$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: k78uE+Y8+xBRzoQ4B6Yr+1Zasl2xVAB9aSGrLEtviuw= Subject key identifier: F3:C0:37:04:F0:70:E5:80:A5:A1:A9:B1:31:04:EA:DE:AB:C0:58:1B Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 0587 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 057B Signing time: Mon 12 May 2025 23:07:48 +0000 Manifest this update: Mon 12 May 2025 23:07:47 +0000 Manifest next update: Mon 19 May 2025 23:07:47 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: azRz7rZ5CZo55+BksVdL74TLisAyDWT9S8RAz9H4YHc=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: SEXcu7MCAx7BgjEXcpxfIMBCBr8bF8QoXI0x5nMZMBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1415 (0x587) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: May 12 23:07:47 2025 GMT Not After : May 19 23:07:47 2025 GMT Subject: CN=68227f44-3006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:17:eb:b3:f3:1b:cd:34:1b:50:ef:1f:a1:70: be:56:a0:60:62:d0:38:1b:ba:b8:a8:80:64:c3:41: f3:a6:16:c9:06:63:a2:42:71:ca:b4:d2:b9:5a:d0: 13:e0:15:9f:6c:ca:1f:d5:fa:18:3f:da:27:04:4f: 0c:6f:d6:31:83:83:0f:8d:b6:1a:b5:18:e9:b8:8e: 9e:97:4a:eb:26:f2:24:f6:9d:79:12:04:a9:b8:82: eb:5c:fc:39:90:90:41:d4:fb:fd:03:2e:dd:35:bb: 03:f5:fe:c7:c2:d3:dc:5d:91:65:a1:20:44:60:30: 9d:98:9f:1f:b7:c1:41:49:c1:6e:34:e1:5a:56:58: 6a:0d:96:21:bd:fd:a1:3d:bb:76:b6:9e:51:0e:87: b7:3b:1d:81:a5:d8:ce:9f:23:61:c2:a9:ce:a1:1b: 53:08:34:8e:ec:32:b4:50:1a:d0:39:75:6a:e5:7d: 33:c9:00:1b:79:85:58:1f:dd:f1:46:f5:fc:5c:e5: b0:05:d4:54:68:ab:a2:65:ce:4c:e4:64:ef:42:e2: 96:ae:40:78:a1:72:14:31:22:1e:c6:47:88:20:1e: 46:0e:c9:8c:67:94:df:74:10:9a:21:b2:bf:25:05: e2:ca:bb:68:da:88:73:4e:b7:fe:df:36:14:4a:3d: 5d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C0:37:04:F0:70:E5:80:A5:A1:A9:B1:31:04:EA:DE:AB:C0:58:1B X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:86:ec:f4:ce:99:e1:a1:c9:b0:67:5e:18:9a:6b:8e:9c:51: fc:17:49:4a:56:23:04:a0:a4:d6:24:86:95:08:0d:ee:55:5f: 0c:4d:2a:1f:b7:9b:96:06:0e:39:97:91:35:6d:d5:a8:bc:28: 1d:61:e4:ce:f5:d3:54:ab:b8:61:36:f9:43:c5:aa:a7:1d:18: a5:83:0f:82:01:90:cb:c9:3c:36:96:65:ba:d0:fb:02:51:6b: fe:60:18:76:47:65:f8:4f:76:a4:46:c5:b2:88:5d:1f:eb:d6: 9a:12:db:41:2c:d6:2f:7b:1b:7a:65:01:5f:53:a5:d2:e1:22: 8c:39:b6:d1:f1:1f:18:3e:27:b8:5b:1f:69:da:64:99:76:04: 39:e5:40:04:97:d5:c5:e6:6d:03:42:d4:ec:0d:3a:a5:52:9c: 07:53:d1:58:ff:df:64:f1:e0:f2:9f:27:a8:67:d5:aa:8b:0b: 6b:62:34:2c:41:e9:f6:4a:eb:d4:5b:8c:fe:96:96:74:10:7d: b8:24:65:1f:aa:bf:4e:b3:cc:b2:70:01:2c:6f:2d:a9:49:48: f8:a0:29:a5:c4:1b:6f:0d:db:55:b8:ab:10:b7:ea:2f:69:56: 4a:10:c3:e5:11:9f:86:6f:20:f7:b4:53:a0:14:db:0e:b5:81: cb:a4:11:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwNTEyMjMwNzQ3WhcNMjUwNTE5MjMwNzQ3WjAYMRYwFAYD VQQDEw02ODIyN2Y0NC0zMDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hfrs/MbzTQbUO8foXC+VqBgYtA4G7q4qIBkw0HzphbJBmOiQnHKtNK5WtAT 4BWfbMof1foYP9onBE8Mb9Yxg4MPjbYatRjpuI6el0rrJvIk9p15EgSpuILrXPw5 kJBB1Pv9Ay7dNbsD9f7HwtPcXZFloSBEYDCdmJ8ft8FBScFuNOFaVlhqDZYhvf2h Pbt2tp5RDoe3Ox2BpdjOnyNhwqnOoRtTCDSO7DK0UBrQOXVq5X0zyQAbeYVYH93x RvX8XOWwBdRUaKuiZc5M5GTvQuKWrkB4oXIUMSIexkeIIB5GDsmMZ5TfdBCaIbK/ JQXiyrto2ohzTrf+3zYUSj1dVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPANwTw cOWApaGpsTEE6t6rwFgbMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBThuz0zpnhocmwZ14YmmuOnFH8F0lKViMEoKTWJIaVCA3uVV8MTSof t5uWBg45l5E1bdWovCgdYeTO9dNUq7hhNvlDxaqnHRilgw+CAZDLyTw2lmW60PsC UWv+YBh2R2X4T3akRsWyiF0f69aaEttBLNYvext6ZQFfU6XS4SKMObbR8R8YPie4 Wx9p2mSZdgQ55UAEl9XF5m0DQtTsDTqlUpwHU9FY/99k8eDynyeoZ9WqiwtrYjQs Qen2SuvUW4z+lpZ0EH24JGUfqr9Os8yycAEsby2pSUj4oCmlxBtvDdtVuKsQt+ov aVZKEMPlEZ+GbyD3tFOgFNsOtYHLpBEL -----END CERTIFICATE-----Generated at Wed May 14 15:04:54 2025 by rpki-client