$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json) Hash identifier: 2G69ywZo32ii4SQh5qjbdoS/y+NXWVssLaC8+tu1+iY= Subject key identifier: 78:10:63:E2:77:B2:C7:84:3E:6B:C1:BA:37:92:85:98:94:8A:6F:D1 Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft Manifest number: 04 Signing time: Sat 31 May 2025 07:45:35 +0000 Manifest this update: Sat 31 May 2025 07:45:35 +0000 Manifest next update: Sat 07 Jun 2025 07:45:35 +0000 Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: 0zGGR/tEfDg7ybQ0NNJKgTyKJ91f/VKtuIN/ikQ2L/c=) 2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: 0oWBT9sroXdb1hjZ1+SOjPXeFmhFQWXhKuGnpLeIO28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D Validity Not Before: May 31 07:45:35 2025 GMT Not After : Jun 7 07:45:35 2025 GMT Subject: CN=683ab39f-bf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:45:fa:40:25:34:00:a0:61:56:32:2d:65: cf:91:3b:b1:41:cb:25:5f:88:fb:ae:9e:66:fc:8d: e6:f1:47:bb:c7:b9:e0:40:18:77:f6:ac:98:c4:0a: c7:93:d6:45:4d:ae:e7:54:58:ae:c1:18:20:c4:ad: 78:bf:1f:40:d6:1c:28:50:2d:64:17:27:bf:41:d0: 01:f9:59:12:c2:e8:cb:39:71:df:21:95:83:13:fb: 6a:5c:d4:04:2a:27:c9:7a:5f:43:05:c8:c0:d7:7e: aa:6f:8a:97:2e:01:e4:7b:29:67:13:76:c0:9a:fc: fd:de:1d:2e:3a:f4:f7:60:fe:93:df:ad:e9:7d:82: 9e:32:ab:bb:59:13:ad:2e:d0:ae:36:07:92:54:29: 9e:87:2b:b5:b6:1a:92:17:82:81:39:69:54:7d:c2: dd:16:7d:85:af:56:b4:f6:76:d4:68:db:32:ec:c6: ad:4f:15:c8:7f:14:b8:a3:6c:81:27:3f:73:64:0c: 08:19:32:5b:51:9b:65:fe:c3:d5:fb:05:c2:a0:0a: fb:64:fa:e8:de:d3:62:d7:2b:e3:13:f8:1d:cd:83: 89:27:3f:d8:c7:87:b5:0c:e0:61:cb:5e:cc:c5:71: 7d:b7:97:cb:aa:cf:6b:6f:5d:17:8f:62:df:e1:a0: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:10:63:E2:77:B2:C7:84:3E:6B:C1:BA:37:92:85:98:94:8A:6F:D1 X509v3 Authority Key Identifier: keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1b:ee:d0:25:18:e3:c8:ac:c5:01:af:a0:29:fd:0d:87:43: 6b:f2:51:ff:81:4f:b9:65:1c:1e:48:90:e1:6e:0d:1f:4d:66: 66:8d:28:12:92:f4:d2:8e:eb:b2:59:ec:b9:28:f9:b0:69:b4: 02:e9:aa:d6:11:60:87:61:45:a2:7e:8e:1a:08:fe:83:49:3c: 22:2e:b6:0b:82:59:5b:9f:0f:3e:73:fb:8e:02:b3:a2:f0:25: f5:61:88:84:12:b4:e9:bd:1f:c2:b3:7b:18:01:37:19:a0:2f: 09:79:4e:9f:27:e7:71:be:43:fa:2d:62:eb:7c:cf:07:54:2e: 8f:e6:d0:73:2f:07:57:32:a8:3c:60:ca:45:34:9c:cc:c8:34: 9d:00:06:0a:d3:15:31:94:27:76:3c:10:9a:b0:4f:2f:f1:7b: 46:d1:a8:1d:d9:d9:f4:37:0c:7d:0b:ec:d5:ba:95:c2:ba:05: e6:8e:09:93:31:b0:bc:ca:38:15:2b:a6:08:c6:c7:7c:d8:a8: 14:c6:d9:24:63:b1:de:ad:dd:05:a3:17:69:56:78:48:ad:8d: 77:82:54:05:87:58:d1:29:8c:1b:de:a1:d6:80:78:eb:0d:0a: 21:52:bf:49:c2:eb:50:55:11:f1:de:e4:04:61:de:61:d5:8c: 09:ba:7d:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MEU5MDExMC8GA1UEBRMoQ0YxRTBFNUJENzdCMUZGQjUzNTY3ODFGNjE2MzE1OEMy RTJGN0I2RDAeFw0yNTA1MzEwNzQ1MzVaFw0yNTA2MDcwNzQ1MzVaMBgxFjAUBgNV BAMTDTY4M2FiMzlmLWJmNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR/0X6QCU0AKBhVjItZc+RO7FByyVfiPuunmb8jebxR7vHueBAGHf2rJjECseT 1kVNrudUWK7BGCDErXi/H0DWHChQLWQXJ79B0AH5WRLC6Ms5cd8hlYMT+2pc1AQq J8l6X0MFyMDXfqpvipcuAeR7KWcTdsCa/P3eHS469Pdg/pPfrel9gp4yq7tZE60u 0K42B5JUKZ6HK7W2GpIXgoE5aVR9wt0WfYWvVrT2dtRo2zLsxq1PFch/FLijbIEn P3NkDAgZMltRm2X+w9X7BcKgCvtk+uje02LXK+MT+B3Ng4knP9jHh7UM4GHLXszF cX23l8uqz2tvXRePYt/hoCFrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeBBj4ney x4Q+a8G6N5KFmJSKb9EwHwYDVR0jBBgwFoAUzx4OW9d7H/tTVngfYWMVjC4ve20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRTkwL0JCNkZCNjg4Mzk2 NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveng0T1c5ZDdIX3RUVm5nZllXTVZqQzR2ZTIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw RTkwL0JCNkZCNjg4Mzk2NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90 VFZuZ2ZZV01WakM0dmUyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGsb7tAlGOPIrMUBr6Ap/Q2HQ2vyUf+BT7llHB5IkOFuDR9NZmaNKBKS 9NKO67JZ7Lko+bBptALpqtYRYIdhRaJ+jhoI/oNJPCIutguCWVufDz5z+44Cs6Lw JfVhiIQStOm9H8KzexgBNxmgLwl5Tp8n53G+Q/otYut8zwdULo/m0HMvB1cyqDxg ykU0nMzINJ0ABgrTFTGUJ3Y8EJqwTy/xe0bRqB3Z2fQ3DH0L7NW6lcK6BeaOCZMx sLzKOBUrpgjGx3zYqBTG2SRjsd6t3QWjF2lWeEitjXeCVAWHWNEpjBveodaAeOsN CiFSv0nC61BVEfHe5ARh3mHVjAm6faU= -----END CERTIFICATE-----Generated at Sat May 31 17:50:38 2025 by rpki-client