$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft File: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft (raw, json) Hash identifier: 3m4wPdr16TnuYE72bm3o4s7ljWbIraNnfXh7Gz2+M9s= Subject key identifier: 37:16:DF:58:C4:AF:3D:4D:49:54:85:1F:16:1E:DD:93:D8:F4:25:58 Authority key identifier: 66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD Certificate issuer: /CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Certificate serial: 05EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft Manifest number: 05DE Signing time: Fri 30 May 2025 23:14:51 +0000 Manifest this update: Fri 30 May 2025 23:14:50 +0000 Manifest next update: Fri 06 Jun 2025 23:14:50 +0000 Files and hashes: 1: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl (hash: XnmmyC1wUu6IHkk+St3tvzyhMsZJGDt2lXmDqQI31d0=) 2: 4E17ACCEF02511EE94BE6C37C4F9AE02.roa (hash: K6HGyYpDyX+WEMm19ozywOEbiMxJPunHlaTz934NBcY=) 3: 6D6C7AC8F02511EE80ACAA37C4F9AE02.roa (hash: kOsZib8Nc5bHVvef+ZYfV2LwOOkHjRtiFIQC+/5WkmQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1518 (0x5ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF3B6, serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Validity Not Before: May 30 23:14:50 2025 GMT Not After : Jun 6 23:14:50 2025 GMT Subject: CN=683a3bea-7df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:ea:b2:b9:56:28:f8:bd:00:f7:fe:5a:34: 17:a8:7e:fc:7f:0b:d1:cd:79:a3:b8:04:af:7b:17: e1:45:a7:d9:73:e1:97:dc:92:80:ff:fa:de:59:1e: 43:f1:98:40:d5:e1:9d:4e:48:f4:e8:9b:bf:87:0c: 2b:93:0c:63:87:91:f5:1a:37:7b:56:56:9e:cc:8a: 16:96:14:b9:d8:40:90:92:b9:ad:74:29:43:82:e9: 34:68:ab:c0:41:d2:1a:9d:6d:09:0a:a2:fb:ac:db: 1f:b8:59:67:6b:31:1c:2e:21:8e:a6:32:fd:3c:f0: 40:28:95:9f:61:f7:88:16:69:bb:3c:47:9e:48:10: a7:fc:f4:f0:b1:b4:60:05:59:c0:30:58:ac:64:8c: fa:10:7f:3c:5d:f3:56:a6:5c:63:a8:b0:fb:19:19: a0:fb:bf:73:a7:13:07:62:5e:f1:77:15:4a:27:03: a8:9f:a2:75:d3:a7:90:7b:a8:3e:90:22:88:10:1c: ae:2a:0a:e6:db:cf:66:1d:ee:c0:46:0f:1c:b3:30: 62:36:e7:47:c5:35:16:04:b1:fe:fb:9c:38:49:62: 01:3d:52:39:b8:eb:f9:f4:4c:cf:c2:3d:b4:31:b1: ad:15:a6:38:de:f3:ee:ac:39:b9:cd:a6:fb:da:9d: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:16:DF:58:C4:AF:3D:4D:49:54:85:1F:16:1E:DD:93:D8:F4:25:58 X509v3 Authority Key Identifier: keyid:66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:05:12:79:b2:98:ba:78:2a:34:ce:97:5f:cd:5b:92:a8:28: 5d:fc:e5:3c:eb:76:20:e9:d2:63:9d:45:10:ec:b2:ce:1b:b7: 09:f2:b7:34:1f:1c:c0:10:ed:3f:ec:32:a8:d3:0c:e6:5e:c4: 9b:fa:d0:0d:ec:c6:89:6d:73:29:0b:af:d5:19:cb:3d:0f:c3: 3e:b7:0d:0e:79:6c:d0:95:ce:d4:01:49:77:7e:41:97:de:f7: 86:d7:d5:ae:e9:86:d1:1c:53:b2:ca:f0:21:a7:93:16:3b:61: 2e:34:7b:38:2e:c1:5a:c9:71:47:e8:0b:16:92:85:03:de:9b: cc:38:c2:12:22:4a:b1:f1:da:19:ed:af:1f:1e:25:5a:ce:fd: 17:6d:86:5c:64:53:1c:1e:2b:e5:86:04:dc:5e:d9:56:29:7c: 6e:4d:e3:e3:57:a0:64:20:d2:84:1c:38:66:b4:f5:df:cc:a6: a7:78:01:74:f1:dc:63:16:be:89:0a:0f:ac:00:2f:89:9f:76: a9:d3:53:16:da:18:5d:f1:74:c1:3a:ba:84:af:69:09:ca:a7: 05:4a:83:59:30:8f:c4:db:20:e2:31:84:90:6e:91:7d:5c:37: a1:2c:c7:7a:5c:a6:9a:75:d2:13:9b:81:7c:d9:14:4e:2a:8e: 62:44:4b:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYzQjYxMTAvBgNVBAUTKDY2MEVEREJCMzVENTM3NTZDMzA2QkQ4Q0Q5MTdEQUNG Rjc4OTZDQkQwHhcNMjUwNTMwMjMxNDUwWhcNMjUwNjA2MjMxNDUwWjAYMRYwFAYD VQQDEw02ODNhM2JlYS03ZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7P3qsrlWKPi9APf+WjQXqH78fwvRzXmjuASvexfhRafZc+GX3JKA//reWR5D 8ZhA1eGdTkj06Ju/hwwrkwxjh5H1Gjd7VlaezIoWlhS52ECQkrmtdClDguk0aKvA QdIanW0JCqL7rNsfuFlnazEcLiGOpjL9PPBAKJWfYfeIFmm7PEeeSBCn/PTwsbRg BVnAMFisZIz6EH88XfNWplxjqLD7GRmg+79zpxMHYl7xdxVKJwOon6J106eQe6g+ kCKIEByuKgrm289mHe7ARg8cszBiNudHxTUWBLH++5w4SWIBPVI5uOv59EzPwj20 MbGtFaY43vPurDm5zab72p1/iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcW31jE rz1NSVSFHxYe3ZPY9CVYMB8GA1UdIwQYMBaAFGYO3bs11TdWwwa9jNkX2s/3iWy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjNCNi81MDhBQ0QyOEJD OTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4xYkRCcjJNMlJmYXpfZUpi TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnN2R1elhWTjFiREJyMk0yUmZhel9lSmJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjNCNi81MDhBQ0QyOEJDOTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4x YkRCcjJNMlJmYXpfZUpiTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCBRJ5spi6eCo0zpdfzVuSqChd/OU863Yg6dJjnUUQ7LLOG7cJ8rc0 HxzAEO0/7DKo0wzmXsSb+tAN7MaJbXMpC6/VGcs9D8M+tw0OeWzQlc7UAUl3fkGX 3veG19Wu6YbRHFOyyvAhp5MWO2EuNHs4LsFayXFH6AsWkoUD3pvMOMISIkqx8doZ 7a8fHiVazv0XbYZcZFMcHivlhgTcXtlWKXxuTePjV6BkINKEHDhmtPXfzKaneAF0 8dxjFr6JCg+sAC+Jn3ap01MW2hhd8XTBOrqEr2kJyqcFSoNZMI/E2yDiMYSQbpF9 XDehLMd6XKaaddITm4F82RROKo5iREvn -----END CERTIFICATE-----Generated at Sat May 31 17:11:27 2025 by rpki-client