E:6C:78:70:34:3A:9E:08:95:A7:53:63:93:A3 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: F3 Signing time: Tue 13 May 2025 04:32:34 +0000 Manifest this update: Tue 13 May 2025 04:32:33 +0000 Manifest next update: Tue 20 May 2025 04:32:33 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: RmP6d751kT0tyGrNW7v42EuxSzS2AeGYaIue/O9PL58=) 2: 0C897F3EE84111EFA819A335C4F9AE02.roa (hash: 5gQHbtykFLXuasC1zPt+ul7Apydf3ObCnPPOkuixA6c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: May 13 04:32:33 2025 GMT Not After : May 20 04:32:33 2025 GMT Subject: CN=6822cb62-6760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:51:05:f4:8d:6f:48:59:1b:b9:b6:17:d9:0e: 10:87:78:e6:de:73:88:65:43:37:51:62:f7:b0:e9: 48:77:b8:18:b5:6d:d7:6b:82:96:e0:0d:5f:e6:af: a7:b7:4e:6a:0e:26:18:2a:bf:de:71:b0:2c:9e:36: 87:c9:a9:1e:0a:e6:4e:e8:83:26:86:1c:b6:ef:85: a9:bd:cc:ed:72:ac:4d:d9:dc:f3:a5:38:98:a5:22: 7a:ae:5d:a7:77:35:90:40:99:57:ae:9f:90:35:5d: 50:49:fd:ad:20:78:eb:e1:fb:af:32:f1:6b:82:59: 38:80:7e:a0:f7:be:0a:9d:5a:81:8c:e2:7d:5d:25: 87:c9:e8:3b:4a:46:7c:5c:ec:ac:c0:41:f8:45:e0: 4b:25:3e:39:06:63:1e:07:da:f2:25:32:43:46:3d: 0e:1f:7c:ce:e8:a5:0f:e2:01:09:47:5f:f9:1b:2e: 59:eb:06:b8:60:6c:8e:83:05:99:be:69:29:93:50: 36:49:0b:34:95:8b:9d:86:a1:cb:f7:fd:89:4e:1e: bb:e9:45:8f:55:0c:00:8c:f5:10:0f:68:55:4e:18: 04:90:07:d3:36:cd:57:ed:50:44:c7:d4:13:81:37: 2c:b2:51:0d:dd:88:02:fa:9d:ba:92:8f:ab:1a:99: 37:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4E:D9:94:50:7F:5E:6C:78:70:34:3A:9E:08:95:A7:53:63:93:A3 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:98:63:1e:ad:e1:de:fd:f4:7f:37:0d:42:0b:e1:7c:92:c4: 97:e4:ef:2a:70:55:0e:50:f6:fe:50:e0:25:4b:79:46:55:1b: 9f:75:9e:a6:c6:06:62:4a:7e:33:e4:04:71:17:ee:81:71:cb: 1b:45:bc:e4:98:68:c1:7b:a0:f9:4f:4a:eb:9e:a1:f7:d9:c7: 2d:a2:1f:d3:65:5a:08:fc:47:f8:88:bc:a2:77:fc:56:9a:01: 75:33:bf:1e:d3:36:b2:9c:42:f0:fb:39:cd:ba:29:52:1c:fe: b2:22:13:93:57:41:55:85:a5:7f:e3:8d:64:80:a9:4c:16:45: 3f:b4:f5:3f:45:64:78:ab:a7:30:15:fc:9c:7a:9a:59:b1:65: 3d:9f:c2:db:84:29:be:e6:43:f1:7f:3f:e8:ef:72:10:bf:76: 76:b5:90:95:9b:83:a6:22:0d:16:31:e9:bf:b3:22:49:d3:2e: a4:30:47:00:d3:50:d7:d2:cb:6a:e4:ec:41:ee:ee:02:4e:17: d0:83:bb:0d:93:92:48:ca:42:a8:ac:15:9e:c6:61:50:c8:2e: 35:93:a3:68:a9:6a:c7:ed:f3:75:a5:16:8b:5e:bf:ea:4f:38: 84:c3:16:22:e7:ec:4b:fa:aa:a1:40:a6:8f:bb:75:3f:67:f7: 0c:d4:0d:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUwNTEzMDQzMjMzWhcNMjUwNTIwMDQzMjMzWjAYMRYwFAYD VQQDEw02ODIyY2I2Mi02NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8lEF9I1vSFkbubYX2Q4Qh3jm3nOIZUM3UWL3sOlId7gYtW3Xa4KW4A1f5q+n t05qDiYYKr/ecbAsnjaHyakeCuZO6IMmhhy274WpvcztcqxN2dzzpTiYpSJ6rl2n dzWQQJlXrp+QNV1QSf2tIHjr4fuvMvFrglk4gH6g974KnVqBjOJ9XSWHyeg7SkZ8 XOyswEH4ReBLJT45BmMeB9ryJTJDRj0OH3zO6KUP4gEJR1/5Gy5Z6wa4YGyOgwWZ vmkpk1A2SQs0lYudhqHL9/2JTh676UWPVQwAjPUQD2hVThgEkAfTNs1X7VBEx9QT gTcsslEN3YgC+p26ko+rGpk3qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1O2ZRQ f15seHA0Op4IladTY5OjMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4mGMereHe/fR/Nw1CC+F8ksSX5O8qcFUOUPb+UOAlS3lGVRufdZ6m xgZiSn4z5ARxF+6BccsbRbzkmGjBe6D5T0rrnqH32cctoh/TZVoI/Ef4iLyid/xW mgF1M78e0zaynELw+znNuilSHP6yIhOTV0FVhaV/441kgKlMFkU/tPU/RWR4q6cw FfyceppZsWU9n8LbhCm+5kPxfz/o73IQv3Z2tZCVm4OmIg0WMem/syJJ0y6kMEcA 01DX0stq5OxB7u4CThfQg7sNk5JIykKorBWexmFQyC41k6NoqWrH7fN1pRaLXr/q TziEwxYi5+xL+qqhQKaPu3U/Z/cM1A36 -----END CERTIFICATE-----Generated at Tue May 13 19:52:32 2025 by rpki-client