$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft File: AKZAby8KlHvrUUE2cN9yG611usQ.mft (raw, json) Hash identifier: gmzuNcFiPl1q8m13fqvoMh61gY6kTQQkEZRU/r8XfcU= Subject key identifier: 6B:48:2D:20:D9:0C:25:92:4F:7B:4D:1A:EA:31:37:56:7B:D9:00:74 Authority key identifier: 00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 Certificate issuer: /CN=A91AF0B6/serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Certificate serial: 0330 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft Manifest number: 032C Signing time: Fri 25 Apr 2025 00:51:31 +0000 Manifest this update: Fri 25 Apr 2025 00:51:30 +0000 Manifest next update: Fri 02 May 2025 00:51:30 +0000 Files and hashes: 1: AKZAby8KlHvrUUE2cN9yG611usQ.crl (hash: jWMpVWCQGBC0BwSUKeBoEGGpFCa8ytXdqIvWZfLfJpI=) 2: FB1D01D4BF8B11ECB9B8D351C4F9AE02.roa (hash: 9lR4wMfGIYGiHedS31WLLXrhF347dnFxO3kCajEDmqk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 816 (0x330) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF0B6, serialNumber=00A6406F2F0A947BEB51413670DF721BAD75BAC4 Validity Not Before: Apr 25 00:51:30 2025 GMT Not After : May 2 00:51:30 2025 GMT Subject: CN=680adc92-6f98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d8:94:69:c0:ec:7f:d9:de:6b:24:e1:64:56: 72:16:d5:00:cb:21:01:44:4e:c3:a5:21:b2:57:a8: 13:ad:84:e7:31:19:55:eb:7d:0a:7e:2a:e0:01:84: f9:cd:f2:55:ea:e1:16:98:9c:e7:3d:ea:18:45:db: 36:2a:41:1f:f6:28:dc:3b:f8:6b:a6:1d:3b:5d:1d: 28:5d:64:f0:86:8b:af:8f:97:61:fb:71:e0:fb:6f: 72:f2:76:ea:41:8d:4d:35:af:62:cf:ae:58:88:51: 91:31:d8:3a:a8:6a:61:fe:52:ad:9c:db:15:7e:ef: 15:15:ae:64:e7:3a:ef:cd:2a:66:52:39:b7:75:04: 7a:9e:fd:18:5f:08:96:1c:57:e2:b0:3c:c1:fa:14: 66:b6:6d:b1:17:18:e9:71:32:32:53:d4:30:5c:5a: fb:e1:b5:a0:8f:db:8b:23:c1:25:7f:b0:63:27:70: 72:cb:e5:5e:96:74:78:16:27:55:80:8c:53:21:1f: 44:66:b3:be:43:6b:e0:00:a0:58:e8:1a:92:bd:24: a8:64:44:bb:4c:e3:a4:70:e1:ef:9e:0c:69:66:d5: b7:db:f7:a4:ea:21:5c:dc:9f:ec:3c:04:cc:11:ef: 09:f8:9a:e7:11:86:21:3b:fe:fb:99:f7:de:71:19: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:48:2D:20:D9:0C:25:92:4F:7B:4D:1A:EA:31:37:56:7B:D9:00:74 X509v3 Authority Key Identifier: keyid:00:A6:40:6F:2F:0A:94:7B:EB:51:41:36:70:DF:72:1B:AD:75:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AKZAby8KlHvrUUE2cN9yG611usQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF0B6/075938D6BF8811ECB1E25A30C4F9AE02/AKZAby8KlHvrUUE2cN9yG611usQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:71:0f:3b:23:14:82:ac:ef:a8:0c:e4:61:76:0c:3a:fa:b8: 78:73:86:c9:4c:f7:f2:77:07:58:a6:8a:a1:34:b2:df:88:70: cb:a1:99:1e:52:e4:83:18:8a:97:18:7e:b0:15:a8:87:38:03: 61:90:7b:56:00:15:5b:17:eb:29:9b:38:56:a0:70:d3:d1:4a: 78:52:51:ef:ce:db:ba:b4:38:b4:95:c2:32:9a:40:4c:12:ce: fe:29:7c:2d:81:ac:e5:40:85:cb:c1:f6:ca:f4:4a:52:30:fe: 01:25:6d:65:5c:10:ff:d7:9d:82:9b:63:75:d7:fe:70:7a:31: 77:d8:96:5d:89:33:f3:62:28:bb:fe:cc:5a:5d:fc:2a:39:1d: 05:80:5f:cf:e5:13:81:e1:66:d3:d2:fb:c5:b8:9f:5c:cb:f7: cc:09:ce:c9:91:f5:d9:47:80:6d:1c:70:bb:33:41:0b:7b:01: e2:f2:72:05:57:9f:db:10:94:13:b2:ed:c5:57:42:46:6d:b3: 44:5c:74:22:fc:1f:73:c8:04:95:1e:c5:83:5e:ec:df:c7:b9: 60:18:51:39:a9:cd:0e:67:1e:a3:6a:d2:d8:e4:5d:35:17:36: b2:a4:c2:53:ac:3b:14:19:e4:65:63:42:30:be:9b:0a:81:dc: 96:94:a0:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwQjYxMTAvBgNVBAUTKDAwQTY0MDZGMkYwQTk0N0JFQjUxNDEzNjcwREY3MjFC QUQ3NUJBQzQwHhcNMjUwNDI1MDA1MTMwWhcNMjUwNTAyMDA1MTMwWjAYMRYwFAYD VQQDEw02ODBhZGM5Mi02Zjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9NiUacDsf9neayThZFZyFtUAyyEBRE7DpSGyV6gTrYTnMRlV630KfirgAYT5 zfJV6uEWmJznPeoYRds2KkEf9ijcO/hrph07XR0oXWTwhouvj5dh+3Hg+29y8nbq QY1NNa9iz65YiFGRMdg6qGph/lKtnNsVfu8VFa5k5zrvzSpmUjm3dQR6nv0YXwiW HFfisDzB+hRmtm2xFxjpcTIyU9QwXFr74bWgj9uLI8Elf7BjJ3Byy+VelnR4FidV gIxTIR9EZrO+Q2vgAKBY6BqSvSSoZES7TOOkcOHvngxpZtW32/ek6iFc3J/sPATM Ee8J+JrnEYYhO/77mffecRkFrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtILSDZ DCWST3tNGuoxN1Z72QB0MB8GA1UdIwQYMBaAFACmQG8vCpR761FBNnDfchutdbrE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjBCNi8wNzU5MzhENkJG ODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xIdnJVVUUyY045eUc2MTF1 c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FLWkFieThLbEh2clVVRTJjTjl5RzYxMXVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjBCNi8wNzU5MzhENkJGODgxMUVDQjFFMjVBMzBDNEY5QUUwMi9BS1pBYnk4S2xI dnJVVUUyY045eUc2MTF1c1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFcQ87IxSCrO+oDORhdgw6+rh4c4bJTPfydwdYpoqhNLLfiHDLoZke UuSDGIqXGH6wFaiHOANhkHtWABVbF+spmzhWoHDT0Up4UlHvztu6tDi0lcIymkBM Es7+KXwtgazlQIXLwfbK9EpSMP4BJW1lXBD/152Cm2N11/5wejF32JZdiTPzYii7 /sxaXfwqOR0FgF/P5ROB4WbT0vvFuJ9cy/fMCc7JkfXZR4BtHHC7M0ELewHi8nIF V5/bEJQTsu3FV0JGbbNEXHQi/B9zyASVHsWDXuzfx7lgGFE5qc0OZx6jatLY5F01 FzaypMJTrDsUGeRlY0IwvpsKgdyWlKCe -----END CERTIFICATE-----Generated at Sat Apr 26 15:05:26 2025 by rpki-client