$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: f8QpOBo/KuvbkUQGUnkgOh45f9f/64rlHvGMBPsa9x8= Subject key identifier: F9:DD:47:EB:A7:08:83:9D:00:BE:0B:E4:9C:3F:8D:42:7F:66:BC:F5 Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: C0 Signing time: Sat 31 May 2025 05:25:12 +0000 Manifest this update: Sat 31 May 2025 05:25:11 +0000 Manifest next update: Sat 07 Jun 2025 05:25:11 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: fLINnODnayjb/QJnPMmMbg6QMB5UfhruLco07utj7T4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: May 31 05:25:11 2025 GMT Not After : Jun 7 05:25:11 2025 GMT Subject: CN=683a92b7-189b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:59:55:43:f5:df:3b:58:dc:d8:89:20:ce: 91:f4:d4:8b:f1:61:3a:bb:77:dd:e7:88:aa:4f:0d: d4:76:85:d9:3e:ed:f1:bf:e0:f5:c3:c1:9f:00:55: b6:5c:59:b4:c3:b1:f2:7d:71:5a:63:3f:14:0e:ce: 45:d4:93:78:8e:d3:3f:1b:58:1d:ce:10:88:0a:8d: 13:c9:4c:1a:d0:29:fd:1a:a1:33:c9:f4:eb:c2:2c: 2e:4b:1b:d2:b9:14:d1:00:c6:f2:90:da:99:a6:9a: 74:ef:63:35:41:de:a2:0b:42:fc:db:86:69:e4:ea: f7:b9:ee:1e:c5:4a:08:f6:dd:ec:b5:5a:2c:8e:fd: a2:5b:82:45:dd:13:26:0e:57:19:75:c4:9d:e4:64: be:4d:c3:35:a6:60:04:c8:1c:9f:3c:23:b8:5a:93: ac:65:69:a2:e0:26:c7:ab:a5:b7:a3:c6:d3:9d:37: 28:7d:f0:1b:e3:d0:bd:1c:39:be:07:d5:d8:22:13: 0f:ec:b6:19:ff:b4:18:f9:92:fb:84:1e:3e:44:6b: be:3b:fc:03:7a:77:23:00:28:3f:84:d9:77:88:a5: ab:94:09:6c:f3:8d:68:02:e3:70:2e:d7:ad:ae:36: 59:ae:b6:37:0d:0f:f7:70:f4:3f:72:aa:8c:1d:2a: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DD:47:EB:A7:08:83:9D:00:BE:0B:E4:9C:3F:8D:42:7F:66:BC:F5 X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f9:1c:14:e3:f8:79:5c:23:f1:10:ef:4f:8e:b4:aa:32:89: 8b:16:79:1d:29:61:13:a4:51:fc:d0:cb:ec:a5:d3:9d:65:6f: 1d:e9:21:cb:73:4f:bc:17:8c:77:69:2a:81:04:bc:26:1f:c7: 84:7e:cd:69:62:e9:33:e3:ee:7b:d1:3f:20:2a:5a:04:2f:34: f9:1d:32:38:fb:75:04:f7:34:e9:7e:70:a4:1a:92:1f:08:12: 32:11:d1:6d:d6:30:95:70:1e:71:8d:9f:e2:12:6f:20:99:4d: 66:2b:1a:01:95:cc:72:76:37:e7:d9:1f:c6:c8:07:d2:e2:f4: 4a:61:93:7a:9c:52:81:c7:c7:c4:a9:d8:72:9c:77:79:b1:68: bc:ae:76:c5:60:c3:02:75:9d:06:d7:95:71:3b:00:97:fd:43: fe:bf:78:c9:f0:de:bb:b3:14:1d:47:cf:9c:77:a7:4c:5d:65: 40:29:44:ee:e7:a6:ee:db:4d:b6:d2:55:90:72:80:fa:59:9a: e6:59:de:cd:83:17:fc:ff:4f:20:19:d2:a1:75:01:dd:18:b0: 46:27:44:1b:31:de:fc:cc:d4:13:90:3f:b1:81:c8:5a:54:33: 35:aa:2f:cc:06:62:91:78:01:04:cf:1a:24:14:1b:15:ee:bb: d6:53:51:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUwNTMxMDUyNTExWhcNMjUwNjA3MDUyNTExWjAYMRYwFAYD VQQDEw02ODNhOTJiNy0xODliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3DlZVUP13ztY3NiJIM6R9NSL8WE6u3fd54iqTw3UdoXZPu3xv+D1w8GfAFW2 XFm0w7HyfXFaYz8UDs5F1JN4jtM/G1gdzhCICo0TyUwa0Cn9GqEzyfTrwiwuSxvS uRTRAMbykNqZppp072M1Qd6iC0L824Zp5Or3ue4exUoI9t3stVosjv2iW4JF3RMm DlcZdcSd5GS+TcM1pmAEyByfPCO4WpOsZWmi4CbHq6W3o8bTnTcoffAb49C9HDm+ B9XYIhMP7LYZ/7QY+ZL7hB4+RGu+O/wDencjACg/hNl3iKWrlAls841oAuNwLtet rjZZrrY3DQ/3cPQ/cqqMHSq9dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPndR+un CIOdAL4L5Jw/jUJ/Zrz1MB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd+RwU4/h5XCPxEO9PjrSqMomLFnkdKWETpFH80MvspdOdZW8d6SHL c0+8F4x3aSqBBLwmH8eEfs1pYukz4+570T8gKloELzT5HTI4+3UE9zTpfnCkGpIf CBIyEdFt1jCVcB5xjZ/iEm8gmU1mKxoBlcxydjfn2R/GyAfS4vRKYZN6nFKBx8fE qdhynHd5sWi8rnbFYMMCdZ0G15VxOwCX/UP+v3jJ8N67sxQdR8+cd6dMXWVAKUTu 56bu20220lWQcoD6WZrmWd7Ngxf8/08gGdKhdQHdGLBGJ0QbMd78zNQTkD+xgcha VDM1qi/MBmKReAEEzxokFBsV7rvWU1GP -----END CERTIFICATE-----Generated at Sat May 31 17:34:28 2025 by rpki-client