$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: VeqWbB2cMEMeB3kaKMeytLpYQT5OkQRCUBzBJKZxrT8= Subject key identifier: 92:D2:0B:DF:6B:E5:EF:EF:19:AB:07:2F:78:13:BA:83:BE:2C:9E:08 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0169 Signing time: Fri 09 May 2025 03:04:44 +0000 Manifest this update: Fri 09 May 2025 03:04:43 +0000 Manifest next update: Fri 16 May 2025 03:04:43 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: fExW2rBhvMgjP41u+BJTO/OOavAROP3eRLGyJM+tuKs=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: Qe0/BiT1tYA4h/l62j0BMeHxIJuUAO9bXjTbXA245ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 03:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: May 9 03:04:43 2025 GMT Not After : May 16 03:04:43 2025 GMT Subject: CN=681d70cc-e484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8a:ba:07:10:bf:67:f8:3f:d5:64:df:08:9a: c9:d9:df:f5:0b:39:40:3b:8c:38:00:d1:cb:39:49: 2e:55:0f:00:ba:04:c0:36:58:b4:c0:a0:15:85:cd: 4b:78:76:d9:39:7f:7a:fa:56:14:34:8f:16:80:08: b1:f9:2d:88:a8:fd:03:45:2f:f1:34:11:cf:93:68: 28:5f:f3:58:c5:eb:26:04:9b:a0:08:e3:54:4b:ad: 4e:b4:9a:d9:cc:df:4d:09:23:0b:63:10:8c:09:56: 7b:5c:73:86:25:36:23:2c:16:4b:03:4c:43:d4:f6: 90:e8:18:7f:56:c9:c3:06:fa:90:c4:9c:aa:ee:68: 8d:90:44:05:6e:2b:e3:90:50:1f:97:a5:61:d1:c7: e1:c9:d7:b3:d1:72:8f:17:3e:22:80:33:e2:37:f5: 17:ab:69:eb:be:81:25:a9:c2:a6:a6:9f:62:e2:33: 84:16:85:1f:43:a2:6c:28:a9:02:3d:3e:17:17:3e: 73:23:84:38:4e:db:b2:d4:d5:06:be:04:7b:90:92: fc:10:27:76:0d:b1:48:97:42:9e:23:39:36:7a:87: 80:00:b2:ed:2c:ad:f0:38:07:b0:d6:5d:4f:fa:1c: d3:35:d6:68:be:36:14:7d:24:c9:0a:9b:64:79:13: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D2:0B:DF:6B:E5:EF:EF:19:AB:07:2F:78:13:BA:83:BE:2C:9E:08 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:a5:a0:0a:57:15:56:8f:10:26:2c:0f:5b:b6:38:11:42:28: bf:77:69:d7:d2:b5:a0:b8:28:76:a6:12:e0:82:9e:00:62:a9: 44:35:1c:45:5f:aa:1e:99:73:3e:dd:e8:22:33:72:05:50:4d: 82:07:a2:d0:ef:90:ce:c6:72:c9:93:47:d2:73:0d:89:bc:75: 46:44:3a:ed:5e:e2:2e:55:28:07:23:78:83:41:c8:86:7e:98: 17:40:b9:87:9e:07:a6:52:22:78:37:e4:a1:c3:92:7e:83:bf: 9e:77:06:99:8e:a4:23:0e:ae:51:c2:cc:ae:d9:be:c3:e3:e5: fa:aa:69:db:6c:5c:38:59:39:4e:5d:f2:bf:31:f3:1f:88:ab: d2:00:f8:26:0a:79:8a:6c:f5:04:60:2f:f4:11:3a:39:1b:d8: 4c:94:13:bd:de:1c:00:54:4c:c3:c9:57:18:f0:e3:58:21:1f: f6:9b:7b:4c:58:4a:2c:f7:0a:88:69:f8:a5:f9:8a:7b:f6:a1: f5:10:e1:1f:c0:79:47:8c:de:c4:9a:11:39:cc:85:43:62:4b: ee:4a:57:6b:02:ae:5e:b9:54:f2:5d:2a:6e:3b:69:32:ff:c2: 55:df:61:02:79:4c:55:6b:aa:0b:16:00:b3:02:a1:0c:c2:9f: af:8b:e1:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUwNTA5MDMwNDQzWhcNMjUwNTE2MDMwNDQzWjAYMRYwFAYD VQQDEw02ODFkNzBjYy1lNDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr4q6BxC/Z/g/1WTfCJrJ2d/1CzlAO4w4ANHLOUkuVQ8AugTANli0wKAVhc1L eHbZOX96+lYUNI8WgAix+S2IqP0DRS/xNBHPk2goX/NYxesmBJugCONUS61OtJrZ zN9NCSMLYxCMCVZ7XHOGJTYjLBZLA0xD1PaQ6Bh/VsnDBvqQxJyq7miNkEQFbivj kFAfl6Vh0cfhydez0XKPFz4igDPiN/UXq2nrvoElqcKmpp9i4jOEFoUfQ6JsKKkC PT4XFz5zI4Q4Ttuy1NUGvgR7kJL8ECd2DbFIl0KeIzk2eoeAALLtLK3wOAew1l1P +hzTNdZovjYUfSTJCptkeRNWuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLSC99r 5e/vGasHL3gTuoO+LJ4IMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJpaAKVxVWjxAmLA9btjgRQii/d2nX0rWguCh2phLggp4AYqlENRxF X6oemXM+3egiM3IFUE2CB6LQ75DOxnLJk0fScw2JvHVGRDrtXuIuVSgHI3iDQciG fpgXQLmHngemUiJ4N+Shw5J+g7+edwaZjqQjDq5Rwsyu2b7D4+X6qmnbbFw4WTlO XfK/MfMfiKvSAPgmCnmKbPUEYC/0ETo5G9hMlBO93hwAVEzDyVcY8ONYIR/2m3tM WEos9wqIafil+Yp79qH1EOEfwHlHjN7EmhE5zIVDYkvuSldrAq5euVTyXSpuO2ky /8JV32ECeUxVa6oLFgCzAqEMwp+vi+Fz -----END CERTIFICATE-----Generated at Sat May 10 21:24:51 2025 by rpki-client