$ rpki-client -vvf rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft File: Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft (raw, json) Hash identifier: slAi4gCx6PFxJGao1NOefaXhEhkR+WqL3EtvX8jF0UA= Subject key identifier: 40:CF:22:D7:14:F4:9D:DD:D8:D2:23:70:80:B8:FE:F4:84:59:80:D3 Authority key identifier: 67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 Certificate issuer: /CN=A91180E8/serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft Manifest number: 37 Signing time: Sat 31 May 2025 07:07:57 +0000 Manifest this update: Sat 31 May 2025 07:07:56 +0000 Manifest next update: Sat 07 Jun 2025 07:07:56 +0000 Files and hashes: 1: Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl (hash: 9CnwOeTxr0fEVlztSIJC56P58ONb9RW7uO+NTTsyD40=) 2: E368BEF2E9D611EFAC604979C4F9AE02.roa (hash: HfXLWtads28iS5LrLz0AFXei2F6BGIFKfg02w7QPxkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91180E8, serialNumber=67F29B35A8942AA6B7F41AEFB34A0676FD695097 Validity Not Before: May 31 07:07:56 2025 GMT Not After : Jun 7 07:07:56 2025 GMT Subject: CN=683aaacc-f4ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:9c:11:7c:a3:17:36:2c:3e:38:a4:58:1d: 2c:b4:d3:fd:33:12:89:38:5c:32:1f:68:29:07:f3: 6f:ba:c0:40:f7:bd:36:39:69:f1:f6:d5:8c:ec:5f: e1:6b:c9:4f:39:f4:d0:fb:60:d5:b0:79:eb:b1:4c: d8:1c:47:13:e5:a7:45:83:e0:83:c4:4e:79:01:41: 8a:3e:0c:fb:26:98:de:93:df:78:94:cf:5b:1e:45: 50:b5:3f:d1:0e:67:cc:8e:6e:1b:71:f5:7c:38:65: f4:8c:04:00:57:03:70:39:87:54:7f:f9:8a:f5:e5: f3:37:d6:69:62:52:86:1c:89:0c:cf:9c:2d:ba:9c: e3:08:02:b5:ef:1a:fd:b8:e8:d4:6f:75:98:cc:0f: 68:9d:e0:f9:68:5b:61:2a:0f:f7:27:41:fd:ed:dc: 3c:50:fd:d4:14:3e:4b:3b:7f:4d:19:41:b1:9f:6e: 40:0c:dd:d8:e8:91:44:5f:61:65:3d:d2:b6:25:4b: de:e2:69:3a:93:a7:0d:4d:a7:f5:42:51:89:36:0f: ee:32:fc:bd:28:1d:c0:98:34:e4:3c:e6:e7:f1:fa: e4:25:cd:27:6d:dd:a1:b0:bd:10:10:fd:85:81:dc: f4:db:ef:a3:81:0c:6a:96:c1:50:5f:0b:65:85:08: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CF:22:D7:14:F4:9D:DD:D8:D2:23:70:80:B8:FE:F4:84:59:80:D3 X509v3 Authority Key Identifier: keyid:67:F2:9B:35:A8:94:2A:A6:B7:F4:1A:EF:B3:4A:06:76:FD:69:50:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_KbNaiUKqa39Brvs0oGdv1pUJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91180E8/3A9FAC54E9D611EF8D04B677C4F9AE02/Z_KbNaiUKqa39Brvs0oGdv1pUJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:6b:49:e3:e6:3e:c7:0f:b6:e2:a9:21:80:36:a4:85:3e:59: 99:6b:4f:fc:05:1b:32:a8:10:10:a0:6d:72:a2:b7:6b:56:a4: 8d:51:25:f8:37:ac:c9:f4:e4:95:ba:e5:1f:7d:5d:08:06:b0: bf:b8:de:d5:8a:7f:2e:50:a7:f0:b5:62:2f:3e:6d:31:a9:6e: 0b:e0:28:68:ca:c5:3e:81:da:85:ab:f2:75:49:be:31:b3:d3: 25:33:fb:a1:2b:5c:c1:b6:a6:a8:5f:bb:ea:98:62:3d:c6:b6: 72:9d:91:79:73:b4:6c:fb:df:32:ea:44:db:08:55:d5:96:7e: 25:6a:07:47:02:11:a7:95:f0:ff:13:4e:18:37:48:dd:db:4b: 70:48:f2:4e:b9:08:e4:f1:83:0b:90:60:09:61:cc:68:56:b4: 91:90:27:50:cf:ac:42:b9:00:cf:8d:08:2e:ae:ef:b6:d6:6b: 14:cc:5f:d0:9e:98:7c:2c:16:04:51:aa:17:15:e8:8c:53:92: 7b:5b:bc:e3:d7:2e:16:6b:f2:e2:70:e8:55:d2:7c:e2:ce:41: 4f:eb:e7:f7:a4:42:6e:72:8c:be:ce:f2:2f:91:4b:aa:29:8d: 88:7b:da:57:12:7d:a1:16:6c:36:ca:37:40:36:0a:94:8d:03: ab:fb:35:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx ODBFODExMC8GA1UEBRMoNjdGMjlCMzVBODk0MkFBNkI3RjQxQUVGQjM0QTA2NzZG RDY5NTA5NzAeFw0yNTA1MzEwNzA3NTZaFw0yNTA2MDcwNzA3NTZaMBgxFjAUBgNV BAMTDTY4M2FhYWNjLWY0YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBwJwRfKMXNiw+OKRYHSy00/0zEok4XDIfaCkH82+6wED3vTY5afH21YzsX+Fr yU859ND7YNWweeuxTNgcRxPlp0WD4IPETnkBQYo+DPsmmN6T33iUz1seRVC1P9EO Z8yObhtx9Xw4ZfSMBABXA3A5h1R/+Yr15fM31mliUoYciQzPnC26nOMIArXvGv24 6NRvdZjMD2id4PloW2EqD/cnQf3t3DxQ/dQUPks7f00ZQbGfbkAM3djokURfYWU9 0rYlS97iaTqTpw1Np/VCUYk2D+4y/L0oHcCYNOQ85ufx+uQlzSdt3aGwvRAQ/YWB 3PTb76OBDGqWwVBfC2WFCKQRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQM8i1xT0 nd3Y0iNwgLj+9IRZgNMwHwYDVR0jBBgwFoAUZ/KbNaiUKqa39Brvs0oGdv1pUJcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4MEU4LzNBOUZBQzU0RTlE NjExRUY4RDA0QjY3N0M0RjlBRTAyL1pfS2JOYWlVS3FhMzlCcnZzMG9HZHYxcFVK Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWl9LYk5haVVLcWEzOUJydnMwb0dkdjFwVUpjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE4 MEU4LzNBOUZBQzU0RTlENjExRUY4RDA0QjY3N0M0RjlBRTAyL1pfS2JOYWlVS3Fh MzlCcnZzMG9HZHYxcFVKYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdrSePmPscPtuKpIYA2pIU+WZlrT/wFGzKoEBCgbXKit2tWpI1RJfg3 rMn05JW65R99XQgGsL+43tWKfy5Qp/C1Yi8+bTGpbgvgKGjKxT6B2oWr8nVJvjGz 0yUz+6ErXMG2pqhfu+qYYj3GtnKdkXlztGz73zLqRNsIVdWWfiVqB0cCEaeV8P8T Thg3SN3bS3BI8k65COTxgwuQYAlhzGhWtJGQJ1DPrEK5AM+NCC6u77bWaxTMX9Ce mHwsFgRRqhcV6IxTkntbvOPXLhZr8uJw6FXSfOLOQU/r5/ekQm5yjL7O8i+RS6op jYh72lcSfaEWbDbKN0A2CpSNA6v7NRQ= -----END CERTIFICATE-----Generated at Sat May 31 17:37:49 2025 by rpki-client