$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json) Hash identifier: VJva1S64ejRFfE94ndCrOJTd2LawaGzCSJgh2G9q1/E= Subject key identifier: 20:49:2B:7E:70:C7:45:E7:9F:00:60:D3:2E:85:22:1F:EF:F7:BD:0A Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft Manifest number: 01EC Signing time: Sat 31 May 2025 02:26:08 +0000 Manifest this update: Sat 31 May 2025 02:26:08 +0000 Manifest next update: Sat 07 Jun 2025 02:26:08 +0000 Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: s++uWNZUHEziifDBkUMJ5GhjdY0yJ3uN93Ah2iITTpY=) 2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=) 3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA Validity Not Before: May 31 02:26:08 2025 GMT Not After : Jun 7 02:26:08 2025 GMT Subject: CN=683a68c0-334f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:93:af:ea:ed:94:be:37:f8:f2:c4:0f:c1: 71:33:ea:d7:b7:18:c1:65:61:92:1e:94:7c:da:39: a0:ce:68:72:a0:2c:fc:3a:1a:64:e0:14:f8:41:6b: 89:1d:35:ce:fe:4e:a4:d0:67:44:83:9a:63:de:dc: a2:e2:f2:36:fd:5e:3e:49:bc:67:35:31:c7:92:07: 56:7c:c9:7a:73:fe:72:b6:92:30:f1:4c:dd:6d:df: 78:b2:a1:41:05:58:14:95:64:b5:96:2a:11:63:cf: ab:94:f3:87:67:d0:5f:12:e6:19:10:a7:b6:ed:09: db:9f:cb:4e:82:58:01:d5:ec:b3:e9:18:e0:54:47: d0:5b:2a:11:d7:1f:81:25:ef:06:a1:2b:83:ac:32: 49:83:ee:76:64:08:31:26:0d:31:81:f8:56:bf:99: 05:cc:0e:fb:1f:2e:08:11:77:f6:bf:99:39:b2:fe: ec:72:47:49:cc:4d:54:aa:c9:68:bb:54:71:93:b5: 8e:4c:8e:15:86:21:11:4e:9d:4a:33:c4:b2:d6:24: 43:8b:37:ef:c3:05:c0:81:d4:32:84:11:49:7c:ad: 63:05:5e:06:d0:17:ea:02:a4:7b:a9:90:59:c9:34: 63:d7:d2:f9:17:41:2d:99:0a:7c:a2:db:df:4b:05: a0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:49:2B:7E:70:C7:45:E7:9F:00:60:D3:2E:85:22:1F:EF:F7:BD:0A X509v3 Authority Key Identifier: keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:5c:e7:11:47:e2:e1:fb:fa:fe:b1:e1:84:11:12:e0:b6:a3: 98:1a:2b:43:66:fb:5a:b3:a2:cc:e7:e5:52:57:87:04:58:b0: ee:ea:3f:e1:3c:74:59:10:da:ac:3d:5b:c0:2e:02:9f:d5:2d: 37:d6:9d:a3:dc:11:39:a8:f4:8e:92:a6:ae:ba:59:0c:fc:36: 1f:85:ff:5c:01:e2:c9:09:5e:61:74:80:d9:16:1b:7a:b3:d2: 61:d1:df:b8:4e:a9:80:7f:55:34:e9:c2:cd:be:c3:ab:f7:a1: ef:e2:03:56:60:64:ac:b8:4a:71:e2:cb:d2:a1:3d:a3:6c:23: c5:58:39:6a:93:1b:c4:65:7c:d3:67:9d:e1:8a:ab:00:74:84: 8f:94:b2:bf:7e:9f:88:90:d6:eb:24:37:44:59:68:27:c9:d9: 3b:dd:bb:fd:51:41:97:ec:45:06:34:2b:cf:5e:a4:99:0d:f7: 2c:3b:76:71:92:20:25:9d:f0:ba:58:1d:71:35:d8:10:2f:4a: b3:59:80:79:ae:73:c8:2e:74:da:50:f8:6f:66:c4:45:b5:06: 22:65:50:79:be:84:e3:5d:a2:f4:0f:af:ec:48:09:f6:2d:d2: d4:e7:98:1c:45:b8:9e:2a:1f:06:2b:84:d6:11:77:ca:15:b4: 9e:b6:63:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBDQzcxMTAvBgNVBAUTKEU3Q0UxOUExNzg1NTIyODE1REFCNjNGRjY2REI2Rjg5 MDNGQ0Y5RkEwHhcNMjUwNTMxMDIyNjA4WhcNMjUwNjA3MDIyNjA4WjAYMRYwFAYD VQQDEw02ODNhNjhjMC0zMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy12Tr+rtlL43+PLED8FxM+rXtxjBZWGSHpR82jmgzmhyoCz8Ohpk4BT4QWuJ HTXO/k6k0GdEg5pj3tyi4vI2/V4+SbxnNTHHkgdWfMl6c/5ytpIw8Uzdbd94sqFB BVgUlWS1lioRY8+rlPOHZ9BfEuYZEKe27Qnbn8tOglgB1eyz6RjgVEfQWyoR1x+B Je8GoSuDrDJJg+52ZAgxJg0xgfhWv5kFzA77Hy4IEXf2v5k5sv7sckdJzE1Uqslo u1Rxk7WOTI4VhiERTp1KM8Sy1iRDizfvwwXAgdQyhBFJfK1jBV4G0BfqAqR7qZBZ yTRj19L5F0EtmQp8otvfSwWgEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBJK35w x0XnnwBg0y6FIh/v970KMB8GA1UdIwQYMBaAFOfOGaF4VSKBXatj/2bbb4kD/Pn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MENDNy8wMzRGQzYxQTY0 MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklvRmRxMlBfWnR0dmlRUDgt Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzU4NFpvWGhWSW9GZHEyUF9adHR2aVFQOC1mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MENDNy8wMzRGQzYxQTY0MTUxMUVEOThGMkU1NTRDNEY5QUUwMi81ODRab1hoVklv RmRxMlBfWnR0dmlRUDgtZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAXOcRR+Lh+/r+seGEERLgtqOYGitDZvtas6LM5+VSV4cEWLDu6j/h PHRZENqsPVvALgKf1S031p2j3BE5qPSOkqauulkM/DYfhf9cAeLJCV5hdIDZFht6 s9Jh0d+4TqmAf1U06cLNvsOr96Hv4gNWYGSsuEpx4svSoT2jbCPFWDlqkxvEZXzT Z53hiqsAdISPlLK/fp+IkNbrJDdEWWgnydk73bv9UUGX7EUGNCvPXqSZDfcsO3Zx kiAlnfC6WB1xNdgQL0qzWYB5rnPILnTaUPhvZsRFtQYiZVB5voTjXaL0D6/sSAn2 LdLU55gcRbieKh8GK4TWEXfKFbSetmN5 -----END CERTIFICATE-----Generated at Sat May 31 17:35:58 2025 by rpki-client