$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: Iu7NTIOHYsB60SF89Uozz/G88g7iHS2z4vbkXFkluDo= Subject key identifier: 22:6F:E0:19:A1:E0:02:B3:B6:90:FC:3A:37:C1:7C:E3:DD:CC:5B:4B Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 34CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 34AF Signing time: Fri 30 May 2025 14:47:39 +0000 Manifest this update: Fri 30 May 2025 14:47:39 +0000 Manifest next update: Fri 06 Jun 2025 14:47:39 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: zA69OZUmhlczLp8FP6bEwPWa6oYqzLkXS3NMMF7ltAw=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13519 (0x34cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: May 30 14:47:39 2025 GMT Not After : Jun 6 14:47:39 2025 GMT Subject: CN=6839c50b-2931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1d:0b:e7:37:01:60:b4:6c:bc:0e:fd:bb:82: c1:98:11:e3:f0:1e:3c:ec:c0:fa:96:2a:78:32:fd: 51:7e:30:e0:c4:20:2b:f4:0b:1f:73:94:eb:de:8f: b3:82:82:d3:d2:ea:03:1d:31:d8:5c:75:5c:fe:ff: dd:5b:a0:90:c4:63:db:96:28:a2:67:b7:3d:7a:48: a4:c8:91:9a:97:ba:0b:7a:bd:56:77:dc:d3:95:8c: 65:1c:90:97:6a:bd:09:68:85:e8:61:39:d0:2c:74: 52:f6:8f:7a:03:0c:77:74:06:99:74:e9:91:48:d3: f2:fd:9c:83:2c:aa:54:fd:4f:ef:da:1e:5b:b1:6c: 4a:c8:17:e9:23:f6:86:6f:0b:24:cb:0f:45:fb:56: 1b:74:56:e3:08:06:d3:c9:cc:04:cb:d4:96:95:c0: 31:d9:cb:e1:77:b0:08:db:09:61:85:55:d9:21:82: cd:fc:b3:8f:d1:1b:13:2c:6f:01:4e:7f:fc:38:f8: 76:94:c7:c6:89:9a:29:7b:e4:fe:60:30:84:cc:4e: 7a:ac:8c:e4:2f:45:e6:dd:36:af:47:cc:88:cf:3f: b7:14:cc:60:c8:47:54:02:13:ed:7d:4a:ea:3c:8b: a6:ab:05:70:1d:ea:e2:c1:af:2a:f9:78:a3:6e:f5: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6F:E0:19:A1:E0:02:B3:B6:90:FC:3A:37:C1:7C:E3:DD:CC:5B:4B X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:36:bd:82:6a:eb:e7:9f:ed:26:48:ee:71:9b:e1:95:43:0b: a6:30:a0:6c:e3:f7:20:d2:87:99:0e:83:4a:99:1c:b9:0f:1c: ad:da:92:51:47:b2:40:fa:64:f5:11:af:93:87:7e:df:9a:e3: e5:11:3d:86:68:58:a4:a3:22:bf:25:fa:78:89:a3:55:8d:0e: 48:82:f0:63:22:c4:31:b0:5c:ae:44:27:08:1d:c0:12:ee:8e: 2d:d8:24:62:9f:cf:69:f9:b6:6c:8a:8a:fb:26:76:f4:d2:55: e2:27:af:e0:ee:b0:5a:e9:d4:e5:06:47:27:0b:60:0a:71:3f: f1:f7:f0:29:2d:76:af:b7:bb:ad:fd:65:d9:4a:fd:0e:1b:ea: 9c:40:40:e3:cd:21:86:9f:51:73:13:3a:37:b5:16:6d:3a:f8: 39:46:62:d0:62:e1:3b:84:c5:93:e8:24:a0:ee:5e:e5:96:9f: 31:88:b9:64:55:42:41:83:29:fe:7e:28:fa:4b:ba:83:c5:37: 8f:8d:5d:b9:01:cb:9b:56:78:5e:5e:8e:98:be:cc:12:89:af: 7f:d7:e0:3a:37:f2:5b:65:c8:a5:af:5d:f5:24:03:59:a7:cb: 2d:b2:ce:fa:a1:f4:a4:09:89:e7:4f:1c:b1:85:14:44:ab:4b: fc:a6:86:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUwNTMwMTQ0NzM5WhcNMjUwNjA2MTQ0NzM5WjAYMRYwFAYD VQQDEw02ODM5YzUwYi0yOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAux0L5zcBYLRsvA79u4LBmBHj8B487MD6lip4Mv1RfjDgxCAr9Asfc5Tr3o+z goLT0uoDHTHYXHVc/v/dW6CQxGPbliiiZ7c9ekikyJGal7oLer1Wd9zTlYxlHJCX ar0JaIXoYTnQLHRS9o96Awx3dAaZdOmRSNPy/ZyDLKpU/U/v2h5bsWxKyBfpI/aG bwskyw9F+1YbdFbjCAbTycwEy9SWlcAx2cvhd7AI2wlhhVXZIYLN/LOP0RsTLG8B Tn/8OPh2lMfGiZope+T+YDCEzE56rIzkL0Xm3TavR8yIzz+3FMxgyEdUAhPtfUrq PIumqwVwHeriwa8q+XijbvXHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJv4Bmh 4AKztpD8OjfBfOPdzFtLMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Nr2Cauvnn+0mSO5xm+GVQwumMKBs4/cg0oeZDoNKmRy5Dxyt2pJR R7JA+mT1Ea+Th37fmuPlET2GaFikoyK/Jfp4iaNVjQ5IgvBjIsQxsFyuRCcIHcAS 7o4t2CRin89p+bZsior7Jnb00lXiJ6/g7rBa6dTlBkcnC2AKcT/x9/ApLXavt7ut /WXZSv0OG+qcQEDjzSGGn1FzEzo3tRZtOvg5RmLQYuE7hMWT6CSg7l7llp8xiLlk VUJBgyn+fij6S7qDxTePjV25AcubVnheXo6YvswSia9/1+A6N/JbZcilr131JANZ p8stss76ofSkCYnnTxyxhRREq0v8poZ3 -----END CERTIFICATE-----Generated at Sat May 31 16:27:49 2025 by rpki-client