$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: P8017ZTD7yccT/1z2mR52ht0Eer08a/jo15CEej1GzY= Subject key identifier: CD:18:69:98:8F:44:91:9D:90:16:DC:0F:20:14:E2:B7:50:15:F8:A9 Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 08C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 08B0 Signing time: Fri 30 May 2025 20:44:28 +0000 Manifest this update: Fri 30 May 2025 20:44:27 +0000 Manifest next update: Fri 06 Jun 2025 20:44:27 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: zzvcPuxkPF0Qz4yvzCVBzvJVOLu64/yj0FoWwTchhFg=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: j0i0jOhZZOWP9s/TIb9RjR+IPetIqCuM8Ixx2VI3fzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 20:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2242 (0x8c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: May 30 20:44:27 2025 GMT Not After : Jun 6 20:44:27 2025 GMT Subject: CN=683a18ac-5213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:19:c7:f9:94:15:75:23:ad:4c:7c:35:32:dd: 33:62:91:2e:55:66:0e:6f:fd:ed:02:c2:5e:1b:70: 6c:7a:da:6f:b4:54:21:98:47:49:3f:31:39:8b:6b: 0f:12:32:cf:9f:d5:3f:4a:66:8a:b4:4c:a8:f2:0b: a3:99:57:cf:42:61:b2:a4:b2:a7:91:b7:96:96:3a: bd:25:5b:9d:8d:60:34:04:30:98:64:4f:b7:f9:87: e9:dd:11:ce:91:d0:e8:2c:75:36:c8:16:1f:33:27: e5:19:61:89:55:fe:08:0e:54:a0:76:f0:d8:62:c0: 00:d9:30:d2:38:b5:94:3c:f2:7b:15:6d:98:a0:6b: 16:83:27:e3:e1:ca:a4:12:1e:c7:54:a0:db:9a:6a: 59:dd:55:1e:31:0c:ef:b8:1e:c4:0e:08:a4:46:50: 0c:e7:e0:97:4d:ec:b4:cc:fc:39:c0:08:a3:ee:a7: 60:5b:cf:ab:ea:37:15:1f:ae:d7:36:a3:08:2e:04: 44:e3:76:34:91:54:2f:a0:88:34:41:55:8e:ea:2b: fc:e0:16:88:0a:7a:e9:c0:b1:cd:90:c9:ff:74:f7: 82:42:93:8a:a9:d6:e1:0c:29:39:ad:a6:df:85:cc: c1:34:52:08:ff:76:7b:54:b7:8a:8e:8e:ec:e2:a6: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:18:69:98:8F:44:91:9D:90:16:DC:0F:20:14:E2:B7:50:15:F8:A9 X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1b:8d:ae:ae:92:10:dc:e9:11:06:aa:56:7b:8e:e7:fb:70: 96:8c:c2:f5:48:c7:67:cd:8c:5b:a2:72:9f:a7:4a:7b:a5:9b: 71:35:62:5f:72:91:9a:f3:6b:7d:f5:8c:9b:5d:07:ea:fa:e6: ed:02:22:8e:1b:37:78:0a:ef:b2:c1:95:cd:b9:27:bf:c6:a7: 3a:10:44:86:9f:29:1a:ab:1b:d0:ec:85:58:e6:d4:f7:e0:91: 65:da:bc:48:50:10:a5:ec:d9:1b:67:8c:1f:30:be:47:57:2a: b6:1f:50:17:3b:c6:30:5e:50:1d:4f:1f:af:38:4d:2e:87:4c: 8e:04:56:51:dd:f9:f3:a2:a4:88:56:6f:24:4d:f1:f7:6d:7c: 71:a8:30:cb:6f:39:e4:98:97:4c:d5:7d:c9:1d:b9:c1:6b:e0: 78:a1:3a:de:47:15:e8:30:b7:ce:99:0a:ad:a3:a7:17:b1:ec: f6:54:e3:b2:6e:ca:0d:e0:16:4c:84:b3:ec:ce:bd:cc:9e:95: 4f:3e:78:8f:cc:f1:d7:16:13:da:11:68:9c:dd:f0:92:41:75: 52:39:f1:48:a4:d7:d9:9c:01:53:49:36:77:ee:4c:ef:41:fb: d9:7d:4b:45:1c:e6:18:27:7b:40:be:59:b6:93:5e:3c:68:6a: d7:75:7e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUwNTMwMjA0NDI3WhcNMjUwNjA2MjA0NDI3WjAYMRYwFAYD VQQDEw02ODNhMThhYy01MjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArxnH+ZQVdSOtTHw1Mt0zYpEuVWYOb/3tAsJeG3BsetpvtFQhmEdJPzE5i2sP EjLPn9U/SmaKtEyo8gujmVfPQmGypLKnkbeWljq9JVudjWA0BDCYZE+3+Yfp3RHO kdDoLHU2yBYfMyflGWGJVf4IDlSgdvDYYsAA2TDSOLWUPPJ7FW2YoGsWgyfj4cqk Eh7HVKDbmmpZ3VUeMQzvuB7EDgikRlAM5+CXTey0zPw5wAij7qdgW8+r6jcVH67X NqMILgRE43Y0kVQvoIg0QVWO6iv84BaICnrpwLHNkMn/dPeCQpOKqdbhDCk5rabf hczBNFII/3Z7VLeKjo7s4qaIpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0YaZiP RJGdkBbcDyAU4rdQFfipMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNG42urpIQ3OkRBqpWe47n+3CWjML1SMdnzYxbonKfp0p7pZtxNWJf cpGa82t99YybXQfq+ubtAiKOGzd4Cu+ywZXNuSe/xqc6EESGnykaqxvQ7IVY5tT3 4JFl2rxIUBCl7NkbZ4wfML5HVyq2H1AXO8YwXlAdTx+vOE0uh0yOBFZR3fnzoqSI Vm8kTfH3bXxxqDDLbznkmJdM1X3JHbnBa+B4oTreRxXoMLfOmQqto6cXsez2VOOy bsoN4BZMhLPszr3MnpVPPniPzPHXFhPaEWic3fCSQXVSOfFIpNfZnAFTSTZ37kzv QfvZfUtFHOYYJ3tAvlm2k148aGrXdX74 -----END CERTIFICATE-----Generated at Sat May 31 17:35:59 2025 by rpki-client