$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: /4fwEFico9Io7kOXCkOnQeHwG4iWuenwoonuznsdRR0= Subject key identifier: 89:DA:A0:C7:CD:4E:B3:0F:21:CC:2E:8F:F0:73:A4:BF:F0:75:DE:F6 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 2359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 2348 Signing time: Fri 30 May 2025 16:00:51 +0000 Manifest this update: Fri 30 May 2025 16:00:50 +0000 Manifest next update: Fri 06 Jun 2025 16:00:50 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: FWMzdR8xintGUFyyX+9dWutgckLbioaXuEVf88JGdG8=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9049 (0x2359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: May 30 16:00:50 2025 GMT Not After : Jun 6 16:00:50 2025 GMT Subject: CN=6839d633-0a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:69:ae:05:de:39:6d:b6:a1:4f:dc:d7:6c:f3: 11:b3:c3:0e:76:d0:d2:66:b2:27:40:d1:8a:8d:cd: cf:85:dc:f6:93:e9:dd:1c:4a:b1:8d:d6:80:40:3e: 88:29:5e:38:85:3e:de:11:7c:31:37:f9:b1:2e:18: cb:1d:21:b8:1c:a4:99:68:b9:9d:00:0d:10:5d:ce: 28:64:4d:94:11:81:f7:da:5d:b8:54:f5:d7:4e:e5: a2:1c:4b:68:8b:bd:ed:0e:98:06:cb:39:fd:f9:37: 7d:ec:48:06:b6:57:5e:59:49:97:b8:90:7f:fc:d9: cc:02:4b:4c:a3:6c:f8:5e:85:72:1b:1c:16:6c:6b: 6e:f0:d6:74:b3:f5:21:71:e3:f4:7b:c6:e7:26:72: 8b:d4:f1:0e:20:4b:3b:11:c7:9c:84:55:91:12:a7: 45:55:93:75:34:2a:dd:14:b1:bf:34:c7:93:be:fc: 6a:19:b1:0d:35:aa:73:26:91:9d:17:88:ec:2f:db: de:cb:54:ef:d4:cc:60:ce:ec:d7:c2:6b:07:e8:09: 36:48:28:cb:7d:cc:04:06:2c:18:1b:69:fe:f6:dc: 2c:ea:64:28:a3:58:bc:53:0e:d5:6c:a6:97:28:50: 00:e7:a8:83:de:83:52:17:8b:ba:f9:5e:65:3f:db: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:A0:C7:CD:4E:B3:0F:21:CC:2E:8F:F0:73:A4:BF:F0:75:DE:F6 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1c:ad:01:1d:be:bb:57:57:15:32:4e:6e:00:7b:f6:1d:85: 24:4d:32:9a:56:2f:b4:29:0f:72:35:44:9e:dc:f9:69:5d:c8: 9f:8d:f7:54:db:ba:bf:97:32:13:c9:63:ba:e1:54:7d:25:f5: 9c:0f:37:6f:04:d1:86:2c:6e:b5:f3:ab:06:17:50:1f:b9:ab: 9c:7c:0e:f0:2d:2d:e9:e1:76:c4:66:b3:ee:fc:99:ab:0c:c9: 1c:72:f9:db:b3:6c:1e:aa:91:87:d3:5e:32:0e:53:ea:04:60: 6f:4c:6a:79:ca:02:52:43:b2:89:d9:d0:fc:cc:2d:bf:e1:29: 3d:d1:6a:0b:33:35:d0:50:db:43:10:8d:25:6e:76:7a:33:a6: 97:16:a3:53:11:ec:bf:ea:d5:83:72:f5:fe:63:97:21:b0:b3: df:0b:16:80:99:69:bc:a3:58:db:b8:0e:af:71:22:87:d7:44: fd:27:c2:b8:1b:ce:95:2c:28:0e:23:b2:cf:c1:03:5b:4a:b2: d6:1b:e2:72:c9:b7:49:14:6a:de:84:60:4e:94:ef:10:99:e4: 49:29:1e:db:d4:07:7f:f1:2e:d1:7a:26:b0:50:e0:f7:a1:58: 3d:d4:1e:76:50:3c:a0:dc:c6:e8:f2:76:0b:b7:17:b3:4a:4d: 7a:44:52:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwNTMwMTYwMDUwWhcNMjUwNjA2MTYwMDUwWjAYMRYwFAYD VQQDEw02ODM5ZDYzMy0wYTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGmuBd45bbahT9zXbPMRs8MOdtDSZrInQNGKjc3Phdz2k+ndHEqxjdaAQD6I KV44hT7eEXwxN/mxLhjLHSG4HKSZaLmdAA0QXc4oZE2UEYH32l24VPXXTuWiHEto i73tDpgGyzn9+Td97EgGtldeWUmXuJB//NnMAktMo2z4XoVyGxwWbGtu8NZ0s/Uh ceP0e8bnJnKL1PEOIEs7EcechFWREqdFVZN1NCrdFLG/NMeTvvxqGbENNapzJpGd F4jsL9vey1Tv1MxgzuzXwmsH6Ak2SCjLfcwEBiwYG2n+9tws6mQoo1i8Uw7VbKaX KFAA56iD3oNSF4u6+V5lP9sthQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInaoMfN TrMPIcwuj/BzpL/wdd72MB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeHK0BHb67V1cVMk5uAHv2HYUkTTKaVi+0KQ9yNUSe3PlpXcifjfdU 27q/lzITyWO64VR9JfWcDzdvBNGGLG6186sGF1AfuaucfA7wLS3p4XbEZrPu/Jmr DMkccvnbs2weqpGH014yDlPqBGBvTGp5ygJSQ7KJ2dD8zC2/4Sk90WoLMzXQUNtD EI0lbnZ6M6aXFqNTEey/6tWDcvX+Y5chsLPfCxaAmWm8o1jbuA6vcSKH10T9J8K4 G86VLCgOI7LPwQNbSrLWG+JyybdJFGrehGBOlO8QmeRJKR7b1Ad/8S7ReiawUOD3 oVg91B52UDyg3Mbo8nYLtxezSk16RFJX -----END CERTIFICATE-----Generated at Sat May 31 17:03:35 2025 by rpki-client