$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: qT2tWj/0SLuMsB/GqHFfpXQMxj8wxc+S2PzuHATmeQ0= Subject key identifier: 48:F0:FE:CE:2E:30:36:41:C8:DA:86:24:67:C8:00:00:7E:C9:71:9B Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 0554 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 0553 Signing time: Fri 30 May 2025 23:35:20 +0000 Manifest this update: Fri 30 May 2025 23:35:19 +0000 Manifest next update: Fri 06 Jun 2025 23:35:19 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: Wn1lOPVsYrjhMNeiOKWKWhE33VjKm65hENdxeyqAVCg=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1364 (0x554) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: May 30 23:35:19 2025 GMT Not After : Jun 6 23:35:19 2025 GMT Subject: CN=683a40b7-a5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f3:37:3d:ef:0f:d9:93:72:c8:c7:1c:13:31: d9:7c:38:42:6d:19:aa:f6:23:14:d3:f3:5b:11:00: 0d:e6:6d:c0:be:d2:65:80:4a:21:71:6d:4b:e9:2a: a8:1b:eb:07:10:03:1f:09:e0:c1:5f:d1:19:9e:5a: a2:02:b0:ed:f6:03:01:16:9d:4b:5e:2e:a3:c7:fd: be:78:e5:11:26:36:18:91:2e:a5:8b:9b:77:64:01: 76:b4:19:ef:a3:fb:af:17:ae:e2:66:e2:38:f7:cc: 84:a2:61:ce:6b:0e:1f:79:ec:77:34:11:71:5a:20: 26:2b:6c:5b:97:5e:15:5f:f5:46:88:2c:78:57:c1: a9:4e:c9:c3:51:be:e6:f9:30:88:0b:97:b2:cd:54: eb:f0:69:fd:12:44:85:d6:c6:91:d5:c7:0c:4c:5a: d0:0d:33:8a:e7:d6:7d:39:9a:9a:7d:6a:33:46:24: 59:d3:a4:c3:2d:c1:51:59:0b:af:8f:38:c0:bb:3e: 96:57:f6:6b:97:bb:74:cd:eb:41:6c:75:07:d4:db: c3:5a:65:27:b9:19:52:e9:20:98:c5:a1:59:e7:24: 6f:ae:d5:c4:dc:ac:af:d2:ed:cf:0e:6e:b0:75:ed: d1:ac:fe:7a:44:64:d7:04:32:bd:85:6d:b0:d3:a8: 86:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F0:FE:CE:2E:30:36:41:C8:DA:86:24:67:C8:00:00:7E:C9:71:9B X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:fe:28:c7:6c:96:18:61:31:25:5d:1f:c5:5a:af:b2:06: bb:ba:4c:ab:4d:8b:57:6c:f7:4b:93:a1:ab:5b:eb:aa:01:ca: 7d:ac:b0:fe:44:ca:7a:66:f8:97:a9:7f:e7:84:8e:83:db:74: ac:14:c3:1f:da:55:6e:91:26:e9:f1:fe:67:24:fd:5e:d9:55: 6c:a2:2e:06:37:29:bd:3f:4e:84:be:52:b6:24:ea:2c:93:1a: 81:5b:aa:ed:62:b4:e2:2b:80:5c:f8:c9:28:fd:f0:9b:53:12: 6d:b7:ac:f2:f3:01:da:04:4a:0e:29:49:40:c7:7f:b1:1d:7d: 8d:30:82:9e:99:0d:a0:c4:a3:96:ac:e5:ff:49:cd:b8:8e:f7: 70:c4:d6:8e:c0:92:d4:ea:30:af:41:6a:b2:f6:6f:6a:80:d1: 19:cd:99:06:ed:5f:c8:87:5a:75:f9:ae:91:b2:9b:11:fe:a0: 1e:5e:44:c6:28:7d:17:34:5f:ff:1f:cd:e8:a6:3c:eb:83:29: 53:0e:e7:99:33:0a:20:bc:8a:52:bc:e4:dd:bd:97:df:8a:1c: 8a:e3:d9:64:ea:2e:2a:ea:d7:74:de:78:d7:b8:ca:69:b2:a6: 1d:55:d9:2d:59:24:0b:6b:77:48:6e:17:d7:b4:42:1c:67:16: 82:a9:9d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwNTMwMjMzNTE5WhcNMjUwNjA2MjMzNTE5WjAYMRYwFAYD VQQDEw02ODNhNDBiNy1hNWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvM3Pe8P2ZNyyMccEzHZfDhCbRmq9iMU0/NbEQAN5m3AvtJlgEohcW1L6Sqo G+sHEAMfCeDBX9EZnlqiArDt9gMBFp1LXi6jx/2+eOURJjYYkS6li5t3ZAF2tBnv o/uvF67iZuI498yEomHOaw4feex3NBFxWiAmK2xbl14VX/VGiCx4V8GpTsnDUb7m +TCIC5eyzVTr8Gn9EkSF1saR1ccMTFrQDTOK59Z9OZqafWozRiRZ06TDLcFRWQuv jzjAuz6WV/Zrl7t0zetBbHUH1NvDWmUnuRlS6SCYxaFZ5yRvrtXE3Kyv0u3PDm6w de3RrP56RGTXBDK9hW2w06iGSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEjw/s4u MDZByNqGJGfIAAB+yXGbMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbk/4ox2yWGGExJV0fxVqvsga7ukyrTYtXbPdLk6GrW+uqAcp9rLD+ RMp6ZviXqX/nhI6D23SsFMMf2lVukSbp8f5nJP1e2VVsoi4GNym9P06EvlK2JOos kxqBW6rtYrTiK4Bc+Mko/fCbUxJtt6zy8wHaBEoOKUlAx3+xHX2NMIKemQ2gxKOW rOX/Sc24jvdwxNaOwJLU6jCvQWqy9m9qgNEZzZkG7V/Ih1p1+a6RspsR/qAeXkTG KH0XNF//H83opjzrgylTDueZMwogvIpSvOTdvZffihyK49lk6i4q6td03njXuMpp sqYdVdktWSQLa3dIbhfXtEIcZxaCqZ0H -----END CERTIFICATE-----Generated at Sat May 31 17:37:43 2025 by rpki-client