$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft File: z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft (raw, json) Hash identifier: AwLXznFn9LZ2r7VmFYDw//oLMUW+ifYxiZpFX1FVNJ8= Subject key identifier: 5E:5C:BD:B6:8C:55:04:73:F3:2E:DB:48:C5:BB:D0:52:ED:41:AF:9B Authority key identifier: CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 Certificate issuer: /CN=A91E7ED9/serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Certificate serial: 0811 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft Manifest number: 080B Signing time: Fri 30 May 2025 21:06:01 +0000 Manifest this update: Fri 30 May 2025 21:06:01 +0000 Manifest next update: Fri 06 Jun 2025 21:06:01 +0000 Files and hashes: 1: z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl (hash: P5J2lUG+1IpwVXqvCle/JgaSqCEM8qqeRb1eo/zf7ok=) 2: DE349762DBA311EA8DE35866C4F9AE02.roa (hash: W9BGV+7n/b6h+ZEgu/zCV5dkMkakdYDRjim1ueZv/vs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2065 (0x811) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7ED9, serialNumber=CF668374EC75AB5CACD2EA730515F7B7764DD921 Validity Not Before: May 30 21:06:01 2025 GMT Not After : Jun 6 21:06:01 2025 GMT Subject: CN=683a1db9-b0ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b8:bc:de:07:0c:f9:de:23:10:e7:c7:c5:bc: 17:92:10:99:04:f8:5b:03:2a:54:ad:2f:fe:c6:6e: 1a:e9:4b:85:01:76:97:f4:dd:7a:fb:8a:82:c4:38: cd:30:d1:a9:b2:0e:46:8e:0b:81:ea:f4:92:c7:44: fc:30:9c:6e:f3:4b:96:b0:0c:ba:22:bf:c0:a8:6b: ef:9b:f8:bf:7d:82:3d:cc:08:a9:3d:f6:32:a9:e7: 19:18:93:9d:d2:68:23:05:dd:cb:12:44:ce:af:94: 9d:28:4e:4b:cd:1c:da:0f:26:9e:c7:2d:b7:07:a0: 26:42:91:d5:89:ad:a4:5f:c9:04:8f:5e:29:e4:51: a5:71:9a:d1:37:e8:bc:16:70:34:61:de:cf:84:f5: 05:b4:9b:aa:41:ca:e2:25:17:da:cc:8f:82:73:82: d3:72:99:a2:84:a1:d2:21:45:d4:09:1b:ad:0b:0e: ea:bb:fc:8a:d4:27:96:ea:5f:1b:d3:74:65:ec:2c: 67:ef:b1:91:c7:26:f9:15:da:de:65:c4:14:4b:63: 0e:1f:ae:bd:38:b0:d2:6b:0d:1d:85:d8:fc:a9:c7: cd:e2:35:14:b3:c8:d9:e1:72:46:8d:69:28:26:83: 2d:28:73:77:58:26:fa:7d:ce:0c:8b:a4:96:0f:ba: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5C:BD:B6:8C:55:04:73:F3:2E:DB:48:C5:BB:D0:52:ED:41:AF:9B X509v3 Authority Key Identifier: keyid:CF:66:83:74:EC:75:AB:5C:AC:D2:EA:73:05:15:F7:B7:76:4D:D9:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2aDdOx1q1ys0upzBRX3t3ZN2SE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7ED9/F8E0B3B2DBA211EAA88F2066C4F9AE02/z2aDdOx1q1ys0upzBRX3t3ZN2SE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:2b:6d:6d:81:3c:eb:d9:ab:cf:be:52:e5:a3:29:d9:9e:43: 22:20:24:45:1d:46:da:e8:5d:aa:ec:70:71:8d:9f:70:40:bf: d6:18:8a:d9:88:68:f3:cb:1f:0e:f8:e2:3c:a9:41:d3:b5:21: 42:ad:88:34:85:8a:e3:00:32:76:00:c4:8a:c1:e1:cb:67:f1: 7d:bf:1e:04:9d:fe:b7:52:01:fe:37:8f:ca:4d:8c:c5:cd:98: 0b:64:5e:21:99:97:99:08:15:38:47:16:04:6c:37:e2:40:9d: 3d:6b:e9:14:4c:80:57:19:d1:db:40:5f:c8:66:79:ab:1b:28: f7:eb:4c:bc:ce:4f:85:00:15:1f:98:e4:5b:97:ad:dd:cc:c8: 1d:4e:41:9a:1e:7a:17:99:c6:1f:65:a8:fd:9d:03:59:70:68: 6b:84:6a:96:5c:77:da:37:3f:21:da:a1:54:62:31:58:e0:0c: 66:16:49:14:6a:14:af:af:f1:4c:6b:e0:2c:10:53:80:47:d2: 8a:fe:ed:fd:dd:6f:e6:ac:21:ca:c5:46:7b:fa:b1:a0:49:09: fd:25:2c:2f:f9:96:81:52:77:a3:37:94:32:f6:83:65:a8:18: ad:c6:b9:cd:3a:1a:5c:58:d9:67:38:90:20:98:ee:87:0b:43: 0c:04:d7:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFRDkxMTAvBgNVBAUTKENGNjY4Mzc0RUM3NUFCNUNBQ0QyRUE3MzA1MTVGN0I3 NzY0REQ5MjEwHhcNMjUwNTMwMjEwNjAxWhcNMjUwNjA2MjEwNjAxWjAYMRYwFAYD VQQDEw02ODNhMWRiOS1iMGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkbi83gcM+d4jEOfHxbwXkhCZBPhbAypUrS/+xm4a6UuFAXaX9N16+4qCxDjN MNGpsg5GjguB6vSSx0T8MJxu80uWsAy6Ir/AqGvvm/i/fYI9zAipPfYyqecZGJOd 0mgjBd3LEkTOr5SdKE5LzRzaDyaexy23B6AmQpHVia2kX8kEj14p5FGlcZrRN+i8 FnA0Yd7PhPUFtJuqQcriJRfazI+Cc4LTcpmihKHSIUXUCRutCw7qu/yK1CeW6l8b 03Rl7Cxn77GRxyb5FdreZcQUS2MOH669OLDSaw0dhdj8qcfN4jUUs8jZ4XJGjWko JoMtKHN3WCb6fc4Mi6SWD7p2fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF5cvbaM VQRz8y7bSMW70FLtQa+bMB8GA1UdIwQYMBaAFM9mg3TsdatcrNLqcwUV97d2Tdkh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0VEOS9GOEUwQjNCMkRC QTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXExeXMwdXB6QlJYM3QzWk4y U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oyYURkT3gxcTF5czB1cHpCUlgzdDNaTjJTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0VEOS9GOEUwQjNCMkRCQTIxMUVBQTg4RjIwNjZDNEY5QUUwMi96MmFEZE94MXEx eXMwdXB6QlJYM3QzWk4yU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGK21tgTzr2avPvlLloynZnkMiICRFHUba6F2q7HBxjZ9wQL/WGIrZ iGjzyx8O+OI8qUHTtSFCrYg0hYrjADJ2AMSKweHLZ/F9vx4Enf63UgH+N4/KTYzF zZgLZF4hmZeZCBU4RxYEbDfiQJ09a+kUTIBXGdHbQF/IZnmrGyj360y8zk+FABUf mORbl63dzMgdTkGaHnoXmcYfZaj9nQNZcGhrhGqWXHfaNz8h2qFUYjFY4AxmFkkU ahSvr/FMa+AsEFOAR9KK/u393W/mrCHKxUZ7+rGgSQn9JSwv+ZaBUnejN5Qy9oNl qBitxrnNOhpcWNlnOJAgmO6HC0MMBNfX -----END CERTIFICATE-----Generated at Sat May 31 17:54:53 2025 by rpki-client