$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft File: zz57dCpMUuD49_jnQF-yu7z0yqM.mft (raw, json) Hash identifier: g+PvGc8KUvXIbXGPaqvLnAHgdlYNYNkcYj6NHOUsVE4= Subject key identifier: B9:0C:58:AA:B8:2A:9D:0B:9B:0F:94:1A:29:F8:25:BD:4D:CF:4D:DC Authority key identifier: CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 Certificate issuer: /CN=A912C2B1/serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Certificate serial: 0D53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft Manifest number: 0D32 Signing time: Fri 30 May 2025 18:12:53 +0000 Manifest this update: Fri 30 May 2025 18:12:52 +0000 Manifest next update: Fri 06 Jun 2025 18:12:52 +0000 Files and hashes: 1: zz57dCpMUuD49_jnQF-yu7z0yqM.crl (hash: h74I1ihH1Zk7GGb0noy8J1/UX1+Glguh088pZr3/O+M=) 2: 73E16BB27C4711EFACFB1228C4F9AE02.roa (hash: 8LOnykbqINKaZ+L5my3UzBmhmDiX2dGDooRzuen4vMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3411 (0xd53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C2B1, serialNumber=CF3E7B742A4C52E0F8F7F8E7405FB2BBBCF4CAA3 Validity Not Before: May 30 18:12:52 2025 GMT Not After : Jun 6 18:12:52 2025 GMT Subject: CN=6839f524-6cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:16:6b:39:99:f6:1b:6b:46:bc:c9:11:9c: 2a:6c:9b:21:df:d8:14:02:1c:b9:f2:5f:e6:59:de: 5d:b7:ea:9d:41:ee:26:d2:46:81:a3:79:c0:3e:be: d6:db:7e:51:a1:07:7c:e8:46:b4:8a:47:8e:72:54: bf:c3:4b:78:46:e8:df:1d:37:7a:30:92:e2:8a:88: 7b:cd:60:5c:1e:25:81:76:a6:94:f4:cd:7b:c8:d4: 6a:89:b5:87:fa:06:99:b5:fb:40:d9:72:cc:b8:39: ef:10:8f:06:63:49:e4:af:f7:dc:07:c9:c1:70:87: f0:ec:95:83:9d:5f:27:f4:05:be:f4:2a:61:cd:68: 4a:dd:59:b0:f7:9b:12:8a:e4:a1:9b:1b:c6:9a:1f: a4:ea:62:ae:2f:fd:b2:0d:7a:e4:b3:65:4c:1f:e9: 5e:d7:64:bc:ec:95:f7:f3:88:47:5b:4c:ed:b5:56: de:61:f4:64:00:d2:cf:2c:70:f6:30:b8:03:77:50: d6:df:36:4e:20:e6:2d:29:eb:f2:63:78:ee:73:12: e4:d5:d7:a5:48:dc:fe:47:2c:59:03:e3:c9:02:18: 86:fb:67:00:4f:e9:56:95:27:4a:a1:3e:9b:cd:d6: d1:5f:72:25:b6:ed:e3:6a:18:6f:05:8c:ed:76:b0: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:58:AA:B8:2A:9D:0B:9B:0F:94:1A:29:F8:25:BD:4D:CF:4D:DC X509v3 Authority Key Identifier: keyid:CF:3E:7B:74:2A:4C:52:E0:F8:F7:F8:E7:40:5F:B2:BB:BC:F4:CA:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zz57dCpMUuD49_jnQF-yu7z0yqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2B1/1DAEA22CD9FA11E98942894DC4F9AE02/zz57dCpMUuD49_jnQF-yu7z0yqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:49:50:1f:82:e3:2a:79:73:57:c6:b1:c3:b7:d9:d9:0b:cc: fc:09:93:24:d2:42:74:d8:1f:f2:9f:9c:f6:9b:89:b6:f4:ce: ac:bb:74:7a:7d:ff:81:c3:c1:68:82:0b:b5:bf:67:08:15:84: c7:3e:7f:2d:a0:18:e3:f7:b6:f2:c7:c9:7d:a8:2b:c8:5a:b2: 6b:50:d2:c4:e6:f3:fc:3f:e6:10:94:7a:c0:0d:86:b8:36:6f: 75:bf:ba:c0:75:0e:62:38:77:e6:bf:3b:37:7f:86:4d:47:56: f5:f1:2e:39:b4:8f:d9:80:8c:f8:7c:28:09:7c:f2:3c:09:03: 9d:fc:b2:c2:de:b2:38:04:87:37:ea:49:ea:a9:08:70:1e:f6: 41:49:94:3b:9c:6a:28:13:77:97:e6:e4:47:a6:b8:4e:cd:f5: 98:6b:5b:2b:c5:f9:f6:b0:7f:f8:6c:c6:3d:3b:27:ed:2f:58: 50:cf:43:bf:a1:41:e5:fb:11:25:34:b7:eb:1a:ed:5b:b1:3e: c9:3a:21:5c:96:21:92:b3:41:2a:1c:e1:36:fa:bf:6e:76:76: d0:71:eb:d7:e4:39:6f:ec:f2:21:16:2c:9d:f6:b3:af:4f:7e: 2a:27:8b:df:4b:6e:a1:0f:85:98:46:94:28:f1:90:39:1c:01: 88:02:13:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMyQjExMTAvBgNVBAUTKENGM0U3Qjc0MkE0QzUyRTBGOEY3RjhFNzQwNUZCMkJC QkNGNENBQTMwHhcNMjUwNTMwMTgxMjUyWhcNMjUwNjA2MTgxMjUyWjAYMRYwFAYD VQQDEw02ODM5ZjUyNC02Y2Y1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9QWazmZ9htrRrzJEZwqbJsh39gUAhy58l/mWd5dt+qdQe4m0kaBo3nAPr7W 235RoQd86Ea0ikeOclS/w0t4RujfHTd6MJLiioh7zWBcHiWBdqaU9M17yNRqibWH +gaZtftA2XLMuDnvEI8GY0nkr/fcB8nBcIfw7JWDnV8n9AW+9CphzWhK3Vmw95sS iuShmxvGmh+k6mKuL/2yDXrks2VMH+le12S87JX384hHW0zttVbeYfRkANLPLHD2 MLgDd1DW3zZOIOYtKevyY3jucxLk1delSNz+RyxZA+PJAhiG+2cAT+lWlSdKoT6b zdbRX3Iltu3jahhvBYztdrBePwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLkMWKq4 Kp0Lmw+UGin4Jb1Nz03cMB8GA1UdIwQYMBaAFM8+e3QqTFLg+Pf450Bfsru89Mqj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJCMS8xREFFQTIyQ0Q5 RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1RDQ5X2puUUYteXU3ejB5 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6NTdkQ3BNVXVENDlfam5RRi15dTd6MHlxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzJCMS8xREFFQTIyQ0Q5RkExMUU5ODk0Mjg5NERDNEY5QUUwMi96ejU3ZENwTVV1 RDQ5X2puUUYteXU3ejB5cU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRSVAfguMqeXNXxrHDt9nZC8z8CZMk0kJ02B/yn5z2m4m29M6su3R6 ff+Bw8Foggu1v2cIFYTHPn8toBjj97byx8l9qCvIWrJrUNLE5vP8P+YQlHrADYa4 Nm91v7rAdQ5iOHfmvzs3f4ZNR1b18S45tI/ZgIz4fCgJfPI8CQOd/LLC3rI4BIc3 6knqqQhwHvZBSZQ7nGooE3eX5uRHprhOzfWYa1srxfn2sH/4bMY9OyftL1hQz0O/ oUHl+xElNLfrGu1bsT7JOiFcliGSs0EqHOE2+r9udnbQcevX5Dlv7PIhFiyd9rOv T34qJ4vfS26hD4WYRpQo8ZA5HAGIAhPX -----END CERTIFICATE-----Generated at Sat May 31 15:13:00 2025 by rpki-client