$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: /cVuUBGFzGd7n1NI6aeZuBTTJufcP0Mea+rpU+Pet7E= Subject key identifier: EE:21:DF:C0:D8:62:B1:93:21:C9:C9:C5:E5:C4:CA:4A:5D:7B:04:0A Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 08E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 08DA Signing time: Fri 30 May 2025 20:39:33 +0000 Manifest this update: Fri 30 May 2025 20:39:33 +0000 Manifest next update: Fri 06 Jun 2025 20:39:33 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: bt/meWS89U+1pplGOQMasWjvkV6nL33PECPvgymRMVo=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: /n6JoBCxKb39xofyDRMG1k20W82UdWlbULQ4CPVAgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2281 (0x8e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: May 30 20:39:33 2025 GMT Not After : Jun 6 20:39:33 2025 GMT Subject: CN=683a1785-1f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:89:46:0d:f4:0b:fc:58:ee:22:01:08:ee: fd:ad:24:3f:7c:ae:ee:bf:30:bb:d2:3d:11:ed:e6: 81:e1:bf:cb:3a:3a:23:63:f5:d9:23:98:cc:63:1d: 67:a6:c1:63:f1:3f:1e:cd:b9:39:bb:25:1c:c9:73: 5e:11:0e:d1:bd:cd:69:6f:5e:a4:cc:61:16:34:ab: ce:03:d6:a0:25:6a:a3:02:2f:fa:c4:9c:22:1e:da: 1b:d2:36:d6:9a:e8:ff:00:2e:be:1d:74:99:c7:99: 57:49:eb:07:bd:d4:ad:ae:c3:e5:34:a1:e9:c0:8b: 64:8b:dc:d1:27:1c:3b:10:f3:99:26:31:36:de:c3: 23:b0:36:c5:a5:d1:2b:43:dd:7b:91:51:ea:66:de: 24:ca:d3:c6:5c:bc:f4:f0:38:ee:da:72:56:71:5b: c3:13:d9:d4:84:5e:59:81:27:1e:db:67:61:39:95: 9e:38:57:de:d2:93:1e:19:f8:5a:da:e4:d2:23:ce: 89:2f:73:e8:27:5e:4c:a4:0e:81:a7:f4:b4:5d:28: dc:de:31:95:d8:21:60:74:ec:d9:0e:17:b2:b6:b7: 81:cb:84:ea:a7:44:39:c0:b4:4a:d9:4f:55:47:43: 4d:31:9b:8c:a6:77:67:51:b0:84:17:50:81:df:7a: 5e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:DF:C0:D8:62:B1:93:21:C9:C9:C5:E5:C4:CA:4A:5D:7B:04:0A X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:0c:e0:83:e8:21:8c:16:50:d0:e4:85:e1:72:9c:58:cf:6e: be:33:f7:6b:71:d2:a7:10:f0:d7:e9:24:0f:7b:a2:67:e9:e2: c7:ca:b7:1d:ce:26:7b:85:07:14:a1:b9:83:35:36:2c:6e:23: ab:86:50:2b:b6:59:db:15:89:17:14:67:e1:12:52:4a:ff:1e: d4:6b:82:dc:1c:70:15:07:13:d4:d2:ce:0a:75:f5:59:c5:82: d0:9f:e5:27:83:26:6f:72:d6:f0:1d:a8:83:2c:21:68:94:b1: 8c:b4:f1:d7:d8:dd:70:c1:b7:e8:d8:8a:03:5f:26:4d:5b:ad: bb:f6:b9:14:50:33:b7:7b:d5:84:43:4a:eb:fe:66:73:17:94: fc:0a:26:fd:dc:9d:5e:74:7b:a9:e0:b7:0d:25:5a:4e:96:e4: a0:43:99:7b:ba:b1:91:b4:bf:a4:90:30:6a:2b:03:25:2c:17: cf:f7:cf:6d:98:7d:2d:d3:1b:2f:d0:c5:04:78:3b:c9:a1:15: 62:73:94:5a:eb:8f:e8:85:9f:54:26:cd:73:0b:26:e8:3d:16: 94:46:76:1f:50:56:62:8c:2f:17:1b:65:50:2d:31:63:f5:2a: 12:c6:ee:e8:ad:ad:80:b7:40:71:b1:cc:b2:c0:80:9c:76:2a: 32:b0:ff:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUwNTMwMjAzOTMzWhcNMjUwNjA2MjAzOTMzWjAYMRYwFAYD VQQDEw02ODNhMTc4NS0xZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqeJRg30C/xY7iIBCO79rSQ/fK7uvzC70j0R7eaB4b/LOjojY/XZI5jMYx1n psFj8T8ezbk5uyUcyXNeEQ7Rvc1pb16kzGEWNKvOA9agJWqjAi/6xJwiHtob0jbW muj/AC6+HXSZx5lXSesHvdStrsPlNKHpwItki9zRJxw7EPOZJjE23sMjsDbFpdEr Q917kVHqZt4kytPGXLz08Dju2nJWcVvDE9nUhF5ZgSce22dhOZWeOFfe0pMeGfha 2uTSI86JL3PoJ15MpA6Bp/S0XSjc3jGV2CFgdOzZDheytreBy4Tqp0Q5wLRK2U9V R0NNMZuMpndnUbCEF1CB33peqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO4h38DY YrGTIcnJxeXEykpdewQKMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEDOCD6CGMFlDQ5IXhcpxYz26+M/drcdKnEPDX6SQPe6Jn6eLHyrcd ziZ7hQcUobmDNTYsbiOrhlArtlnbFYkXFGfhElJK/x7Ua4LcHHAVBxPU0s4KdfVZ xYLQn+UngyZvctbwHaiDLCFolLGMtPHX2N1wwbfo2IoDXyZNW6279rkUUDO3e9WE Q0rr/mZzF5T8Cib93J1edHup4LcNJVpOluSgQ5l7urGRtL+kkDBqKwMlLBfP989t mH0t0xsv0MUEeDvJoRVic5Ra64/ohZ9UJs1zCyboPRaURnYfUFZijC8XG2VQLTFj 9SoSxu7ora2At0BxscyywICcdioysP+5 -----END CERTIFICATE-----Generated at Sat May 31 16:30:31 2025 by rpki-client