$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: ME5abCQWxkuP+0O5Fv37XjAlrRJabp12owMCHxDQ2eA= Subject key identifier: 86:56:D2:5A:81:ED:FB:25:A7:52:EF:08:14:0F:20:28:A2:11:1E:C9 Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: EE Signing time: Thu 15 May 2025 04:48:50 +0000 Manifest this update: Thu 15 May 2025 04:48:50 +0000 Manifest next update: Thu 22 May 2025 04:48:50 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: g0WbnGViC6airQMaTKGWGBmUBwMo+uUjrHFmN7ukBgE=) 2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 04:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: May 15 04:48:50 2025 GMT Not After : May 22 04:48:50 2025 GMT Subject: CN=68257232-d288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:7d:a0:6e:d3:7a:cb:0b:3a:a8:18:74:36:6a: 27:a5:5c:3b:59:c4:f3:45:94:86:6c:79:2e:26:03: 8f:d2:c9:56:df:78:aa:ad:c7:dc:5d:d4:d8:d4:9d: b5:1b:d7:f4:b9:6d:ec:2b:31:0d:a6:2b:d2:9e:2d: 5c:19:75:1a:a6:c1:ad:d5:d0:da:0f:7a:99:93:f3: 4d:8d:f1:b4:a8:bc:e8:1b:df:2f:5e:92:b8:8c:ec: 28:7f:b8:80:26:fa:f2:e3:67:fc:7f:81:9d:72:84: b1:26:c6:6b:f3:fa:ed:01:40:20:66:2d:2a:64:24: 91:a0:49:0c:de:1d:cf:9f:3d:9c:68:fa:36:7d:55: a1:c7:d1:fe:1b:e8:be:77:5d:34:76:be:85:c9:a6: da:5f:ba:9c:88:4c:7e:ba:09:3f:b0:bc:69:c7:bc: fc:5b:e5:b4:d1:fa:b0:3e:22:39:4d:77:0c:8b:7f: 33:80:2c:1b:c1:5a:62:48:2b:d1:a1:42:fa:4b:be: 4c:84:a2:de:c8:6a:c4:2a:9c:a8:fe:e2:a4:55:87: 91:f4:0f:9f:4e:36:48:4d:85:49:58:ef:ee:fe:6e: 05:c4:0d:2c:c8:6e:98:09:2a:89:6e:1a:c5:3b:17: 38:07:52:08:a0:49:57:4c:18:a7:59:8f:29:d3:50: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:D2:5A:81:ED:FB:25:A7:52:EF:08:14:0F:20:28:A2:11:1E:C9 X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c0:fd:b0:ab:00:bd:79:5c:a0:6f:37:50:c7:6d:a5:66:5e: 0a:d8:7a:1d:82:de:23:e7:c0:67:df:48:97:4a:54:e5:26:6b: 04:2e:75:85:07:a4:1d:cf:43:97:2c:62:a8:47:f5:42:96:43: d6:30:be:7f:46:8e:73:ba:41:db:b1:ae:6e:01:09:1b:31:c5: 8d:ca:cc:51:e6:bd:92:18:5a:bb:9b:b2:c7:f3:6e:6c:90:b9: 30:08:c2:3b:78:99:99:45:c6:61:97:81:21:16:41:c5:c6:d3: 16:20:b8:77:9d:5c:1f:eb:a1:96:a0:8f:b3:01:dd:81:60:0b: 00:fc:24:97:4b:c7:57:67:69:19:f1:8c:ef:53:63:78:b2:e9: de:f5:09:f2:39:cf:5e:16:54:db:1a:3d:e7:fe:b2:42:85:1b: 3c:ef:37:42:2c:45:aa:0d:c4:8c:6f:ac:f8:ff:47:34:b0:17: 61:d5:f1:66:f0:28:60:07:c8:99:5b:8d:9e:c3:85:8f:3d:44: de:06:84:68:6d:0d:91:d9:cb:d9:5b:33:e1:b9:e4:15:a6:dd: e4:36:ce:45:42:67:f2:69:f3:eb:7f:f7:d0:1e:37:4c:d6:e2: e7:a4:57:7f:0d:a6:ae:db:e5:87:45:1e:59:86:f9:60:3c:6a: d5:a3:c1:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjUwNTE1MDQ0ODUwWhcNMjUwNTIyMDQ0ODUwWjAYMRYwFAYD VQQDEw02ODI1NzIzMi1kMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8n2gbtN6yws6qBh0NmonpVw7WcTzRZSGbHkuJgOP0slW33iqrcfcXdTY1J21 G9f0uW3sKzENpivSni1cGXUapsGt1dDaD3qZk/NNjfG0qLzoG98vXpK4jOwof7iA Jvry42f8f4GdcoSxJsZr8/rtAUAgZi0qZCSRoEkM3h3Pnz2caPo2fVWhx9H+G+i+ d100dr6FyabaX7qciEx+ugk/sLxpx7z8W+W00fqwPiI5TXcMi38zgCwbwVpiSCvR oUL6S75MhKLeyGrEKpyo/uKkVYeR9A+fTjZITYVJWO/u/m4FxA0syG6YCSqJbhrF Oxc4B1IIoElXTBinWY8p01AddQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZW0lqB 7fslp1LvCBQPICiiER7JMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqwP2wqwC9eVygbzdQx22lZl4K2Hodgt4j58Bn30iXSlTlJmsELnWF B6Qdz0OXLGKoR/VClkPWML5/Ro5zukHbsa5uAQkbMcWNysxR5r2SGFq7m7LH825s kLkwCMI7eJmZRcZhl4EhFkHFxtMWILh3nVwf66GWoI+zAd2BYAsA/CSXS8dXZ2kZ 8YzvU2N4sune9QnyOc9eFlTbGj3n/rJChRs87zdCLEWqDcSMb6z4/0c0sBdh1fFm 8ChgB8iZW42ew4WPPUTeBoRobQ2R2cvZWzPhueQVpt3kNs5FQmfyafPrf/fQHjdM 1uLnpFd/Daau2+WHRR5ZhvlgPGrVo8H7 -----END CERTIFICATE-----Generated at Fri May 16 06:07:45 2025 by rpki-client