$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: FmXAJa4omQuyx25pIphFHCuKcnJsWLGipEGuGvQwOYY= Subject key identifier: 27:B4:92:28:B4:D2:F8:77:E9:89:CC:B9:22:7D:FE:AB:2D:D6:76:62 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 9C Signing time: Sat 31 May 2025 05:51:43 +0000 Manifest this update: Sat 31 May 2025 05:51:43 +0000 Manifest next update: Sat 07 Jun 2025 05:51:43 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: 1Pe3ysct4jkWQJYw+BQoJeea+MkXcZH0Kd0DIbZSUyk=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: May 31 05:51:43 2025 GMT Not After : Jun 7 05:51:43 2025 GMT Subject: CN=683a98ef-94ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:6b:17:72:a6:fb:df:dd:7c:34:cf:f0:91: 7a:99:99:88:da:38:18:8d:bb:b6:25:33:c0:18:0d: 61:6b:1b:ee:9c:03:71:e7:82:b1:25:57:ec:1f:4f: b1:e7:95:ef:b9:3b:b2:c0:c6:26:6d:8d:d3:c3:1a: d1:23:07:70:82:11:b2:d0:03:1e:23:5b:63:a9:ca: c5:43:4c:c3:11:7c:46:80:8a:79:c7:74:1d:80:77: 9c:d3:6f:b4:bd:c3:dd:8d:b6:ec:44:1f:24:90:29: bd:e3:2d:09:8f:bd:12:65:33:c3:69:4b:c8:23:1b: f7:60:b1:d7:fa:a3:c9:b5:ea:1d:0f:55:0f:e8:c3: ff:60:d0:19:ff:20:66:4e:22:e6:85:e8:97:5a:71: 72:fb:77:82:bd:cf:bd:16:e1:6a:8d:db:45:c4:9a: 09:3a:5b:d4:7b:5b:f5:15:51:c2:0d:4b:d9:84:25: bf:e9:89:96:00:aa:b4:64:e4:4d:a3:44:6d:57:48: 07:fb:42:f8:f5:af:16:ad:af:31:f7:71:dc:fc:c1: 82:9a:f3:c3:a7:1b:d8:8b:e6:6e:7a:15:28:e4:0e: bb:ee:f9:65:02:0e:f6:57:0f:80:06:31:47:eb:7a: 71:b9:79:9e:42:93:a8:3f:84:32:ae:56:4e:6e:1d: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B4:92:28:B4:D2:F8:77:E9:89:CC:B9:22:7D:FE:AB:2D:D6:76:62 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:2d:ae:31:63:d7:9a:d0:20:64:47:1a:da:e1:2c:ba:12:23: 6c:c1:81:62:35:dc:03:a2:27:c6:bb:89:9f:0a:b5:36:38:98: cf:02:4d:df:09:03:83:64:0a:8e:8c:3e:3b:19:d4:34:24:90: 5a:04:a2:b5:05:29:6f:f2:cb:9a:9d:ab:99:66:5c:a5:3a:e4: a0:c1:fa:fd:fc:85:01:e9:65:d5:a6:45:c0:77:a4:3d:80:1f: 99:ae:52:b3:1a:a2:5f:74:db:d9:69:dc:0e:ed:00:17:0f:8b: 79:2e:1e:92:6d:79:3d:47:b4:b1:39:98:ec:4a:4d:00:4f:93: 26:ea:c5:ee:03:4c:ae:c6:68:49:ba:58:7d:7b:dd:71:22:47: 3a:73:45:ed:a4:38:54:f2:50:33:f7:70:e8:f4:b8:e8:ff:4c: 7c:3e:01:d2:13:ac:fc:be:f0:1c:2e:8f:ef:05:83:5e:fe:7f: 40:a7:b6:b4:78:6c:35:bd:8a:56:bb:f0:f5:4c:b9:cc:f9:f6: 6b:7f:39:15:4c:69:94:18:28:0c:db:38:8a:15:2e:82:3e:08: f6:76:4f:d4:97:49:37:dd:73:2b:2c:b2:d5:89:b1:12:f8:2a: cd:29:70:6d:f4:0a:ab:ae:1c:56:5a:25:1f:11:b8:51:59:40: 39:ee:ed:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwNTMxMDU1MTQzWhcNMjUwNjA3MDU1MTQzWjAYMRYwFAYD VQQDEw02ODNhOThlZi05NGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxaZrF3Km+9/dfDTP8JF6mZmI2jgYjbu2JTPAGA1haxvunANx54KxJVfsH0+x 55XvuTuywMYmbY3TwxrRIwdwghGy0AMeI1tjqcrFQ0zDEXxGgIp5x3QdgHec02+0 vcPdjbbsRB8kkCm94y0Jj70SZTPDaUvIIxv3YLHX+qPJteodD1UP6MP/YNAZ/yBm TiLmheiXWnFy+3eCvc+9FuFqjdtFxJoJOlvUe1v1FVHCDUvZhCW/6YmWAKq0ZORN o0RtV0gH+0L49a8Wra8x93Hc/MGCmvPDpxvYi+ZuehUo5A677vllAg72Vw+ABjFH 63pxuXmeQpOoP4QyrlZObh1kCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe0kii0 0vh36YnMuSJ9/qst1nZiMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4La4xY9ea0CBkRxra4Sy6EiNswYFiNdwDoifGu4mfCrU2OJjPAk3f CQODZAqOjD47GdQ0JJBaBKK1BSlv8suanauZZlylOuSgwfr9/IUB6WXVpkXAd6Q9 gB+ZrlKzGqJfdNvZadwO7QAXD4t5Lh6SbXk9R7SxOZjsSk0AT5Mm6sXuA0yuxmhJ ulh9e91xIkc6c0XtpDhU8lAz93Do9Ljo/0x8PgHSE6z8vvAcLo/vBYNe/n9Ap7a0 eGw1vYpWu/D1TLnM+fZrfzkVTGmUGCgM2ziKFS6CPgj2dk/Ul0k33XMrLLLVibES +CrNKXBt9AqrrhxWWiUfEbhRWUA57u2y -----END CERTIFICATE-----Generated at Sat May 31 17:36:09 2025 by rpki-client