$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: mEz6KslcVx+2nOIfb/sEu6iepj2bNw+08j5101zZTQQ= Subject key identifier: 8A:16:9A:78:99:AB:A5:B6:1F:B1:4E:FF:AC:6B:F6:FA:A2:84:94:4E Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0E3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 29AE Signing time: Fri 30 May 2025 17:09:30 +0000 Manifest this update: Fri 30 May 2025 17:09:29 +0000 Manifest next update: Fri 06 Jun 2025 17:09:29 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: F4uJbwvNibjcyzpD2iO9p09OfVpwNI9SLGCCsvXdCoQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3644 (0xe3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: May 30 17:09:29 2025 GMT Not After : Jun 6 17:09:29 2025 GMT Subject: CN=6839e64a-0614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:57:e3:a4:0b:67:1e:58:11:ec:1b:99:d1: 45:07:79:5a:51:ab:19:44:70:26:61:f5:fb:0b:b4: 2c:b2:fc:70:58:46:19:55:21:5d:52:f5:8c:f2:03: 1a:d2:01:98:95:7f:e1:8a:30:cc:58:ca:de:56:84: 4f:f6:c4:75:c3:60:3e:43:ca:78:72:70:33:36:00: 61:a3:95:8a:dd:8b:9e:c8:be:a8:6b:7a:a7:be:e8: fe:2c:1d:ca:2c:90:ac:a4:7d:d9:d9:31:1a:0d:a4: 18:01:2f:8a:80:ad:94:38:54:b2:fd:98:87:37:6b: ef:c1:c8:75:a7:bf:c6:e2:d4:3e:3e:93:68:86:d5: fb:78:db:87:67:1c:a9:e4:c3:e5:ce:52:0d:02:7b: 55:56:ee:8e:85:0c:49:da:cc:c7:97:53:73:19:e7: 92:ad:b9:a3:d0:ce:b7:de:d2:12:01:a7:6d:d4:c0: 72:27:0d:b3:69:8f:12:13:cd:4d:d7:59:1b:00:4d: 21:9d:5c:3c:4b:07:fa:dd:6e:a0:37:51:e1:07:4a: a3:ae:c2:28:a9:54:28:38:78:4e:b6:63:7c:68:29: 30:12:ad:ba:cc:81:dc:6e:29:c6:7b:60:62:e6:a2: 86:9d:2c:99:9c:46:1a:82:7c:88:a1:7a:ec:59:c0: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:16:9A:78:99:AB:A5:B6:1F:B1:4E:FF:AC:6B:F6:FA:A2:84:94:4E X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:8f:69:3b:e0:e2:ba:39:13:8b:00:5f:5d:ac:48:4a:4a:99: 65:fa:ff:73:2c:04:90:13:69:60:06:fe:25:c3:0f:89:c2:a5: 3d:1b:00:a3:d6:de:8a:58:ca:5d:3d:64:c1:49:77:cc:f4:6f: 69:5c:e1:0e:de:6d:72:c5:79:bf:40:40:96:16:1e:8c:31:dc: 72:4f:fc:1e:20:37:34:da:d8:e8:f2:58:38:32:95:1d:c7:47: 95:28:5a:d7:4b:d2:a0:f4:ed:ab:2d:24:87:16:a5:10:50:dd: f8:9e:ec:cc:87:07:f8:2a:03:78:84:ce:cf:a0:83:d1:a1:0b: 66:bf:4e:94:b9:4f:18:16:66:01:af:18:91:d8:68:60:6b:db: 86:f3:39:22:16:8b:d1:fc:c0:2d:05:3a:61:98:70:e4:07:0d: cb:1b:f2:24:07:d1:58:f3:95:fa:28:4f:cc:23:d4:ab:25:cb: ba:4e:05:3f:8b:8e:e8:4b:eb:6e:49:99:21:eb:43:36:0c:68: 5b:d6:5c:d7:7b:73:22:56:2b:ae:b2:ec:ad:4e:67:34:41:48: b0:08:97:06:a5:16:b5:7b:58:da:90:e2:be:1f:e1:d4:ca:cd: 9c:4e:c3:ed:42:4f:66:f5:e2:b1:f9:80:3a:9f:e7:0f:01:74: 4d:80:ca:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUwNTMwMTcwOTI5WhcNMjUwNjA2MTcwOTI5WjAYMRYwFAYD VQQDEw02ODM5ZTY0YS0wNjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vlX46QLZx5YEewbmdFFB3laUasZRHAmYfX7C7QssvxwWEYZVSFdUvWM8gMa 0gGYlX/hijDMWMreVoRP9sR1w2A+Q8p4cnAzNgBho5WK3YueyL6oa3qnvuj+LB3K LJCspH3Z2TEaDaQYAS+KgK2UOFSy/ZiHN2vvwch1p7/G4tQ+PpNohtX7eNuHZxyp 5MPlzlINAntVVu6OhQxJ2szHl1NzGeeSrbmj0M633tISAadt1MByJw2zaY8SE81N 11kbAE0hnVw8Swf63W6gN1HhB0qjrsIoqVQoOHhOtmN8aCkwEq26zIHcbinGe2Bi 5qKGnSyZnEYagnyIoXrsWcBjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoWmniZ q6W2H7FO/6xr9vqihJROMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3j2k74OK6OROLAF9drEhKSpll+v9zLASQE2lgBv4lww+JwqU9GwCj 1t6KWMpdPWTBSXfM9G9pXOEO3m1yxXm/QECWFh6MMdxyT/weIDc02tjo8lg4MpUd x0eVKFrXS9Kg9O2rLSSHFqUQUN34nuzMhwf4KgN4hM7PoIPRoQtmv06UuU8YFmYB rxiR2Ghga9uG8zkiFovR/MAtBTphmHDkBw3LG/IkB9FY85X6KE/MI9SrJcu6TgU/ i47oS+tuSZkh60M2DGhb1lzXe3MiViuusuytTmc0QUiwCJcGpRa1e1jakOK+H+HU ys2cTsPtQk9m9eKx+YA6n+cPAXRNgMo1 -----END CERTIFICATE-----Generated at Sat May 31 15:16:23 2025 by rpki-client