$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json) Hash identifier: RD+vjqp/ePqRtfXQAwyvxd3iVPklEOsPe86QyZEVMCE= Subject key identifier: B8:03:62:31:B0:11:8B:A8:48:D4:D8:9F:29:AC:A9:31:D2:03:FE:02 Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft Manifest number: 92 Signing time: Tue 03 Jun 2025 06:13:42 +0000 Manifest this update: Tue 03 Jun 2025 06:13:42 +0000 Manifest next update: Tue 10 Jun 2025 06:13:42 +0000 Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: KIEvS2CDhiXWGRArNRU5IZ/x5Ohm18KLvJzrp3tak/s=) 2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: u4ruZ96aOsEF+VWmoS7WaQkE4RPkVRrBuBKptWViuMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538 Validity Not Before: Jun 3 06:13:42 2025 GMT Not After : Jun 10 06:13:42 2025 GMT Subject: CN=683e9296-44a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:50:68:16:27:7d:57:81:59:b8:50:70:85:0d: 2d:8b:ad:93:80:ef:2a:f1:53:e6:ae:98:db:5b:6c: 1e:f5:ad:36:f8:d3:41:7b:c1:c5:eb:21:e9:60:dc: 21:86:b4:c0:2c:42:18:7b:c0:83:42:79:ac:45:00: d4:f4:f1:21:66:7d:9e:bc:0c:df:8d:d1:08:ec:63: 76:27:62:bd:68:27:3e:56:5f:80:4d:d3:e4:79:0b: 6f:e1:c2:06:d9:eb:88:ad:c1:19:c8:e9:22:76:03: 35:4f:45:f7:e3:6f:c8:d1:1f:07:85:92:41:65:d6: 33:6f:f9:bc:b2:3a:65:bd:a3:83:5d:c2:b7:8b:5c: b5:47:33:c1:3b:d4:39:d0:54:d3:e5:c9:74:82:bf: b2:e4:94:87:61:aa:52:ed:93:6b:65:8f:1b:86:c0: 5d:4b:c6:a4:6a:e4:78:fe:7f:5f:a3:11:af:aa:61: e5:89:0e:4c:35:05:75:40:8a:b3:b1:ae:80:ed:78: cf:e3:d8:18:ce:f5:29:5a:ee:7b:38:3e:be:7a:af: 89:b4:9c:f3:5c:b5:32:ae:e4:a2:fa:4b:65:57:ed: 72:0b:07:fe:64:8d:bf:66:41:dd:63:44:4c:72:a3: e5:2e:78:a7:f0:fb:1d:da:0b:df:f2:37:7d:5d:ea: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:03:62:31:B0:11:8B:A8:48:D4:D8:9F:29:AC:A9:31:D2:03:FE:02 X509v3 Authority Key Identifier: keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:12:df:1d:d2:8f:61:e5:e7:57:da:4e:a6:da:4d:94:18:7e: 13:e2:be:31:45:28:1e:75:4b:a3:05:bd:dd:b5:2b:70:ef:93: 59:89:19:ca:35:f1:bc:d3:7e:c9:5a:41:7f:53:64:87:a7:bb: 75:4f:f7:f9:1f:6d:cc:fe:5b:59:72:73:c6:a3:18:3a:96:ae: 13:37:4a:1b:fc:e3:97:e9:98:a9:f1:4e:14:6a:dc:a3:90:c3: e4:7d:2a:a6:86:1f:75:52:c6:33:a8:86:12:04:7b:85:b3:f6: 79:e1:a5:58:c8:bd:a5:b9:9d:17:9c:ec:16:85:48:9b:80:a2: d2:3e:ab:b2:c5:43:b2:ae:35:fb:2d:7f:78:5b:60:b4:51:60: b6:38:d7:ec:4e:e9:f3:50:9a:05:d0:0c:ac:1a:da:30:a8:5e: 59:07:ae:c4:a6:98:d4:ba:ef:10:f7:76:a7:0f:a3:6c:7e:ba: 3c:af:d1:07:3d:5b:06:7d:c0:57:91:a5:1d:2b:ac:2f:06:61: bf:12:cd:ad:66:d5:6a:50:f1:11:b6:80:99:5c:7d:e8:88:87: 8b:a6:3a:3e:e2:0d:9f:51:6d:57:2a:ea:fe:93:96:8c:3c:14: 10:8b:ed:63:66:1a:29:e0:f3:b2:d1:20:ab:c5:bb:68:f0:1d: 6f:58:1a:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRDMUIxMTAvBgNVBAUTKENFRTczQTk1RDVDQ0VFMDYyRTdENUVCQTFCNUExMjcw NTJFMTI1MzgwHhcNMjUwNjAzMDYxMzQyWhcNMjUwNjEwMDYxMzQyWjAYMRYwFAYD VQQDEw02ODNlOTI5Ni00NGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FBoFid9V4FZuFBwhQ0ti62TgO8q8VPmrpjbW2we9a02+NNBe8HF6yHpYNwh hrTALEIYe8CDQnmsRQDU9PEhZn2evAzfjdEI7GN2J2K9aCc+Vl+ATdPkeQtv4cIG 2euIrcEZyOkidgM1T0X342/I0R8HhZJBZdYzb/m8sjplvaODXcK3i1y1RzPBO9Q5 0FTT5cl0gr+y5JSHYapS7ZNrZY8bhsBdS8akauR4/n9foxGvqmHliQ5MNQV1QIqz sa6A7XjP49gYzvUpWu57OD6+eq+JtJzzXLUyruSi+ktlV+1yCwf+ZI2/ZkHdY0RM cqPlLnin8Psd2gvf8jd9Xeox2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgDYjGw EYuoSNTYnymsqTHSA/4CMB8GA1UdIwQYMBaAFM7nOpXVzO4GLn1euhtaEnBS4SU4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEMxQi9DRjM3MzVEMDY0 MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdnWXVmVjY2RzFvU2NGTGhK VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1YzZsZFhNN2dZdWZWNjZHMW9TY0ZMaEpUZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEMxQi9DRjM3MzVEMDY0MUIxMUVGOTg5MTU0N0ZDNEY5QUUwMi96dWM2bGRYTTdn WXVmVjY2RzFvU2NGTGhKVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWEt8d0o9h5edX2k6m2k2UGH4T4r4xRSgedUujBb3dtStw75NZiRnK NfG8037JWkF/U2SHp7t1T/f5H23M/ltZcnPGoxg6lq4TN0ob/OOX6Zip8U4Uatyj kMPkfSqmhh91UsYzqIYSBHuFs/Z54aVYyL2luZ0XnOwWhUibgKLSPquyxUOyrjX7 LX94W2C0UWC2ONfsTunzUJoF0AysGtowqF5ZB67EppjUuu8Q93anD6Nsfro8r9EH PVsGfcBXkaUdK6wvBmG/Es2tZtVqUPERtoCZXH3oiIeLpjo+4g2fUW1XKur+k5aM PBQQi+1jZhop4POy0SCrxbto8B1vWBrs -----END CERTIFICATE-----Generated at Wed Jun 4 00:04:24 2025 by rpki-client