$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: zU7cs/W/ht5bVnaupfr4nck7XC4xHh+rserE5rJmCSw= Subject key identifier: C0:E6:18:E1:0D:D6:67:92:85:15:5F:47:CD:FC:2D:DB:3E:D9:19:62 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 0164 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 015F Signing time: Sat 31 May 2025 03:44:03 +0000 Manifest this update: Sat 31 May 2025 03:44:02 +0000 Manifest next update: Sat 07 Jun 2025 03:44:02 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: 2DHVWgr89to+kxB24w5ljlOWHYx9191wLH0GcvNgKcA=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 54qHC7QVMBwoC0O3cMcEci4Yy+Xl8hxRZfIa8v1MHj8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:44:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 356 (0x164) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: May 31 03:44:02 2025 GMT Not After : Jun 7 03:44:02 2025 GMT Subject: CN=683a7b02-06ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:ad:57:4a:5c:03:09:43:bc:ac:64:73:31: fd:a5:57:38:72:e8:f0:69:9e:a9:d6:db:13:cf:80: 88:8d:19:ae:2e:b7:21:3b:21:45:f2:7f:1e:5f:05: 20:bd:46:6a:49:5b:19:c0:fa:2e:6f:32:c8:53:c4: 06:0d:8e:8b:5c:85:3d:fc:ab:6f:c7:51:b2:43:5a: ed:97:c7:33:c1:b0:ea:bd:e0:63:f9:8c:5d:ad:57: 5a:88:38:d2:d7:b7:68:93:a3:73:0c:92:54:18:46: fb:90:82:67:af:69:30:ed:cf:31:b5:86:04:fa:8b: f1:50:39:6e:e0:7a:e2:f8:45:bb:8b:7b:03:61:e2: 72:5a:c5:08:f6:14:31:51:9e:76:80:27:d4:92:48: 4f:ec:95:dc:3d:6b:34:67:49:d9:01:70:5c:0a:93: ec:ec:94:33:cd:fe:9f:39:95:09:a8:64:8a:7d:24: 03:24:2d:a5:4d:5c:59:48:16:92:f3:0e:9e:94:12: bc:01:23:ec:1b:7e:da:e3:c3:43:a5:63:b5:5e:69: 83:6f:0e:55:5e:8e:6b:27:7e:ef:e8:23:93:f7:c9: 2d:2d:13:3e:df:da:55:fc:77:b4:50:49:29:05:95: 86:83:8f:91:b9:40:50:19:67:78:76:c7:45:bf:f2: 41:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E6:18:E1:0D:D6:67:92:85:15:5F:47:CD:FC:2D:DB:3E:D9:19:62 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:ba:a9:bb:17:8d:e3:2a:97:6b:1b:67:e4:79:bd:3b:4e:b4: 60:53:86:5e:6d:25:b1:f8:54:9c:ea:9e:79:b7:c8:bb:33:97: c5:ae:cb:85:f6:48:b8:2b:f4:87:0b:4b:ee:42:96:dc:2c:49: 57:6b:fc:64:68:de:a0:86:35:bc:77:c2:15:b3:12:2f:8e:b5: 30:28:7d:7f:bc:a9:0d:91:e8:d3:1a:2d:e9:4d:59:7f:23:d9: fb:fa:a2:6d:b0:77:b2:ae:ca:50:f9:1e:68:c9:d3:e3:3d:44: 7d:db:34:7e:c2:d4:d9:8d:5f:94:44:30:37:00:2a:8a:ac:0e: 0a:13:b7:ad:e5:52:02:94:5a:88:7c:8c:5d:99:4f:b9:a8:3a: 22:77:88:b0:06:cb:80:e0:af:0f:9e:c5:e2:29:3f:a1:36:fb: 59:89:ee:ca:9d:75:25:45:ed:55:52:98:e4:23:1f:b5:05:19: 1f:fe:0e:c8:f0:27:a9:35:ce:56:25:98:d0:93:93:5c:b9:d4: bb:35:02:f4:66:36:56:10:8b:0f:32:f0:09:2a:8a:7f:0b:11: 1f:63:fe:d9:7e:53:45:7f:35:78:b4:7f:cd:2f:e8:9c:eb:80: 8f:17:23:2b:52:27:55:ec:b9:df:4c:ce:58:cf:1e:6d:d8:24: 93:9c:b6:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUwNTMxMDM0NDAyWhcNMjUwNjA3MDM0NDAyWjAYMRYwFAYD VQQDEw02ODNhN2IwMi0wNmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyputV0pcAwlDvKxkczH9pVc4cujwaZ6p1tsTz4CIjRmuLrchOyFF8n8eXwUg vUZqSVsZwPoubzLIU8QGDY6LXIU9/Ktvx1GyQ1rtl8czwbDqveBj+YxdrVdaiDjS 17dok6NzDJJUGEb7kIJnr2kw7c8xtYYE+ovxUDlu4Hri+EW7i3sDYeJyWsUI9hQx UZ52gCfUkkhP7JXcPWs0Z0nZAXBcCpPs7JQzzf6fOZUJqGSKfSQDJC2lTVxZSBaS 8w6elBK8ASPsG37a48NDpWO1XmmDbw5VXo5rJ37v6COT98ktLRM+39pV/He0UEkp BZWGg4+RuUBQGWd4dsdFv/JBSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDmGOEN 1meShRVfR838Lds+2RliMB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+uqm7F43jKpdrG2fkeb07TrRgU4ZebSWx+FSc6p55t8i7M5fFrsuF 9ki4K/SHC0vuQpbcLElXa/xkaN6ghjW8d8IVsxIvjrUwKH1/vKkNkejTGi3pTVl/ I9n7+qJtsHeyrspQ+R5oydPjPUR92zR+wtTZjV+URDA3ACqKrA4KE7et5VIClFqI fIxdmU+5qDoid4iwBsuA4K8PnsXiKT+hNvtZie7KnXUlRe1VUpjkIx+1BRkf/g7I 8CepNc5WJZjQk5NcudS7NQL0ZjZWEIsPMvAJKop/CxEfY/7ZflNFfzV4tH/NL+ic 64CPFyMrUidV7LnfTM5Yzx5t2CSTnLal -----END CERTIFICATE-----Generated at Sat May 31 16:50:39 2025 by rpki-client