$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json) Hash identifier: Au+uNfKDZkuaf2912w69GlkPI2lxOzHnESSG6mPEKmk= Subject key identifier: 8A:F8:F7:EA:EB:E0:AA:C4:B4:22:87:FA:72:FE:73:EF:89:F1:37:69 Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft Manifest number: 07A6 Signing time: Thu 24 Apr 2025 21:02:52 +0000 Manifest this update: Thu 24 Apr 2025 21:02:51 +0000 Manifest next update: Thu 01 May 2025 21:02:51 +0000 Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: vTOvlgzpNNideECoPvtR19ODS1Pbs1Ro29nh6yyZQZk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:02:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F Validity Not Before: Apr 24 21:02:51 2025 GMT Not After : May 1 21:02:51 2025 GMT Subject: CN=680aa6fb-d70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:83:de:8e:7b:f9:20:2c:a4:a0:2c:ed:61:b9: f6:9d:09:90:ba:b6:8b:e2:b7:24:dc:1d:98:59:39: 51:f1:68:f1:af:ce:6b:28:d5:c8:34:73:9a:1a:19: 72:70:f1:f7:11:81:2c:f0:ef:37:ce:41:68:51:90: 5f:f4:f8:d9:9c:7b:3c:c9:a3:8c:d1:10:13:4b:b4: 36:ae:13:02:a4:6c:ac:e0:36:9e:56:9a:24:2f:7d: 42:e6:40:ba:46:e5:94:c6:69:07:dc:c2:65:2a:d1: eb:e4:84:44:4d:10:2a:07:e0:91:fc:25:55:a9:3b: 89:70:0d:3e:d9:ac:2b:57:a7:46:46:a1:54:44:94: b8:28:3a:71:bc:07:4a:12:59:7a:e2:ae:38:fa:66: 7a:ea:70:a0:2d:7c:16:26:98:ea:cb:68:e5:59:61: 5c:6b:c6:e3:e3:47:6e:60:88:19:5a:4e:5b:2c:04: e6:a6:b6:ff:3c:48:60:1a:77:d1:86:2e:ed:02:d3: 1b:9e:69:dc:76:85:8d:00:32:1a:bc:99:f0:bf:3a: 76:52:65:e5:02:2d:87:7a:ce:f8:33:20:7b:be:fd: 03:b5:62:27:04:47:ed:57:60:22:14:ab:ff:6a:75: c9:60:bb:49:98:48:5f:d9:1e:bf:f7:02:81:56:8f: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F8:F7:EA:EB:E0:AA:C4:B4:22:87:FA:72:FE:73:EF:89:F1:37:69 X509v3 Authority Key Identifier: keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f8:56:37:69:43:54:f1:fb:7b:55:e3:c7:6b:cf:17:53:da: 19:46:3f:da:f8:29:80:f0:47:a0:6f:54:2c:3e:f8:45:09:0e: e5:fe:af:16:4b:46:20:4f:43:f5:3d:75:cd:6f:6b:1c:ea:4d: d5:26:8c:4d:37:59:c5:cc:1b:8f:7b:d7:ef:73:d1:5f:00:94: f5:9d:cc:43:d0:ca:cd:8f:b7:7c:22:76:6d:45:6c:aa:9a:e6: aa:d2:a7:2f:ef:f5:26:17:6d:4c:30:b3:3a:53:dd:31:49:bc: 5b:97:62:e8:11:f4:bb:0b:9b:5a:8d:2f:63:9d:de:08:c7:91: dd:d9:20:da:4b:08:8f:51:11:ee:8a:88:30:74:dd:d6:d8:27: cf:91:d5:b5:cf:e6:33:ae:8e:af:da:df:0e:7b:a8:55:dc:98: 74:14:ed:6e:1f:41:3c:53:8c:3f:7b:b1:96:8f:f5:80:3c:66: b5:35:87:a4:3f:a8:57:0d:f3:a7:19:67:85:a4:df:7f:fa:bc: ad:28:49:e2:5f:28:c1:23:0f:3e:3f:89:de:33:4a:6d:37:ae: 68:06:0b:56:8d:10:95:24:d4:10:7e:3b:1c:cf:23:b9:6d:da: ce:21:81:7a:15:d9:73:03:ee:63:ae:fc:00:b1:2a:e8:9f:1a: 1a:82:cf:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3 RjFENkYxOUYwHhcNMjUwNDI0MjEwMjUxWhcNMjUwNTAxMjEwMjUxWjAYMRYwFAYD VQQDEw02ODBhYTZmYi1kNzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oPejnv5ICykoCztYbn2nQmQuraL4rck3B2YWTlR8Wjxr85rKNXINHOaGhly cPH3EYEs8O83zkFoUZBf9PjZnHs8yaOM0RATS7Q2rhMCpGys4DaeVpokL31C5kC6 RuWUxmkH3MJlKtHr5IRETRAqB+CR/CVVqTuJcA0+2awrV6dGRqFURJS4KDpxvAdK Ell64q44+mZ66nCgLXwWJpjqy2jlWWFca8bj40duYIgZWk5bLATmprb/PEhgGnfR hi7tAtMbnmncdoWNADIavJnwvzp2UmXlAi2Hes74MyB7vv0DtWInBEftV2AiFKv/ anXJYLtJmEhf2R6/9wKBVo9tAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr49+rr 4KrEtCKH+nL+c++J8TdpMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl+FY3aUNU8ft7VePHa88XU9oZRj/a+CmA8Eegb1QsPvhFCQ7l/q8W S0YgT0P1PXXNb2sc6k3VJoxNN1nFzBuPe9fvc9FfAJT1ncxD0MrNj7d8InZtRWyq muaq0qcv7/UmF21MMLM6U90xSbxbl2LoEfS7C5tajS9jnd4Ix5Hd2SDaSwiPURHu iogwdN3W2CfPkdW1z+Yzro6v2t8Oe6hV3Jh0FO1uH0E8U4w/e7GWj/WAPGa1NYek P6hXDfOnGWeFpN9/+rytKEniXyjBIw8+P4neM0ptN65oBgtWjRCVJNQQfjsczyO5 bdrOIYF6FdlzA+5jrvwAsSronxoags/K -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:25 2025 by rpki-client