$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: tEbAM5Q5KoVqHpVIYs2dB8VMy1qhHq2T/TogvXwsigY= Subject key identifier: B9:90:91:82:6E:58:B5:1D:DD:0F:C5:2B:23:B1:06:63:E4:64:12:6C Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 02F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 02EB Signing time: Sat 31 May 2025 01:31:12 +0000 Manifest this update: Sat 31 May 2025 01:31:12 +0000 Manifest next update: Sat 07 Jun 2025 01:31:12 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: qD9FOd75jPyAKHsOYJyAs/4JtC+HMGnZ9GTIgh2aJTs=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: z/U3Mkt9VwxVqDogBYYiVzyvbWpXlgorgYhnUU244UM=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: saU/mKblZfuPXjfaCBZNvJjF3cnnkkpxvAWRjd4uqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 758 (0x2f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: May 31 01:31:12 2025 GMT Not After : Jun 7 01:31:12 2025 GMT Subject: CN=683a5be0-3db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:0c:e1:fb:7a:62:47:8b:5b:ca:22:5b:09: f7:37:c5:9b:b9:4f:f2:f1:f4:4a:c1:c9:8a:65:68: d0:79:d9:7d:13:8c:d0:14:aa:98:6e:6b:cb:c4:49: b5:ee:a2:bd:45:bf:a6:b2:94:6c:e2:f7:bb:0e:ea: b3:0d:70:a5:43:1e:32:3c:e2:b5:4b:53:cc:55:06: cc:9a:ee:9a:92:cc:64:92:bd:45:e0:f0:62:75:1f: c0:64:ea:0b:46:1e:55:22:c7:c5:43:49:e7:7a:c1: 3a:31:96:c0:81:76:91:b7:7b:30:36:a8:36:16:37: b4:09:0a:f6:83:dc:05:19:a8:4f:d1:b7:32:ea:fa: 85:8e:26:aa:8b:dd:50:1f:a7:de:af:1e:1b:ed:fe: 24:7b:75:12:be:a8:14:d1:23:44:08:fb:ef:6f:f7: 39:0c:e1:ca:73:2f:da:4b:1b:53:9e:69:30:5e:d9: c0:5d:f3:6a:d2:e2:88:04:6b:fb:51:24:65:ba:62: 82:4b:5d:6a:85:0b:95:6e:a2:6d:d5:a2:b1:3e:65: 27:7c:30:a6:9c:27:b1:eb:4a:55:34:1d:b0:92:83: b8:83:1f:3a:be:90:6c:d6:3b:cc:e4:47:bb:85:24: 71:75:78:cd:98:4c:ba:20:89:91:38:f6:87:6c:1c: dd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:90:91:82:6E:58:B5:1D:DD:0F:C5:2B:23:B1:06:63:E4:64:12:6C X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:11:f1:8a:3e:a3:b8:92:25:d1:58:2d:4c:db:04:96:92:c5: 68:4b:e7:45:48:ec:ff:bb:98:18:d6:28:90:d6:6d:a3:fb:1b: 67:b1:50:0e:30:c3:5d:40:29:2f:91:db:d4:26:f2:da:4a:2d: fa:dd:b3:82:74:78:3d:04:e5:ad:cf:2e:f9:04:98:e8:90:9a: 8d:26:c8:80:d2:8c:31:6d:7a:84:35:ed:5f:0f:fa:dc:cc:dd: 3c:7d:58:ec:e0:33:5a:3c:24:96:b0:56:c6:d9:2b:3d:b1:e9: 3d:53:4f:21:c6:ec:26:09:e2:5c:6e:cd:81:d5:52:ad:15:4c: 4b:cf:e2:95:35:0a:4c:8c:52:ce:4f:66:b3:63:02:e1:36:c4: f5:96:5b:b1:9b:f7:e8:18:f0:6f:be:2c:56:70:79:fd:77:3b: 3e:b8:91:48:f3:5a:82:d8:50:59:d9:d4:4e:05:c1:20:5d:94: 10:a4:64:f4:c4:5d:f1:bf:4c:e7:d8:8a:3f:a9:22:6a:4a:9a: 62:d5:b5:0d:99:cb:a2:39:6b:ca:9e:1a:90:f9:a2:6f:e2:08: bf:1d:f8:ba:12:d7:fa:a9:d2:81:24:79:48:1f:1e:f2:bd:56: 48:fd:a3:b2:34:93:ff:c5:01:0f:a6:56:f6:ac:4c:6f:df:8a: a9:32:62:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwNTMxMDEzMTEyWhcNMjUwNjA3MDEzMTEyWjAYMRYwFAYD VQQDEw02ODNhNWJlMC0zZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwwM4ft6YkeLW8oiWwn3N8WbuU/y8fRKwcmKZWjQedl9E4zQFKqYbmvLxEm1 7qK9Rb+mspRs4ve7DuqzDXClQx4yPOK1S1PMVQbMmu6aksxkkr1F4PBidR/AZOoL Rh5VIsfFQ0nnesE6MZbAgXaRt3swNqg2Fje0CQr2g9wFGahP0bcy6vqFjiaqi91Q H6ferx4b7f4ke3USvqgU0SNECPvvb/c5DOHKcy/aSxtTnmkwXtnAXfNq0uKIBGv7 USRlumKCS11qhQuVbqJt1aKxPmUnfDCmnCex60pVNB2wkoO4gx86vpBs1jvM5Ee7 hSRxdXjNmEy6IImROPaHbBzdwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmQkYJu WLUd3Q/FKyOxBmPkZBJsMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwEfGKPqO4kiXRWC1M2wSWksVoS+dFSOz/u5gY1iiQ1m2j+xtnsVAO MMNdQCkvkdvUJvLaSi363bOCdHg9BOWtzy75BJjokJqNJsiA0owxbXqENe1fD/rc zN08fVjs4DNaPCSWsFbG2Ss9sek9U08hxuwmCeJcbs2B1VKtFUxLz+KVNQpMjFLO T2azYwLhNsT1lluxm/foGPBvvixWcHn9dzs+uJFI81qC2FBZ2dROBcEgXZQQpGT0 xF3xv0zn2Io/qSJqSppi1bUNmcuiOWvKnhqQ+aJv4gi/Hfi6Etf6qdKBJHlIHx7y vVZI/aOyNJP/xQEPplb2rExv34qpMmK2 -----END CERTIFICATE-----Generated at Sat May 31 16:34:56 2025 by rpki-client