$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json) Hash identifier: 1uhIa27BHqkpHvemvqexoySXqihaiNt94mS7CjJRYnI= Subject key identifier: DB:44:B3:2C:A1:00:97:DB:20:B4:1B:22:EC:89:F1:71:5C:F5:55:5A Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 0158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft Manifest number: 0155 Signing time: Fri 13 Jun 2025 03:05:31 +0000 Manifest this update: Fri 13 Jun 2025 03:05:31 +0000 Manifest next update: Fri 20 Jun 2025 03:05:31 +0000 Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: 3jTTGu1E810M3L/85yMDYSI2m8OMLDFaXFRVXtAvfRM=) 2: 78CAEF00404711EEBE56794DC4F9AE02.roa (hash: LjB+g92HCwppfWiC4D7Vha1hvTw5esNjOr6rwAvYW2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: Jun 13 03:05:31 2025 GMT Not After : Jun 20 03:05:31 2025 GMT Subject: CN=684b957b-2d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c2:2a:9a:03:7f:97:ce:fd:8b:71:ca:34:32: f1:b9:fc:c6:f6:31:94:67:f8:d5:15:69:93:9e:3c: 2b:ae:02:62:77:77:04:2a:24:7d:e8:cd:a0:4c:26: 9b:a6:80:da:b2:3e:b9:26:b7:f2:86:fe:49:4d:c5: ed:f9:72:15:eb:91:f6:2a:b4:2c:8f:90:a2:3b:06: 32:14:c1:b6:cc:d1:e0:24:69:45:da:e9:28:ae:c8: 65:b1:1d:75:08:9e:0f:2f:db:da:80:aa:74:b3:21: ec:cf:8f:c1:68:9a:41:4e:bf:22:52:fa:e6:b6:d4: 52:e8:9a:ef:27:ff:03:7a:12:f7:03:13:40:98:1c: d8:dc:b5:71:14:d5:f6:f7:e3:83:f7:ab:32:16:25: 3b:ff:2d:8f:48:05:cc:6f:3e:d4:49:9b:3e:94:31: 15:80:32:a4:d9:f4:c9:4c:39:a6:bf:02:7d:58:22: 0b:38:1c:de:17:39:8f:6c:be:20:a3:17:d2:78:b3: 85:8b:16:71:8a:6e:eb:5d:6f:1a:d4:f3:de:71:e2: 25:5c:d5:6a:60:75:77:35:06:db:37:b1:4b:47:64: 9e:71:71:a3:de:d9:e6:0c:da:99:0b:58:8a:d7:26: ee:46:2d:1f:0b:9b:59:64:3f:ef:2a:4b:0a:5b:99: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:B3:2C:A1:00:97:DB:20:B4:1B:22:EC:89:F1:71:5C:F5:55:5A X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:40:f4:6a:82:5e:cb:e0:a5:93:37:4a:21:5e:16:b9:94:37: 5d:c7:32:4d:47:96:39:a8:94:d7:01:32:22:d1:41:f1:7f:9d: 2e:c2:d0:e2:73:3d:b3:b1:98:88:3e:b7:48:fa:72:fc:1c:64: 6a:02:5d:db:1e:78:5f:b7:63:d5:b5:5a:90:6b:df:f9:e4:c8: ed:71:54:5c:cf:c6:ab:22:79:ea:37:84:60:3c:17:27:7c:d9: db:39:06:91:a3:c5:39:30:f4:be:45:17:49:87:7d:85:cc:4f: 7a:7e:af:d1:60:4f:8c:48:10:6f:c8:4a:8f:00:35:14:28:23: 4d:8a:53:7b:a7:f3:d4:4d:9a:8b:fc:d6:81:73:77:17:90:fe: 03:ea:66:11:5e:6e:3d:2b:28:5c:0e:a3:6b:bc:5b:6f:21:18: ab:03:e9:84:b5:13:3b:f0:c1:2d:8a:12:12:a1:6c:ed:8c:ed: 43:4e:b1:13:85:91:cf:6e:9c:17:b4:31:d1:3a:48:4c:e8:e7: bd:f9:a7:77:dd:e2:9f:37:2b:69:cb:87:3d:84:45:8c:ee:d0: 59:a6:01:2a:25:41:f9:be:88:a3:6d:e0:cc:49:24:e5:00:3f: 74:67:ab:a0:2f:65:0c:f9:91:8e:e2:8f:47:f3:7c:e3:74:59: 1e:cf:2c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjUwNjEzMDMwNTMxWhcNMjUwNjIwMDMwNTMxWjAYMRYwFAYD VQQDEw02ODRiOTU3Yi0yZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA78IqmgN/l879i3HKNDLxufzG9jGUZ/jVFWmTnjwrrgJid3cEKiR96M2gTCab poDasj65Jrfyhv5JTcXt+XIV65H2KrQsj5CiOwYyFMG2zNHgJGlF2ukorshlsR11 CJ4PL9vagKp0syHsz4/BaJpBTr8iUvrmttRS6JrvJ/8DehL3AxNAmBzY3LVxFNX2 9+OD96syFiU7/y2PSAXMbz7USZs+lDEVgDKk2fTJTDmmvwJ9WCILOBzeFzmPbL4g oxfSeLOFixZxim7rXW8a1PPeceIlXNVqYHV3NQbbN7FLR2SecXGj3tnmDNqZC1iK 1ybuRi0fC5tZZD/vKksKW5k1bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtEsyyh AJfbILQbIuyJ8XFc9VVaMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJ TE0zejUzcFREblA5UVE0M2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVQPRqgl7L4KWTN0ohXha5lDddxzJNR5Y5qJTXATIi0UHxf50uwtDi cz2zsZiIPrdI+nL8HGRqAl3bHnhft2PVtVqQa9/55MjtcVRcz8arInnqN4RgPBcn fNnbOQaRo8U5MPS+RRdJh32FzE96fq/RYE+MSBBvyEqPADUUKCNNilN7p/PUTZqL /NaBc3cXkP4D6mYRXm49KyhcDqNrvFtvIRirA+mEtRM78MEtihISoWztjO1DTrET hZHPbpwXtDHROkhM6Oe9+ad33eKfNytpy4c9hEWM7tBZpgEqJUH5voijbeDMSSTl AD90Z6ugL2UM+ZGO4o9H83zjdFkezyx+ -----END CERTIFICATE-----Generated at Sat Jun 14 18:45:39 2025 by rpki-client