$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json) Hash identifier: IVbOK4qp/UbQdONR8pSVyh9re8wHD1bkW1WJWkaEmqI= Subject key identifier: 13:34:49:A5:53:4F:CF:9E:C8:24:92:B8:C3:86:47:27:CA:31:4A:6C Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 0257 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft Manifest number: 0210 Signing time: Tue 03 Jun 2025 02:20:58 +0000 Manifest this update: Tue 03 Jun 2025 02:20:57 +0000 Manifest next update: Tue 10 Jun 2025 02:20:57 +0000 Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: L3fH6lsFnqA82eVBf0teww6AGFLvvlM4moovl9PIZ0k=) 2: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 8BxigLcXRfHjVBQQ/jgBW++OCfhAQf3T5L8XSqY0uw8=) 3: 2E926DC45B7C11EDAAFAB831C4F9AE02.roa (hash: js4G1Lshm4EffUa3iY1Q71q0rcXw9+IUkbR6FWJH4+U=) 4: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: zf9lfjVRzDBvijPsU/+tznrhofnaF/WZi0W6mRh1UBY=) 5: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: yyzsnoKe2xrHXVjufeheWpYqsGoX6iG/JlHj0H/JHAE=) 6: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: 3s8uH3WU7dVuraPTfGSJqzavBun+DYBh7A5A+AUgQFo=) 7: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: UVgLIMIzRdrzQP6ZniFXC977V2WicoP6V/VNTBtWiRk=) 8: F84FF96A493911ED805EB686C4F9AE02.roa (hash: k6OUPpome7pEAtnI12aWT99EGCFOt7JboBTF3+d34UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 599 (0x257) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jun 3 02:20:57 2025 GMT Not After : Jun 10 02:20:57 2025 GMT Subject: CN=683e5c0a-6270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:48:90:d5:ab:af:9c:21:3d:f2:b5:94:55: 97:b9:4e:5e:75:8c:fe:98:9e:9c:45:a1:75:1d:19: ba:ab:7b:b4:45:71:b1:e6:b2:19:a0:cc:13:82:88: 8c:87:ce:46:f0:1d:59:05:46:c9:b7:dc:78:ac:3e: 1c:fa:54:c2:4f:7a:f2:ca:0c:95:99:a2:ea:69:f3: 48:25:0d:87:fd:be:ed:69:81:2b:5c:ef:a9:cb:7c: 6a:d0:02:b7:5f:9c:ef:66:f8:92:92:54:fa:ce:96: 1a:b7:16:96:b8:c8:6b:af:e9:d2:24:a0:3b:f8:c4: c2:1a:e1:bd:34:13:69:22:28:a2:1a:ee:bd:a2:48: 44:54:2d:81:ef:43:a4:27:b2:57:92:97:b5:33:21: ca:84:87:6c:ee:8a:9b:8a:0e:6e:5a:95:e0:bd:c8: ab:63:0b:09:02:08:29:32:9d:d9:a8:4d:1f:d2:39: 50:fe:97:1e:05:9e:9a:af:b9:5c:62:d1:fd:6b:0b: 57:a0:5a:3b:b2:66:0f:d2:0b:14:2f:e6:3f:5b:f5: cc:56:c3:84:be:d8:8f:9c:c0:7d:74:85:36:cf:ce: 5d:35:65:26:29:9f:32:15:38:6d:e7:e9:8e:ab:55: 5e:5e:d8:b0:b2:51:69:08:cb:ff:ab:1c:71:4b:97: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:34:49:A5:53:4F:CF:9E:C8:24:92:B8:C3:86:47:27:CA:31:4A:6C X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:63:f6:c2:fe:dc:37:ad:03:f6:d6:db:5a:60:cc:fd:7c:69: 8d:50:68:18:6e:b3:dc:ba:e1:19:9a:90:5f:d7:79:48:88:cf: c3:5f:a2:2c:4b:76:ab:79:63:20:63:37:d8:26:26:2e:af:69: c6:da:f3:12:83:ed:f8:b8:6f:b4:3d:7f:e5:ef:c8:0d:e7:11: 51:f4:58:37:d6:99:f7:09:06:9e:c5:6a:1a:b6:7d:75:a6:38: 44:a5:2c:df:63:20:ac:78:52:88:13:26:a4:26:ab:80:1e:77: ee:1d:c4:d5:36:42:04:43:47:92:05:b1:ee:2a:5a:b0:72:4b: 8f:c8:3f:42:c6:be:de:55:3c:03:b9:cc:51:d6:8e:be:25:e6: 4c:95:bb:e8:bc:65:b0:33:79:a7:be:c5:33:59:c4:9c:a5:49: 93:db:98:93:dd:27:cf:f4:27:9f:11:62:5d:d7:45:3c:54:09: 52:ca:04:a1:03:05:d7:68:41:10:b0:96:ba:f2:f1:7e:9b:cc: 0e:02:f7:a8:2a:13:79:f9:c2:b9:9c:88:74:42:ee:c5:f1:1f: 1b:ec:ac:b1:1b:b2:ff:35:b5:ab:f5:a2:df:50:77:54:0a:42: 60:c7:9b:17:0d:79:82:99:de:20:cc:6a:93:a5:1e:9c:a3:b5: 48:07:53:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwNjAzMDIyMDU3WhcNMjUwNjEwMDIyMDU3WjAYMRYwFAYD VQQDEw02ODNlNWMwYS02MjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/BIkNWrr5whPfK1lFWXuU5edYz+mJ6cRaF1HRm6q3u0RXGx5rIZoMwTgoiM h85G8B1ZBUbJt9x4rD4c+lTCT3ryygyVmaLqafNIJQ2H/b7taYErXO+py3xq0AK3 X5zvZviSklT6zpYatxaWuMhrr+nSJKA7+MTCGuG9NBNpIiiiGu69okhEVC2B70Ok J7JXkpe1MyHKhIds7oqbig5uWpXgvcirYwsJAggpMp3ZqE0f0jlQ/pceBZ6ar7lc YtH9awtXoFo7smYP0gsUL+Y/W/XMVsOEvtiPnMB9dIU2z85dNWUmKZ8yFTht5+mO q1VeXtiwslFpCMv/qxxxS5fl8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBM0SaVT T8+eyCSSuMOGRyfKMUpsMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSY/bC/tw3rQP21ttaYMz9fGmNUGgYbrPcuuEZmpBf13lIiM/DX6Is S3areWMgYzfYJiYur2nG2vMSg+34uG+0PX/l78gN5xFR9Fg31pn3CQaexWoatn11 pjhEpSzfYyCseFKIEyakJquAHnfuHcTVNkIEQ0eSBbHuKlqwckuPyD9Cxr7eVTwD ucxR1o6+JeZMlbvovGWwM3mnvsUzWcScpUmT25iT3SfP9CefEWJd10U8VAlSygSh AwXXaEEQsJa68vF+m8wOAveoKhN5+cK5nIh0Qu7F8R8b7KyxG7L/NbWr9aLfUHdU CkJgx5sXDXmCmd4gzGqTpR6co7VIB1PK -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:06 2025 by rpki-client