$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: XklqJJ6ITncJcXdf8tSo+F0Gshu8O6kh1r+2REsfJ4Y= Subject key identifier: 6E:86:93:0F:EA:33:8A:38:E5:73:A6:2C:27:B8:12:78:67:1B:A2:33 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 86 Signing time: Wed 11 Jun 2025 05:56:24 +0000 Manifest this update: Wed 11 Jun 2025 05:56:23 +0000 Manifest next update: Wed 18 Jun 2025 05:56:23 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: xhPTbTLK0wnbjJvi89lIDUymxxY64pkT5N3fhxX6F4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Jun 11 05:56:23 2025 GMT Not After : Jun 18 05:56:23 2025 GMT Subject: CN=68491a87-b8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f5:d4:40:bb:c2:a6:c7:be:70:7a:04:36:29: 6a:c4:a1:c4:b3:8c:76:f9:9d:3c:7b:f1:6f:12:ea: 1d:40:5b:d5:18:72:b3:ab:b3:47:5a:80:35:30:bf: ff:e2:f0:6f:aa:4e:8c:40:a1:25:bf:42:91:22:01: f4:03:39:04:92:f1:ff:5f:b4:68:9b:7d:f8:8e:f8: 0a:16:d9:9d:41:f8:b1:02:bc:16:51:43:9a:8c:87: 75:2f:1d:e5:cc:00:09:27:2a:ba:33:15:e5:5f:65: 25:a9:78:f5:f8:98:41:b3:c2:fa:9e:95:e1:34:28: 8f:03:77:3d:f3:63:98:e5:48:8c:8d:f2:95:e8:f1: eb:08:03:da:c3:ce:a0:14:62:1b:80:80:13:73:ac: 43:0f:70:4a:cf:b0:49:2e:e3:d5:15:85:6b:0d:a6: f7:53:53:d5:57:9f:65:52:8d:aa:64:61:01:a5:5b: 9b:8e:39:1b:fa:c0:29:7f:8a:84:02:4d:a6:27:e1: be:8b:3f:a5:ac:8d:f2:40:e4:b6:89:aa:af:4d:40: 14:7d:c4:89:6b:ba:82:73:e0:46:c7:5b:54:b1:95: 23:25:7f:e3:60:38:38:ef:69:ae:9a:89:ed:4a:4c: ac:78:84:8e:38:f5:7b:57:d9:46:98:fd:66:ec:0a: f9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:86:93:0F:EA:33:8A:38:E5:73:A6:2C:27:B8:12:78:67:1B:A2:33 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:da:5b:72:88:98:29:85:d0:c4:2a:3d:8f:2c:91:aa:91:86: 07:d2:5f:96:77:95:dd:f3:04:59:32:58:8c:a3:bd:0d:fb:83: c3:45:fd:63:2e:18:87:f8:bb:9f:29:e8:6b:2c:e4:77:64:52: 84:59:05:8f:14:27:9d:54:70:a5:35:66:86:02:4b:f3:3a:cc: 99:d9:a2:eb:85:0f:64:3f:99:e3:24:f9:1e:41:73:92:4a:6a: 82:42:58:9a:b3:23:3f:79:69:65:5b:ad:02:cd:73:5f:e1:91: 51:ce:b3:f8:a9:e1:ae:02:83:c7:c8:39:17:76:77:79:62:0e: 7a:ea:02:bb:76:08:8f:8e:9a:a6:fc:53:23:fa:0a:e1:24:cc: d2:5c:67:2d:c3:f0:ae:8b:db:c5:e4:ca:4b:70:48:c4:85:ab: 53:16:d8:ab:2b:41:56:a6:f7:74:e4:aa:66:5f:d3:be:1a:08: e0:91:f4:a1:cf:32:9e:ee:7f:cf:35:56:fe:cd:06:a6:18:2f: 3e:1b:3b:06:53:5a:f0:9b:97:3a:37:20:15:c5:49:04:4c:36: 8b:9f:37:53:5f:a0:fd:25:49:ae:96:3e:b0:6d:be:27:32:cf: 78:59:78:68:55:38:1d:ff:b5:19:cf:33:6b:79:f6:6c:ba:0c: 1b:45:94:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUwNjExMDU1NjIzWhcNMjUwNjE4MDU1NjIzWjAYMRYwFAYD VQQDEw02ODQ5MWE4Ny1iOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vXUQLvCpse+cHoENilqxKHEs4x2+Z08e/FvEuodQFvVGHKzq7NHWoA1ML// 4vBvqk6MQKElv0KRIgH0AzkEkvH/X7Rom334jvgKFtmdQfixArwWUUOajId1Lx3l zAAJJyq6MxXlX2UlqXj1+JhBs8L6npXhNCiPA3c982OY5UiMjfKV6PHrCAPaw86g FGIbgIATc6xDD3BKz7BJLuPVFYVrDab3U1PVV59lUo2qZGEBpVubjjkb+sApf4qE Ak2mJ+G+iz+lrI3yQOS2iaqvTUAUfcSJa7qCc+BGx1tUsZUjJX/jYDg472mumont SkyseISOOPV7V9lGmP1m7Ar5hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6Gkw/q M4o45XOmLCe4EnhnG6IzMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA62ltyiJgphdDEKj2PLJGqkYYH0l+Wd5Xd8wRZMliMo70N+4PDRf1j LhiH+LufKehrLOR3ZFKEWQWPFCedVHClNWaGAkvzOsyZ2aLrhQ9kP5njJPkeQXOS SmqCQliasyM/eWllW60CzXNf4ZFRzrP4qeGuAoPHyDkXdnd5Yg566gK7dgiPjpqm /FMj+grhJMzSXGctw/Cui9vF5MpLcEjEhatTFtirK0FWpvd05KpmX9O+GgjgkfSh zzKe7n/PNVb+zQamGC8+GzsGU1rwm5c6NyAVxUkETDaLnzdTX6D9JUmulj6wbb4n Ms94WXhoVTgd/7UZzzNrefZsugwbRZSj -----END CERTIFICATE-----Generated at Fri Jun 13 01:47:29 2025 by rpki-client