$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json) Hash identifier: SS9Po/3zSKpDzhIb2gEmN2eqN5Ii2H5Z2wXxx/3Gbr4= Subject key identifier: F8:60:E5:03:E1:44:6A:7E:D2:FA:6D:18:9C:24:F9:6D:EB:BC:84:E7 Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft Manifest number: 064E Signing time: Sat 31 May 2025 14:39:22 +0000 Manifest this update: Sat 31 May 2025 14:39:22 +0000 Manifest next update: Sat 07 Jun 2025 14:39:22 +0000 Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: lnMd9g0S9myfX5jJjnMZrtDK+LJgVOtjxpBHa2v1JY0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Validity Not Before: May 31 14:39:22 2025 GMT Not After : Jun 7 14:39:22 2025 GMT Subject: CN=683b149a-8a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5f:2d:e5:7b:dd:0b:c6:06:dc:13:03:83:ec: 08:5c:9f:9b:0a:e7:53:d9:f6:f4:2f:18:56:00:95: 30:1f:b1:5a:7e:75:d5:ed:cb:b2:75:49:8c:7b:e7: d0:d9:38:45:4a:64:4b:04:71:f4:0a:62:94:28:61: 2e:90:30:61:01:51:47:ac:6b:52:9c:88:c8:21:1f: a7:59:16:b2:aa:3b:31:98:6f:b7:58:66:ff:d5:fb: a4:19:3b:85:ad:58:c9:6a:3c:c6:d1:62:5f:31:26: 08:39:ca:06:9b:7a:c3:d4:74:0b:18:5a:4b:e1:d6: fd:0f:53:90:d0:59:95:01:ed:b3:2b:fe:83:a4:77: 4d:42:a8:e5:36:60:97:2e:b3:c1:1d:3a:fa:cf:c4: ce:0c:c8:0d:19:ea:da:b7:b7:dc:df:3e:8c:fe:db: 9b:59:e7:9f:b3:19:01:fe:9d:c4:91:45:44:3d:58: 46:2c:c5:cd:88:0c:0c:c0:ab:c0:6f:d5:dc:db:27: d8:86:66:0d:fb:29:2e:d8:98:a6:ee:3e:09:9d:6a: da:d6:65:cc:c7:89:d5:c5:b7:41:ca:02:6d:61:53: 95:b7:5f:49:f4:b7:39:ca:b7:86:57:6b:98:4a:09: e6:57:90:13:d0:8c:f7:9a:37:fd:97:27:b6:27:76: fc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:60:E5:03:E1:44:6A:7E:D2:FA:6D:18:9C:24:F9:6D:EB:BC:84:E7 X509v3 Authority Key Identifier: keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:0f:d5:48:e5:19:20:c9:b4:5b:4b:8e:4a:d7:46:fb:d7:1d: 33:17:ce:fe:5f:46:8b:8e:2b:e5:41:6f:76:3e:d4:8a:2a:b6: 3f:b6:7a:b5:ee:df:15:60:be:de:11:26:07:fa:4b:23:66:90: 77:ee:61:8d:6c:79:16:0b:bc:dd:43:0b:b6:a5:4e:09:85:38: 59:44:31:46:e2:f5:56:bb:2a:54:64:cf:65:60:b6:97:24:03: fa:53:69:e6:54:dd:cb:11:f5:1e:25:3e:34:de:13:cf:4b:69: f3:e1:82:9a:8b:66:27:6e:b3:8e:25:96:5c:74:78:65:84:c3: 2e:dd:6e:1f:f4:19:20:e3:ac:9e:b7:6c:31:04:8a:16:e5:d3: aa:6c:0f:29:a6:e9:73:e9:eb:3a:b2:30:c7:43:1c:47:3d:d9: 42:c4:fd:85:72:be:10:49:cc:6d:52:68:24:28:42:8d:8a:96: 38:4e:13:ce:fa:5f:3b:4e:eb:28:df:36:b2:a5:5e:55:07:a1: 90:4d:20:97:a1:3d:f2:fe:16:fc:50:9c:5c:0f:4c:65:c9:78: 78:43:61:b6:52:42:1c:3e:e3:1b:96:8a:5a:d6:1c:7b:05:29: 18:ed:0d:0e:a9:27:23:a5:ee:66:03:68:db:da:a7:85:9b:7a: b9:51:d5:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG QUFERDQ5QjQwHhcNMjUwNTMxMTQzOTIyWhcNMjUwNjA3MTQzOTIyWjAYMRYwFAYD VQQDEw02ODNiMTQ5YS04YTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxl8t5XvdC8YG3BMDg+wIXJ+bCudT2fb0LxhWAJUwH7FafnXV7cuydUmMe+fQ 2ThFSmRLBHH0CmKUKGEukDBhAVFHrGtSnIjIIR+nWRayqjsxmG+3WGb/1fukGTuF rVjJajzG0WJfMSYIOcoGm3rD1HQLGFpL4db9D1OQ0FmVAe2zK/6DpHdNQqjlNmCX LrPBHTr6z8TODMgNGerat7fc3z6M/tubWeefsxkB/p3EkUVEPVhGLMXNiAwMwKvA b9Xc2yfYhmYN+yku2Jim7j4JnWra1mXMx4nVxbdBygJtYVOVt19J9Lc5yreGV2uY SgnmV5AT0Iz3mjf9lye2J3b8cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhg5QPh RGp+0vptGJwk+W3rvITnMB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct dmljcWNoNnF6RGo2cmRTYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoD9VI5RkgybRbS45K10b71x0zF87+X0aLjivlQW92PtSKKrY/tnq1 7t8VYL7eESYH+ksjZpB37mGNbHkWC7zdQwu2pU4JhThZRDFG4vVWuypUZM9lYLaX JAP6U2nmVN3LEfUeJT403hPPS2nz4YKai2YnbrOOJZZcdHhlhMMu3W4f9Bkg46ye t2wxBIoW5dOqbA8ppulz6es6sjDHQxxHPdlCxP2Fcr4QScxtUmgkKEKNipY4ThPO +l87Tuso3zaypV5VB6GQTSCXoT3y/hb8UJxcD0xlyXh4Q2G2UkIcPuMblopa1hx7 BSkY7Q0OqScjpe5mA2jb2qeFm3q5UdUZ -----END CERTIFICATE-----Generated at Sat May 31 17:30:14 2025 by rpki-client