$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: tC2QBNEXrIBbMHWFODwhiyW19AtGxPQ0qTT/5wlsfwU= Subject key identifier: 01:72:A3:BE:8D:38:54:94:71:F2:C0:43:3A:1E:C0:B9:30:06:61:71 Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 34BB Signing time: Sat 31 May 2025 14:27:35 +0000 Manifest this update: Sat 31 May 2025 14:27:34 +0000 Manifest next update: Sat 07 Jun 2025 14:27:34 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: rPmWdJ94vteRdjqBAMlSMrIxXGAAKHb1fv5epQgkxgw=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: mhSDrNTd50cS8wLIGVZl7Ze3yEkifRrR2iMHOlgICfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: May 31 14:27:34 2025 GMT Not After : Jun 7 14:27:34 2025 GMT Subject: CN=683b11d7-3120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:4a:a8:33:36:3f:f7:6d:dc:20:02:c5:ef: 2a:bf:5b:08:06:aa:f2:35:04:56:d0:09:6a:5a:35: 51:59:d1:bf:f0:e5:27:5d:b1:df:88:4a:5c:5b:7f: fb:c8:e3:3b:d0:5d:bd:49:75:2c:70:f4:0f:8e:da: d1:b5:b9:71:fa:53:6c:ef:87:bc:fe:d7:92:78:77: 97:fc:91:2a:74:8d:c9:22:45:c3:b9:49:e3:7d:95: 4c:09:81:11:6c:d2:a5:c3:49:88:19:a6:a6:0c:5f: 28:f2:ad:bc:c4:ac:c5:c0:bc:3c:85:b7:1f:34:39: aa:80:49:d7:94:34:25:4a:58:a7:b5:55:3c:aa:d7: 60:f3:e1:07:cb:06:97:d1:68:06:60:5a:21:96:5e: 24:cd:15:d3:a7:24:24:26:8f:d8:6e:15:e7:b6:0f: 2c:8a:0f:9f:e6:c7:33:0f:df:0c:1f:89:a8:f4:ab: 78:e3:27:ca:03:13:b8:c1:d8:18:fa:03:94:ce:6b: 18:1f:9b:f7:9a:a4:44:15:1a:61:f2:b3:6e:7a:54: e8:3e:8e:59:4a:52:26:be:51:4f:29:d6:f9:2b:2e: 5b:a5:ea:b4:63:e9:cd:a3:6b:8a:2d:56:36:06:d3: 5a:a9:ee:03:05:0f:15:6d:3d:5b:ff:a5:b4:00:74: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:72:A3:BE:8D:38:54:94:71:F2:C0:43:3A:1E:C0:B9:30:06:61:71 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fd:55:c3:7f:07:82:8d:3c:3a:57:1c:92:69:9e:49:97:fc: 58:bf:9c:d1:7e:36:4b:32:c5:84:b5:99:f7:bb:8f:43:1f:cf: 6a:3e:6a:9d:8a:98:20:0b:e7:79:f9:80:b7:55:a6:c2:b2:35: fd:81:2e:16:69:56:bf:5d:96:f8:e1:0c:bd:8c:9f:7b:78:d1: ba:58:f9:da:d2:6d:d1:c1:39:70:6a:dd:46:b6:d9:9b:ef:92: b0:74:bc:43:95:cb:1d:fe:2d:14:5f:25:ab:5c:72:e9:f3:79: df:5b:3f:45:5e:4b:5a:97:5b:52:ec:b8:a8:57:dd:4c:9f:05: 95:f5:65:42:11:e3:51:24:be:2f:d8:b0:27:80:6b:f2:d0:94: 1a:1d:9a:09:d7:27:8d:f2:ca:a5:0b:33:50:1a:32:ad:6a:bb: 13:06:96:81:55:42:89:58:b5:50:70:ad:56:3b:58:14:53:aa: 9e:ab:f6:42:c3:2e:4d:2e:97:64:e6:71:0c:cb:c2:0c:16:d4: f5:c8:eb:bf:1b:1a:7f:d9:58:7d:00:b7:5e:33:19:4b:7a:3f: 7e:10:af:35:e5:b5:6d:d7:54:94:2d:fb:6b:bd:45:c5:a4:b7: ca:31:32:e3:89:15:b6:f6:83:62:cc:92:e2:21:d4:8c:a1:c6: d5:a6:9c:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUwNTMxMTQyNzM0WhcNMjUwNjA3MTQyNzM0WjAYMRYwFAYD VQQDEw02ODNiMTFkNy0zMTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9FKqDM2P/dt3CACxe8qv1sIBqryNQRW0AlqWjVRWdG/8OUnXbHfiEpcW3/7 yOM70F29SXUscPQPjtrRtblx+lNs74e8/teSeHeX/JEqdI3JIkXDuUnjfZVMCYER bNKlw0mIGaamDF8o8q28xKzFwLw8hbcfNDmqgEnXlDQlSlintVU8qtdg8+EHywaX 0WgGYFohll4kzRXTpyQkJo/YbhXntg8sig+f5sczD98MH4mo9Kt44yfKAxO4wdgY +gOUzmsYH5v3mqREFRph8rNuelToPo5ZSlImvlFPKdb5Ky5bpeq0Y+nNo2uKLVY2 BtNaqe4DBQ8VbT1b/6W0AHS/NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFyo76N OFSUcfLAQzoewLkwBmFxMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK/VXDfweCjTw6VxySaZ5Jl/xYv5zRfjZLMsWEtZn3u49DH89qPmqd ipggC+d5+YC3VabCsjX9gS4WaVa/XZb44Qy9jJ97eNG6WPna0m3RwTlwat1Gttmb 75KwdLxDlcsd/i0UXyWrXHLp83nfWz9FXktal1tS7LioV91MnwWV9WVCEeNRJL4v 2LAngGvy0JQaHZoJ1yeN8sqlCzNQGjKtarsTBpaBVUKJWLVQcK1WO1gUU6qeq/ZC wy5NLpdk5nEMy8IMFtT1yOu/Gxp/2Vh9ALdeMxlLej9+EK815bVt11SULftrvUXF pLfKMTLjiRW29oNizJLiIdSMocbVppwV -----END CERTIFICATE-----Generated at Sat May 31 16:44:47 2025 by rpki-client