$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: LJknsq2BjkoTYcLx4NkCN0GNDGDqPo8oH5lfJmTEFEk= Subject key identifier: 14:DB:45:F0:D1:10:C0:AF:8F:6E:CB:E3:98:19:18:0E:35:9F:F0:94 Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 2C Signing time: Sat 31 May 2025 07:17:50 +0000 Manifest this update: Sat 31 May 2025 07:17:50 +0000 Manifest next update: Sat 07 Jun 2025 07:17:50 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: OHwMVSlWWOzPNDW1l/5l7QBSgHGGvAsZLU4v1NhwWzQ=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: May 31 07:17:50 2025 GMT Not After : Jun 7 07:17:50 2025 GMT Subject: CN=683aad1e-08cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:06:9d:61:8f:eb:4c:79:fa:83:33:27:00: b4:26:af:20:cb:3c:3e:0d:56:c1:0e:04:f0:28:36: e7:dc:90:f6:c8:49:26:96:eb:47:fa:40:14:ba:35: da:1f:ad:64:ca:69:ae:0d:b4:d0:46:89:7c:22:45: 04:f9:db:10:6c:b1:6a:ff:50:08:c2:81:86:02:ca: 96:22:9b:5e:23:b9:b7:e5:b3:64:b1:8b:e3:57:62: c1:fb:31:58:83:4e:a2:33:5a:8a:ee:d7:f3:f6:ca: b4:07:53:aa:60:a9:d7:f1:8d:df:2f:e1:35:b2:4f: 29:d3:7e:ab:d1:c1:b6:73:f6:45:60:36:e1:f4:e8: 58:30:7a:82:d2:85:a5:67:4a:83:ed:b3:32:96:36: 74:e9:bd:d5:c9:83:df:a7:34:33:6e:95:80:b0:65: 9b:9b:82:9f:21:2b:4d:b7:5b:93:0b:9f:f4:6f:47: 76:d1:a6:17:19:09:a5:df:41:10:17:df:bf:50:89: ee:c1:f9:7b:0e:48:e5:df:40:93:d3:b7:60:de:b6: 10:9a:2e:f4:82:3d:e2:25:83:07:95:eb:62:34:a6: f1:d8:97:58:ff:d1:c4:c7:02:8e:53:ce:33:ff:30: 92:1a:1b:88:40:72:5f:5b:4d:a7:8f:b8:53:71:e9: 32:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DB:45:F0:D1:10:C0:AF:8F:6E:CB:E3:98:19:18:0E:35:9F:F0:94 X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b1:3e:05:39:ff:d3:49:0f:39:de:81:e4:48:b1:8b:27:ca: 4e:3e:c3:22:6d:2b:39:4d:ec:62:8a:b3:ff:ca:05:2c:3d:d3: 42:f5:40:b2:ad:89:d2:dc:1a:01:3e:2d:5d:6a:76:18:3b:c7: 02:5a:e3:a3:9c:c8:8b:e8:04:73:3b:c2:55:ab:a8:ad:16:25: ee:bf:ed:4e:17:a9:02:b0:76:b7:d0:e8:1e:8d:5c:52:c3:6d: 91:cc:81:32:10:7d:ab:dc:f8:a6:c5:5d:52:64:f2:92:d4:a7: c4:2c:a7:f8:62:bd:5b:65:5e:42:d9:8a:8b:44:2e:52:4f:55: 7c:bf:de:aa:83:03:22:a1:c6:45:f0:f8:88:4e:83:13:6f:78: 7d:c7:2b:94:e1:ea:df:66:3c:09:79:fd:a4:85:0b:32:d3:16: af:e1:df:21:9e:f5:70:80:20:ac:80:99:43:05:fe:c5:39:fd: fc:f1:0a:93:07:30:bd:69:dc:85:c8:f8:28:b6:fc:f6:cd:48: 87:53:a4:22:fc:8b:8e:6f:33:2a:04:0b:3a:15:0d:3a:3d:e2: fb:a4:21:77:13:7b:fd:08:04:e2:f3:51:eb:70:39:5d:99:30: 94:28:a4:f1:35:64:69:ff:3c:df:63:91:ae:0e:d9:0f:61:2f: d7:36:90:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTA1MzEwNzE3NTBaFw0yNTA2MDcwNzE3NTBaMBgxFjAUBgNV BAMTDTY4M2FhZDFlLTA4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6MwadYY/rTHn6gzMnALQmryDLPD4NVsEOBPAoNufckPbISSaW60f6QBS6Ndof rWTKaa4NtNBGiXwiRQT52xBssWr/UAjCgYYCypYim14jubfls2Sxi+NXYsH7MViD TqIzWoru1/P2yrQHU6pgqdfxjd8v4TWyTynTfqvRwbZz9kVgNuH06FgweoLShaVn SoPtszKWNnTpvdXJg9+nNDNulYCwZZubgp8hK023W5MLn/RvR3bRphcZCaXfQRAX 379Qie7B+XsOSOXfQJPTt2DethCaLvSCPeIlgweV62I0pvHYl1j/0cTHAo5TzjP/ MJIaG4hAcl9bTaePuFNx6TJFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFNtF8NEQ wK+PbsvjmBkYDjWf8JQwHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSxPgU5/9NJDznegeRIsYsnyk4+wyJtKzlN7GKKs//KBSw900L1QLKt idLcGgE+LV1qdhg7xwJa46OcyIvoBHM7wlWrqK0WJe6/7U4XqQKwdrfQ6B6NXFLD bZHMgTIQfavc+KbFXVJk8pLUp8Qsp/hivVtlXkLZiotELlJPVXy/3qqDAyKhxkXw +IhOgxNveH3HK5Th6t9mPAl5/aSFCzLTFq/h3yGe9XCAIKyAmUMF/sU5/fzxCpMH ML1p3IXI+Ci2/PbNSIdTpCL8i45vMyoECzoVDTo94vukIXcTe/0IBOLzUetwOV2Z MJQopPE1ZGn/PN9jka4O2Q9hL9c2kN8= -----END CERTIFICATE-----Generated at Sat May 31 17:48:45 2025 by rpki-client