$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: KuWPBpP/44rPXlXykibYIpfYQj+jdBA88tSX/ksHElg= Subject key identifier: B5:78:29:BB:9A:B8:F1:12:17:D3:19:9D:B7:A2:51:2F:9B:32:B4:FC Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 24A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 248A Signing time: Fri 30 May 2025 15:56:49 +0000 Manifest this update: Fri 30 May 2025 15:56:49 +0000 Manifest next update: Fri 06 Jun 2025 15:56:49 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: RwMsA16nrR5ukw9Y/erxX/WCz7VyVcw8ex+RveW/izI=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) 4: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9380 (0x24a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: May 30 15:56:49 2025 GMT Not After : Jun 6 15:56:49 2025 GMT Subject: CN=6839d541-ad9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:d2:54:09:e2:40:07:b2:02:0c:07:bb:32: 60:b6:5e:de:c6:fe:5a:25:e8:f2:79:84:90:02:7f: ef:0d:37:f4:2b:60:ba:84:62:93:8a:57:31:26:8c: b2:6d:4e:7e:e6:1e:f7:77:60:c4:51:53:7e:71:06: 47:17:a4:df:7d:cb:c6:52:99:fd:d2:bd:9c:20:6e: f8:5b:28:af:71:89:95:ad:8b:39:e0:1f:52:a3:b1: b5:9b:cc:fc:14:8b:0b:1c:f6:bd:3a:02:eb:67:ed: ee:d4:5c:b1:5b:fb:ec:00:9c:fa:1c:9f:25:fe:c2: 4a:bb:6c:13:e1:90:d2:14:b9:88:f8:1a:fe:63:89: cd:df:95:8a:2c:3e:68:3c:28:d0:1a:ce:ea:93:dc: 67:0d:f4:dd:cb:12:02:7b:05:e4:19:76:2e:4e:b5: 7f:8b:5b:25:c7:cf:70:fd:c3:bb:68:b2:fe:1d:af: b0:28:5a:33:62:bb:a7:cd:c2:55:dd:5d:61:38:cf: a4:95:44:c1:0d:ef:27:b4:69:27:7b:8f:da:08:eb: 6a:d1:5d:d8:76:c9:bf:00:4b:57:c1:ca:64:db:9b: 44:9e:ea:01:f4:2b:85:b2:a8:0e:0a:5b:5a:21:56: c5:12:72:e8:24:fe:a8:42:e5:17:81:29:d9:50:b8: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:78:29:BB:9A:B8:F1:12:17:D3:19:9D:B7:A2:51:2F:9B:32:B4:FC X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:78:75:cc:88:68:29:09:3b:a2:74:98:b1:d6:be:36:92:b5: fd:ac:e8:3d:c3:53:30:c9:60:26:ff:c5:2b:b9:98:47:6a:9e: 4c:26:8b:33:5e:e4:a1:44:65:50:27:45:02:f2:ea:f8:0e:bf: f0:72:f1:6e:23:72:96:08:8e:60:36:3d:2c:a7:5f:09:38:a1: 42:d6:53:9b:e3:34:24:fe:7f:95:22:df:93:c3:8f:5a:52:9d: d3:25:f5:96:84:1e:74:ef:cd:31:69:33:62:03:fd:fa:7f:16: 9d:7a:98:15:bf:34:ee:61:3e:de:c0:4b:e8:3c:4d:06:64:e5: c1:1f:a2:a0:e8:b3:26:f9:04:d3:43:dc:48:29:5f:6c:87:bc: f5:6b:b2:d3:53:ca:0c:12:de:55:ae:6d:16:03:5c:d6:30:7f: a8:93:28:52:79:23:cf:93:7e:47:47:5c:33:39:f3:93:6c:a0: 23:50:bc:76:d5:f2:e7:0f:ba:3a:3c:18:75:00:b5:51:75:09: bc:12:8e:24:76:a7:41:59:3b:cc:e9:97:5a:5d:48:4c:5a:1d: 2a:27:69:70:c7:a6:5c:40:4b:ed:e0:18:73:26:99:88:92:a7: ac:0f:51:e8:63:7b:5d:c2:7e:f4:bb:02:7a:49:52:c7:91:7d: 86:c8:82:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUwNTMwMTU1NjQ5WhcNMjUwNjA2MTU1NjQ5WjAYMRYwFAYD VQQDEw02ODM5ZDU0MS1hZDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ETSVAniQAeyAgwHuzJgtl7exv5aJejyeYSQAn/vDTf0K2C6hGKTilcxJoyy bU5+5h73d2DEUVN+cQZHF6TffcvGUpn90r2cIG74WyivcYmVrYs54B9So7G1m8z8 FIsLHPa9OgLrZ+3u1FyxW/vsAJz6HJ8l/sJKu2wT4ZDSFLmI+Br+Y4nN35WKLD5o PCjQGs7qk9xnDfTdyxICewXkGXYuTrV/i1slx89w/cO7aLL+Ha+wKFozYrunzcJV 3V1hOM+klUTBDe8ntGkne4/aCOtq0V3Ydsm/AEtXwcpk25tEnuoB9CuFsqgOClta IVbFEnLoJP6oQuUXgSnZULhOSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLV4Kbua uPESF9MZnbeiUS+bMrT8MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3eHXMiGgpCTuidJix1r42krX9rOg9w1MwyWAm/8UruZhHap5MJosz XuShRGVQJ0UC8ur4Dr/wcvFuI3KWCI5gNj0sp18JOKFC1lOb4zQk/n+VIt+Tw49a Up3TJfWWhB50780xaTNiA/36fxadepgVvzTuYT7ewEvoPE0GZOXBH6Kg6LMm+QTT Q9xIKV9sh7z1a7LTU8oMEt5Vrm0WA1zWMH+okyhSeSPPk35HR1wzOfOTbKAjULx2 1fLnD7o6PBh1ALVRdQm8Eo4kdqdBWTvM6ZdaXUhMWh0qJ2lwx6ZcQEvt4BhzJpmI kqesD1HoY3tdwn70uwJ6SVLHkX2GyIK1 -----END CERTIFICATE-----Generated at Sat May 31 17:36:02 2025 by rpki-client