$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: /7N0+0K2OxRLNJefsZr0xW87Be8KF1/ptJ9CA2KV1hE= Subject key identifier: 7E:42:0C:B9:E3:D1:05:6B:42:85:66:5C:B6:F1:D9:D5:F2:4B:EF:03 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 7C Signing time: Sat 31 May 2025 06:15:20 +0000 Manifest this update: Sat 31 May 2025 06:15:20 +0000 Manifest next update: Sat 07 Jun 2025 06:15:20 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: N/Cnmy5fFm3M6wNra9D3Ubm1164N9G4Oe2W82FO9I5U=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: May 31 06:15:20 2025 GMT Not After : Jun 7 06:15:20 2025 GMT Subject: CN=683a9e78-316d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:35:0c:44:0e:b2:c6:f1:c6:25:3c:67:74: 0d:6d:20:fd:28:c6:a8:74:32:6b:ae:cd:79:88:a9: 54:bc:d3:a3:ab:e8:75:f2:fc:12:99:50:43:24:c0: 63:16:06:08:bd:76:88:7c:f4:ee:81:e2:e6:67:30: 35:02:a8:12:8c:93:57:26:c2:b4:e7:44:62:00:48: 36:35:84:95:29:c8:20:d6:ea:a6:26:62:20:99:14: cf:be:37:7a:8d:43:be:cf:b8:aa:98:2d:c8:4b:9b: e5:01:4f:30:e3:7f:e4:b1:5d:94:5d:5e:3d:64:7d: 38:28:06:41:cb:77:22:74:83:06:d3:54:f5:a9:89: 53:10:fc:3f:16:35:71:30:28:86:12:f5:ff:75:cc: 92:5b:83:2d:bf:8c:37:28:46:f3:b1:4a:fc:e3:36: 5c:33:b4:63:4d:6a:89:5a:c7:e0:76:f7:3e:85:80: c6:3d:9a:b2:f2:96:2f:31:38:09:12:d1:10:5f:16: 6e:97:51:0b:6a:66:ac:a5:be:0c:f3:f5:d5:50:6a: 2d:da:4c:ea:43:70:6a:ee:fe:9f:a9:f6:77:c6:cb: 4a:9c:3f:9c:a3:f9:57:e6:44:e7:90:cd:f8:98:93: 31:91:0d:a8:07:b5:3b:ea:d0:3f:ca:7d:4c:32:f8: b5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:42:0C:B9:E3:D1:05:6B:42:85:66:5C:B6:F1:D9:D5:F2:4B:EF:03 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:8f:28:14:cc:9a:cc:e4:fa:f8:a1:95:7e:24:98:98:72:2a: 05:19:c6:e2:e9:9d:21:32:0a:bd:9c:43:17:8f:75:50:39:75: b4:1a:bf:79:0e:c6:1c:29:76:15:d8:71:cc:bd:99:59:d6:f0: 67:00:13:de:ee:01:81:c5:0b:ad:08:cb:35:6a:eb:51:f5:6c: 54:b2:28:9f:5c:e2:8e:97:8a:ae:45:d3:61:4c:36:fa:92:1c: 62:7f:c1:c3:ef:85:8e:4e:85:3d:a2:aa:ce:2c:e8:07:82:76: bc:f4:e0:a6:f2:13:f3:16:1b:63:ec:c9:2d:21:e8:d0:5d:bc: 8c:e4:a2:a6:3d:9a:b7:c1:63:91:b8:0a:53:4f:84:50:e7:b8: 79:3a:c3:c8:e4:d8:ef:b5:fb:d1:8d:7d:03:a1:c7:4e:3d:ab: c9:2e:bb:fe:79:e6:e9:67:c5:5a:5c:f9:fe:cf:6b:55:a9:f0: a4:42:50:ea:88:34:53:32:4f:44:1c:fc:f9:ee:db:df:2a:08: df:3d:c9:2e:bb:f2:98:1d:46:16:af:7b:2a:fb:06:bb:66:ad: 92:90:f7:50:18:4a:52:de:43:73:ff:3b:e2:2d:a4:2f:71:f9: 70:44:68:e0:cf:32:21:3f:c1:8d:1d:67:b0:79:61:68:22:1b: dc:3d:72:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzZERjExMC8GA1UEBRMoNjRGMjFDREU2NDhCMzlCNTI4MkI4Q0IxMjc5MjhFMjMz MjQ4ODI5NDAeFw0yNTA1MzEwNjE1MjBaFw0yNTA2MDcwNjE1MjBaMBgxFjAUBgNV BAMTDTY4M2E5ZTc4LTMxNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyxjUMRA6yxvHGJTxndA1tIP0oxqh0MmuuzXmIqVS806Or6HXy/BKZUEMkwGMW Bgi9doh89O6B4uZnMDUCqBKMk1cmwrTnRGIASDY1hJUpyCDW6qYmYiCZFM++N3qN Q77PuKqYLchLm+UBTzDjf+SxXZRdXj1kfTgoBkHLdyJ0gwbTVPWpiVMQ/D8WNXEw KIYS9f91zJJbgy2/jDcoRvOxSvzjNlwztGNNaolax+B29z6FgMY9mrLyli8xOAkS 0RBfFm6XUQtqZqylvgzz9dVQai3aTOpDcGru/p+p9nfGy0qcP5yj+VfmROeQzfiY kzGRDagHtTvq0D/KfUwy+LWTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfkIMuePR BWtChWZctvHZ1fJL7wMwHwYDVR0jBBgwFoAUZPIc3mSLObUoK4yxJ5KOIzJIgpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNkRGLzIzMTg0MDhDODEz RjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlBJYzNtU0xPYlVvSzR5eEo1S09JekpJZ3BRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz NkRGLzIzMTg0MDhDODEzRjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JV b0s0eXhKNUtPSXpKSWdwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANCPKBTMmszk+vihlX4kmJhyKgUZxuLpnSEyCr2cQxePdVA5dbQav3kO xhwpdhXYccy9mVnW8GcAE97uAYHFC60IyzVq61H1bFSyKJ9c4o6Xiq5F02FMNvqS HGJ/wcPvhY5OhT2iqs4s6AeCdrz04KbyE/MWG2PsyS0h6NBdvIzkoqY9mrfBY5G4 ClNPhFDnuHk6w8jk2O+1+9GNfQOhx049q8kuu/555ulnxVpc+f7Pa1Wp8KRCUOqI NFMyT0Qc/Pnu298qCN89yS678pgdRhaveyr7BrtmrZKQ91AYSlLeQ3P/O+ItpC9x +XBEaODPMiE/wY0dZ7B5YWgiG9w9crM= -----END CERTIFICATE-----Generated at Sat May 31 17:44:08 2025 by rpki-client