$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: 2tPKu4rjd9lGxSNEmDIpN/SdVXWi34ue5YJwhP4a3B8= Subject key identifier: 35:F3:6D:37:1C:3D:01:E6:6F:A0:82:38:9C:FC:70:08:F9:99:F7:D6 Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 07AB Signing time: Sun 04 May 2025 20:55:23 +0000 Manifest this update: Sun 04 May 2025 20:55:23 +0000 Manifest next update: Sun 11 May 2025 20:55:23 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: yd9oNGW6ANduUgGY7MgKKaZjPpTfW6U0sD6o6ooeh4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 20:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: May 4 20:55:23 2025 GMT Not After : May 11 20:55:23 2025 GMT Subject: CN=6817d43b-dd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:b1:9f:46:f6:4c:d2:fc:c9:fe:26:35:6c: f1:4a:95:a1:6e:0e:3a:b0:f0:37:90:68:1b:3a:26: f4:d0:a6:9a:2e:ba:51:14:ac:ed:6d:5a:5e:58:3d: e4:7b:17:c1:58:65:bb:57:e4:23:38:ec:06:3c:cb: 5c:bb:94:df:71:2d:07:32:52:2e:36:13:3b:f7:49: 20:11:9b:05:10:10:f4:a6:db:29:5f:c9:22:90:f2: b4:a4:b0:40:4e:a6:03:24:df:6c:13:20:1a:96:75: 62:59:e9:cf:fd:fe:d5:a8:0f:aa:f6:87:c4:5f:82: f2:c5:43:a4:18:db:1b:5d:e2:ee:13:ca:82:db:2e: 30:1b:fc:2b:76:b1:09:32:a3:54:1a:b8:05:21:2a: 24:d9:a9:b7:85:b9:35:b5:be:7a:a2:26:b7:27:ba: 4c:f9:6a:7c:62:e2:ed:80:ef:7c:20:92:ee:06:ca: 33:72:a3:82:a0:79:6f:89:1c:f9:5c:d5:63:91:62: 2c:3f:c9:6d:d6:3a:ea:27:c3:68:3f:48:55:81:f0: 05:14:a8:29:c7:52:4f:02:68:d1:e0:26:5c:d2:b5: d9:62:f1:5c:bc:94:da:d4:15:fd:bd:93:e6:c2:1f: 06:73:2b:65:3f:55:55:6d:b3:05:f4:8d:d8:d1:9a: 19:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F3:6D:37:1C:3D:01:E6:6F:A0:82:38:9C:FC:70:08:F9:99:F7:D6 X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:3f:74:a2:6b:ed:de:aa:43:de:c7:74:e3:ae:04:30:23:34: 50:48:e5:be:87:c3:06:fc:65:b9:43:dc:6a:6e:3a:f6:f6:2e: eb:42:fb:38:6a:0b:39:04:69:44:30:e6:31:e3:73:39:51:ba: f5:3c:cb:a7:c9:78:7f:95:71:4c:44:6f:33:18:53:8b:f9:29: c0:09:60:8b:04:65:42:8a:04:9f:0b:ff:df:24:cd:04:a2:34: e2:ab:99:b1:44:f7:65:3d:cd:9d:40:48:11:bb:31:64:8d:ce: 41:34:3f:5f:df:d6:12:8d:07:8a:d1:fd:a8:6d:09:d9:6c:f4: 13:8d:1a:4d:43:c9:79:7f:5d:0e:01:0b:16:91:c7:8c:fa:dc: 05:ac:6c:6b:06:15:1c:1d:ba:42:bb:14:42:e0:60:b3:d0:e3: c8:5c:c1:16:48:fd:94:bb:c3:ca:3e:9c:f6:33:9e:7c:af:a6: 56:8c:bb:bb:b4:e9:c6:26:0f:d1:64:da:0f:43:c1:17:f9:e2: 4a:e1:1e:b2:fd:3b:58:71:18:9d:93:e4:13:f4:6a:1a:f3:46: e4:64:ee:c5:9f:56:51:f9:fb:e2:7f:f8:71:68:8d:75:3e:64: cd:b0:68:08:18:9f:c9:8f:7b:dd:49:16:b0:51:d4:28:d6:f4: 42:4c:bf:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjUwNTA0MjA1NTIzWhcNMjUwNTExMjA1NTIzWjAYMRYwFAYD VQQDEw02ODE3ZDQzYi1kZDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGixn0b2TNL8yf4mNWzxSpWhbg46sPA3kGgbOib00KaaLrpRFKztbVpeWD3k exfBWGW7V+QjOOwGPMtcu5TfcS0HMlIuNhM790kgEZsFEBD0ptspX8kikPK0pLBA TqYDJN9sEyAalnViWenP/f7VqA+q9ofEX4LyxUOkGNsbXeLuE8qC2y4wG/wrdrEJ MqNUGrgFISok2am3hbk1tb56oia3J7pM+Wp8YuLtgO98IJLuBsozcqOCoHlviRz5 XNVjkWIsP8lt1jrqJ8NoP0hVgfAFFKgpx1JPAmjR4CZc0rXZYvFcvJTa1BX9vZPm wh8GcytlP1VVbbMF9I3Y0ZoZZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXzbTcc PQHmb6CCOJz8cAj5mffWMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxP3Sia+3eqkPex3TjrgQwIzRQSOW+h8MG/GW5Q9xqbjr29i7rQvs4 ags5BGlEMOYx43M5Ubr1PMunyXh/lXFMRG8zGFOL+SnACWCLBGVCigSfC//fJM0E ojTiq5mxRPdlPc2dQEgRuzFkjc5BND9f39YSjQeK0f2obQnZbPQTjRpNQ8l5f10O AQsWkceM+twFrGxrBhUcHbpCuxRC4GCz0OPIXMEWSP2Uu8PKPpz2M558r6ZWjLu7 tOnGJg/RZNoPQ8EX+eJK4R6y/TtYcRidk+QT9Goa80bkZO7Fn1ZR+fvif/hxaI11 PmTNsGgIGJ/Jj3vdSRawUdQo1vRCTL/q -----END CERTIFICATE-----Generated at Mon May 5 14:48:02 2025 by rpki-client