$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: XjtwwNuOyPS0FT8rf4BYf4Z6VNjZHIrXj1YDwdJ3dvA= Subject key identifier: 89:4B:6D:45:53:CB:8D:F5:30:DE:BE:99:60:DC:A9:CF:5D:6C:20:F2 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 12 Signing time: Fri 09 May 2025 07:05:26 +0000 Manifest this update: Fri 09 May 2025 07:05:25 +0000 Manifest next update: Fri 16 May 2025 07:05:25 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: qUaYbxjHibqsMjznU69NT33eN+E/oiyC88DRmR2D15A=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 07:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: May 9 07:05:25 2025 GMT Not After : May 16 07:05:25 2025 GMT Subject: CN=681da935-7119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:05:2b:5e:5a:d5:31:64:6b:7c:07:be:32: 19:e3:fc:19:9d:05:c8:82:fb:33:73:17:eb:77:2e: fe:d5:0f:7d:e6:58:70:13:58:d5:25:e7:d7:e9:f0: 3b:11:ea:26:ee:36:bb:83:08:27:8f:ed:fb:b2:2f: 59:98:be:73:0c:ca:07:97:71:dd:a7:4d:68:6d:c7: 1e:83:c6:c3:8b:2d:da:19:7a:00:01:6c:fe:69:f6: b5:53:85:67:0d:7d:aa:d9:2f:ab:5e:17:fd:55:0c: d1:67:4d:34:bd:31:9b:81:cc:7c:6d:24:73:94:d4: 34:08:ac:86:fe:49:a3:aa:5b:7c:ea:85:ab:74:f7: cd:c0:20:f4:d2:64:9e:eb:15:56:d9:9c:7f:9c:6f: a2:74:2a:56:68:25:e8:97:e4:63:fa:9c:6e:6a:b0: a9:e6:03:5c:14:2d:de:d4:a2:b0:27:10:69:30:41: 04:ef:80:3f:6e:27:d9:f3:6b:7c:16:3e:c6:e6:a0: ef:c9:64:cd:97:26:50:35:9a:99:81:f1:86:f1:66: 34:9d:dc:5c:9c:13:d8:14:68:84:ee:03:3b:88:a6: 7f:f4:4f:05:68:a1:26:49:c0:5c:b9:d1:f6:fd:67: d2:08:08:a2:7f:b4:a2:1b:c5:78:9c:72:e4:b9:73: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:6D:45:53:CB:8D:F5:30:DE:BE:99:60:DC:A9:CF:5D:6C:20:F2 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:54:c0:4e:75:fc:45:78:df:b7:16:da:38:ca:ca:24:40:94: 29:da:0e:4c:8d:32:cf:d0:36:39:99:73:a5:13:f5:b3:6a:c8: c2:1c:85:f9:b6:b5:77:bb:c7:2d:bf:8f:d5:bc:68:9a:b6:21: 7e:1d:7f:ae:fd:81:e3:5f:00:87:7a:06:27:fc:8c:90:95:ab: 57:fd:dd:9f:a6:61:db:14:cb:2e:c7:c8:e0:77:c4:b0:08:89: 77:40:96:6b:fd:06:db:54:f6:77:8a:b8:ae:fe:23:1b:fa:f8: 61:28:5a:8e:d9:72:83:9f:ba:72:73:a2:0d:88:e0:96:e4:aa: cc:f8:45:c9:b6:d2:0e:75:fe:73:09:81:55:8a:45:db:78:41: f9:0f:6d:a9:61:a2:43:3e:f3:37:a6:7c:5c:7b:5c:25:4b:d5: b0:1a:9e:9e:f7:d2:87:ed:5d:e8:fc:fe:4d:d1:76:57:a2:66: dd:df:2e:39:8a:eb:46:cf:a2:f7:4b:f7:20:fe:e9:cd:e6:19: f1:14:c7:80:60:36:ba:3c:7b:b8:b6:ed:96:46:6f:49:12:69: fc:ec:a3:a3:c1:26:7c:39:31:5b:93:0f:40:0b:77:bc:93:f0: 80:c3:68:bb:56:92:9e:7b:6c:c2:6d:5c:58:c3:5e:fb:8f:2d: 4a:3a:35:13 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTA1MDkwNzA1MjVaFw0yNTA1MTYwNzA1MjVaMBgxFjAUBgNV BAMTDTY4MWRhOTM1LTcxMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7dAUrXlrVMWRrfAe+Mhnj/BmdBciC+zNzF+t3Lv7VD33mWHATWNUl59fp8DsR 6ibuNruDCCeP7fuyL1mYvnMMygeXcd2nTWhtxx6DxsOLLdoZegABbP5p9rVThWcN farZL6teF/1VDNFnTTS9MZuBzHxtJHOU1DQIrIb+SaOqW3zqhat0983AIPTSZJ7r FVbZnH+cb6J0KlZoJeiX5GP6nG5qsKnmA1wULd7UorAnEGkwQQTvgD9uJ9nza3wW PsbmoO/JZM2XJlA1mpmB8YbxZjSd3FycE9gUaITuAzuIpn/0TwVooSZJwFy50fb9 Z9IICKJ/tKIbxXiccuS5c+w9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiUttRVPL jfUw3r6ZYNypz11sIPIwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAdUwE51/EV437cW2jjKyiRAlCnaDkyNMs/QNjmZc6UT9bNqyMIchfm2 tXe7xy2/j9W8aJq2IX4df679geNfAId6Bif8jJCVq1f93Z+mYdsUyy7HyOB3xLAI iXdAlmv9BttU9neKuK7+Ixv6+GEoWo7ZcoOfunJzog2I4Jbkqsz4Rcm20g51/nMJ gVWKRdt4QfkPbalhokM+8zemfFx7XCVL1bAanp730oftXej8/k3RdleiZt3fLjmK 60bPovdL9yD+6c3mGfEUx4BgNro8e7i27ZZGb0kSafzso6PBJnw5MVuTD0ALd7yT 8IDDaLtWkp57bMJtXFjDXvuPLUo6NRM= -----END CERTIFICATE-----Generated at Sat May 10 19:28:25 2025 by rpki-client