$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: PQnoNFFscUJh0+rCbYHmaZeYlM6UsIFijNogonlss+k= Subject key identifier: 2E:CA:92:21:37:80:56:0F:57:9F:86:81:32:1F:C3:86:BE:07:21:96 Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: DD Signing time: Sat 31 May 2025 05:19:26 +0000 Manifest this update: Sat 31 May 2025 05:19:25 +0000 Manifest next update: Sat 07 Jun 2025 05:19:25 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: xwpjudDWZfxdzZ3RXRDhXFdPci2XU6QV41jaIYEijDw=) 2: 33FB0E48FD2211EFA419DA72C4F9AE02.roa (hash: hGFJA7vbBE7czUFInCqw+SAQ5MusDF01ceEYN+8+xgQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: May 31 05:19:25 2025 GMT Not After : Jun 7 05:19:25 2025 GMT Subject: CN=683a915d-f9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e6:14:91:d5:65:09:35:7c:b7:44:81:dd:65: 3a:ec:f0:af:a9:72:da:14:13:83:f2:63:f2:d0:77: f8:dc:d5:06:77:3e:7f:09:ac:40:27:59:65:a2:db: 53:0f:4e:20:3e:37:c6:94:cc:ad:bc:78:b9:63:63: d6:14:74:dd:7e:4d:f0:49:c8:ca:5e:dc:f2:f1:5c: 36:f1:4c:73:5c:36:d4:c4:9d:51:d7:b4:2c:2c:6f: 4b:88:6b:4c:02:f3:a1:85:e2:23:03:29:69:5c:0f: d5:46:68:c4:38:6e:ee:2f:8b:5b:65:50:85:81:19: 97:d7:d8:f3:73:ca:5e:8a:4c:c8:4b:36:03:36:e1: 65:c9:06:8c:43:dc:f9:39:92:38:c5:b0:2f:4c:a4: 7e:ba:e0:24:75:be:93:07:73:97:80:81:90:df:97: d0:b7:89:5c:3a:d3:01:c4:77:86:34:1f:52:e6:a3: 6a:c2:a2:da:d6:95:55:ed:c1:d3:25:5a:16:c3:63: 03:5c:34:04:ac:4d:c2:1f:66:9c:38:36:e1:28:b3: 40:16:63:aa:7c:25:cb:33:34:b9:ac:85:e7:30:e8: 38:46:fe:70:7c:7a:fc:4e:ce:f8:ff:81:04:1f:4f: 72:6f:31:3d:ad:d1:2a:87:fe:b4:ab:b9:80:64:44: 46:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CA:92:21:37:80:56:0F:57:9F:86:81:32:1F:C3:86:BE:07:21:96 X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:88:00:27:ed:b3:59:60:81:7e:33:be:a5:e0:36:af:e6:1e: ee:d5:d5:8f:e6:37:ff:d5:31:05:63:21:97:24:2d:bd:96:60: 8c:d9:f9:26:4f:94:15:2a:3e:e0:6f:08:9b:06:cc:32:22:aa: 01:af:62:64:52:84:2a:53:a5:11:64:96:92:46:5d:4e:9c:3d: 67:42:dc:25:b7:af:83:ce:3f:4a:fc:59:de:29:37:6b:e3:7e: 0c:bd:d0:e8:33:d3:46:24:2c:94:82:98:d4:e3:72:56:d0:bb: 5c:df:a8:37:62:02:21:9c:2a:02:e0:dc:a2:f6:85:58:28:eb: bb:1d:87:89:d0:b9:5d:3b:77:2e:e7:30:94:29:c8:c8:2c:fa: 9a:dc:15:cc:e3:36:60:66:3c:6c:87:e2:50:5c:e8:76:5c:46: 7c:f1:c4:5e:81:50:5c:38:d7:07:98:d6:0d:be:e0:cb:ff:6a: 74:d0:08:57:ef:ed:45:0b:28:ec:13:77:f7:0e:73:7d:06:c0: 1a:90:4f:cf:7a:2d:82:89:77:9a:55:88:85:bf:c8:b1:c4:4d: b8:4b:58:9d:38:74:83:fd:d6:92:68:d0:de:5a:de:86:22:41: 5f:57:26:7b:a1:ca:8d:42:4f:c3:e9:2c:62:15:5f:e6:4f:aa: 19:57:f0:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUwNTMxMDUxOTI1WhcNMjUwNjA3MDUxOTI1WjAYMRYwFAYD VQQDEw02ODNhOTE1ZC1mOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eYUkdVlCTV8t0SB3WU67PCvqXLaFBOD8mPy0Hf43NUGdz5/CaxAJ1llottT D04gPjfGlMytvHi5Y2PWFHTdfk3wScjKXtzy8Vw28UxzXDbUxJ1R17QsLG9LiGtM AvOhheIjAylpXA/VRmjEOG7uL4tbZVCFgRmX19jzc8peikzISzYDNuFlyQaMQ9z5 OZI4xbAvTKR+uuAkdb6TB3OXgIGQ35fQt4lcOtMBxHeGNB9S5qNqwqLa1pVV7cHT JVoWw2MDXDQErE3CH2acODbhKLNAFmOqfCXLMzS5rIXnMOg4Rv5wfHr8Ts74/4EE H09ybzE9rdEqh/60q7mAZERGbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7KkiE3 gFYPV5+GgTIfw4a+ByGWMB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaiAAn7bNZYIF+M76l4Dav5h7u1dWP5jf/1TEFYyGXJC29lmCM2fkm T5QVKj7gbwibBswyIqoBr2JkUoQqU6URZJaSRl1OnD1nQtwlt6+Dzj9K/FneKTdr 434MvdDoM9NGJCyUgpjU43JW0Ltc36g3YgIhnCoC4Nyi9oVYKOu7HYeJ0LldO3cu 5zCUKcjILPqa3BXM4zZgZjxsh+JQXOh2XEZ88cRegVBcONcHmNYNvuDL/2p00AhX 7+1FCyjsE3f3DnN9BsAakE/Pei2CiXeaVYiFv8ixxE24S1idOHSD/daSaNDeWt6G IkFfVyZ7ocqNQk/D6SxiFV/mT6oZV/Bo -----END CERTIFICATE-----Generated at Sat May 31 14:48:14 2025 by rpki-client