$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json) Hash identifier: eFt6x75ue4ExKqLBSVC5C9NTIdS/rzQChZXQGxK51hU= Subject key identifier: 58:2F:EF:66:C2:D2:F7:A3:F5:99:02:84:90:A0:7F:41:41:CD:3C:55 Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Certificate serial: 0563 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft Manifest number: 0558 Signing time: Fri 30 May 2025 23:37:18 +0000 Manifest this update: Fri 30 May 2025 23:37:17 +0000 Manifest next update: Fri 06 Jun 2025 23:37:17 +0000 Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: XF3Vy9NRMg8+xKOysgM33+rCFNPw2ixN1umhqwXSXoM=) 2: EEF4F7A6EF6E11EBB1C02712C4F9AE02.roa (hash: efdLoq6zZv0F6RR1ze+KA4UrdZ3dfGQdbaEk/qTBX+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1379 (0x563) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Validity Not Before: May 30 23:37:17 2025 GMT Not After : Jun 6 23:37:17 2025 GMT Subject: CN=683a412d-5d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:64:4e:4c:38:b0:78:4a:d1:c5:cb:d8:8b:89: f2:a7:aa:e3:29:e6:da:82:48:01:81:71:03:53:92: a9:f6:65:10:c4:7d:ce:73:a9:ec:43:4b:5e:e4:51: 6d:67:20:db:f0:06:46:86:0a:d1:fb:07:6a:7a:d9: 54:f5:0d:8b:16:a9:a2:61:94:1a:61:5e:5f:a5:fd: 1c:ae:0e:21:fb:cc:84:93:09:92:f4:6d:42:2e:81: cb:95:4f:50:af:70:01:8b:1d:4b:29:ef:01:6b:f4: a3:ad:8a:3c:48:c7:37:8b:76:f3:f1:18:fc:e1:c4: 85:b1:6e:b3:c4:e7:f6:8b:d0:86:65:89:42:6e:14: e5:9c:f2:73:89:01:c8:f7:67:1b:5a:23:d0:76:68: 9e:81:d7:b6:2b:ff:f7:44:42:22:30:48:b1:1b:d9: a2:09:6e:c1:c4:b3:03:98:a6:b1:71:bb:1f:82:7d: 7b:33:14:f0:7c:25:70:9c:9a:62:19:1c:ac:44:89: 66:51:17:79:a0:08:e3:81:0a:90:97:00:55:77:62: 31:0c:20:4b:1f:62:70:c0:e7:c2:5d:e1:19:8b:44: bd:79:bf:56:0b:41:5a:0d:cf:a0:f5:9d:f6:3f:9c: 90:dd:7a:7a:a8:9c:45:a4:e6:99:cc:dc:aa:4f:b3: 76:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2F:EF:66:C2:D2:F7:A3:F5:99:02:84:90:A0:7F:41:41:CD:3C:55 X509v3 Authority Key Identifier: keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a1:a5:74:3a:6b:96:f5:6d:dd:f7:8b:54:9c:12:7f:c3:51: 14:74:9f:51:c1:b5:a6:3d:ce:2e:b1:f9:c9:ad:85:ad:5b:14: ba:e5:39:bf:d4:e9:10:dc:4b:dd:6b:58:ad:5a:3a:d7:7c:91: 79:be:ff:03:ca:ff:7c:18:11:d8:ef:3f:ee:a0:f2:2f:65:15: f6:26:ae:0f:56:99:ef:24:68:55:a9:a2:96:9a:95:05:bb:3e: b9:e8:a5:b9:ff:70:ac:6c:e3:6f:19:ec:91:d3:3f:6b:88:17: 54:3f:cd:38:ee:82:89:ea:f7:6b:07:ec:32:09:bb:31:03:a5: da:6c:2c:9f:de:48:f8:0b:da:86:39:34:6a:80:ad:81:da:92: 73:fe:b6:4e:86:d0:dd:41:88:40:ca:8d:4f:4d:5e:d1:d0:51: 56:83:9d:93:cc:1a:41:4f:bc:a1:ab:1c:3a:79:03:dd:33:bb: e4:3d:5a:3a:e8:69:89:27:be:c9:05:0b:74:81:35:95:ed:b8: e7:2e:98:7b:36:2a:f4:51:f4:04:d5:66:7f:2c:58:5f:f2:8a: f2:7b:10:b7:14:35:88:ed:42:d7:b0:20:63:51:0d:5b:90:2b: fc:c1:9d:e4:81:37:c6:92:ad:ce:a9:2d:3e:13:8c:68:83:41: ec:eb:70:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1 QTIzMDgwOTEwHhcNMjUwNTMwMjMzNzE3WhcNMjUwNjA2MjMzNzE3WjAYMRYwFAYD VQQDEw02ODNhNDEyZC01ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWROTDiweErRxcvYi4nyp6rjKebagkgBgXEDU5Kp9mUQxH3Oc6nsQ0te5FFt ZyDb8AZGhgrR+wdqetlU9Q2LFqmiYZQaYV5fpf0crg4h+8yEkwmS9G1CLoHLlU9Q r3ABix1LKe8Ba/SjrYo8SMc3i3bz8Rj84cSFsW6zxOf2i9CGZYlCbhTlnPJziQHI 92cbWiPQdmiegde2K//3REIiMEixG9miCW7BxLMDmKaxcbsfgn17MxTwfCVwnJpi GRysRIlmURd5oAjjgQqQlwBVd2IxDCBLH2JwwOfCXeEZi0S9eb9WC0FaDc+g9Z32 P5yQ3Xp6qJxFpOaZzNyqT7N2xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFgv72bC 0vej9ZkChJCgf0FBzTxVMB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3 R2w1OHloUnNTSlphSXdnSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkoaV0OmuW9W3d94tUnBJ/w1EUdJ9RwbWmPc4usfnJrYWtWxS65Tm/ 1OkQ3Evda1itWjrXfJF5vv8Dyv98GBHY7z/uoPIvZRX2Jq4PVpnvJGhVqaKWmpUF uz656KW5/3CsbONvGeyR0z9riBdUP8047oKJ6vdrB+wyCbsxA6XabCyf3kj4C9qG OTRqgK2B2pJz/rZOhtDdQYhAyo1PTV7R0FFWg52TzBpBT7yhqxw6eQPdM7vkPVo6 6GmJJ77JBQt0gTWV7bjnLph7Nir0UfQE1WZ/LFhf8oryexC3FDWI7ULXsCBjUQ1b kCv8wZ3kgTfGkq3OqS0+E4xog0Hs63Cg -----END CERTIFICATE-----Generated at Sat May 31 17:45:06 2025 by rpki-client