$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: tfmwIN04jnmWMPvzigQRrfwpxOHyMjIEHo0025yXwdw= Subject key identifier: C5:01:AF:26:7B:A9:18:E2:41:C8:6F:21:D8:9F:FA:90:6F:97:E0:B5 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1ADB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1AAC Signing time: Fri 30 May 2025 16:47:09 +0000 Manifest this update: Fri 30 May 2025 16:47:09 +0000 Manifest next update: Fri 06 Jun 2025 16:47:09 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: ob2zaOLOBtfwrTe14ZWWYkfp1Q4ZREWbUgJTH3dpErI=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: PJLYIwbBusasK2nlobSNFy5Zbha6AGvSyhn1nTE3clI=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6875 (0x1adb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: May 30 16:47:09 2025 GMT Not After : Jun 6 16:47:09 2025 GMT Subject: CN=6839e10d-c8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:c0:e2:ac:45:c1:48:3f:d3:ef:6c:d4:46: c6:d0:f1:b7:3d:dc:ab:e9:f5:45:07:10:32:4e:fa: 4d:8f:79:cc:70:1b:42:f2:eb:b7:a6:80:f7:25:40: a3:75:36:b5:c7:d6:2d:96:22:b9:bb:a3:30:cc:fb: fd:a3:73:98:15:bb:cf:97:38:e2:d7:3b:6e:0d:23: ac:10:86:29:36:8f:96:51:18:b0:83:3f:1f:00:dc: b7:0f:ac:c4:84:e1:0c:97:9f:8e:68:56:d1:cf:30: 57:e4:f7:64:33:4a:92:2d:c1:a1:ca:3b:26:a4:fc: d4:95:d6:f8:61:ee:9d:0f:af:0e:6f:0c:cf:28:ea: 5e:68:86:64:72:db:10:01:b8:b0:37:d8:bf:3c:5a: 6b:5b:a4:ed:ce:5f:f8:a1:6f:18:f3:76:82:b1:cb: 1e:17:19:c6:c1:bb:93:35:49:72:bd:bb:b0:08:ea: b0:d9:7a:22:f8:a3:8d:78:26:88:20:5e:94:f7:fe: 1b:2a:10:30:60:a6:04:f8:c2:85:2c:f9:0b:ae:c9: 8a:b9:70:a1:03:dd:92:a1:8f:1d:01:53:b2:12:44: eb:f8:9e:dc:37:f9:34:15:e3:f3:81:ca:6c:e9:64: 68:7d:bc:5b:0b:e9:4d:1d:ea:5e:2e:87:58:9c:b8: b1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:01:AF:26:7B:A9:18:E2:41:C8:6F:21:D8:9F:FA:90:6F:97:E0:B5 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a8:23:76:be:16:5f:0a:d6:54:53:f4:93:6f:de:d0:15:b3: df:24:18:e8:90:1a:7d:ff:fc:f7:6c:97:cc:86:3f:b5:a8:1b: b6:d1:9e:60:69:55:00:30:a0:2a:9b:94:6d:7d:0a:a5:7b:47: c7:dd:5f:0c:e9:44:31:65:26:b0:e0:80:d7:2c:1d:cb:ed:9c: 30:af:6e:73:cd:a2:e6:13:ec:dc:6f:af:aa:5d:39:81:2f:fd: 27:fb:cc:35:f3:7b:e3:46:2a:56:91:58:e7:69:83:03:7b:32: 39:01:f9:32:01:da:64:ba:23:33:9a:2c:e0:2c:1b:3a:66:41: c3:d8:75:40:19:f1:e2:70:6e:f7:6b:aa:84:5e:dc:38:47:00: 6a:cf:11:b9:d6:be:3e:17:bc:09:95:83:2f:71:29:cd:95:53: a1:ab:12:b1:6c:b3:11:52:a5:07:c9:ed:c6:06:11:72:f7:8a: 51:78:14:4d:b9:e3:2f:77:6c:e0:55:40:07:cc:06:30:34:c3: a5:ed:7d:dc:c6:93:89:4a:22:f4:c3:ca:b1:54:7a:62:2f:3a: ba:54:34:c1:82:8a:ee:f9:9b:b5:19:b2:4a:94:ec:22:e5:28: 5c:1d:97:e9:6a:d0:7d:9d:a4:97:6e:ef:c8:41:e9:18:83:37: dc:3f:06:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwNTMwMTY0NzA5WhcNMjUwNjA2MTY0NzA5WjAYMRYwFAYD VQQDEw02ODM5ZTEwZC1jOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzXA4qxFwUg/0+9s1EbG0PG3Pdyr6fVFBxAyTvpNj3nMcBtC8uu3poD3JUCj dTa1x9YtliK5u6MwzPv9o3OYFbvPlzji1ztuDSOsEIYpNo+WURiwgz8fANy3D6zE hOEMl5+OaFbRzzBX5PdkM0qSLcGhyjsmpPzUldb4Ye6dD68ObwzPKOpeaIZkctsQ AbiwN9i/PFprW6Ttzl/4oW8Y83aCscseFxnGwbuTNUlyvbuwCOqw2Xoi+KONeCaI IF6U9/4bKhAwYKYE+MKFLPkLrsmKuXChA92SoY8dAVOyEkTr+J7cN/k0FePzgcps 6WRofbxbC+lNHepeLodYnLixYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUBryZ7 qRjiQchvIdif+pBvl+C1MB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqqCN2vhZfCtZUU/STb97QFbPfJBjokBp9//z3bJfMhj+1qBu20Z5g aVUAMKAqm5RtfQqle0fH3V8M6UQxZSaw4IDXLB3L7Zwwr25zzaLmE+zcb6+qXTmB L/0n+8w183vjRipWkVjnaYMDezI5AfkyAdpkuiMzmizgLBs6ZkHD2HVAGfHicG73 a6qEXtw4RwBqzxG51r4+F7wJlYMvcSnNlVOhqxKxbLMRUqUHye3GBhFy94pReBRN ueMvd2zgVUAHzAYwNMOl7X3cxpOJSiL0w8qxVHpiLzq6VDTBgoru+Zu1GbJKlOwi 5ShcHZfpatB9naSXbu/IQekYgzfcPwau -----END CERTIFICATE-----Generated at Sat May 31 17:00:26 2025 by rpki-client