$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: yEzyE116Yx0zdU4HFgRNh+oW8LXl/5/i+fuVGuPNbvY= Subject key identifier: E2:58:4B:59:78:D8:92:49:DB:D7:3A:6A:17:48:E4:EA:32:85:2B:17 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 0596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 0595 Signing time: Sat 10 May 2025 22:49:18 +0000 Manifest this update: Sat 10 May 2025 22:49:17 +0000 Manifest next update: Sat 17 May 2025 22:49:17 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: A3oJcbmbZOMniX2b6UQt0QPHHLRtr06WLTIY8MFEgt4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 22:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1430 (0x596) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: May 10 22:49:17 2025 GMT Not After : May 17 22:49:17 2025 GMT Subject: CN=681fd7ed-3766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:a8:07:de:78:47:11:b3:99:83:ee:59:bb: 32:8b:39:65:14:9c:bf:1a:d9:f6:f7:c0:cc:e5:6d: ee:a3:38:fb:65:7d:c1:7a:02:10:11:81:e4:37:32: f5:e2:1c:81:87:af:4a:ab:03:44:45:66:dd:7a:de: 54:f4:f9:64:87:d9:8a:d4:31:cd:a3:9e:d0:83:44: 74:25:ab:dc:39:93:ba:39:53:46:69:e3:99:3a:48: 69:9e:88:4d:c4:89:a4:75:31:81:14:03:99:f0:d4: e4:fb:dd:fd:6f:5e:f4:42:a3:15:a2:88:4b:cf:e8: 21:79:25:81:d6:88:64:8e:31:21:0e:46:37:74:a0: 20:ca:ae:7f:7a:c1:63:90:11:94:8b:72:5b:dc:51: f5:fa:86:3d:f1:b4:ef:5a:8c:44:15:e4:ac:ab:38: 32:4e:5f:bb:f7:0c:d7:fa:f2:47:f1:33:76:76:65: 7c:ed:a5:45:58:f9:56:6f:b4:6a:b9:de:5f:81:d5: 30:30:34:2f:97:47:e7:8f:3b:61:93:16:b6:f0:8e: 62:2f:6d:4b:3a:69:8c:02:b0:f7:74:d6:ae:9d:72: 87:aa:cd:2c:87:ef:44:5e:99:de:60:d5:85:ef:bf: e1:ef:b2:39:a0:14:06:f6:fb:1b:a5:50:0e:06:2d: 74:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:58:4B:59:78:D8:92:49:DB:D7:3A:6A:17:48:E4:EA:32:85:2B:17 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:13:71:27:4a:82:83:5d:2e:19:d7:8d:ca:c8:1c:df:7b:16: 90:c6:a7:09:51:b1:19:85:d1:c7:ca:e1:a7:30:e7:52:d6:5e: 71:50:2d:b0:75:28:76:87:c1:07:d3:ad:17:0a:aa:35:2d:cb: 04:42:94:89:ad:ef:e7:7a:cc:96:27:dd:ef:61:b9:62:5d:82: 0d:c5:4c:a2:2c:d9:52:53:c0:70:c2:07:6a:f5:68:6c:11:62: dc:15:8c:58:c5:5c:06:3e:c8:0c:48:d0:7f:f4:25:4d:f6:25: 7c:6f:73:45:21:e9:a7:28:d5:b4:ae:44:5e:7c:c8:80:51:98: 2c:c4:e3:5f:ed:8b:6f:cf:74:4a:df:6a:bd:04:f7:56:57:9a: 77:06:70:10:81:47:4e:c6:76:f4:87:2e:fd:3a:fa:ce:26:20: c4:37:fa:43:87:e2:ff:d3:17:ff:ed:c5:24:db:66:17:12:06: 4e:8a:13:51:f2:74:a3:5a:07:49:5a:05:99:50:a4:c3:b0:b1: 79:57:23:e8:20:07:72:3e:20:32:83:a9:3b:1d:4d:8d:dc:08: 51:91:66:1c:18:6d:04:5b:b7:40:0a:1b:f8:9a:6e:ab:1a:3b: 4d:ed:36:89:f5:11:87:a8:29:02:10:fd:6e:bc:2a:31:1c:49: 87:54:5d:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjUwNTEwMjI0OTE3WhcNMjUwNTE3MjI0OTE3WjAYMRYwFAYD VQQDEw02ODFmZDdlZC0zNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFaoB954RxGzmYPuWbsyizllFJy/Gtn298DM5W3uozj7ZX3BegIQEYHkNzL1 4hyBh69KqwNERWbdet5U9Plkh9mK1DHNo57Qg0R0JavcOZO6OVNGaeOZOkhpnohN xImkdTGBFAOZ8NTk+939b170QqMVoohLz+gheSWB1ohkjjEhDkY3dKAgyq5/esFj kBGUi3Jb3FH1+oY98bTvWoxEFeSsqzgyTl+79wzX+vJH8TN2dmV87aVFWPlWb7Rq ud5fgdUwMDQvl0fnjzthkxa28I5iL21LOmmMArD3dNaunXKHqs0sh+9EXpneYNWF 77/h77I5oBQG9vsbpVAOBi101QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOJYS1l4 2JJJ29c6ahdI5OoyhSsXMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbE3EnSoKDXS4Z143KyBzfexaQxqcJUbEZhdHHyuGnMOdS1l5xUC2w dSh2h8EH060XCqo1LcsEQpSJre/nesyWJ93vYbliXYINxUyiLNlSU8Bwwgdq9Whs EWLcFYxYxVwGPsgMSNB/9CVN9iV8b3NFIemnKNW0rkRefMiAUZgsxONf7Ytvz3RK 32q9BPdWV5p3BnAQgUdOxnb0hy79OvrOJiDEN/pDh+L/0xf/7cUk22YXEgZOihNR 8nSjWgdJWgWZUKTDsLF5VyPoIAdyPiAyg6k7HU2N3AhRkWYcGG0EW7dAChv4mm6r GjtN7TaJ9RGHqCkCEP1uvCoxHEmHVF1R -----END CERTIFICATE-----Generated at Mon May 12 12:23:35 2025 by rpki-client