$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: LqZ8gzn95xhilzMgdnO02H5O+UW1QsCkValRjGz75DQ= Subject key identifier: 08:FA:7E:14:CC:27:B7:3F:4E:F8:B7:8E:57:83:52:DA:AB:EE:5A:11 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 04E0 Signing time: Sat 31 May 2025 00:00:31 +0000 Manifest this update: Sat 31 May 2025 00:00:30 +0000 Manifest next update: Sat 07 Jun 2025 00:00:30 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 4AqQj47mhIK+Ek8WEq1Amh2zj9ES1Ah4ClqAYwguz9A=) 2: 17E03256B62811EF8D234218C4F9AE02.roa (hash: K58ualcAz/8vUOZws7f1WHAGLYLtETkXGgN3zPvTq4E=) 3: 67624B6088B611EFA5F28A68C4F9AE02.roa (hash: qxNt5X+NJ/lDZV/a3w6QhqphN2TIJWTmHt+XWPeL2Fw=) 4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: May 31 00:00:30 2025 GMT Not After : Jun 7 00:00:30 2025 GMT Subject: CN=683a469e-125b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:30:74:45:82:f9:84:e9:39:e1:65:f1:97: be:51:70:00:ca:0f:6d:d8:a8:5c:8d:cc:13:aa:89: a5:70:cd:2a:a2:70:37:1e:40:d9:ed:21:2f:97:ce: 64:31:4f:c3:77:37:e8:c5:e1:42:d0:25:56:83:8d: 22:09:39:fe:f7:38:7c:9f:3a:60:2a:8f:fa:3c:39: 6c:84:9d:61:2b:48:16:24:f1:21:3e:0d:2b:c4:48: 4e:b0:dd:18:fb:4e:86:84:d2:73:76:c1:a4:1f:8c: 89:14:fd:7a:79:ea:50:70:08:ae:73:05:0d:10:2b: c2:0e:5b:df:c3:ae:06:50:af:4a:9d:88:b6:14:f7: 79:85:8d:48:a1:e3:cf:7a:9c:c7:4b:5b:32:bc:e1: 7d:4a:90:b7:be:8b:4a:68:6b:6a:99:8d:90:9b:fa: 27:cf:39:95:81:f5:6f:25:2f:e9:ac:15:f3:d8:48: 6c:81:23:f7:9b:76:53:a6:0c:15:a7:c7:5f:36:e6: 4b:52:af:10:d3:06:a6:ba:0b:80:2f:e3:25:26:e1: 01:65:c2:6d:07:9a:fe:83:cb:9c:9a:bc:d5:32:a6: 50:81:5a:7a:7d:4e:93:c6:36:af:d5:c6:23:96:57: 5a:aa:73:af:5e:f1:ab:48:cc:51:98:f5:d4:df:c1: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:FA:7E:14:CC:27:B7:3F:4E:F8:B7:8E:57:83:52:DA:AB:EE:5A:11 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:88:62:b6:77:3b:7d:24:ed:2c:eb:18:d0:92:a6:4a:69:76: cb:06:7a:f5:cc:4b:6e:48:dc:51:6c:11:13:d5:68:5e:4e:fc: 28:fc:66:62:3b:87:5b:db:3b:b8:8f:83:2f:d0:9a:73:6b:47: 2d:95:a6:e0:9a:da:fb:72:1b:5a:1f:0a:f3:47:c0:d9:c6:c8: 1e:c1:61:fc:4f:70:48:54:e2:dd:39:77:6e:df:a5:df:76:fe: 77:0c:23:55:87:c6:4e:21:72:c6:7e:d4:8d:d2:97:34:62:ec: 30:45:78:6f:e4:92:19:08:c2:16:a1:bb:c8:93:9b:dd:4f:32: f6:33:73:83:88:d4:99:c7:6d:c3:2d:4e:3a:79:14:e1:f2:71: 45:49:45:81:87:91:f2:d7:c5:f4:8d:43:0b:f4:7e:82:72:55: c1:36:1a:2f:df:63:b5:f8:6b:f4:85:69:da:1d:14:89:be:80: 02:d7:22:07:32:9f:88:13:65:ea:66:66:25:0f:e5:23:e0:76: 52:52:d4:85:29:22:9e:d6:5a:7a:d3:65:14:70:23:b6:79:ef: 57:4d:c6:f3:fa:e6:4d:4b:2d:07:b2:5f:8a:67:47:ec:f7:11: 05:df:e1:19:5f:c1:d2:ec:77:76:c5:14:37:68:3b:99:87:36: c1:51:49:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwNTMxMDAwMDMwWhcNMjUwNjA3MDAwMDMwWjAYMRYwFAYD VQQDEw02ODNhNDY5ZS0xMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApBkwdEWC+YTpOeFl8Ze+UXAAyg9t2KhcjcwTqomlcM0qonA3HkDZ7SEvl85k MU/DdzfoxeFC0CVWg40iCTn+9zh8nzpgKo/6PDlshJ1hK0gWJPEhPg0rxEhOsN0Y +06GhNJzdsGkH4yJFP16eepQcAiucwUNECvCDlvfw64GUK9KnYi2FPd5hY1IoePP epzHS1syvOF9SpC3votKaGtqmY2Qm/onzzmVgfVvJS/prBXz2EhsgSP3m3ZTpgwV p8dfNuZLUq8Q0wamuguAL+MlJuEBZcJtB5r+g8ucmrzVMqZQgVp6fU6Txjav1cYj lldaqnOvXvGrSMxRmPXU38GdTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAj6fhTM J7c/Tvi3jleDUtqr7loRMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQiGK2dzt9JO0s6xjQkqZKaXbLBnr1zEtuSNxRbBET1WheTvwo/GZi O4db2zu4j4Mv0Jpza0ctlabgmtr7chtaHwrzR8DZxsgewWH8T3BIVOLdOXdu36Xf dv53DCNVh8ZOIXLGftSN0pc0YuwwRXhv5JIZCMIWobvIk5vdTzL2M3ODiNSZx23D LU46eRTh8nFFSUWBh5Hy18X0jUML9H6CclXBNhov32O1+Gv0hWnaHRSJvoAC1yIH Mp+IE2XqZmYlD+Uj4HZSUtSFKSKe1lp602UUcCO2ee9XTcbz+uZNSy0Hsl+KZ0fs 9xEF3+EZX8HS7Hd2xRQ3aDuZhzbBUUke -----END CERTIFICATE-----Generated at Sat May 31 16:53:37 2025 by rpki-client