$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: Sn5+Fet5oq+B+OGN8OT3DAAqT32RuphAUJhv1w7CRJo= Subject key identifier: 00:55:79:4E:72:E5:CB:2B:D7:EF:7C:25:28:28:CB:1E:27:78:53:2D Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 081F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 0814 Signing time: Fri 30 May 2025 21:04:13 +0000 Manifest this update: Fri 30 May 2025 21:04:13 +0000 Manifest next update: Fri 06 Jun 2025 21:04:13 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: mEMcruFxhdRTiIwi3v3zRuIaQCo1jmrxHw3E49JAXis=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:04:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2079 (0x81f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: May 30 21:04:13 2025 GMT Not After : Jun 6 21:04:13 2025 GMT Subject: CN=683a1d4d-6fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:db:e6:4d:67:aa:1f:61:97:61:d5:f8:fa: 0d:4c:12:8d:38:00:61:34:aa:88:95:9b:8c:18:7b: 31:80:39:51:f5:c5:99:b2:08:6c:f8:03:bf:18:9d: 04:a8:8f:7e:7b:55:23:c9:41:2d:45:2f:59:95:f3: 50:a9:8a:c6:3c:10:a4:d5:49:bf:d4:96:0e:63:ab: 38:cc:a1:67:04:e2:05:cb:2f:ff:c6:84:fb:c2:8a: 26:e4:a1:f0:8d:57:bc:9b:f7:05:c2:2b:a6:5e:f8: 42:35:1c:a5:29:2b:83:8f:da:de:40:04:6f:0c:11: 1e:b8:a3:6f:c7:cf:7e:aa:1d:1e:f3:c2:b2:57:3d: 71:09:16:1d:e5:53:c4:8d:2d:54:87:da:de:cb:56: 63:7f:b8:d8:bb:5a:fe:fe:29:fb:db:84:2f:b0:89: dd:43:e4:be:6b:56:7e:7c:6f:b5:91:25:2c:55:28: 7c:32:cb:32:7b:93:20:96:3b:57:82:0c:85:58:f3: 8f:a9:27:bc:bb:a5:e3:66:b5:f4:3d:79:d2:97:2e: 76:f4:8b:e9:6b:d0:5c:83:af:bf:f5:02:5f:dd:10: f3:d0:ad:c1:6e:a7:ef:79:b9:79:d1:cd:51:7e:f7: e3:ea:da:93:28:3f:ca:5d:6f:2a:45:ca:14:95:c8: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:55:79:4E:72:E5:CB:2B:D7:EF:7C:25:28:28:CB:1E:27:78:53:2D X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:33:1e:13:95:8b:fc:99:6c:16:96:36:85:79:8f:0f:5f:b9: 66:de:06:6c:e4:42:10:c8:f3:a1:62:c9:c8:8c:62:df:1b:4c: d4:2a:80:a2:ae:9c:fc:38:56:57:25:ae:64:bc:28:75:4c:bc: 61:d1:f1:0a:66:3c:5d:0b:4b:6d:4f:ab:8a:48:34:bb:cc:23: 05:da:23:c0:51:52:2f:e7:65:3c:ea:84:a4:6c:9e:2a:49:95: 7a:0c:22:8a:2f:10:1e:d5:f4:be:13:bd:2d:d4:d0:50:53:77: 05:a8:d7:a6:06:15:65:96:1b:1c:2b:16:8a:63:1e:2d:ef:39: 63:aa:b4:da:05:ea:48:51:0d:05:72:16:99:b2:05:70:69:83: c6:58:0f:17:82:69:ea:8b:3a:a7:32:c1:84:83:49:25:82:8b: 70:e8:dc:35:28:54:72:74:9a:20:5c:ae:bf:29:33:04:86:6b: 65:b9:2c:4b:51:23:f0:90:a9:fa:2a:fd:31:7e:bc:39:0a:ab: c9:8a:ed:14:ca:c8:2a:af:9c:6d:ae:7b:bf:b5:02:f6:f1:14: e3:49:fb:83:c1:90:f5:59:51:00:fb:fd:4a:29:28:ed:7a:e7: d4:0f:9d:c1:27:99:d8:f2:f2:88:40:ec:80:55:fa:c9:d2:d4: f8:6d:71:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUwNTMwMjEwNDEzWhcNMjUwNjA2MjEwNDEzWjAYMRYwFAYD VQQDEw02ODNhMWQ0ZC02ZmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFvb5k1nqh9hl2HV+PoNTBKNOABhNKqIlZuMGHsxgDlR9cWZsghs+AO/GJ0E qI9+e1UjyUEtRS9ZlfNQqYrGPBCk1Um/1JYOY6s4zKFnBOIFyy//xoT7woom5KHw jVe8m/cFwiumXvhCNRylKSuDj9reQARvDBEeuKNvx89+qh0e88KyVz1xCRYd5VPE jS1Uh9rey1Zjf7jYu1r+/in724QvsIndQ+S+a1Z+fG+1kSUsVSh8Mssye5MgljtX ggyFWPOPqSe8u6XjZrX0PXnSly529Ivpa9Bcg6+/9QJf3RDz0K3Bbqfvebl50c1R fvfj6tqTKD/KXW8qRcoUlcixiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABVeU5y 5csr1+98JSgoyx4neFMtMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkMx4TlYv8mWwWljaFeY8PX7lm3gZs5EIQyPOhYsnIjGLfG0zUKoCi rpz8OFZXJa5kvCh1TLxh0fEKZjxdC0ttT6uKSDS7zCMF2iPAUVIv52U86oSkbJ4q SZV6DCKKLxAe1fS+E70t1NBQU3cFqNemBhVllhscKxaKYx4t7zljqrTaBepIUQ0F chaZsgVwaYPGWA8XgmnqizqnMsGEg0klgotw6Nw1KFRydJogXK6/KTMEhmtluSxL USPwkKn6Kv0xfrw5CqvJiu0Uysgqr5xtrnu/tQL28RTjSfuDwZD1WVEA+/1KKSjt eufUD53BJ5nY8vKIQOyAVfrJ0tT4bXEz -----END CERTIFICATE-----Generated at Sat May 31 17:33:00 2025 by rpki-client