$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: ycltzmBzz09ClY8YXC8Thj/KXzAkHrViaU6U43AVDQU= Subject key identifier: 43:E2:62:7D:2B:EA:CD:57:E2:15:C5:A9:CC:DC:E1:1E:3E:9E:D9:8F Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: F4 Signing time: Sat 31 May 2025 04:51:23 +0000 Manifest this update: Sat 31 May 2025 04:51:22 +0000 Manifest next update: Sat 07 Jun 2025 04:51:22 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: twCYw3PDhFhn9woXVIJxFQQExBe7NHhmDnj58DSye4s=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: May 31 04:51:22 2025 GMT Not After : Jun 7 04:51:22 2025 GMT Subject: CN=683a8acb-d7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:d0:37:c7:16:72:08:fa:62:62:92:34:1b: 4d:c9:17:c8:0b:7c:d3:a8:63:84:c2:5b:86:a2:55: 5d:53:11:5d:1e:e8:0f:da:ec:c8:dd:d3:e7:95:f8: 99:f2:ff:f7:cd:86:33:e7:47:2c:bb:01:66:f6:69: ef:e7:49:ee:90:93:b2:c0:1e:ea:a4:84:b4:ec:28: 07:d4:73:ed:8a:59:9d:3c:74:90:82:35:58:7c:5f: c0:61:74:10:c3:d9:df:d4:20:cb:9f:7a:95:1e:f0: 71:84:fa:d9:7c:2a:1d:98:c9:db:6a:61:10:24:af: ec:5e:5a:9d:f2:66:90:40:f3:02:52:47:02:32:cc: ca:cb:fa:f2:19:33:f4:2d:00:77:e4:fc:5a:46:18: 05:08:46:17:d4:c3:d5:cd:20:a9:70:88:c7:ff:e8: 71:c8:db:8b:78:4c:01:21:57:85:2c:c2:60:7f:b0: f4:4a:d7:c5:be:f5:f0:71:7e:5b:85:f5:da:c1:1c: 3d:71:0d:d8:33:9e:ee:c0:92:c9:38:46:3d:46:da: c1:6c:6a:8e:73:4a:5c:a6:f2:c2:3f:e4:5a:25:08: 44:fb:00:69:02:25:c5:60:1e:70:cf:40:72:7d:18: 11:53:d0:b8:72:a3:cc:1a:1f:f7:f1:2c:6c:33:1a: b3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E2:62:7D:2B:EA:CD:57:E2:15:C5:A9:CC:DC:E1:1E:3E:9E:D9:8F X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:5e:bf:eb:6d:ce:f1:38:34:e8:20:51:fb:6f:11:bc:f4:61: fe:47:8b:c0:0b:65:d1:9b:a2:44:15:bb:70:0c:9b:43:c2:b2: c5:c3:f3:e1:ec:89:3b:fe:c0:88:4f:e4:12:2c:50:a9:86:58: a6:75:cf:7c:61:84:17:d7:d7:73:ff:9b:33:32:12:dd:6c:3b: 79:a6:37:32:17:ac:75:ca:56:e0:29:bc:82:48:ee:37:9c:1a: 62:25:b6:2c:86:79:b8:73:05:7b:cf:83:d0:83:da:72:46:e9: b1:20:5a:da:be:b1:30:70:4a:fc:02:46:62:b1:c8:60:a0:05: 02:8b:63:e1:92:44:69:6d:28:26:8d:f6:b4:5d:81:8f:3a:1a: 56:d2:02:18:12:65:35:b6:fe:67:f3:c7:3a:71:45:06:f9:fe: 92:0c:22:26:08:a5:31:f8:0f:89:a8:94:da:c4:30:23:82:9b: c0:1e:d0:35:f6:96:a6:12:04:70:10:a7:6a:33:37:cd:4a:1b: 1a:55:39:5f:da:31:4d:2d:76:fd:9a:58:7e:d0:a0:79:89:bb: 1b:f4:f9:f4:fa:35:a0:69:c8:9a:24:d3:6e:36:01:5a:04:19: cf:02:64:51:88:0b:6b:b5:6b:f8:7d:ce:02:d9:1e:c0:05:ff: 80:a6:09:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUwNTMxMDQ1MTIyWhcNMjUwNjA3MDQ1MTIyWjAYMRYwFAYD VQQDEw02ODNhOGFjYi1kN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4LQN8cWcgj6YmKSNBtNyRfIC3zTqGOEwluGolVdUxFdHugP2uzI3dPnlfiZ 8v/3zYYz50csuwFm9mnv50nukJOywB7qpIS07CgH1HPtilmdPHSQgjVYfF/AYXQQ w9nf1CDLn3qVHvBxhPrZfCodmMnbamEQJK/sXlqd8maQQPMCUkcCMszKy/ryGTP0 LQB35PxaRhgFCEYX1MPVzSCpcIjH/+hxyNuLeEwBIVeFLMJgf7D0StfFvvXwcX5b hfXawRw9cQ3YM57uwJLJOEY9RtrBbGqOc0pcpvLCP+RaJQhE+wBpAiXFYB5wz0By fRgRU9C4cqPMGh/38SxsMxqzQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPiYn0r 6s1X4hXFqczc4R4+ntmPMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTXr/rbc7xODToIFH7bxG89GH+R4vAC2XRm6JEFbtwDJtDwrLFw/Ph 7Ik7/sCIT+QSLFCphlimdc98YYQX19dz/5szMhLdbDt5pjcyF6x1ylbgKbyCSO43 nBpiJbYshnm4cwV7z4PQg9pyRumxIFravrEwcEr8AkZischgoAUCi2PhkkRpbSgm jfa0XYGPOhpW0gIYEmU1tv5n88c6cUUG+f6SDCImCKUx+A+JqJTaxDAjgpvAHtA1 9pamEgRwEKdqMzfNShsaVTlf2jFNLXb9mlh+0KB5ibsb9Pn0+jWgaciaJNNuNgFa BBnPAmRRiAtrtWv4fc4C2R7ABf+Apgl7 -----END CERTIFICATE-----Generated at Sat May 31 17:57:48 2025 by rpki-client