$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: 62ZT9UN7qylj1eP+NTmS67C9XweM/StZsn/PGa3bxzA= Subject key identifier: 50:50:39:DC:16:BE:A6:C1:37:44:D8:82:0A:C5:04:CB:CB:DF:E0:DD Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09BD Signing time: Fri 30 May 2025 20:09:30 +0000 Manifest this update: Fri 30 May 2025 20:09:29 +0000 Manifest next update: Fri 06 Jun 2025 20:09:29 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: tC3YmRyC8OTu0kIAAS0/sOEPflQrbFCbiu2FMK5fa5U=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2499 (0x9c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: May 30 20:09:29 2025 GMT Not After : Jun 6 20:09:29 2025 GMT Subject: CN=683a1079-05e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c6:5f:03:ac:a5:71:0f:2b:ca:c1:dd:97:3c: 9f:7f:c1:14:94:b0:2d:84:d5:a2:c0:fb:13:07:0a: 7b:67:f1:59:19:74:90:9f:aa:ed:e9:eb:47:84:26: 4f:87:46:b3:e7:ef:30:a3:0e:fa:a7:fb:65:ea:8b: 29:67:c7:72:b5:91:f6:6f:ae:e8:20:7d:2b:7e:39: d3:bf:b4:3e:a0:dd:06:6d:2a:ac:04:65:2c:cb:c3: db:c7:ec:69:12:10:3e:ff:3d:6f:49:10:90:03:6f: ff:a7:60:14:a9:f7:5f:82:c9:1e:c8:ab:09:a8:a6: f7:2d:e0:9c:c9:3a:1f:45:5e:03:c9:90:9e:85:b8: c3:33:07:2b:c3:76:60:9c:9f:7e:37:d3:30:4a:44: 95:9f:b8:60:7f:63:2c:0d:f0:3a:9b:c8:c9:90:98: a6:ec:3a:06:76:a2:7c:3e:c4:a1:7c:5c:63:2d:0e: 01:ce:96:fe:18:56:6b:8a:df:c1:7b:d6:bf:f6:01: fb:87:31:6d:bd:f1:4b:08:2d:a6:da:e9:4a:f0:6c: 70:e5:b8:02:f6:a3:5c:5f:68:0f:5f:00:f1:7a:08: 27:71:af:97:7b:22:21:1b:00:45:a7:40:98:0c:b8: d4:d7:99:5b:07:72:d8:8c:fc:84:56:e7:fd:80:d1: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:39:DC:16:BE:A6:C1:37:44:D8:82:0A:C5:04:CB:CB:DF:E0:DD X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:3f:cf:fe:82:28:1b:32:18:5b:9c:c5:fd:73:51:24:1e:4d: 27:31:32:07:4c:80:f5:ef:7a:a6:62:f9:05:86:d1:47:3f:e6: 41:0a:79:27:1b:85:10:c0:12:8a:2b:24:e3:a8:c4:d8:4f:7c: 38:44:92:b0:d7:5e:21:e4:06:ac:b2:05:96:51:17:aa:cc:86: 7d:b6:63:d3:ed:47:91:3e:f8:80:c6:00:18:39:1c:12:c1:a9: 40:33:bc:50:f1:55:28:f0:e2:fe:cc:4f:ac:e6:52:39:99:d7: 71:7a:63:a9:b5:07:3e:15:79:e6:b4:5e:48:59:b5:47:65:19: ac:58:38:98:14:ec:cd:70:72:0e:e6:d1:a2:1b:e5:46:f5:49: 02:a9:03:5e:49:6a:c9:4a:23:62:c6:d5:78:c5:13:b4:11:98: 3c:77:78:ed:27:04:d4:82:0b:a2:a5:16:74:e7:bb:48:4d:e0: 8a:31:40:a4:fa:51:6e:d6:6c:0d:5f:f5:96:98:ec:b0:b9:68: 73:bc:a4:0c:ee:f1:ca:07:ce:e1:de:fa:b2:84:75:c8:01:55: 0d:a4:6d:4a:6c:4e:55:c8:fa:ce:f4:07:0f:5e:4c:36:45:71: a6:4f:3a:7c:75:61:bc:53:ac:ea:1d:25:57:73:07:85:87:44: 5b:64:3b:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwNTMwMjAwOTI5WhcNMjUwNjA2MjAwOTI5WjAYMRYwFAYD VQQDEw02ODNhMTA3OS0wNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscZfA6ylcQ8rysHdlzyff8EUlLAthNWiwPsTBwp7Z/FZGXSQn6rt6etHhCZP h0az5+8wow76p/tl6ospZ8dytZH2b67oIH0rfjnTv7Q+oN0GbSqsBGUsy8Pbx+xp EhA+/z1vSRCQA2//p2AUqfdfgskeyKsJqKb3LeCcyTofRV4DyZCehbjDMwcrw3Zg nJ9+N9MwSkSVn7hgf2MsDfA6m8jJkJim7DoGdqJ8PsShfFxjLQ4Bzpb+GFZrit/B e9a/9gH7hzFtvfFLCC2m2ulK8Gxw5bgC9qNcX2gPXwDxeggnca+XeyIhGwBFp0CY DLjU15lbB3LYjPyEVuf9gNGrdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFBQOdwW vqbBN0TYggrFBMvL3+DdMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBP8/+gigbMhhbnMX9c1EkHk0nMTIHTID173qmYvkFhtFHP+ZBCnkn G4UQwBKKKyTjqMTYT3w4RJKw114h5AassgWWUReqzIZ9tmPT7UeRPviAxgAYORwS walAM7xQ8VUo8OL+zE+s5lI5mddxemOptQc+FXnmtF5IWbVHZRmsWDiYFOzNcHIO 5tGiG+VG9UkCqQNeSWrJSiNixtV4xRO0EZg8d3jtJwTUgguipRZ057tITeCKMUCk +lFu1mwNX/WWmOywuWhzvKQM7vHKB87h3vqyhHXIAVUNpG1KbE5VyPrO9AcPXkw2 RXGmTzp8dWG8U6zqHSVXcweFh0RbZDsG -----END CERTIFICATE-----Generated at Sat May 31 17:23:35 2025 by rpki-client