$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: 3kBWcPMX71JqQUr6YAE1cQbFK4WcYE+1GuApBUwlP8s= Subject key identifier: 00:2B:55:00:F4:EA:A0:23:68:45:E4:D4:A2:CC:91:03:16:58:9C:C6 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 1B Signing time: Sat 31 May 2025 07:31:08 +0000 Manifest this update: Sat 31 May 2025 07:31:07 +0000 Manifest next update: Sat 07 Jun 2025 07:31:07 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: yBPJ/kDi41qI/6tbvWSFbAOShyn4pC87/fUAm5lS98s=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: May 31 07:31:07 2025 GMT Not After : Jun 7 07:31:07 2025 GMT Subject: CN=683ab03c-0f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:ed:ef:3d:12:73:08:57:1c:8b:63:f6:35: 09:42:97:8e:81:f5:96:8a:2e:5d:29:d3:c6:a2:b9: 52:89:45:31:05:ab:da:f4:4a:73:a4:e6:48:1f:15: 7f:3d:8a:30:91:0b:00:30:aa:17:66:21:08:d2:e9: 89:54:bf:6f:81:82:d8:fb:ea:28:5c:7a:7e:d2:7e: ce:85:00:e5:1f:40:d6:44:aa:e1:09:09:0b:1d:6e: ef:25:e9:13:1e:93:02:c1:02:b7:cf:3d:09:71:ec: bc:08:ec:70:50:14:dd:e5:24:20:18:6a:1d:8c:52: 26:f5:5a:27:4a:35:5f:17:73:8e:4a:60:de:ab:91: 47:c1:9a:80:58:9c:34:08:50:83:d5:5e:e5:95:2a: 2c:6f:f3:fb:bd:83:da:2b:5c:d7:9e:e9:50:04:dc: a3:1f:45:8f:cf:ea:2a:29:09:9d:e4:e0:6e:50:3f: aa:65:8e:2a:4a:0b:11:1f:a2:e2:77:84:1f:bd:41: 00:bd:a2:53:ee:70:9a:26:4b:43:d8:e9:8f:23:25: 42:8e:81:a9:a1:ab:82:4b:b3:17:49:f9:21:b2:d6: 18:23:ae:bd:9a:e9:22:d6:c6:62:50:5e:a5:a3:48: f8:57:1c:9b:0c:5d:37:ac:6b:31:d5:39:a5:c6:3e: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2B:55:00:F4:EA:A0:23:68:45:E4:D4:A2:CC:91:03:16:58:9C:C6 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d8:a6:b5:4c:81:e6:49:f5:d9:c4:81:10:a5:02:a0:ec:11:c7: e9:10:46:2a:93:98:24:59:f1:34:c7:02:57:6c:bd:bd:9a:a0: db:6b:e4:9c:ec:3f:36:f9:a0:43:74:62:cd:3f:ad:79:df:be: 20:40:81:1c:22:57:2c:82:fa:5c:90:4d:6a:7d:47:f8:03:63: 6d:34:b1:13:23:14:0c:89:38:65:5b:a3:8c:31:61:09:9d:e7: b8:82:10:b2:63:2c:52:be:20:bc:70:dd:08:f8:07:a9:f2:43: de:12:54:2e:98:35:91:1a:74:ad:bb:06:cb:54:4d:45:74:c5: bc:46:e5:f3:30:45:c9:0d:7e:ef:b2:19:18:9b:31:5b:84:90: d6:be:e3:54:e0:d1:8b:94:eb:e8:40:f7:82:c5:c8:c1:07:89: b5:65:68:00:af:b8:b7:5f:70:0d:05:ee:c1:e5:66:17:85:ba: af:01:4e:65:7b:b9:d1:84:10:fc:64:b1:f6:89:d1:43:6e:32: 3b:b9:54:0d:59:a0:8f:89:67:c1:db:88:1b:17:29:7e:1b:25: 5e:d6:b7:16:af:81:aa:63:5e:8c:cc:5b:4c:0e:e8:15:e1:db: 9b:b8:a1:b8:d8:70:73:5c:ad:66:f8:1a:6c:4e:f9:8e:e1:d4: 04:b2:41:ac -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA1MzEwNzMxMDdaFw0yNTA2MDcwNzMxMDdaMBgxFjAUBgNV BAMTDTY4M2FiMDNjLTBmODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQComu3vPRJzCFcci2P2NQlCl46B9ZaKLl0p08aiuVKJRTEFq9r0SnOk5kgfFX89 ijCRCwAwqhdmIQjS6YlUv2+Bgtj76ihcen7Sfs6FAOUfQNZEquEJCQsdbu8l6RMe kwLBArfPPQlx7LwI7HBQFN3lJCAYah2MUib1WidKNV8Xc45KYN6rkUfBmoBYnDQI UIPVXuWVKixv8/u9g9orXNee6VAE3KMfRY/P6iopCZ3k4G5QP6pljipKCxEfouJ3 hB+9QQC9olPucJomS0PY6Y8jJUKOgamhq4JLsxdJ+SGy1hgjrr2a6SLWxmJQXqWj SPhXHJsMXTesazHVOaXGPkp1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUACtVAPTq oCNoReTUosyRAxZYnMYwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANimtUyB5kn12cSBEKUCoOwRx+kQRiqTmCRZ8TTHAldsvb2aoNtr5Jzs Pzb5oEN0Ys0/rXnfviBAgRwiVyyC+lyQTWp9R/gDY200sRMjFAyJOGVbo4wxYQmd 57iCELJjLFK+ILxw3Qj4B6nyQ94SVC6YNZEadK27BstUTUV0xbxG5fMwRckNfu+y GRibMVuEkNa+41Tg0YuU6+hA94LFyMEHibVlaACvuLdfcA0F7sHlZheFuq8BTmV7 udGEEPxksfaJ0UNuMju5VA1ZoI+JZ8HbiBsXKX4bJV7WtxavgapjXozMW0wO6BXh 25u4objYcHNcrWb4GmxO+Y7h1ASyQaw= -----END CERTIFICATE-----Generated at Sat May 31 16:35:06 2025 by rpki-client