$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: V9r6BPGYnv2xY/prMPCdG+USf7p4okKBdLPYDWC9qHI= Subject key identifier: 24:F5:C9:9F:7C:02:FE:DC:02:8D:00:8F:1C:D9:43:3B:0C:18:4B:72 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0177 Signing time: Sat 07 Jun 2025 03:22:15 +0000 Manifest this update: Sat 07 Jun 2025 03:22:15 +0000 Manifest next update: Sat 14 Jun 2025 03:22:15 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: a78dyWiAfy/2WXW2r2a2xfKD332F2ID9FM/JvAKxvSY=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: Qe0/BiT1tYA4h/l62j0BMeHxIJuUAO9bXjTbXA245ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 03:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Jun 7 03:22:15 2025 GMT Not After : Jun 14 03:22:15 2025 GMT Subject: CN=6843b067-2dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:59:15:0f:2e:4a:28:b2:10:2b:e3:aa:c6:70: a8:95:b0:49:55:09:9a:ae:b7:09:f6:3c:69:bf:4b: de:5d:13:ef:01:36:b5:29:ef:6b:ad:1d:63:a8:01: 64:b7:a8:6d:07:98:c8:51:fd:72:9f:63:04:03:aa: c8:e8:5c:42:97:eb:32:81:f1:e7:c4:b5:74:ba:29: 06:0a:52:26:26:16:23:e0:b0:06:b8:19:e1:49:5f: a0:13:e8:a0:a3:2f:a7:83:43:fd:fc:e7:56:61:cd: 5f:0a:76:7f:8d:3d:2e:ac:9b:2c:4e:43:37:94:a8: 6f:08:f9:bf:4a:ac:07:b0:96:07:24:54:dd:fb:c2: 72:43:d0:1c:63:82:5c:53:45:f3:c6:8b:f5:30:f0: 2b:13:53:7a:1a:db:8b:db:f1:bf:be:20:08:b5:51: 95:6d:99:38:61:61:28:b5:37:23:ed:bf:e3:1a:db: 54:cc:a7:e4:bb:48:f9:a9:11:60:86:f0:f3:5f:23: b2:97:57:c0:92:50:62:c3:d7:31:01:da:48:6a:0b: a5:4f:2c:6d:d4:ce:cd:b3:47:c8:1a:96:8b:dc:bb: aa:f7:b7:f8:c3:f9:ae:4e:d4:97:f3:c7:c1:ca:b6: c8:03:ee:cd:3e:23:8e:a3:51:43:3a:ea:c5:12:7e: 1f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:C9:9F:7C:02:FE:DC:02:8D:00:8F:1C:D9:43:3B:0C:18:4B:72 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:e5:9a:37:c5:f5:6f:24:e7:b8:bd:37:47:51:4f:81:d2:50: ae:41:0c:8f:51:83:3f:86:f6:3b:28:2d:52:73:17:43:0e:71: b6:ba:67:b5:f6:10:91:a1:08:f5:2e:3e:37:6c:dc:2b:48:6e: c8:65:5d:9c:1c:d6:04:ac:c4:00:18:44:54:c8:82:cd:43:e6: f1:a7:e1:2b:e4:e1:2c:f4:0c:14:d2:e6:09:87:4e:71:ec:e9: d7:1d:ec:fe:a4:77:40:6d:90:de:b2:93:e0:6f:41:84:e3:37: 1b:cf:30:12:a9:2b:68:69:43:0b:5b:de:a2:e2:41:c0:1e:87: f3:7e:c0:d1:96:37:4d:e8:4e:ed:43:c8:94:16:a1:a2:ac:36: c2:24:79:5a:96:f5:eb:f9:20:04:14:2e:f4:18:59:02:9a:60: 3c:2e:9f:ab:da:c6:bf:0a:fc:33:1f:98:d1:43:ac:d2:fb:39: 1d:fe:d5:a2:94:3b:94:de:aa:90:b5:c5:0a:ab:8d:16:8a:f3: 68:0f:5a:ff:c2:50:1b:9d:15:c2:b1:05:26:93:07:57:77:31: 8e:ba:3e:9c:f2:12:96:2e:57:3c:fb:67:e9:72:af:c0:c9:cf: ba:05:f3:4b:c0:1f:81:15:04:13:0e:ec:58:ea:b8:a8:53:68: 32:48:90:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUwNjA3MDMyMjE1WhcNMjUwNjE0MDMyMjE1WjAYMRYwFAYD VQQDEw02ODQzYjA2Ny0yZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVkVDy5KKLIQK+OqxnColbBJVQmarrcJ9jxpv0veXRPvATa1Ke9rrR1jqAFk t6htB5jIUf1yn2MEA6rI6FxCl+sygfHnxLV0uikGClImJhYj4LAGuBnhSV+gE+ig oy+ng0P9/OdWYc1fCnZ/jT0urJssTkM3lKhvCPm/SqwHsJYHJFTd+8JyQ9AcY4Jc U0Xzxov1MPArE1N6GtuL2/G/viAItVGVbZk4YWEotTcj7b/jGttUzKfku0j5qRFg hvDzXyOyl1fAklBiw9cxAdpIagulTyxt1M7Ns0fIGpaL3Luq97f4w/muTtSX88fB yrbIA+7NPiOOo1FDOurFEn4fHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT1yZ98 Av7cAo0AjxzZQzsMGEtyMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv5Zo3xfVvJOe4vTdHUU+B0lCuQQyPUYM/hvY7KC1ScxdDDnG2ume1 9hCRoQj1Lj43bNwrSG7IZV2cHNYErMQAGERUyILNQ+bxp+Er5OEs9AwU0uYJh05x 7OnXHez+pHdAbZDespPgb0GE4zcbzzASqStoaUMLW96i4kHAHofzfsDRljdN6E7t Q8iUFqGirDbCJHlalvXr+SAEFC70GFkCmmA8Lp+r2sa/CvwzH5jRQ6zS+zkd/tWi lDuU3qqQtcUKq40WivNoD1r/wlAbnRXCsQUmkwdXdzGOuj6c8hKWLlc8+2fpcq/A yc+6BfNLwB+BFQQTDuxY6rioU2gySJCZ -----END CERTIFICATE-----Generated at Sun Jun 8 11:06:19 2025 by rpki-client