$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: p8dXysPgiJ1Oo+HYRclGAmY+kr4/hCXUjPUSahIpBFk= Subject key identifier: C6:8E:ED:ED:01:D9:CF:86:ED:10:36:02:46:B4:48:F0:33:B2:F6:38 Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 3C Signing time: Sat 31 May 2025 07:05:33 +0000 Manifest this update: Sat 31 May 2025 07:05:33 +0000 Manifest next update: Sat 07 Jun 2025 07:05:33 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: bQde9CeomBLmjUyOe4s/zusr1xcO0NTqYhWrf2YQjfM=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: h0Bd3mrZsqytRvgmEj0DxUL66b35/lpEECIlTQlJZwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: May 31 07:05:33 2025 GMT Not After : Jun 7 07:05:33 2025 GMT Subject: CN=683aaa3d-21f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:67:8a:0d:07:de:ec:d4:fc:e4:84:82:01:a0: ab:25:35:b7:5f:41:f3:8d:3e:e9:ca:a2:43:02:8e: 37:cf:68:78:5f:85:d8:d4:00:79:13:f3:9d:67:99: 8b:88:e5:53:f0:89:63:2f:a3:12:f0:f4:01:56:b8: c0:cf:96:fe:cc:32:60:de:1d:1e:22:7d:35:b4:61: 31:b3:7f:4c:47:24:2a:31:6e:4a:98:57:62:da:92: 2d:83:cd:48:dc:6b:2a:bd:2c:e2:68:2a:cb:58:de: 04:e4:bd:d3:52:e5:1a:17:c0:55:51:6b:30:44:67: b2:1f:a7:a6:db:d7:8d:b0:6b:5d:1d:04:b1:8a:13: b9:51:bb:d8:da:9e:7a:4e:21:86:3f:3c:01:b9:65: 9e:33:77:07:46:90:d1:15:4f:2c:5b:2a:59:33:09: f9:cd:8e:42:de:70:f9:fd:d5:04:e2:8a:d4:4e:5c: 23:4e:ba:f8:cd:26:e5:a1:e0:cf:c3:bc:9a:19:61: ee:0f:ba:7d:fb:f7:ea:47:8d:c9:60:9c:35:e5:16: 18:75:0a:a1:d3:32:bd:6f:4f:41:21:d0:11:b0:29: 79:71:66:c8:85:fe:67:ce:77:ef:b7:40:a3:c8:d2: 39:64:ca:c8:bf:8a:07:b3:e1:2d:f5:9f:6e:18:47: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8E:ED:ED:01:D9:CF:86:ED:10:36:02:46:B4:48:F0:33:B2:F6:38 X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:c0:42:36:7c:4c:17:91:b2:55:44:88:34:d0:1d:aa:de:e2: 38:95:4f:09:29:84:4d:d1:62:e8:1b:eb:69:9e:35:38:6d:60: 3a:e1:bf:7d:4b:70:e8:98:88:77:40:86:5b:d8:b1:49:1b:58: 7d:63:fb:e5:1f:0a:1a:51:18:c4:4a:36:5e:ad:17:85:4d:54: 1b:30:7a:5e:bd:a7:7b:97:fe:32:35:b5:60:00:8a:f1:34:16: 3f:e9:f1:58:86:49:28:0c:48:74:79:17:43:0b:26:95:35:3c: f5:a7:b8:eb:3a:a7:51:bf:57:ea:81:8c:eb:68:31:5f:52:1a: f3:d2:4e:8e:8c:65:49:6d:bc:96:ad:1a:d0:ab:c5:0a:ae:f5: d9:2f:c0:64:10:42:60:89:2d:ec:a4:2c:a2:fe:7c:af:ed:0e: ca:fd:8e:67:71:98:3b:e1:91:0f:06:75:5b:1b:c9:01:01:a7: 1c:a7:d5:18:c7:5c:35:3e:fa:04:5a:8a:84:7a:85:4a:13:e9: 85:27:6f:d5:f8:66:7a:05:b3:23:2a:36:59:aa:62:8a:d1:ba: a0:5d:ec:b7:d5:c4:03:d7:d9:e6:97:ec:e9:e6:3b:24:62:10: 29:b7:6d:0f:dd:4b:d1:24:39:5d:b2:ba:63:78:bc:ad:c0:69: 8b:48:1f:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTA1MzEwNzA1MzNaFw0yNTA2MDcwNzA1MzNaMBgxFjAUBgNV BAMTDTY4M2FhYTNkLTIxZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3Z4oNB97s1PzkhIIBoKslNbdfQfONPunKokMCjjfPaHhfhdjUAHkT851nmYuI 5VPwiWMvoxLw9AFWuMDPlv7MMmDeHR4ifTW0YTGzf0xHJCoxbkqYV2Laki2DzUjc ayq9LOJoKstY3gTkvdNS5RoXwFVRazBEZ7Ifp6bb142wa10dBLGKE7lRu9jannpO IYY/PAG5ZZ4zdwdGkNEVTyxbKlkzCfnNjkLecPn91QTiitROXCNOuvjNJuWh4M/D vJoZYe4Pun379+pHjclgnDXlFhh1CqHTMr1vT0Eh0BGwKXlxZsiF/mfOd++3QKPI 0jlkysi/igez4S31n24YR5oZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxo7t7QHZ z4btEDYCRrRI8DOy9jgwHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QzMxLzNDRjUzNjIyRTRBNDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDIt NTRYSFdaWS1QUTdVOGN2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGTAQjZ8TBeRslVEiDTQHare4jiVTwkphE3RYugb62meNThtYDrhv31L cOiYiHdAhlvYsUkbWH1j++UfChpRGMRKNl6tF4VNVBswel69p3uX/jI1tWAAivE0 Fj/p8ViGSSgMSHR5F0MLJpU1PPWnuOs6p1G/V+qBjOtoMV9SGvPSTo6MZUltvJat GtCrxQqu9dkvwGQQQmCJLeykLKL+fK/tDsr9jmdxmDvhkQ8GdVsbyQEBpxyn1RjH XDU++gRaioR6hUoT6YUnb9X4ZnoFsyMqNlmqYorRuqBd7LfVxAPX2eaX7OnmOyRi ECm3bQ/dS9EkOV2yumN4vK3AaYtIH/M= -----END CERTIFICATE-----Generated at Sat May 31 16:35:57 2025 by rpki-client