$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: ZXy4wZ5KXZUIRN4x0ooBBc8ir5dBOvWfJbG+XhhmgvA= Subject key identifier: B4:F4:6A:93:C3:B6:B6:BE:71:9E:82:7F:71:9A:DE:2F:7D:BA:61:5B Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 0588 Signing time: Sun 08 Jun 2025 22:55:17 +0000 Manifest this update: Sun 08 Jun 2025 22:55:17 +0000 Manifest next update: Sun 15 Jun 2025 22:55:17 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: 0AVRPoyjrxmPMw8cD3tADppdKHmIQVuNFSISCaWkVfU=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: SEXcu7MCAx7BgjEXcpxfIMBCBr8bF8QoXI0x5nMZMBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 22:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Jun 8 22:55:17 2025 GMT Not After : Jun 15 22:55:17 2025 GMT Subject: CN=684614d5-a040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:99:b8:33:65:2b:ab:23:54:ae:b1:23:d6: 44:1c:b6:38:12:8e:0e:c4:dc:e9:78:01:42:e3:3e: 84:26:7f:d4:e8:9c:67:ed:d2:d3:29:d4:bc:34:49: 8d:02:5d:0f:01:b0:ec:d1:e7:96:2c:b0:be:ae:ff: ae:dd:0c:93:21:30:f4:ed:bb:9f:3a:14:4d:9e:0d: 60:21:d3:ce:20:13:62:28:29:e7:ec:57:14:be:4e: 14:5d:3f:2a:6c:0c:db:cc:73:ae:65:50:53:53:e6: d1:ac:ed:a4:94:49:98:39:f4:75:ea:98:88:f8:a3: c9:db:80:e0:6d:92:48:c4:8f:1e:8d:c6:5f:71:21: 6c:06:f7:2a:83:75:d4:db:3e:0f:00:b6:d7:5f:d3: a6:43:55:c5:9e:d2:cb:17:15:85:45:24:ab:2d:c4: c7:af:26:8e:a6:ce:75:7f:f4:06:fd:48:f4:fc:ae: 86:f3:36:16:35:8d:57:59:7b:1d:64:a6:b6:e1:85: ce:39:20:b4:71:b1:6a:23:51:08:7e:81:b2:b1:30: 88:ca:b5:4a:30:5f:82:30:a9:57:e1:3a:a7:5a:0d: 74:33:dd:60:6b:5c:9b:a1:36:48:5a:b2:6d:21:1a: 68:69:40:0d:db:07:9b:dd:d5:66:b0:c5:ad:4c:c2: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F4:6A:93:C3:B6:B6:BE:71:9E:82:7F:71:9A:DE:2F:7D:BA:61:5B X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:cb:54:97:47:3b:de:62:b4:f9:f4:01:81:ee:71:92:60:f0: b9:32:85:7e:b3:13:ab:1b:c7:d3:dd:06:82:f3:0c:ee:46:a9: 1e:db:4a:bb:92:89:14:f7:45:fd:e8:e7:e4:fb:43:92:b2:87: 7b:39:e3:56:c0:f0:55:4a:b3:f4:09:64:4b:9b:1f:39:95:dd: 64:59:44:3d:aa:12:c7:a3:83:ca:a1:f3:56:d2:9c:0f:fc:4d: 04:b5:d8:18:08:ac:6d:b3:33:68:0f:83:c9:91:f7:a3:68:50: 0a:ac:f2:8b:8c:e1:b0:1e:d3:fa:74:19:d6:d3:6a:f1:d8:b2: 07:7e:3a:96:f0:d4:6d:8f:c3:73:ee:a6:da:c1:af:72:7b:da: ed:2b:3e:5e:d4:22:7b:bc:79:37:33:09:85:cc:c8:59:d3:78: 2a:86:fc:67:17:b4:83:24:2d:b5:93:8e:ce:1a:98:25:75:b0: 97:ef:f8:c1:b3:ed:73:94:8a:38:ee:4e:50:3b:15:1e:9b:cc: 28:ac:ed:fd:d9:7e:3e:95:71:3b:e2:8d:40:85:76:64:5a:74: e9:5c:51:c3:ee:8c:27:48:77:0c:1f:95:25:d7:1a:8a:a6:69: 80:47:63:2b:d3:cf:f7:2a:1e:38:4b:51:62:04:e4:4f:24:99: 6d:29:65:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwNjA4MjI1NTE3WhcNMjUwNjE1MjI1NTE3WjAYMRYwFAYD VQQDEw02ODQ2MTRkNS1hMDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwdiZuDNlK6sjVK6xI9ZEHLY4Eo4OxNzpeAFC4z6EJn/U6Jxn7dLTKdS8NEmN Al0PAbDs0eeWLLC+rv+u3QyTITD07bufOhRNng1gIdPOIBNiKCnn7FcUvk4UXT8q bAzbzHOuZVBTU+bRrO2klEmYOfR16piI+KPJ24DgbZJIxI8ejcZfcSFsBvcqg3XU 2z4PALbXX9OmQ1XFntLLFxWFRSSrLcTHryaOps51f/QG/Uj0/K6G8zYWNY1XWXsd ZKa24YXOOSC0cbFqI1EIfoGysTCIyrVKMF+CMKlX4TqnWg10M91ga1yboTZIWrJt IRpoaUAN2web3dVmsMWtTMIsqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT0apPD tra+cZ6Cf3Ga3i99umFbMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqy1SXRzveYrT59AGB7nGSYPC5MoV+sxOrG8fT3QaC8wzuRqke20q7 kokU90X96Ofk+0OSsod7OeNWwPBVSrP0CWRLmx85ld1kWUQ9qhLHo4PKofNW0pwP /E0EtdgYCKxtszNoD4PJkfejaFAKrPKLjOGwHtP6dBnW02rx2LIHfjqW8NRtj8Nz 7qbawa9ye9rtKz5e1CJ7vHk3MwmFzMhZ03gqhvxnF7SDJC21k47OGpgldbCX7/jB s+1zlIo47k5QOxUem8worO392X4+lXE74o1AhXZkWnTpXFHD7ownSHcMH5Ul1xqK pmmAR2Mr08/3Kh44S1FiBORPJJltKWWZ -----END CERTIFICATE-----Generated at Tue Jun 10 18:20:28 2025 by rpki-client