$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: LRNfLd3Ip2/Y3+ZiF5ZW4Hvx9fMilF7jSExE+Hp/ivk= Subject key identifier: C9:2B:7A:47:02:6F:E4:3A:C4:3E:12:B0:F6:95:28:7B:DC:49:71:78 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 0913 Signing time: Fri 30 May 2025 20:30:27 +0000 Manifest this update: Fri 30 May 2025 20:30:26 +0000 Manifest next update: Fri 06 Jun 2025 20:30:26 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: 2HHTu0zbj1PilYG85B71BwAlaEKNGHjK4Xnm0ilOrSI=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:30:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2329 (0x919) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: May 30 20:30:26 2025 GMT Not After : Jun 6 20:30:26 2025 GMT Subject: CN=683a1563-53f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:86:50:f9:a2:d9:93:05:84:96:87:49:d5: 21:58:e7:18:27:d6:3e:24:9a:33:9b:24:a6:48:fc: 41:63:03:8c:58:2f:ae:56:21:79:44:05:e6:d8:34: 91:99:11:48:69:91:e4:3d:0a:a1:68:59:4a:af:00: 7c:83:90:9e:55:72:de:04:31:54:25:36:8b:9e:8b: bf:2b:65:13:a5:fe:96:97:1d:d9:4a:69:18:62:5a: 6f:03:0b:1e:16:a1:5f:8a:7a:67:09:b0:8a:cf:24: ac:d2:47:18:30:85:81:fc:62:0a:fd:bf:c5:73:cf: 60:72:6a:f8:37:9f:5d:5b:2e:cc:9e:9c:56:b0:21: 47:8e:60:19:ad:c4:48:62:5d:af:7e:af:f1:7a:15: fe:4d:6d:25:e1:d0:6c:61:e3:bf:d4:8b:1d:fc:8f: d2:b4:8d:56:a4:67:e7:07:d9:c4:52:c6:b6:b8:e6: 33:5f:49:16:a9:8e:f1:02:77:9e:dd:55:a7:cc:d6: f6:62:2b:4e:b0:35:4e:4e:c3:59:73:4f:f5:a2:82: f0:c9:c0:d7:92:15:9e:3b:6a:40:bd:d2:2f:cf:86: 71:dc:86:2a:ad:41:7d:60:48:19:6c:e0:7d:89:6e: eb:d3:0a:89:3d:6c:99:f5:57:42:68:32:74:87:4c: 3f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2B:7A:47:02:6F:E4:3A:C4:3E:12:B0:F6:95:28:7B:DC:49:71:78 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:56:b0:91:41:36:06:9c:89:ef:d3:f6:55:21:24:85:e1:1c: 8c:a0:02:93:1a:dd:f8:5a:b6:d7:86:5c:43:35:e9:f9:96:04: fd:81:e3:97:50:21:ef:9e:74:f3:32:98:79:6b:5b:6d:98:74: aa:19:c4:a4:4f:77:4f:1c:5c:95:1a:49:6d:3e:e3:2f:9e:9d: 6a:85:53:60:11:0e:5f:33:dc:dd:21:45:8b:bb:2c:a4:98:e6: c4:40:95:b1:13:7a:2e:ee:1b:a1:72:86:52:d0:83:ce:c8:d2: d3:a4:6d:97:56:64:ac:65:8d:94:bf:96:8f:8c:b5:c8:e8:ac: d1:fd:c2:de:45:b3:00:29:40:52:dc:5e:ac:8f:df:ef:f6:38: bf:ab:f4:ed:70:ef:d8:5e:c9:b6:be:06:af:77:b3:ea:56:22: f7:d5:f4:27:30:8f:33:34:91:f4:4b:9c:b0:58:43:08:18:6a: 55:b1:48:45:24:f8:c7:9f:ff:52:3a:64:1c:8d:02:88:ef:13: ba:64:50:44:87:a6:c8:1d:f2:f6:e1:53:99:99:fe:c2:16:e6: 54:ff:5f:8d:d3:2f:de:f9:bb:02:ee:19:ef:b5:1d:06:e9:1b: 4c:bc:6d:96:5c:ee:93:91:5d:92:c6:b5:84:3f:a4:9c:65:ba: 1d:09:6b:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwNTMwMjAzMDI2WhcNMjUwNjA2MjAzMDI2WjAYMRYwFAYD VQQDEw02ODNhMTU2My01M2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsVyGUPmi2ZMFhJaHSdUhWOcYJ9Y+JJozmySmSPxBYwOMWC+uViF5RAXm2DSR mRFIaZHkPQqhaFlKrwB8g5CeVXLeBDFUJTaLnou/K2UTpf6Wlx3ZSmkYYlpvAwse FqFfinpnCbCKzySs0kcYMIWB/GIK/b/Fc89gcmr4N59dWy7MnpxWsCFHjmAZrcRI Yl2vfq/xehX+TW0l4dBsYeO/1Isd/I/StI1WpGfnB9nEUsa2uOYzX0kWqY7xAnee 3VWnzNb2YitOsDVOTsNZc0/1ooLwycDXkhWeO2pAvdIvz4Zx3IYqrUF9YEgZbOB9 iW7r0wqJPWyZ9VdCaDJ0h0w/awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkrekcC b+Q6xD4SsPaVKHvcSXF4MB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlVrCRQTYGnInv0/ZVISSF4RyMoAKTGt34WrbXhlxDNen5lgT9geOX UCHvnnTzMph5a1ttmHSqGcSkT3dPHFyVGkltPuMvnp1qhVNgEQ5fM9zdIUWLuyyk mObEQJWxE3ou7huhcoZS0IPOyNLTpG2XVmSsZY2Uv5aPjLXI6KzR/cLeRbMAKUBS 3F6sj9/v9ji/q/TtcO/YXsm2vgavd7PqViL31fQnMI8zNJH0S5ywWEMIGGpVsUhF JPjHn/9SOmQcjQKI7xO6ZFBEh6bIHfL24VOZmf7CFuZU/1+N0y/e+bsC7hnvtR0G 6RtMvG2WXO6TkV2SxrWEP6ScZbodCWu0 -----END CERTIFICATE-----Generated at Sat May 31 17:41:02 2025 by rpki-client