$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: O32LgUPZKCroBbu5bgUXv356X7OGJ4vNweiHO61A7zA= Subject key identifier: 51:39:74:BF:BE:13:A8:0A:CC:8B:31:CA:30:92:0F:D8:97:87:A8:1C Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1E11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1E00 Signing time: Fri 16 May 2025 16:18:39 +0000 Manifest this update: Fri 16 May 2025 16:18:38 +0000 Manifest next update: Fri 23 May 2025 16:18:38 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: rRpniRPTcva/tDnUa/vS4tAF/gBOvUoGoiTKL8KcUV4=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7697 (0x1e11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: May 16 16:18:38 2025 GMT Not After : May 23 16:18:38 2025 GMT Subject: CN=6827655f-b609 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:fd:28:9b:f4:22:f3:45:8d:29:41:67:2e: 24:6e:03:13:3d:5b:d1:f2:00:6c:93:36:41:c2:5d: 39:a7:2f:20:74:54:b8:83:f3:c3:eb:66:24:88:39: b1:79:04:95:dc:76:8b:10:3b:ad:c8:9a:72:59:86: 51:d7:40:66:63:bd:ec:3e:74:05:42:e5:1a:9b:ea: 2b:3f:f1:39:99:b2:5e:ba:85:9d:15:44:cb:25:31: b2:6b:5f:0d:60:b0:6b:c1:c4:0a:33:28:03:87:6d: 58:4c:d0:5a:82:51:2c:e1:48:da:9a:14:97:a2:02: 76:74:e1:a7:40:b1:e3:cf:2a:0a:75:89:ad:1b:f3: 8e:09:74:b8:f1:31:94:d1:13:70:52:9c:98:e0:41: 19:02:b3:0b:10:83:cf:c9:e9:e4:7d:80:6c:f6:71: ec:e6:53:4a:51:e8:49:1c:f8:92:7e:d8:77:50:21: 31:c4:6f:07:fc:89:f0:c6:a2:b2:00:7b:09:8c:6a: b6:f1:1c:c6:71:20:4e:11:83:2c:18:82:fe:c5:56: 07:00:25:72:00:25:ed:72:7c:09:f2:cd:ba:cf:9e: 72:62:4f:4b:79:9c:20:5c:06:c5:24:7d:b6:fe:8f: 84:91:da:8b:97:8c:21:c4:c9:e3:37:00:22:4c:f1: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:39:74:BF:BE:13:A8:0A:CC:8B:31:CA:30:92:0F:D8:97:87:A8:1C X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:9a:a1:ce:aa:2f:28:93:f1:5a:1c:89:7d:f1:d1:7b:70:d0: b0:8a:96:f4:a6:0d:78:4e:65:e8:74:de:58:2a:fe:65:ee:4c: a6:8e:68:5f:5c:10:a4:0d:3e:b9:4f:e5:90:93:7a:61:76:90: 39:3c:af:75:d7:27:94:3d:04:7f:04:75:37:3e:3f:bc:70:f3: ec:d6:e2:83:90:41:be:4e:73:b6:3f:f4:45:d3:fe:18:89:59: 69:98:5a:7b:71:66:19:ed:f2:1b:f1:81:8b:94:c4:8d:8b:f7: 7c:31:58:38:9f:ac:72:92:08:2a:08:06:4f:13:17:dc:07:fe: 5d:5c:30:cb:17:14:e1:fa:b5:94:43:62:a6:0f:c5:59:c6:68: ed:d9:4c:05:bf:83:d5:b0:58:78:d1:05:42:70:9d:30:6d:a1: 1b:77:ae:fb:a8:7d:98:e5:d7:89:3e:73:8a:69:8e:5d:0a:58: 7e:82:f6:0b:f8:b3:d7:1f:f4:c6:89:d6:2f:f3:ee:74:e7:60: d9:9a:c3:66:f2:ed:7c:d0:3f:a7:30:6b:7b:c0:3e:e5:5d:7e: 34:82:be:fa:00:e7:60:e9:8e:a0:16:c2:48:36:ae:df:dd:bf: 1b:20:a7:13:04:fc:63:2f:f9:fc:9d:01:4b:98:8d:ae:a8:cb: fc:ec:cb:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHhEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjUwNTE2MTYxODM4WhcNMjUwNTIzMTYxODM4WjAYMRYwFAYD VQQDEw02ODI3NjU1Zi1iNjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V39KJv0IvNFjSlBZy4kbgMTPVvR8gBskzZBwl05py8gdFS4g/PD62YkiDmx eQSV3HaLEDutyJpyWYZR10BmY73sPnQFQuUam+orP/E5mbJeuoWdFUTLJTGya18N YLBrwcQKMygDh21YTNBaglEs4UjamhSXogJ2dOGnQLHjzyoKdYmtG/OOCXS48TGU 0RNwUpyY4EEZArMLEIPPyenkfYBs9nHs5lNKUehJHPiSfth3UCExxG8H/InwxqKy AHsJjGq28RzGcSBOEYMsGIL+xVYHACVyACXtcnwJ8s26z55yYk9LeZwgXAbFJH22 /o+EkdqLl4whxMnjNwAiTPH+bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFE5dL++ E6gKzIsxyjCSD9iXh6gcMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0mqHOqi8ok/FaHIl98dF7cNCwipb0pg14TmXodN5YKv5l7kymjmhf XBCkDT65T+WQk3phdpA5PK911yeUPQR/BHU3Pj+8cPPs1uKDkEG+TnO2P/RF0/4Y iVlpmFp7cWYZ7fIb8YGLlMSNi/d8MVg4n6xykggqCAZPExfcB/5dXDDLFxTh+rWU Q2KmD8VZxmjt2UwFv4PVsFh40QVCcJ0wbaEbd677qH2Y5deJPnOKaY5dClh+gvYL +LPXH/TGidYv8+5052DZmsNm8u180D+nMGt7wD7lXX40gr76AOdg6Y6gFsJINq7f 3b8bIKcTBPxjL/n8nQFLmI2uqMv87Mtk -----END CERTIFICATE-----Generated at Sun May 18 03:49:42 2025 by rpki-client