$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: ZdG6WvcR0ygxC7s0mTsAnHxlNCIuS5Wj7D9or2ZILns= Subject key identifier: F3:21:CF:20:13:0E:71:19:44:2C:A7:BC:6C:06:FD:93:B2:C1:E6:A0 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 08BE Signing time: Fri 30 May 2025 20:42:24 +0000 Manifest this update: Fri 30 May 2025 20:42:23 +0000 Manifest next update: Fri 06 Jun 2025 20:42:23 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: 6Tk7pQUvkLgoAjxOnZ8Mpj0d0z3yzcQrNc3EINZYToY=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: May 30 20:42:23 2025 GMT Not After : Jun 6 20:42:23 2025 GMT Subject: CN=683a182f-be82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:70:fb:c2:ff:b1:52:c0:38:a8:70:7d:86:e9: 49:03:1b:5f:08:cd:9c:6e:ca:82:e4:de:2d:59:62: 68:54:eb:a4:e5:59:b2:1b:8f:a5:8f:2b:fb:da:44: 6b:e6:58:10:89:62:0e:36:36:9c:c0:12:89:8c:20: 32:e0:e3:72:13:d4:5e:00:50:91:0e:a4:85:d5:34: 76:e3:9b:6b:f0:34:ac:32:3e:cc:1f:82:50:6d:10: ab:85:36:b7:0b:9a:87:ac:91:cc:74:0a:85:40:44: 5d:48:b6:b4:d8:23:18:c1:61:01:f5:ca:83:84:55: 7c:77:85:96:00:d6:34:a2:09:e6:8f:02:bd:23:d3: 59:84:e3:11:00:7e:2f:0a:35:87:46:e5:46:35:ed: 78:96:c2:6b:65:6d:52:b1:36:30:b9:d3:52:dc:1c: d3:e5:6d:c2:3c:66:4d:c2:c3:73:c3:a8:9d:3c:89: 7f:c8:41:87:15:8d:1a:6e:1d:78:e8:1b:76:46:14: f5:6a:b3:b5:d9:57:3c:ab:24:f2:d4:b5:a3:82:ec: a1:d5:38:a7:42:cc:cb:da:8e:db:9c:5d:3a:96:97: 9d:3e:a5:5c:59:27:f8:94:51:6d:ac:24:58:a9:c9: ed:90:9d:e0:8b:c1:a3:21:71:1d:8e:2f:6d:f5:66: 32:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:CF:20:13:0E:71:19:44:2C:A7:BC:6C:06:FD:93:B2:C1:E6:A0 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ba:0e:7a:c5:43:dc:97:ef:99:a1:86:26:3e:cb:e5:9f:cd: 03:eb:62:8f:73:26:3b:19:39:0d:69:df:b7:4d:60:b4:63:07: 01:7f:19:ff:9f:56:2b:fc:7e:0d:21:cb:e0:ac:a7:ea:ca:cb: 33:be:b8:95:aa:ce:9f:56:89:74:d1:6f:d5:8b:75:fa:30:fe: 77:d7:3a:7c:d8:22:6b:43:9b:b2:a9:54:1f:68:e1:40:01:f8: 5c:0f:1d:65:85:19:df:c2:97:05:a8:9e:98:a4:9e:ac:53:04: 88:ea:65:ee:b4:a2:50:eb:d0:5a:f6:08:7e:c1:7d:78:ee:72: b1:24:da:0a:33:a1:ca:24:39:30:80:52:bf:23:2a:36:b7:77: 58:11:4c:6a:7b:4e:8c:c3:8f:30:10:ee:f7:13:f1:94:fc:ac: e6:6b:9c:a9:39:4e:26:9f:d6:b4:c7:d6:c0:b2:87:44:38:c1: 33:aa:93:27:27:6a:4a:be:45:5c:d1:93:46:36:2a:66:bc:75: 1d:2b:37:97:f2:ea:02:2a:5c:7d:07:8b:ab:bd:da:2f:78:53: 14:a9:82:75:60:67:ef:7e:74:0c:d7:18:0e:5e:fe:a9:47:26: da:46:1b:55:02:4f:16:64:2a:80:7e:6f:0d:df:4b:da:15:1e: 85:54:2a:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjUwNTMwMjA0MjIzWhcNMjUwNjA2MjA0MjIzWjAYMRYwFAYD VQQDEw02ODNhMTgyZi1iZTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXD7wv+xUsA4qHB9hulJAxtfCM2cbsqC5N4tWWJoVOuk5VmyG4+ljyv72kRr 5lgQiWIONjacwBKJjCAy4ONyE9ReAFCRDqSF1TR245tr8DSsMj7MH4JQbRCrhTa3 C5qHrJHMdAqFQERdSLa02CMYwWEB9cqDhFV8d4WWANY0ognmjwK9I9NZhOMRAH4v CjWHRuVGNe14lsJrZW1SsTYwudNS3BzT5W3CPGZNwsNzw6idPIl/yEGHFY0abh14 6Bt2RhT1arO12Vc8qyTy1LWjguyh1TinQszL2o7bnF06lpedPqVcWSf4lFFtrCRY qcntkJ3gi8GjIXEdji9t9WYyFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMhzyAT DnEZRCynvGwG/ZOyweagMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApug56xUPcl++ZoYYmPsvln80D62KPcyY7GTkNad+3TWC0YwcBfxn/ n1Yr/H4NIcvgrKfqysszvriVqs6fVol00W/Vi3X6MP531zp82CJrQ5uyqVQfaOFA AfhcDx1lhRnfwpcFqJ6YpJ6sUwSI6mXutKJQ69Ba9gh+wX147nKxJNoKM6HKJDkw gFK/Iyo2t3dYEUxqe06Mw48wEO73E/GU/Kzma5ypOU4mn9a0x9bAsodEOMEzqpMn J2pKvkVc0ZNGNipmvHUdKzeX8uoCKlx9B4urvdoveFMUqYJ1YGfvfnQM1xgOXv6p RybaRhtVAk8WZCqAfm8N30vaFR6FVCrl -----END CERTIFICATE-----Generated at Sat May 31 17:34:22 2025 by rpki-client