$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: +lEgSLb45/dgAYPnIKsFYuiesD4ji6fs+ZUxLgs40nc= Subject key identifier: 21:4B:EA:A2:1B:49:9C:97:93:4B:3B:A3:E0:B2:71:B9:CD:2F:A5:A3 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 0116 Signing time: Sun 11 May 2025 03:50:21 +0000 Manifest this update: Sun 11 May 2025 03:50:21 +0000 Manifest next update: Sun 18 May 2025 03:50:21 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: epRZ2RS/1DoNG0X0AnTNd+2ns7KDrxa1sKSCwg6IY10=) 2: 3E269BEE155F11F0A4BD4442C4F9AE02.roa (hash: YepcYqCU3z67JdbH5lWyJSuimAJ/H7ABqSOHQGnz6Xw=) 3: 3EE85A64F15011EFB213307AC4F9AE02.roa (hash: FZiV32cBEg2NN1DO+SVE2QlqP4jS8vRZNJ/pSFiMq2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 03:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: May 11 03:50:21 2025 GMT Not After : May 18 03:50:21 2025 GMT Subject: CN=68201e7d-4f56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:c0:2d:12:86:90:dd:12:0b:b1:57:a9:bb: 58:6e:19:3a:fe:54:9c:33:14:3c:17:12:21:cf:49: 41:7c:c6:41:89:5b:03:6d:bb:71:c4:10:9b:67:36: 29:71:ad:27:c0:76:15:d5:91:19:24:b6:30:33:2b: 85:e2:c9:5e:e9:d7:57:b8:7d:68:ee:d8:86:63:4c: 37:d9:8d:93:32:e9:fd:fa:c2:50:4e:4e:ad:ed:73: 1c:76:ab:84:3f:6f:ef:6a:1b:71:21:64:7d:c9:61: ae:b4:67:1f:ec:57:2b:3c:66:65:24:2f:58:ec:bf: 56:7a:3e:ad:90:02:ef:30:11:7f:04:c7:cf:f4:f9: fd:70:de:59:10:9c:62:48:fa:3f:f8:49:08:83:e9: de:e7:c8:33:1d:c8:87:48:4f:7f:10:47:c8:9d:98: 7c:2b:42:a6:fb:7c:f4:f4:a3:e7:ed:b9:70:c9:f0: 72:0c:14:89:8b:85:3b:67:b3:67:bc:d8:ae:96:41: e9:0c:cc:6f:dd:d0:18:9c:c6:79:ce:14:86:e2:3a: 18:51:a7:bd:78:fb:ce:42:13:ab:f0:3c:26:ca:e6: 03:c0:4c:59:ce:c0:fd:5d:f3:f8:a6:b3:c2:a6:9a: c6:d7:32:92:9e:fa:42:18:dc:99:d8:71:96:69:ac: a5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4B:EA:A2:1B:49:9C:97:93:4B:3B:A3:E0:B2:71:B9:CD:2F:A5:A3 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:61:d5:40:32:dd:fc:32:e2:26:c4:2f:15:14:e2:f3:34:7e: 4d:62:b0:54:44:9a:df:ba:9f:21:e0:72:c8:73:34:ae:42:e3: 44:8b:9a:71:10:c7:34:cb:57:b8:1e:e8:de:3c:7a:1e:1b:b2: 2e:67:c0:3c:87:de:d4:6b:48:8c:91:05:ac:74:e4:4d:d8:a2: 11:fb:cf:59:4c:a7:52:73:70:b8:7d:28:15:b2:2c:eb:46:b4: c3:b6:3d:52:cb:6f:83:c7:a3:96:5b:8a:3f:70:f0:9d:bf:b1: 76:d7:ba:59:e5:7d:b2:43:92:f3:2e:f6:76:26:40:0c:9e:33: 8e:22:0a:83:cc:03:46:4e:07:e6:cf:8a:1a:cc:8e:4b:2b:83: 22:4a:bc:d5:bd:ee:69:fa:ae:3a:d0:08:ad:7a:7c:f7:a5:b7: cc:05:0c:73:3e:df:43:8b:7d:ce:36:5d:43:3d:58:54:72:ec: b9:cf:c1:a3:a4:36:7d:e9:46:40:4d:68:45:8a:40:b9:87:cf: 8b:fb:18:8d:91:6e:8e:e4:91:ff:07:48:c1:0e:c0:44:1b:6c: 4e:4a:f6:0d:01:3a:47:45:46:e7:11:ce:0d:8e:b3:66:33:5d: 32:1d:7e:3d:0d:e3:5a:52:99:47:90:c8:a6:6b:1d:25:fa:f2: 1f:ad:6d:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwNTExMDM1MDIxWhcNMjUwNTE4MDM1MDIxWjAYMRYwFAYD VQQDEw02ODIwMWU3ZC00ZjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAniTALRKGkN0SC7FXqbtYbhk6/lScMxQ8FxIhz0lBfMZBiVsDbbtxxBCbZzYp ca0nwHYV1ZEZJLYwMyuF4sle6ddXuH1o7tiGY0w32Y2TMun9+sJQTk6t7XMcdquE P2/vahtxIWR9yWGutGcf7FcrPGZlJC9Y7L9Wej6tkALvMBF/BMfP9Pn9cN5ZEJxi SPo/+EkIg+ne58gzHciHSE9/EEfInZh8K0Km+3z09KPn7blwyfByDBSJi4U7Z7Nn vNiulkHpDMxv3dAYnMZ5zhSG4joYUae9ePvOQhOr8DwmyuYDwExZzsD9XfP4prPC pprG1zKSnvpCGNyZ2HGWaayluwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFL6qIb SZyXk0s7o+CycbnNL6WjMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHYdVAMt38MuImxC8VFOLzNH5NYrBURJrfup8h4HLIczSuQuNEi5px EMc0y1e4HujePHoeG7IuZ8A8h97Ua0iMkQWsdORN2KIR+89ZTKdSc3C4fSgVsizr RrTDtj1Sy2+Dx6OWW4o/cPCdv7F217pZ5X2yQ5LzLvZ2JkAMnjOOIgqDzANGTgfm z4oazI5LK4MiSrzVve5p+q460Aitenz3pbfMBQxzPt9Di33ONl1DPVhUcuy5z8Gj pDZ96UZATWhFikC5h8+L+xiNkW6O5JH/B0jBDsBEG2xOSvYNATpHRUbnEc4NjrNm M10yHX49DeNaUplHkMimax0l+vIfrW3l -----END CERTIFICATE-----Generated at Mon May 12 22:08:06 2025 by rpki-client