$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: ag1SjTOsNmnMA3un4B5CZs9yeUuLiSev2I/+LQ0BS1A= Subject key identifier: 13:72:5A:9C:8D:82:56:E1:E9:0A:E8:87:28:D2:A2:C3:EB:08:D9:95 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 0460 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 045C Signing time: Thu 24 Apr 2025 23:56:57 +0000 Manifest this update: Thu 24 Apr 2025 23:56:56 +0000 Manifest next update: Thu 01 May 2025 23:56:56 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: ncf60DT22/JbPuDChgqwXulqnHRVJSPmVCmSoCvpqwA=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: fKt/7MCkOPI2Jnu4+1LUGUA8pX+r5jKnzR9IUADBIGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1120 (0x460) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Apr 24 23:56:56 2025 GMT Not After : May 1 23:56:56 2025 GMT Subject: CN=680acfc9-6b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:25:cc:e1:32:95:cd:84:63:64:d7:4c:f4:3a: e3:77:68:aa:3d:1d:06:fe:dc:b1:e6:20:d7:22:94: fb:e0:f2:47:32:d4:a1:f6:48:13:46:81:41:26:28: 54:54:b7:af:21:0a:a2:36:1f:e6:8f:56:d5:0a:81: 7e:82:9c:5c:be:ef:86:cc:ec:92:f2:5d:3a:1f:08: f7:30:0b:92:3a:3a:2d:1b:d7:34:5c:d2:dd:66:90: b3:ce:90:f5:4a:e1:00:55:50:82:c3:d1:56:6f:32: 4b:d0:00:ab:14:aa:bc:ea:e3:de:83:89:70:7e:ff: 72:58:c1:aa:f1:05:0f:e1:e0:49:ad:f6:00:37:79: f3:2b:d4:36:b4:21:0b:4c:cd:6c:a2:d8:aa:98:dd: bf:ce:30:7e:97:09:3b:b6:62:d4:c1:8d:1c:21:4e: e8:de:72:cf:9d:aa:91:8e:b4:30:65:9e:a6:16:59: ab:67:fa:87:de:19:6a:3e:6b:ce:51:d3:f4:ca:ce: 19:5b:94:72:4a:0f:4d:8b:1f:14:b0:49:4b:6c:63: 46:07:db:2c:a1:2e:f2:4f:c0:fe:8e:6c:ca:d3:14: 78:ea:70:93:e6:f6:3a:48:61:e3:4e:99:0d:47:2a: b0:e4:75:09:ac:d8:f7:1f:19:5f:d6:5a:c3:ec:73: cc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:72:5A:9C:8D:82:56:E1:E9:0A:E8:87:28:D2:A2:C3:EB:08:D9:95 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:cd:3d:be:af:44:61:0a:60:49:13:7e:cf:94:dd:fd:a0:9d: 36:d8:ad:f5:36:57:ef:c7:dd:2b:2e:22:ad:f4:da:ec:d3:28: 23:11:ec:5a:28:ce:19:43:58:e2:36:0b:4d:80:59:c6:61:1e: bb:a3:e1:e4:cc:00:34:bc:69:d7:33:26:df:5e:b4:24:69:8a: ee:f9:11:0a:08:6a:63:d5:92:3d:4c:59:10:1a:0f:15:05:25: 8c:6d:84:54:45:67:63:b8:f8:69:db:38:f5:60:f3:ac:c2:a5: ab:df:04:35:f0:60:2f:a9:b5:64:4b:92:b6:ca:15:11:84:68: bb:73:f4:15:51:c8:32:f0:6d:1b:fd:bf:28:ab:f4:b0:d3:39: c1:c1:13:21:7b:dd:1b:a1:cb:25:84:0f:ba:9f:30:1e:fc:ca: 15:97:b6:b4:53:20:6f:06:67:b5:de:1a:e3:b1:5a:98:ae:88: 20:68:81:63:06:c0:af:35:c2:50:9c:e0:2f:82:64:56:d1:e5: f9:ba:6e:61:85:75:29:2e:c1:a1:2b:9e:33:a1:19:35:51:f2: 73:1e:e6:ba:09:8d:86:92:28:db:d2:18:f0:7b:b2:4c:94:9f: c0:a2:c3:7d:1e:dc:a2:d4:9f:47:c0:ae:d7:45:21:7c:a4:3d: 6d:1f:2f:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUwNDI0MjM1NjU2WhcNMjUwNTAxMjM1NjU2WjAYMRYwFAYD VQQDEw02ODBhY2ZjOS02Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziXM4TKVzYRjZNdM9Drjd2iqPR0G/tyx5iDXIpT74PJHMtSh9kgTRoFBJihU VLevIQqiNh/mj1bVCoF+gpxcvu+GzOyS8l06Hwj3MAuSOjotG9c0XNLdZpCzzpD1 SuEAVVCCw9FWbzJL0ACrFKq86uPeg4lwfv9yWMGq8QUP4eBJrfYAN3nzK9Q2tCEL TM1sotiqmN2/zjB+lwk7tmLUwY0cIU7o3nLPnaqRjrQwZZ6mFlmrZ/qH3hlqPmvO UdP0ys4ZW5RySg9Nix8UsElLbGNGB9ssoS7yT8D+jmzK0xR46nCT5vY6SGHjTpkN Ryqw5HUJrNj3Hxlf1lrD7HPM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNyWpyN glbh6QrohyjSosPrCNmVMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvzT2+r0RhCmBJE37PlN39oJ022K31Nlfvx90rLiKt9Nrs0ygjEexa KM4ZQ1jiNgtNgFnGYR67o+HkzAA0vGnXMybfXrQkaYru+REKCGpj1ZI9TFkQGg8V BSWMbYRURWdjuPhp2zj1YPOswqWr3wQ18GAvqbVkS5K2yhURhGi7c/QVUcgy8G0b /b8oq/Sw0znBwRMhe90bocslhA+6nzAe/MoVl7a0UyBvBme13hrjsVqYroggaIFj BsCvNcJQnOAvgmRW0eX5um5hhXUpLsGhK54zoRk1UfJzHua6CY2Gkijb0hjwe7JM lJ/AosN9Htyi1J9HwK7XRSF8pD1tHy/m -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:03 2025 by rpki-client