$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft File: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft (raw, json) Hash identifier: peFKqOddbxh15sccCKIsJIWhj/o2jDuTCQvuHYbIsO8= Subject key identifier: C3:22:84:10:3B:D5:1E:56:12:6F:E1:5A:7D:01:C0:4C:D0:F6:5B:98 Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 Certificate issuer: /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft Manifest number: 42 Signing time: Sun 11 May 2025 06:19:49 +0000 Manifest this update: Sun 11 May 2025 06:19:48 +0000 Manifest next update: Sun 18 May 2025 06:19:48 +0000 Files and hashes: 1: ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl (hash: 4VO6m4HtZ+UFpe1Je3IV4+1brDRBkJTb07plNjZekMs=) 2: 48243250E78D11EF98760355C4F9AE02.roa (hash: H/VqLJG3It+odLKG96H1sbVkDmzdKmTeoPCyOU9UZ8o=) 3: 1FCC4B16E78911EF99A1A729C4F9AE02.roa (hash: ur0Y19RBZlSTMz351Bt1h0UOu7/4H8KcC7lP/9sLDBM=) 4: CAB9B360E20211EF80FC810DC4F9AE02.roa (hash: 65X5sPIhdKM1lp6V7hevZEuaDbWujUAm7MoeXT80kOw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 06:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598 Validity Not Before: May 11 06:19:48 2025 GMT Not After : May 18 06:19:48 2025 GMT Subject: CN=68204184-07cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:9b:a0:88:75:af:3d:cc:fd:6c:45:6f:8a: f1:b1:1f:f9:56:cf:29:0f:2f:26:68:17:5a:d4:cf: 1a:9c:14:19:40:33:24:74:a8:5f:9b:26:34:e6:f1: 2a:19:f5:5f:52:5d:31:e0:33:8e:b1:3f:ee:81:e5: b5:26:d5:a3:71:22:bd:83:e1:b0:43:3b:3d:0e:4d: 5a:64:46:1f:75:b6:31:0e:8c:04:0d:8d:dc:bd:4a: 58:fb:ab:2a:8e:da:01:8c:21:9b:a2:85:6f:1f:b2: a9:43:ba:39:57:5a:6c:b9:df:fc:01:60:d8:44:19: 77:6b:d8:3d:5d:ae:2f:6b:8a:62:f5:a8:16:1a:ec: 14:37:c5:55:dc:cc:e0:07:e9:95:46:37:6e:ff:06: 1d:23:30:15:60:f0:4f:f5:e5:07:39:b9:66:43:07: 54:21:7a:b8:18:c9:41:6f:33:80:16:64:f0:c3:46: 8a:55:6b:85:d5:4f:79:be:52:f0:64:e8:e2:07:02: c0:fb:af:c2:f6:a5:d3:b7:dd:9c:7f:30:fe:94:8c: 2f:d4:0a:c5:36:d5:3a:be:fb:f2:02:4e:a7:93:d8: 77:d7:00:94:40:fb:83:80:68:fc:5e:ef:6c:31:f8: 14:62:2d:b9:a6:9d:db:e1:5d:57:8c:ad:3d:3c:8f: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:22:84:10:3B:D5:1E:56:12:6F:E1:5A:7D:01:C0:4C:D0:F6:5B:98 X509v3 Authority Key Identifier: keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:02:37:8d:c2:f9:df:7f:f5:58:4d:c3:04:93:17:9c:62:2a: b1:df:3c:f2:55:b6:90:80:54:c6:41:c1:d6:26:05:24:06:69: bc:57:65:7c:41:81:3c:fd:19:d3:62:05:45:14:a5:af:53:5f: 70:13:d3:03:03:20:24:8e:3b:f1:44:41:98:56:a3:50:4a:3b: 5a:3e:70:52:eb:d4:7e:d2:9f:c4:94:ac:62:58:94:9c:9f:bb: fd:91:4d:35:a3:8f:ba:41:21:dd:36:a1:58:40:b2:68:41:ab: 72:c2:7f:d0:c6:ad:6e:b4:53:f9:76:31:ad:8e:f3:ef:b3:2c: 50:66:aa:99:70:54:34:5d:1b:f0:cf:64:b5:9b:d3:d4:e7:aa: 0c:24:d8:24:04:ff:e9:50:d0:4f:3e:f5:93:60:9b:79:99:74: 29:b1:1c:c5:fb:85:a7:0d:f1:25:1e:65:a6:a4:83:c1:33:f3: 11:bf:d5:dd:d0:51:38:76:c2:ef:43:bc:5a:41:2f:9b:64:9d: a0:9a:46:6c:44:e3:e4:f8:ac:bd:65:64:1c:ff:55:57:da:1c: 28:43:70:82:97:f7:89:5a:50:62:ad:d8:f6:7f:cc:4e:62:e8: 33:62:e7:2c:bd:82:da:f6:d6:9a:ba:e9:62:b9:a7:7e:e2:14: 78:4b:b8:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RDM0QjExMC8GA1UEBRMoNjRDQjZFQTdEN0QwRTUxRjRENDJCMkQ2ODQ3Mjc0QUJC MDczNjU5ODAeFw0yNTA1MTEwNjE5NDhaFw0yNTA1MTgwNjE5NDhaMBgxFjAUBgNV BAMTDTY4MjA0MTg0LTA3Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCylJugiHWvPcz9bEVvivGxH/lWzykPLyZoF1rUzxqcFBlAMyR0qF+bJjTm8SoZ 9V9SXTHgM46xP+6B5bUm1aNxIr2D4bBDOz0OTVpkRh91tjEOjAQNjdy9Slj7qyqO 2gGMIZuihW8fsqlDujlXWmy53/wBYNhEGXdr2D1dri9rimL1qBYa7BQ3xVXczOAH 6ZVGN27/Bh0jMBVg8E/15Qc5uWZDB1QhergYyUFvM4AWZPDDRopVa4XVT3m+UvBk 6OIHAsD7r8L2pdO33Zx/MP6UjC/UCsU21Tq++/ICTqeT2HfXAJRA+4OAaPxe72wx +BRiLbmmndvhXVeMrT08j9hBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwyKEEDvV HlYSb+FafQHATND2W5gwHwYDVR0jBBgwFoAUZMtup9fQ5R9NQrLWhHJ0q7BzZZgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEMzRCL0IzREI1MUQyREYz NTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5TlFyTFdoSEowcTdCelpa Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk10dXA5ZlE1UjlOUXJMV2hISjBxN0J6WlpnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFE MzRCL0IzREI1MUQyREYzNTExRUZBNThENjUzQkM0RjlBRTAyL1pNdHVwOWZRNVI5 TlFyTFdoSEowcTdCelpaZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH8CN43C+d9/9VhNwwSTF5xiKrHfPPJVtpCAVMZBwdYmBSQGabxXZXxB gTz9GdNiBUUUpa9TX3AT0wMDICSOO/FEQZhWo1BKO1o+cFLr1H7Sn8SUrGJYlJyf u/2RTTWjj7pBId02oVhAsmhBq3LCf9DGrW60U/l2Ma2O8++zLFBmqplwVDRdG/DP ZLWb09Tnqgwk2CQE/+lQ0E8+9ZNgm3mZdCmxHMX7hacN8SUeZaakg8Ez8xG/1d3Q UTh2wu9DvFpBL5tknaCaRmxE4+T4rL1lZBz/VVfaHChDcIKX94laUGKt2PZ/zE5i 6DNi5yy9gtr21pq66WK5p37iFHhLuO4= -----END CERTIFICATE-----Generated at Tue May 13 08:21:08 2025 by rpki-client