$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json) Hash identifier: H9JUdH6API8akCpeGCk1RVyZ0RgTdYcz7LFpbuN8iCU= Subject key identifier: 29:84:40:17:75:ED:70:66:23:CA:14:A2:0B:9E:CC:98:46:9F:E4:2E Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft Manifest number: 59 Signing time: Sun 01 Jun 2025 06:54:22 +0000 Manifest this update: Sun 01 Jun 2025 06:54:22 +0000 Manifest next update: Sun 08 Jun 2025 06:54:22 +0000 Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: 4aTblcghB/PMer+v1Mbn2M1aXV8J/jfluukOGnfVxD4=) 2: 9C532970B72311EFBA17AB72C4F9AE02.roa (hash: V8Oi/Zt9u9c7P3V5ZEct3r3+92oknInn9a1C4JSyxzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Jun 1 06:54:22 2025 GMT Not After : Jun 8 06:54:22 2025 GMT Subject: CN=683bf91e-8a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6a:e1:b8:fc:f3:89:d0:6c:e4:49:a4:b2:a2: 6d:36:7b:3a:25:e8:37:d2:1d:e6:2c:23:03:5e:7a: 64:19:03:93:7e:52:52:37:d8:3c:6f:0b:6b:ec:18: 26:d1:6a:0c:97:e4:3a:d7:15:ec:76:eb:d0:da:e4: ca:24:76:ae:aa:23:d7:4b:a6:7a:d8:b3:23:dc:d5: 5a:ad:1a:3e:48:27:3f:46:70:1e:fa:5b:ca:f9:72: 21:94:1f:bf:6d:b9:3e:4d:61:39:57:1c:89:c2:af: 03:6f:6e:49:c6:0a:28:95:88:bd:ca:57:84:cb:f0: 87:65:63:a4:7a:c5:f8:cf:60:2d:19:6f:5d:69:9e: 29:dc:ff:46:5b:bc:78:2a:03:02:ed:40:5c:6d:e5: f8:ee:a6:f5:5a:fe:5b:b6:e0:e5:01:b8:e5:1e:4b: 31:f6:6c:41:0f:dc:8f:74:55:8e:34:02:18:5f:f0: ed:02:54:da:f5:d0:8b:f2:25:0e:f7:6a:75:8d:62: f7:bc:b9:c1:09:7b:19:62:8f:07:e4:75:d4:4f:99: 7a:bb:cd:3c:0a:e0:77:54:dc:24:a0:52:56:93:d9: d1:dc:25:e7:9d:d0:3f:a0:b6:c5:c7:1a:5a:88:f6: bb:79:21:a2:3d:4f:9d:03:72:91:ed:bf:67:82:16: 43:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:84:40:17:75:ED:70:66:23:CA:14:A2:0B:9E:CC:98:46:9F:E4:2E X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:a5:6f:8b:4e:21:1b:28:b9:78:96:1d:c1:46:82:97:b8:96: cc:60:22:32:a3:54:ca:19:88:5c:70:25:5b:b5:1b:05:46:db: d1:fe:1c:6a:c4:07:59:93:ce:7b:11:35:e8:77:85:d9:a0:f1: 64:a6:3c:0a:1d:6e:92:20:87:7a:c1:b4:58:93:39:8c:15:32: 9d:30:a4:c1:38:12:53:be:31:be:15:b1:aa:c9:f4:34:f2:91: f1:9a:a5:62:ce:63:72:77:b8:4c:fb:7d:cf:dc:23:29:fe:d3: 0b:54:dc:0b:c6:bb:c1:40:a3:ed:2b:e7:bc:2d:60:1e:3c:19: 41:6b:6a:16:12:23:d2:e2:8a:1a:dd:36:0b:88:0e:db:53:86: 90:26:c2:b5:50:9c:3b:73:70:9d:4e:2c:a7:18:0d:1b:5d:e5: a3:30:64:aa:4c:03:80:aa:0f:cb:68:31:c5:1c:9e:47:27:e5: 6d:3f:06:71:50:4f:bf:94:56:f0:c9:08:a4:7a:03:ec:1b:64: 8d:6c:c3:d1:8d:95:39:8d:62:80:f9:90:09:69:df:a5:21:52: 29:4c:54:44:d2:db:1a:47:4e:98:f6:d7:42:cc:ee:3e:75:b4: ed:ba:49:51:8c:d4:56:9e:35:a3:9c:f8:d2:c1:84:24:2b:57: c0:69:8c:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoNjcwRTNBMDY3MjE2ODRBQjQ3M0JCQkU1Q0MyMkNGMDVE MDI0QkY2RDAeFw0yNTA2MDEwNjU0MjJaFw0yNTA2MDgwNjU0MjJaMBgxFjAUBgNV BAMTDTY4M2JmOTFlLThhNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGauG4/POJ0GzkSaSyom02ezol6DfSHeYsIwNeemQZA5N+UlI32DxvC2vsGCbR agyX5DrXFex269Da5Mokdq6qI9dLpnrYsyPc1VqtGj5IJz9GcB76W8r5ciGUH79t uT5NYTlXHInCrwNvbknGCiiViL3KV4TL8IdlY6R6xfjPYC0Zb11pninc/0ZbvHgq AwLtQFxt5fjupvVa/lu24OUBuOUeSzH2bEEP3I90VY40Ahhf8O0CVNr10IvyJQ73 anWNYve8ucEJexlijwfkddRPmXq7zTwK4HdU3CSgUlaT2dHcJeed0D+gtsXHGlqI 9rt5IaI9T50DcpHtv2eCFkN7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKYRAF3Xt cGYjyhSiC57MmEaf5C4wHwYDVR0jBBgwFoAUZw46BnIWhKtHO7vlzCLPBdAkv20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0RBRjZENzM2Qjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3Yy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnc0NkJuSVdoS3RITzd2bHpDTFBCZEFrdjIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVB RTBBL0RBRjZENzM2QjcyMjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0 SE83dmx6Q0xQQmRBa3YyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2lb4tOIRsouXiWHcFGgpe4lsxgIjKjVMoZiFxwJVu1GwVG29H+HGrE B1mTznsRNeh3hdmg8WSmPAodbpIgh3rBtFiTOYwVMp0wpME4ElO+Mb4VsarJ9DTy kfGapWLOY3J3uEz7fc/cIyn+0wtU3AvGu8FAo+0r57wtYB48GUFrahYSI9Liihrd NguIDttThpAmwrVQnDtzcJ1OLKcYDRtd5aMwZKpMA4CqD8toMcUcnkcn5W0/BnFQ T7+UVvDJCKR6A+wbZI1sw9GNlTmNYoD5kAlp36UhUilMVETS2xpHTpj210LM7j51 tO26SVGM1FaeNaOc+NLBhCQrV8BpjFA= -----END CERTIFICATE-----Generated at Mon Jun 2 20:47:06 2025 by rpki-client