$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: eb0pd9meO4bkRp5FGXhwE6QIv048cWutPCwMau080kk= Subject key identifier: 86:57:0F:BD:48:C4:BE:3F:50:4F:1C:22:11:15:35:45:CA:BB:85:DF Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 9B Signing time: Tue 13 May 2025 05:43:21 +0000 Manifest this update: Tue 13 May 2025 05:43:21 +0000 Manifest next update: Tue 20 May 2025 05:43:21 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: 3vEAk6QYKKqfblYmrS7C3ASWhV6Cf0etyApgbkjFwsw=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 05:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: May 13 05:43:21 2025 GMT Not After : May 20 05:43:21 2025 GMT Subject: CN=6822dbf9-0257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fc:56:71:cf:9f:14:51:f6:cf:1e:75:f7:7a: 13:9b:dd:a1:2c:11:3b:b2:2c:90:9a:9e:98:16:12: 83:9f:8f:6b:5b:5f:2b:81:f6:97:3b:d8:d0:01:9f: 5e:bf:a1:45:03:8d:ed:71:68:f5:d4:b8:1a:89:8e: e3:ae:8f:d2:a7:da:00:e7:33:42:4c:47:b1:19:ff: 44:0c:6c:6f:85:b8:e2:f0:12:72:a8:c0:81:d8:1b: 6e:2c:50:8d:1e:9c:fe:31:42:5d:e1:e5:22:a8:44: 58:e7:a6:4c:f8:8b:a3:0a:6c:f5:b3:ce:00:2c:a7: 69:00:f8:ed:a4:f2:e1:c2:71:b9:34:13:e8:9e:d6: 78:20:db:dd:cc:70:04:43:f7:02:6b:b3:f5:df:3f: 0e:76:65:14:20:41:46:3f:7e:a6:cc:8d:cc:f4:33: ad:0d:df:a8:f9:c0:da:95:b8:ed:17:4e:eb:86:a8: 62:a2:92:48:e9:7a:69:40:6e:33:df:cf:28:a1:b3: 2e:e6:06:4d:92:47:d5:83:6d:df:ec:62:0f:6a:25: f5:84:60:44:c3:24:c5:3b:d8:dc:bc:ae:57:86:8b: eb:2b:cd:ab:0e:e4:d8:4e:2b:48:f2:86:55:20:ea: af:c1:37:03:05:e7:19:6e:13:ff:07:5f:c0:6c:de: fa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:0F:BD:48:C4:BE:3F:50:4F:1C:22:11:15:35:45:CA:BB:85:DF X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:42:60:90:80:bc:21:f5:d0:cb:2c:82:f9:c1:30:74:59:de: f7:32:e7:aa:5e:87:61:4c:37:a6:90:11:57:89:2d:10:ba:a3: d9:45:89:40:82:7a:bd:6e:6b:72:c7:56:6d:fd:fa:28:39:cc: 64:6d:29:71:87:67:d4:b3:44:ad:a4:96:ee:27:07:c7:e1:9e: 4c:99:ca:91:1a:c1:3e:ca:9f:94:90:db:83:c3:ae:73:e2:02: eb:72:c1:0c:7d:99:5e:52:e5:60:fe:25:74:0c:c9:98:4c:1e: 1b:5b:63:98:5b:ed:e9:6c:4e:bd:27:8a:c8:8a:7f:0d:c0:46: 56:de:7d:be:43:84:ff:ca:32:43:8f:87:48:43:b8:55:fc:d5: 67:a1:5d:f2:1d:78:eb:67:e9:bb:70:7f:85:a5:cd:b7:77:91: 86:0c:f8:1e:bf:34:9e:6f:5d:1d:49:b6:3c:4d:5e:7b:b8:52: 3f:00:a7:3c:55:38:a9:88:aa:b9:c0:72:ac:9e:0b:a1:6d:1f: a1:d3:c9:a0:4a:32:d3:09:d8:8f:56:ed:ee:e1:5b:c4:34:7c: 48:2a:8f:86:55:cb:b3:d6:40:3b:c9:db:32:63:e6:31:d7:49: d2:6e:bf:96:d7:4d:4e:d4:a9:fd:cf:24:a0:1a:e0:cf:c2:72: 9e:95:d8:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUwNTEzMDU0MzIxWhcNMjUwNTIwMDU0MzIxWjAYMRYwFAYD VQQDEw02ODIyZGJmOS0wMjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/xWcc+fFFH2zx5193oTm92hLBE7siyQmp6YFhKDn49rW18rgfaXO9jQAZ9e v6FFA43tcWj11LgaiY7jro/Sp9oA5zNCTEexGf9EDGxvhbji8BJyqMCB2BtuLFCN Hpz+MUJd4eUiqERY56ZM+IujCmz1s84ALKdpAPjtpPLhwnG5NBPontZ4INvdzHAE Q/cCa7P13z8OdmUUIEFGP36mzI3M9DOtDd+o+cDalbjtF07rhqhiopJI6XppQG4z 388oobMu5gZNkkfVg23f7GIPaiX1hGBEwyTFO9jcvK5XhovrK82rDuTYTitI8oZV IOqvwTcDBecZbhP/B1/AbN76OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZXD71I xL4/UE8cIhEVNUXKu4XfMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKQmCQgLwh9dDLLIL5wTB0Wd73MueqXodhTDemkBFXiS0QuqPZRYlA gnq9bmtyx1Zt/fooOcxkbSlxh2fUs0StpJbuJwfH4Z5MmcqRGsE+yp+UkNuDw65z 4gLrcsEMfZleUuVg/iV0DMmYTB4bW2OYW+3pbE69J4rIin8NwEZW3n2+Q4T/yjJD j4dIQ7hV/NVnoV3yHXjrZ+m7cH+Fpc23d5GGDPgevzSeb10dSbY8TV57uFI/AKc8 VTipiKq5wHKsnguhbR+h08mgSjLTCdiPVu3u4VvENHxIKo+GVcuz1kA7ydsyY+Yx 10nSbr+W101O1Kn9zySgGuDPwnKeldhn -----END CERTIFICATE-----Generated at Wed May 14 08:17:34 2025 by rpki-client