$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json) Hash identifier: RKAAVxosdwAIsbzrKN7hhADZwzs1KCIneDJUNnMxwJ0= Subject key identifier: 2C:F0:C8:CB:5E:1A:91:26:13:3A:1D:F8:50:AA:9A:7A:3D:3B:F4:B9 Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 0109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft Manifest number: 0106 Signing time: Sat 31 May 2025 04:39:31 +0000 Manifest this update: Sat 31 May 2025 04:39:30 +0000 Manifest next update: Sat 07 Jun 2025 04:39:30 +0000 Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: ofKfsiOCCUqGA0GDjjFcKZbVwA05UdkS4/JWHYGWXNI=) 2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: ewevHTVGmqHpvpOV2d+aqrkd9ftzXTkReJQtB5PG940=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: May 31 04:39:30 2025 GMT Not After : Jun 7 04:39:30 2025 GMT Subject: CN=683a8802-124b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:dd:e5:e0:53:75:17:a8:dd:a9:42:0d:b0: 73:b0:21:5d:8f:58:aa:50:d6:2d:bb:14:1b:16:d6: 3e:1a:ce:cd:2d:15:55:96:1d:b2:2b:f7:57:8f:2b: 34:c9:0a:37:c5:90:51:3b:d9:5e:a3:79:b4:1b:dc: 0f:27:c3:9f:43:24:61:d3:43:3d:93:a1:d2:65:30: d3:c1:a5:e8:e8:c9:d4:d8:7c:09:86:b4:0d:d4:62: 0d:62:d5:10:fa:e1:02:2f:9b:ae:7c:a6:cf:eb:9f: 2b:44:39:85:45:1a:38:1d:4c:87:e4:d3:41:79:b8: 60:c2:26:6a:9c:8f:fa:05:f2:70:40:e6:4d:41:d2: 39:96:99:bb:18:db:21:34:09:49:76:3d:c7:63:f7: e8:0e:2b:ad:08:5d:80:72:a9:77:0a:a7:ac:58:b6: 49:04:57:b6:4a:06:e8:8f:05:2f:e5:02:39:b6:d0: f1:70:63:83:d4:06:d3:bc:4c:62:62:84:de:9c:40: e8:60:41:1e:b6:a4:a4:e7:ab:dd:f8:b0:c5:ea:5d: dc:37:b1:14:08:fd:d8:de:f2:80:d0:84:3b:4f:03: e5:aa:8f:f3:38:22:23:d9:45:4a:20:16:45:f8:16: 06:34:cf:ab:ed:47:ad:78:3d:7a:78:8d:b3:bb:ef: f1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F0:C8:CB:5E:1A:91:26:13:3A:1D:F8:50:AA:9A:7A:3D:3B:F4:B9 X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:ec:b5:d5:bd:9b:c9:c2:20:2e:f8:a2:1b:6b:89:6a:7b:79: a7:80:ac:19:c0:02:d4:db:c1:c8:d9:60:6d:33:cb:5d:e7:9a: 64:b4:d2:42:67:11:75:77:0c:28:05:f8:71:9e:97:36:e1:42: e3:7a:5c:c4:9f:92:c8:a1:6e:ae:da:a6:56:37:da:f5:11:bf: 9d:db:fa:1a:dc:f6:5d:2d:bd:d8:3f:0a:a8:bf:92:ea:4f:7d: ac:70:e1:4c:b6:d7:85:f4:94:8b:42:a4:02:cb:1c:10:8b:52: 76:09:1a:b8:15:6e:ea:1e:4c:72:76:ed:78:3b:ef:ee:d8:71: 39:3d:43:17:0d:7e:af:e5:5a:44:85:31:ca:8e:64:1c:07:e6: 7c:3f:28:32:6a:da:06:2c:75:1c:a7:0f:1c:97:e1:9c:e6:60: e4:d3:2e:2f:c8:64:29:83:d6:dc:9d:89:72:30:51:01:77:1d: be:b1:26:50:d1:b6:e7:e5:6a:f5:45:9d:de:47:8d:62:e4:19: 5a:45:5e:89:ea:ae:d8:84:f0:54:51:ed:d4:da:8b:7a:65:05: cf:3b:c9:01:92:a7:d3:72:c4:da:8d:66:75:26:8d:e5:f0:52: 39:21:ed:68:2c:3c:dd:8e:b3:2e:c5:fc:76:b6:57:54:2a:8d: 14:2a:c2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJBMEMxMTAvBgNVBAUTKENENUNENTkwOTEzRTRGODlBRjNEMUNBNkUyOUZBQjND MDY3RDIxNEUwHhcNMjUwNTMxMDQzOTMwWhcNMjUwNjA3MDQzOTMwWjAYMRYwFAYD VQQDEw02ODNhODgwMi0xMjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLjd5eBTdReo3alCDbBzsCFdj1iqUNYtuxQbFtY+Gs7NLRVVlh2yK/dXjys0 yQo3xZBRO9leo3m0G9wPJ8OfQyRh00M9k6HSZTDTwaXo6MnU2HwJhrQN1GINYtUQ +uECL5uufKbP658rRDmFRRo4HUyH5NNBebhgwiZqnI/6BfJwQOZNQdI5lpm7GNsh NAlJdj3HY/foDiutCF2Acql3CqesWLZJBFe2SgbojwUv5QI5ttDxcGOD1AbTvExi YoTenEDoYEEetqSk56vd+LDF6l3cN7EUCP3Y3vKA0IQ7TwPlqo/zOCIj2UVKIBZF +BYGNM+r7UeteD16eI2zu+/x9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzwyMte GpEmEzod+FCqmno9O/S5MB8GA1UdIwQYMBaAFM1c1ZCRPk+Jrz0cpuKfqzwGfSFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkEwQy80MTUzMUIwQ0FF Q0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0bXZQUnltNHAtclBBWjlJ VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkEwQy80MTUzMUIwQ0FFQ0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0 bXZQUnltNHAtclBBWjlJVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr7LXVvZvJwiAu+KIba4lqe3mngKwZwALU28HI2WBtM8td55pktNJC ZxF1dwwoBfhxnpc24ULjelzEn5LIoW6u2qZWN9r1Eb+d2/oa3PZdLb3YPwqov5Lq T32scOFMtteF9JSLQqQCyxwQi1J2CRq4FW7qHkxydu14O+/u2HE5PUMXDX6v5VpE hTHKjmQcB+Z8PygyatoGLHUcpw8cl+Gc5mDk0y4vyGQpg9bcnYlyMFEBdx2+sSZQ 0bbn5Wr1RZ3eR41i5BlaRV6J6q7YhPBUUe3U2ot6ZQXPO8kBkqfTcsTajWZ1Jo3l 8FI5Ie1oLDzdjrMuxfx2tldUKo0UKsLJ -----END CERTIFICATE-----Generated at Sat May 31 17:03:24 2025 by rpki-client