$ rpki-client -vvf rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft File: zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft (raw, json) Hash identifier: cjRv4fw/AutCBYMsYsb2tAskjNbe4NNM0ar5KP73k3c= Subject key identifier: 1C:46:8F:A9:C3:17:2D:2A:2A:BF:52:48:1E:70:DD:7F:17:96:72:1E Authority key identifier: CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 Certificate issuer: /CN=A91540B9/serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft Manifest number: 01E4 Signing time: Sat 31 May 2025 02:23:22 +0000 Manifest this update: Sat 31 May 2025 02:23:22 +0000 Manifest next update: Sat 07 Jun 2025 02:23:22 +0000 Files and hashes: 1: zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl (hash: xb5qC2JMUUo01QCk6hjBQvjL/9NH1e1QNUHVum6HRzc=) 2: 0E4247485B5811ED91760C7DC4F9AE02.roa (hash: qbxShxJ7AuiZAM9HFVwuKcG851IE5SsittqszSxEAtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91540B9, serialNumber=CCE083479C4672DF9928BAA838F2AB28026DEFF7 Validity Not Before: May 31 02:23:22 2025 GMT Not After : Jun 7 02:23:22 2025 GMT Subject: CN=683a681a-7152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:30:8f:12:41:32:3d:43:e8:31:1e:16:32: 4e:5c:a1:a9:b6:d0:18:18:28:49:9a:3b:56:3c:37: f9:87:f6:ff:a7:4c:73:b9:94:f4:fc:72:13:f7:e3: 55:05:89:61:e2:1a:fd:1e:80:36:02:16:3d:01:be: 8a:32:8d:d7:73:4c:c7:67:f5:5a:f8:86:be:44:e3: 80:42:62:c4:8a:19:c6:80:d6:4c:93:17:7d:44:30: 9d:ff:d7:aa:ab:60:3a:7f:7b:81:91:ef:20:0e:3b: 9b:0b:11:f1:32:e7:f7:8d:e9:87:25:e5:8a:ac:9c: 04:37:cd:15:52:2e:1e:28:7b:63:fc:ae:f9:32:10: 01:c9:3a:e2:6e:23:ce:11:27:f7:4e:da:a2:ce:13: 14:9b:17:27:22:3d:40:09:25:a2:d0:5f:b2:65:6b: 9a:18:0d:ab:2d:23:d3:3c:05:d2:f0:67:8c:05:39: 64:bb:8d:34:0c:30:b2:7a:21:49:1d:28:13:1a:81: 2e:43:44:01:82:00:6d:75:16:29:dc:72:9e:b9:11: c0:c2:6f:20:aa:08:96:f8:60:d4:a6:6b:93:3a:41: f3:81:d5:5a:29:59:92:a1:2b:49:13:34:6f:86:2f: af:f7:99:c0:34:97:bf:09:5f:72:c7:65:35:99:52: 17:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:46:8F:A9:C3:17:2D:2A:2A:BF:52:48:1E:70:DD:7F:17:96:72:1E X509v3 Authority Key Identifier: keyid:CC:E0:83:47:9C:46:72:DF:99:28:BA:A8:38:F2:AB:28:02:6D:EF:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zOCDR5xGct-ZKLqoOPKrKAJt7_c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91540B9/D5C251C85B5311ED978E0577C4F9AE02/zOCDR5xGct-ZKLqoOPKrKAJt7_c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:a4:b9:16:96:fe:e0:08:bb:00:dd:49:38:0d:e6:b8:51:b7: 48:55:3a:d3:c4:d9:43:ee:02:ad:de:9d:de:0f:2a:28:2e:9e: d8:c0:68:90:d5:70:ae:60:04:00:05:72:13:5b:e9:e4:15:fd: be:4d:75:5d:2a:c9:dc:4d:2c:fb:44:c4:79:88:ea:ab:3d:a6: 00:48:57:1c:23:4d:88:74:be:89:75:37:97:81:e8:22:be:7f: a9:48:ef:85:35:fc:59:af:d4:d0:7d:28:2b:2d:27:c6:b0:c8: 70:1c:12:0c:05:68:58:5e:f7:59:bd:81:b6:62:06:11:be:67: c5:ea:3e:df:96:b2:7a:e9:28:17:5f:b0:b0:69:3c:b1:2e:77: 88:c2:7d:3c:83:39:99:7a:e5:61:13:f4:9a:82:3d:54:5c:eb: cc:fe:7c:61:f6:94:8c:f2:c9:a8:f4:f1:7b:fd:31:d1:3c:81: 11:b7:16:f4:fc:05:f2:41:76:1f:56:30:6e:6c:b3:fc:07:dc: 8d:15:8b:26:c0:13:28:b9:78:62:b6:fd:aa:c1:bf:d2:4c:9b: c2:a0:17:70:1f:18:1b:4e:4c:5c:68:5a:42:58:7f:48:0c:4d: ff:7c:ec:2c:0a:25:09:71:e2:9a:d1:b8:41:8c:a6:29:ad:50: 33:cf:ba:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwQjkxMTAvBgNVBAUTKENDRTA4MzQ3OUM0NjcyREY5OTI4QkFBODM4RjJBQjI4 MDI2REVGRjcwHhcNMjUwNTMxMDIyMzIyWhcNMjUwNjA3MDIyMzIyWjAYMRYwFAYD VQQDEw02ODNhNjgxYS03MTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+UwjxJBMj1D6DEeFjJOXKGpttAYGChJmjtWPDf5h/b/p0xzuZT0/HIT9+NV BYlh4hr9HoA2AhY9Ab6KMo3Xc0zHZ/Va+Ia+ROOAQmLEihnGgNZMkxd9RDCd/9eq q2A6f3uBke8gDjubCxHxMuf3jemHJeWKrJwEN80VUi4eKHtj/K75MhAByTribiPO ESf3TtqizhMUmxcnIj1ACSWi0F+yZWuaGA2rLSPTPAXS8GeMBTlku400DDCyeiFJ HSgTGoEuQ0QBggBtdRYp3HKeuRHAwm8gqgiW+GDUpmuTOkHzgdVaKVmSoStJEzRv hi+v95nANJe/CV9yx2U1mVIXgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxGj6nD Fy0qKr9SSB5w3X8XlnIeMB8GA1UdIwQYMBaAFMzgg0ecRnLfmSi6qDjyqygCbe/3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDBCOS9ENUMyNTFDODVC NTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0LVpLTHFvT1BLcktBSnQ3 X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pPQ0RSNXhHY3QtWktMcW9PUEtyS0FKdDdfYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDBCOS9ENUMyNTFDODVCNTMxMUVEOTc4RTA1NzdDNEY5QUUwMi96T0NEUjV4R2N0 LVpLTHFvT1BLcktBSnQ3X2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIpLkWlv7gCLsA3Uk4Dea4UbdIVTrTxNlD7gKt3p3eDyooLp7YwGiQ 1XCuYAQABXITW+nkFf2+TXVdKsncTSz7RMR5iOqrPaYASFccI02IdL6JdTeXgegi vn+pSO+FNfxZr9TQfSgrLSfGsMhwHBIMBWhYXvdZvYG2YgYRvmfF6j7flrJ66SgX X7CwaTyxLneIwn08gzmZeuVhE/Sagj1UXOvM/nxh9pSM8smo9PF7/THRPIERtxb0 /AXyQXYfVjBubLP8B9yNFYsmwBMouXhitv2qwb/STJvCoBdwHxgbTkxcaFpCWH9I DE3/fOwsCiUJceKa0bhBjKYprVAzz7oZ -----END CERTIFICATE-----Generated at Sat May 31 16:53:41 2025 by rpki-client