$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: 9qxsfHqKk9TJxqkK5/cNxqlWF5Z1v/yCxNwC9lz5EcI= Subject key identifier: 56:00:47:05:28:DC:1A:88:82:AB:8F:9E:9E:A0:B5:FB:25:9A:1C:95 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 0183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 017B Signing time: Thu 19 Jun 2025 03:10:20 +0000 Manifest this update: Thu 19 Jun 2025 03:10:19 +0000 Manifest next update: Thu 26 Jun 2025 03:10:19 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: aswY3zk6CT2i9i3iWSZ/U6uUaKZQ+BpDeRIl2H1V9gc=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: +NXIJ3XAp8BvWngt2c/RnkPBxhwMNcZtq308qJwKx8k=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: Wkz//5KDfJfxYrwNIm5g/VaiBGq0PmVllCjJzHHJxNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 387 (0x183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Jun 19 03:10:19 2025 GMT Not After : Jun 26 03:10:19 2025 GMT Subject: CN=68537f9c-6f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4a:8d:b2:4a:59:26:e2:f5:d8:29:fc:4e:15: a6:4c:9c:8a:cd:fc:ca:64:a2:f0:c2:5c:84:d6:ff: 0c:89:5c:13:1e:49:91:f7:70:a9:01:ba:77:ea:2c: 92:ad:c0:49:bd:b1:54:d5:d1:80:3a:23:1e:56:67: 5c:fd:cf:ed:2c:50:3b:6e:f5:c1:26:c0:9d:4e:82: b0:44:2b:4d:a6:56:5e:b1:70:90:3d:92:3b:f0:70: 48:66:eb:20:54:20:da:24:b5:7b:f3:07:89:80:01: 75:dc:f5:5b:61:02:2e:1a:70:2d:6c:10:aa:5f:72: 58:24:59:6d:a5:45:79:40:58:b3:34:58:f5:fc:23: 8f:53:6a:70:7d:5e:6d:6d:2b:30:c3:21:7e:fc:60: 56:b0:db:63:27:47:88:bb:89:db:6a:a5:fd:50:81: a6:37:5f:40:dc:f0:6c:98:8d:90:71:7c:67:be:83: 44:d2:07:ce:5f:28:69:8b:46:e0:00:04:cb:81:5a: 59:98:b3:4d:c6:09:21:87:9d:13:e2:8d:46:92:c3: 69:51:c2:4f:24:40:79:52:48:1f:c1:ae:fe:72:5d: af:9a:af:b7:03:92:94:72:74:d0:bd:3b:b6:44:92: c5:de:5a:32:fd:2d:cc:b9:f8:0e:b9:94:ac:fd:f5: 9b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:00:47:05:28:DC:1A:88:82:AB:8F:9E:9E:A0:B5:FB:25:9A:1C:95 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:d9:91:cf:a5:4e:57:6f:f1:1b:f3:e9:fc:8f:05:34:31:ab: 76:29:f5:bb:1f:16:2a:85:06:e5:11:ca:3c:16:12:28:b9:7d: d4:9f:0d:3d:cd:a3:56:d8:f8:2a:52:f0:3e:c3:6e:0a:c3:69: 01:1b:cc:c9:57:6d:a5:0c:9f:18:88:dd:27:f8:bf:ca:9b:4f: d5:01:31:eb:ff:7b:cb:74:74:0d:cf:86:9c:3a:04:e7:10:66: 8e:e7:c0:c5:c8:01:f4:38:15:42:ba:ad:71:5b:76:5d:30:8d: 27:81:34:34:ab:e9:2a:58:f8:5b:85:32:d8:ac:c5:b0:21:59: 52:ad:30:d5:f8:09:46:c1:73:80:19:fc:d9:30:d1:46:ea:a1: 27:28:36:7c:7c:5d:f8:f9:a9:b2:5d:91:77:67:64:31:bc:56: 09:ad:2f:3c:24:04:b5:a4:70:eb:fe:b2:b9:49:c2:72:0f:35: b5:a0:ee:79:a9:bb:f9:29:81:73:36:55:8e:4e:58:78:59:6d: c0:99:1c:1c:e8:fd:44:bd:ba:f1:67:1a:9d:56:7f:cc:d6:75: 27:5f:1c:f2:b4:f9:1c:c8:bb:f8:c2:09:f5:c1:26:2d:96:13: 3b:97:65:72:9e:c7:38:26:9b:d4:83:08:b8:24:20:32:ca:25: 25:75:28:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUwNjE5MDMxMDE5WhcNMjUwNjI2MDMxMDE5WjAYMRYwFAYD VQQDEw02ODUzN2Y5Yy02ZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40qNskpZJuL12Cn8ThWmTJyKzfzKZKLwwlyE1v8MiVwTHkmR93CpAbp36iyS rcBJvbFU1dGAOiMeVmdc/c/tLFA7bvXBJsCdToKwRCtNplZesXCQPZI78HBIZusg VCDaJLV78weJgAF13PVbYQIuGnAtbBCqX3JYJFltpUV5QFizNFj1/COPU2pwfV5t bSswwyF+/GBWsNtjJ0eIu4nbaqX9UIGmN19A3PBsmI2QcXxnvoNE0gfOXyhpi0bg AATLgVpZmLNNxgkhh50T4o1GksNpUcJPJEB5Ukgfwa7+cl2vmq+3A5KUcnTQvTu2 RJLF3loy/S3MufgOuZSs/fWblQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYARwUo 3BqIgquPnp6gtfslmhyVMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH2ZHPpU5Xb/Eb8+n8jwU0Mat2KfW7HxYqhQblEco8FhIouX3Unw09 zaNW2PgqUvA+w24Kw2kBG8zJV22lDJ8YiN0n+L/Km0/VATHr/3vLdHQNz4acOgTn EGaO58DFyAH0OBVCuq1xW3ZdMI0ngTQ0q+kqWPhbhTLYrMWwIVlSrTDV+AlGwXOA GfzZMNFG6qEnKDZ8fF34+amyXZF3Z2QxvFYJrS88JAS1pHDr/rK5ScJyDzW1oO55 qbv5KYFzNlWOTlh4WW3AmRwc6P1EvbrxZxqdVn/M1nUnXxzytPkcyLv4wgn1wSYt lhM7l2Vynsc4JpvUgwi4JCAyyiUldShw -----END CERTIFICATE-----Generated at Thu Jun 19 05:57:03 2025 by rpki-client