$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: N+C6PwH4UfR3HCA9NO8b9Wyz7Ohjp2hAObhVf4+K65o= Subject key identifier: 7C:D3:6F:13:7E:B9:72:12:1C:18:EA:CC:09:86:C1:79:85:87:69:76 Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 17D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 1788 Signing time: Fri 30 May 2025 16:47:17 +0000 Manifest this update: Fri 30 May 2025 16:47:17 +0000 Manifest next update: Fri 06 Jun 2025 16:47:16 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: FKqf9dOCPFnS5So9li2T0qDU+gZ5W9Zj3XAOUx0bcyw=) 2: 3F43565CB4A711EFA3D95012C4F9AE02.roa (hash: OELdD8LbVgXXbJX6bTHTOCI+oCTaXDP2euo2Avh/+Rk=) 3: C4C407A6ABFE11EF8BC3AC17C4F9AE02.roa (hash: EhC7Iw3SYEkIxbf/jSCiFbV/awgcX2mr9+KQdTNr1bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6104 (0x17d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125, serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: May 30 16:47:17 2025 GMT Not After : Jun 6 16:47:16 2025 GMT Subject: CN=6839e115-4ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f7:d9:51:c2:84:98:3a:3f:bf:8d:a4:d9:8c: 12:59:bd:85:5e:06:f5:6e:ea:9c:6e:e1:82:25:01: ff:b5:f5:55:07:00:20:52:da:7e:89:33:75:3a:01: b3:70:44:39:c1:45:25:84:95:05:0a:d7:6c:bc:da: aa:57:a7:86:9a:2c:16:46:26:bd:f5:ca:6b:f0:ea: fb:84:26:a8:d2:07:ef:d6:ea:a7:c2:5f:ac:3f:79: d7:bd:ea:5c:37:72:39:1f:ee:df:2c:3b:0f:cb:ea: 09:a7:a5:4b:3b:01:8a:5a:39:28:5d:a0:75:b0:0f: 57:4f:e5:a2:d7:fe:59:78:a6:71:2b:8a:56:94:06: d2:e4:3c:5c:2c:f9:73:ba:a8:4a:e8:36:57:5b:62: 1c:21:15:73:0e:0f:5f:55:b5:58:d5:9f:93:78:9e: 19:cf:00:1b:78:06:8c:1f:c4:4e:09:d0:5b:60:ad: d3:fa:23:9e:fa:80:eb:36:f9:d0:78:f5:c2:27:a1: be:25:9b:8a:ce:dd:cd:09:fd:de:50:72:85:3b:3f: 03:da:af:16:0a:df:5c:3d:8b:13:1f:0d:be:3c:a5: a4:de:b5:48:78:be:a0:96:00:c0:34:59:a6:92:e8: a0:2c:31:e7:6c:8e:ef:d3:af:56:79:ec:c2:ef:1a: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:6F:13:7E:B9:72:12:1C:18:EA:CC:09:86:C1:79:85:87:69:76 X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:15:96:4f:ad:e1:5a:2d:7d:7b:8b:03:4c:68:dc:f5:b4:ed: eb:6c:6c:1e:ad:72:9f:4f:1e:b7:f3:48:31:c3:0e:d0:0b:25: 07:0c:e9:2d:2c:36:86:14:b1:fc:0a:e7:71:55:55:6b:e9:4f: 51:13:50:c3:8e:bb:0b:de:8e:8f:9e:a8:89:5c:43:cd:ef:96: 66:87:e2:89:00:d4:9d:05:94:1c:dc:da:c4:ae:f6:43:d4:74: 38:24:a6:6d:96:ba:0b:b5:03:77:e0:bb:8c:a8:72:b0:54:15: c8:89:9a:ad:6f:5c:8c:e9:06:f0:5d:57:b6:f9:08:36:89:65: 61:f5:1a:83:53:eb:8f:b1:e4:9d:00:d4:d2:36:df:2a:09:e7: 1f:fb:de:e2:77:03:c3:0b:d2:1a:69:06:99:50:b8:20:4e:ae: b0:4f:6b:f4:ba:bf:50:b6:b5:75:99:f2:3c:2e:6e:57:53:a5: 1b:b2:8e:dc:fd:03:ba:4c:49:91:1c:90:61:86:bc:2a:cc:54: 26:11:3f:09:45:e4:1d:11:80:a8:09:1c:ca:78:b3:0e:41:ab: 99:30:a2:c4:64:78:f2:45:31:31:31:f8:3f:d9:c4:e3:3e:30: 17:6b:6e:b2:9a:b5:05:1a:95:56:17:ec:bf:54:1c:b1:39:bc: 02:91:55:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjUwNTMwMTY0NzE3WhcNMjUwNjA2MTY0NzE2WjAYMRYwFAYD VQQDEw02ODM5ZTExNS00Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvfZUcKEmDo/v42k2YwSWb2FXgb1buqcbuGCJQH/tfVVBwAgUtp+iTN1OgGz cEQ5wUUlhJUFCtdsvNqqV6eGmiwWRia99cpr8Or7hCao0gfv1uqnwl+sP3nXvepc N3I5H+7fLDsPy+oJp6VLOwGKWjkoXaB1sA9XT+Wi1/5ZeKZxK4pWlAbS5DxcLPlz uqhK6DZXW2IcIRVzDg9fVbVY1Z+TeJ4ZzwAbeAaMH8ROCdBbYK3T+iOe+oDrNvnQ ePXCJ6G+JZuKzt3NCf3eUHKFOz8D2q8WCt9cPYsTHw2+PKWk3rVIeL6glgDANFmm kuigLDHnbI7v069WeezC7xqYRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzTbxN+ uXISHBjqzAmGwXmFh2l2MB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkFZZPreFaLX17iwNMaNz1tO3rbGwerXKfTx6380gxww7QCyUHDOkt LDaGFLH8CudxVVVr6U9RE1DDjrsL3o6PnqiJXEPN75Zmh+KJANSdBZQc3NrErvZD 1HQ4JKZtlroLtQN34LuMqHKwVBXIiZqtb1yM6QbwXVe2+Qg2iWVh9RqDU+uPseSd ANTSNt8qCecf+97idwPDC9IaaQaZULggTq6wT2v0ur9QtrV1mfI8Lm5XU6Ubso7c /QO6TEmRHJBhhrwqzFQmET8JReQdEYCoCRzKeLMOQauZMKLEZHjyRTExMfg/2cTj PjAXa26ymrUFGpVWF+y/VByxObwCkVXL -----END CERTIFICATE-----Generated at Sat May 31 17:34:23 2025 by rpki-client