$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft File: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft (raw, json) Hash identifier: OfBu2QWYmw4Gf/dIDBPHAkpD0eo4d5GUTJ9yIKFQU14= Subject key identifier: EA:9B:65:1C:46:EA:D2:25:5B:C0:5C:78:B1:A9:7B:13:10:D8:74:EF Authority key identifier: E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C Certificate issuer: /CN=A91C3ABA/serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Certificate serial: 04A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft Manifest number: 04A3 Signing time: Tue 03 Jun 2025 00:10:48 +0000 Manifest this update: Tue 03 Jun 2025 00:10:48 +0000 Manifest next update: Tue 10 Jun 2025 00:10:48 +0000 Files and hashes: 1: 5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl (hash: DCqITL5kgzwVHfjzJykBP9u2YenEiMGy46BZ8FO80Kg=) 2: 4B9F1AA6354F11EC8531C34DC4F9AE02.roa (hash: +rLDpG6E4AF0Dcxf7o8iMswR6KeKAMAGKwbYTVWTRnM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:10:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1192 (0x4a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ABA, serialNumber=E5993155C4443A2E56C0DE2333A44B56CAD4919C Validity Not Before: Jun 3 00:10:48 2025 GMT Not After : Jun 10 00:10:48 2025 GMT Subject: CN=683e3d88-1aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fb:e2:f4:65:3e:4b:6a:6a:0f:7a:d2:61:63: ba:27:17:bd:46:1f:bf:f4:08:15:d2:23:1c:58:3f: 9c:51:88:27:64:73:8c:36:49:36:18:77:41:34:6d: 86:f2:f4:26:d6:d4:41:da:85:f5:06:00:2b:65:b7: 34:01:f5:ba:39:7e:fe:f1:da:d5:e7:52:43:ff:51: 57:1c:1a:1a:8d:3c:7c:7e:3f:16:44:96:8b:67:a0: a8:07:4a:dc:30:2d:4b:c2:84:ed:79:49:63:b1:bd: b3:f7:80:52:14:38:a8:9d:5b:1c:0b:ca:4e:61:22: d6:20:55:3c:c0:49:53:d1:d6:c7:ef:89:09:4d:b3: 0b:cd:4c:ed:40:02:88:72:19:cd:71:fb:b6:86:ba: 24:ac:07:96:ac:4e:bd:38:22:a6:28:db:98:c3:e1: 09:c1:6b:6a:eb:4b:ce:e4:9a:09:5a:d9:56:68:92: 25:93:d7:38:ae:c7:86:d9:78:f1:dd:f5:f3:f8:03: 76:3a:7f:93:33:5d:5a:a7:a4:1a:66:58:0e:65:1e: 32:7b:41:dd:6b:41:00:04:7f:4d:f4:ba:4e:b5:ed: 3c:a9:0b:63:b3:f9:29:02:62:55:ca:8a:b1:73:d6: 6b:d7:ff:8d:85:71:a0:77:3a:f6:17:24:08:59:d1: 47:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:65:1C:46:EA:D2:25:5B:C0:5C:78:B1:A9:7B:13:10:D8:74:EF X509v3 Authority Key Identifier: keyid:E5:99:31:55:C4:44:3A:2E:56:C0:DE:23:33:A4:4B:56:CA:D4:91:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZkxVcREOi5WwN4jM6RLVsrUkZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ABA/985F0922354B11ECB62DBD48C4F9AE02/5ZkxVcREOi5WwN4jM6RLVsrUkZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8a:78:45:13:59:79:88:8a:0b:9c:be:37:05:07:a8:d1:a3: d2:89:ba:43:3f:43:ed:d8:74:d4:78:8b:96:07:7e:b1:54:2d: e6:c8:0f:c2:f9:de:d0:b8:c5:0c:fa:b9:69:a5:21:e5:38:30: 49:29:33:ff:57:04:39:07:fb:2d:8a:26:78:3a:4b:12:0c:10: 2d:4a:9a:b7:83:f8:79:39:5c:e4:7a:a1:7a:24:5e:2b:6d:aa: 97:5e:84:5c:b7:9d:05:14:80:d4:b5:3a:88:be:59:59:81:a4: c1:11:d2:a4:60:8c:38:c4:e5:ef:c9:a0:88:2b:c2:f4:73:75: e4:10:58:89:46:4e:d1:8f:1b:60:0a:cc:3e:2a:db:3b:b4:1f: d0:9f:4a:dd:b1:d3:04:00:f6:59:0b:a4:1d:cb:c3:f9:db:14: be:d9:9b:fe:46:a0:1e:40:8e:2e:55:7c:d1:e4:c9:74:f8:6f: c7:e6:bf:ce:6e:ee:cd:4c:03:9f:6d:cc:5a:26:e9:f3:04:b0: f2:f4:87:fa:f2:61:6c:23:e9:cb:1b:c7:18:f3:5d:77:49:11: 11:74:93:2b:7d:a0:66:39:54:e7:5d:bd:ee:7d:0a:9a:12:53: e0:fd:63:a8:d1:86:16:7b:55:16:4e:d7:56:56:4b:fa:a5:02: 97:ef:3d:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNBQkExMTAvBgNVBAUTKEU1OTkzMTU1QzQ0NDNBMkU1NkMwREUyMzMzQTQ0QjU2 Q0FENDkxOUMwHhcNMjUwNjAzMDAxMDQ4WhcNMjUwNjEwMDAxMDQ4WjAYMRYwFAYD VQQDEw02ODNlM2Q4OC0xYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwfvi9GU+S2pqD3rSYWO6Jxe9Rh+/9AgV0iMcWD+cUYgnZHOMNkk2GHdBNG2G 8vQm1tRB2oX1BgArZbc0AfW6OX7+8drV51JD/1FXHBoajTx8fj8WRJaLZ6CoB0rc MC1LwoTteUljsb2z94BSFDionVscC8pOYSLWIFU8wElT0dbH74kJTbMLzUztQAKI chnNcfu2hrokrAeWrE69OCKmKNuYw+EJwWtq60vO5JoJWtlWaJIlk9c4rseG2Xjx 3fXz+AN2On+TM11ap6QaZlgOZR4ye0Hda0EABH9N9LpOte08qQtjs/kpAmJVyoqx c9Zr1/+NhXGgdzr2FyQIWdFHKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqbZRxG 6tIlW8BceLGpexMQ2HTvMB8GA1UdIwQYMBaAFOWZMVXERDouVsDeIzOkS1bK1JGc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0FCQS85ODVGMDkyMjM1 NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9pNVd3TjRqTTZSTFZzclVr WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaa3hWY1JFT2k1V3dONGpNNlJMVnNyVWtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0FCQS85ODVGMDkyMjM1NEIxMUVDQjYyREJENDhDNEY5QUUwMi81Wmt4VmNSRU9p NVd3TjRqTTZSTFZzclVrWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArinhFE1l5iIoLnL43BQeo0aPSibpDP0Pt2HTUeIuWB36xVC3myA/C +d7QuMUM+rlppSHlODBJKTP/VwQ5B/stiiZ4OksSDBAtSpq3g/h5OVzkeqF6JF4r baqXXoRct50FFIDUtTqIvllZgaTBEdKkYIw4xOXvyaCIK8L0c3XkEFiJRk7Rjxtg Csw+Kts7tB/Qn0rdsdMEAPZZC6Qdy8P52xS+2Zv+RqAeQI4uVXzR5Ml0+G/H5r/O bu7NTAOfbcxaJunzBLDy9If68mFsI+nLG8cY8113SRERdJMrfaBmOVTnXb3ufQqa ElPg/WOo0YYWe1UWTtdWVkv6pQKX7z0U -----END CERTIFICATE-----Generated at Wed Jun 4 00:06:49 2025 by rpki-client