$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: Drxgq7z5lZQ0aA0hqp0nElSxwr/YK3Ri6V76aUd4ejU= Subject key identifier: 44:DE:58:53:95:3C:39:7E:3B:8A:83:B3:F8:C9:34:C0:BB:93:FC:A4 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 04CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 04C6 Signing time: Sat 31 May 2025 00:01:08 +0000 Manifest this update: Sat 31 May 2025 00:01:08 +0000 Manifest next update: Sat 07 Jun 2025 00:01:08 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: WA/dGC4+mFenRQfc7OfxWIyT2EJ0LjEHKlnbx4tR5NE=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: May 31 00:01:08 2025 GMT Not After : Jun 7 00:01:08 2025 GMT Subject: CN=683a46c4-112e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:68:6c:44:8d:0e:26:13:f6:02:40:f7:bf:4d: b3:af:aa:d7:74:e8:fd:ca:ca:47:9e:11:5d:8e:e0: 12:c5:4d:c5:a1:de:4f:a3:14:9f:f4:e4:de:80:e8: b2:94:7b:8b:24:f5:f1:22:b6:f7:44:06:15:37:a3: 6d:2f:1e:02:bc:73:21:78:02:85:50:31:08:8b:eb: 91:c7:b3:f0:34:b2:64:77:ab:bd:7c:8b:bf:0e:08: f6:d0:f3:df:77:4f:e2:56:c1:ec:b6:75:ae:4b:61: 16:94:ea:d8:23:6f:a3:70:83:45:8b:a7:55:7f:3b: 06:22:4d:f1:11:64:db:9a:d0:80:a2:f2:98:06:33: 38:f0:50:b4:9a:66:66:d2:63:3a:a4:3b:a5:8e:27: 70:94:27:1a:cd:c9:bf:a4:da:59:85:91:84:71:41: c4:aa:22:fa:c7:5d:9d:55:20:f3:b2:0b:42:b9:86: ca:6e:85:98:48:97:b8:df:ae:ad:a8:ae:5d:05:70: f3:2a:23:dc:20:a1:50:79:61:71:12:1f:ad:04:eb: f1:b6:4d:e8:6c:4d:b8:7a:90:c9:f2:dd:1a:28:9a: 27:fd:77:6b:3c:fc:a0:66:18:9a:8a:55:c3:e3:93: 2a:57:cf:84:1c:a8:68:b9:d6:93:ec:45:df:52:4e: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DE:58:53:95:3C:39:7E:3B:8A:83:B3:F8:C9:34:C0:BB:93:FC:A4 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c0:4d:7e:11:4c:c5:1f:be:bd:5b:b4:fe:e4:65:26:ee:b3: 45:06:e6:db:2c:c2:80:af:f6:f8:01:4b:26:9f:80:0a:00:ec: f1:fd:20:81:3f:d9:25:ce:2e:b7:87:7f:bd:fc:a5:7e:b4:6b: 31:86:66:4b:c0:70:f0:9e:07:44:73:e4:ce:83:d3:cc:38:af: 8e:28:ed:4b:3b:02:ec:a5:59:48:96:d8:71:92:3a:96:c2:0b: bc:61:c8:c8:07:13:52:5c:1b:4e:3c:4d:db:99:1f:ff:33:cd: e2:d1:9a:87:de:78:ea:2f:91:9d:0d:3b:e6:b6:47:9a:ff:4a: 0f:bf:af:e9:2f:38:ee:fe:0e:8b:8a:46:92:dc:43:82:0a:6d: b5:d1:5e:32:79:69:92:2c:4e:dc:50:6e:e4:f1:e1:4d:74:d8: 7b:69:70:fc:e9:12:d4:f0:b6:98:10:87:42:e0:e7:f2:aa:1e: 0c:c7:b9:ee:a2:af:b3:c4:1e:5d:17:f3:f5:6b:20:2d:1e:bc: 79:7b:71:c4:f0:64:09:45:83:6e:29:0d:d6:68:e6:aa:c6:f1: ac:53:e7:07:0b:25:0c:d2:98:8c:99:3e:5a:fc:a1:3b:c0:62: ed:2c:0a:0e:05:b7:52:d4:c6:0e:8e:20:be:14:c4:49:ff:c3: 69:5c:fa:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUwNTMxMDAwMTA4WhcNMjUwNjA3MDAwMTA4WjAYMRYwFAYD VQQDEw02ODNhNDZjNC0xMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWhsRI0OJhP2AkD3v02zr6rXdOj9yspHnhFdjuASxU3Fod5PoxSf9OTegOiy lHuLJPXxIrb3RAYVN6NtLx4CvHMheAKFUDEIi+uRx7PwNLJkd6u9fIu/Dgj20PPf d0/iVsHstnWuS2EWlOrYI2+jcINFi6dVfzsGIk3xEWTbmtCAovKYBjM48FC0mmZm 0mM6pDuljidwlCcazcm/pNpZhZGEcUHEqiL6x12dVSDzsgtCuYbKboWYSJe4366t qK5dBXDzKiPcIKFQeWFxEh+tBOvxtk3obE24epDJ8t0aKJon/XdrPPygZhiailXD 45MqV8+EHKhoudaT7EXfUk6WLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETeWFOV PDl+O4qDs/jJNMC7k/ykMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAwE1+EUzFH769W7T+5GUm7rNFBubbLMKAr/b4AUsmn4AKAOzx/SCB P9klzi63h3+9/KV+tGsxhmZLwHDwngdEc+TOg9PMOK+OKO1LOwLspVlIlthxkjqW wgu8YcjIBxNSXBtOPE3bmR//M83i0ZqH3njqL5GdDTvmtkea/0oPv6/pLzju/g6L ikaS3EOCCm210V4yeWmSLE7cUG7k8eFNdNh7aXD86RLU8LaYEIdC4Ofyqh4Mx7nu oq+zxB5dF/P1ayAtHrx5e3HE8GQJRYNuKQ3WaOaqxvGsU+cHCyUM0piMmT5a/KE7 wGLtLAoOBbdS1MYOjiC+FMRJ/8NpXPpM -----END CERTIFICATE-----Generated at Sat May 31 17:37:51 2025 by rpki-client