$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: U5eOYb+q/kZi6NS0KFTVR9dKJCdj2qY8aUvHdYJjpHk= Subject key identifier: BD:B2:19:65:18:90:C2:45:A8:A2:E3:A1:32:E0:FB:E4:06:A1:65:57 Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 02E1 Signing time: Fri 09 May 2025 01:07:58 +0000 Manifest this update: Fri 09 May 2025 01:07:58 +0000 Manifest next update: Fri 16 May 2025 01:07:58 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: ZHkE8nX9QYUGg01cLH+AmiwVC8/G41hbq0epcSR+l48=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: z/U3Mkt9VwxVqDogBYYiVzyvbWpXlgorgYhnUU244UM=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: saU/mKblZfuPXjfaCBZNvJjF3cnnkkpxvAWRjd4uqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 01:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Validity Not Before: May 9 01:07:58 2025 GMT Not After : May 16 01:07:58 2025 GMT Subject: CN=681d556e-3562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:ac:62:39:6c:55:bc:e2:64:98:9b:49:2a: 82:05:e9:ea:a4:ba:84:cb:da:c5:17:b2:44:0a:93: 5a:e0:02:e2:c8:c3:58:b9:3a:64:ec:f8:9c:99:2d: 1e:d4:ba:27:4d:aa:3a:e0:44:ae:5e:cf:55:8f:e8: f7:e6:7a:01:78:b0:e6:c4:e9:2c:55:de:2f:53:0e: 5c:d7:c5:5f:97:06:41:4d:20:54:b3:1e:cf:bf:5f: 4b:4f:f2:89:80:f4:ac:e7:f4:9c:87:18:a4:a9:80: 59:3c:b2:c8:4c:86:cc:be:1a:9a:76:41:ee:d3:0f: 4f:1d:97:e9:4a:d8:1e:15:12:c3:42:cc:df:52:c1: 82:67:64:cb:15:ed:95:7a:a9:c0:7b:7a:c3:41:7a: 4d:27:46:4a:af:af:92:2f:7a:f6:48:b7:2d:d2:0c: 6b:7c:37:07:ba:d9:90:90:51:e0:e8:e7:fb:d5:f4: b8:a7:20:5c:27:a1:ec:2a:6d:60:f3:cc:2e:f8:b8: cc:3e:cf:84:c8:f2:94:0b:e7:df:9b:a1:7b:3b:0e: 48:14:4e:cd:b4:5a:1d:44:40:ca:71:49:d5:cb:a7: d2:d9:ff:06:7c:bf:e3:5f:38:5d:10:4b:15:af:2f: 39:67:a9:b0:e7:fb:b4:f3:c4:f9:a3:65:57:7d:a9: d9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B2:19:65:18:90:C2:45:A8:A2:E3:A1:32:E0:FB:E4:06:A1:65:57 X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:3a:ee:23:65:9b:9e:d6:be:c8:e6:df:79:29:68:ce:3c:6a: 8d:47:d2:9c:56:db:f1:75:67:c8:2b:5e:19:03:16:26:d0:f7: f1:af:64:2d:58:2e:f5:89:38:34:fe:ec:af:44:6a:a9:14:93: e3:99:3d:52:e7:e8:79:88:21:28:77:28:1a:e8:3e:21:55:9a: ba:78:4c:45:ca:1b:0c:6e:2d:b0:da:2a:a2:b9:a6:b4:c5:8a: 43:36:46:ad:cf:25:25:84:b5:47:1e:05:aa:9b:36:e4:d4:be: 49:73:61:45:6c:1f:b9:fa:41:2f:3d:70:a3:b5:52:d2:dd:85: 0b:18:d4:ec:03:84:6e:69:56:03:e7:f5:a6:95:7e:8e:29:ec: df:f8:d0:af:7f:1c:e5:93:fc:aa:21:d0:59:25:90:5f:52:af: a7:a7:92:29:f3:11:b7:74:e8:95:a8:be:b7:f6:09:03:7d:b7: 5e:af:23:db:4d:c3:ed:52:e4:5f:0d:49:29:15:df:73:c2:f4: 88:7f:ad:dd:6c:df:42:4f:85:7c:1e:b1:c9:3b:12:38:6b:04: 23:0a:7e:e7:de:35:95:c7:57:ca:58:9f:e8:7e:5d:a7:09:6d: 78:d9:49:23:52:7a:30:15:84:d9:77:99:e5:00:d7:d8:65:49: d6:73:02:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwNTA5MDEwNzU4WhcNMjUwNTE2MDEwNzU4WjAYMRYwFAYD VQQDEw02ODFkNTU2ZS0zNTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl6+sYjlsVbziZJibSSqCBenqpLqEy9rFF7JECpNa4ALiyMNYuTpk7PicmS0e 1LonTao64ESuXs9Vj+j35noBeLDmxOksVd4vUw5c18VflwZBTSBUsx7Pv19LT/KJ gPSs5/SchxikqYBZPLLITIbMvhqadkHu0w9PHZfpStgeFRLDQszfUsGCZ2TLFe2V eqnAe3rDQXpNJ0ZKr6+SL3r2SLct0gxrfDcHutmQkFHg6Of71fS4pyBcJ6HsKm1g 88wu+LjMPs+EyPKUC+ffm6F7Ow5IFE7NtFodREDKcUnVy6fS2f8GfL/jXzhdEEsV ry85Z6mw5/u088T5o2VXfanZnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2yGWUY kMJFqKLjoTLg++QGoWVXMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoOu4jZZue1r7I5t95KWjOPGqNR9KcVtvxdWfIK14ZAxYm0Pfxr2Qt WC71iTg0/uyvRGqpFJPjmT1S5+h5iCEodyga6D4hVZq6eExFyhsMbi2w2iqiuaa0 xYpDNkatzyUlhLVHHgWqmzbk1L5Jc2FFbB+5+kEvPXCjtVLS3YULGNTsA4RuaVYD 5/WmlX6OKezf+NCvfxzlk/yqIdBZJZBfUq+np5Ip8xG3dOiVqL639gkDfbderyPb TcPtUuRfDUkpFd9zwvSIf63dbN9CT4V8HrHJOxI4awQjCn7n3jWVx1fKWJ/ofl2n CW142UkjUnowFYTZd5nlANfYZUnWcwIG -----END CERTIFICATE-----Generated at Sat May 10 21:45:17 2025 by rpki-client