$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: Xz+KkSlfq4x1RUWmI2B6hX0ODSAWNh5bFS0ao+L1KeM= Subject key identifier: F6:4E:3E:73:55:36:25:AD:F2:2D:DB:D3:D1:FB:A8:08:B9:5F:78:4C Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 059F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 059E Signing time: Fri 30 May 2025 23:24:15 +0000 Manifest this update: Fri 30 May 2025 23:24:14 +0000 Manifest next update: Fri 06 Jun 2025 23:24:14 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: kaI43sX3VcPiar55hOBj7G4eltZb3AXhfxPFLdn8Hqg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1439 (0x59f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: May 30 23:24:14 2025 GMT Not After : Jun 6 23:24:14 2025 GMT Subject: CN=683a3e1e-9433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:61:ce:70:51:c3:7e:70:3b:aa:d6:ab:10: 6a:cc:e5:93:da:c6:cd:11:ea:68:3e:93:c0:75:ac: e4:c5:78:85:69:a3:f4:85:20:66:f5:99:b3:7b:9c: f3:19:f4:60:4d:5a:f6:61:ae:13:30:56:ef:e1:fe: af:26:e7:ed:32:da:f7:11:20:52:6a:46:df:b4:d5: 79:ce:8b:e5:37:fd:fa:bd:4b:17:11:ab:5a:f7:a0: f6:80:d3:25:5a:ae:96:ce:0e:2b:fc:6a:5f:2f:98: 69:12:6b:8a:f4:88:48:96:06:0d:ec:a2:42:3a:57: d3:5c:e4:fb:36:4d:99:c5:a7:01:4f:98:d2:46:93: 2b:cb:36:7e:69:8f:5c:ce:fb:b1:e3:e2:b5:b9:a7: 9e:d4:04:8d:47:a1:b0:42:65:51:bc:61:43:de:2c: 61:d0:85:3c:39:7c:8b:da:37:6c:0f:c1:59:1d:53: 4c:91:27:95:b9:87:9c:a9:77:33:ac:99:99:77:82: d6:69:90:c9:15:f7:82:5a:ec:0f:ae:0e:ed:ea:a9: ad:f3:c1:ca:92:8f:e5:3d:3f:dc:6f:d5:d5:51:e3: 18:b1:5e:75:9d:ed:66:17:ba:91:d5:06:23:a6:2b: 2f:45:17:67:6a:ee:00:cc:10:b7:b2:9f:83:50:0e: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4E:3E:73:55:36:25:AD:F2:2D:DB:D3:D1:FB:A8:08:B9:5F:78:4C X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:cd:3b:85:33:95:0e:2d:8b:3f:70:a6:38:04:77:07:3e:fa: 07:57:c4:ff:c1:00:6f:ba:06:bb:f4:c2:67:4d:1d:41:cb:9c: 22:8d:03:86:fe:19:36:d3:60:34:9c:1f:bb:9b:31:5e:f3:be: 63:80:da:98:a0:df:cb:0e:8f:66:47:22:a6:25:1f:6c:94:fc: 29:90:c2:c8:fa:52:97:c1:db:40:d7:16:8b:22:30:e4:45:ef: 2b:b5:47:cc:a9:1b:d4:ad:65:37:06:b0:cd:8b:e1:49:11:f3: b7:e6:e8:42:80:94:97:04:51:6e:31:db:07:8c:4d:2f:a3:95: d3:37:ed:8f:1e:0a:0a:98:87:7c:e8:bd:f8:55:51:d7:47:f7: 5a:54:33:3f:39:60:29:c5:08:4b:b3:b4:c5:0a:96:47:a4:19: 4f:33:e6:73:c9:d5:14:1d:d7:da:ae:91:9f:b4:22:f1:a8:f5: 69:0f:95:da:b8:e3:ce:eb:54:97:52:a3:72:33:b7:8f:1c:e6: 9a:7c:84:a8:b8:81:25:14:87:9d:49:eb:37:ac:d2:b0:3f:81: 84:06:40:80:ff:e6:24:2c:e3:6a:78:30:ba:65:29:fe:f9:d3: 7d:a5:ad:0d:d8:2b:49:1d:de:8f:88:35:22:19:f3:4b:f6:02: 7e:16:f6:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjUwNTMwMjMyNDE0WhcNMjUwNjA2MjMyNDE0WjAYMRYwFAYD VQQDEw02ODNhM2UxZS05NDMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA59xhznBRw35wO6rWqxBqzOWT2sbNEepoPpPAdazkxXiFaaP0hSBm9Zmze5zz GfRgTVr2Ya4TMFbv4f6vJuftMtr3ESBSakbftNV5zovlN/36vUsXEata96D2gNMl Wq6Wzg4r/GpfL5hpEmuK9IhIlgYN7KJCOlfTXOT7Nk2ZxacBT5jSRpMryzZ+aY9c zvux4+K1uaee1ASNR6GwQmVRvGFD3ixh0IU8OXyL2jdsD8FZHVNMkSeVuYecqXcz rJmZd4LWaZDJFfeCWuwPrg7t6qmt88HKko/lPT/cb9XVUeMYsV51ne1mF7qR1QYj pisvRRdnau4AzBC3sp+DUA6XoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZOPnNV NiWt8i3b09H7qAi5X3hMMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAozTuFM5UOLYs/cKY4BHcHPvoHV8T/wQBvuga79MJnTR1By5wijQOG /hk202A0nB+7mzFe875jgNqYoN/LDo9mRyKmJR9slPwpkMLI+lKXwdtA1xaLIjDk Re8rtUfMqRvUrWU3BrDNi+FJEfO35uhCgJSXBFFuMdsHjE0vo5XTN+2PHgoKmId8 6L34VVHXR/daVDM/OWApxQhLs7TFCpZHpBlPM+ZzydUUHdfarpGftCLxqPVpD5Xa uOPO61SXUqNyM7ePHOaafISouIElFIedSes3rNKwP4GEBkCA/+YkLONqeDC6ZSn+ +dN9pa0N2CtJHd6PiDUiGfNL9gJ+FvZu -----END CERTIFICATE-----Generated at Sat May 31 16:50:40 2025 by rpki-client