$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: heRWQ/eg7lopSwDH40nkR2X0a+iWlQkIIjbw7hzXo4U= Subject key identifier: D3:6B:6C:DB:53:46:50:42:79:32:DD:4B:FD:38:9F:A4:EE:22:54:7F Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 34DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 34B0 Signing time: Sat 10 May 2025 14:27:17 +0000 Manifest this update: Sat 10 May 2025 14:27:16 +0000 Manifest next update: Sat 17 May 2025 14:27:16 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: BQDrzRV1j5qN9guTML7yzqFQtjwi/6y8l1A9ZfW2Nzk=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: mhSDrNTd50cS8wLIGVZl7Ze3yEkifRrR2iMHOlgICfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13535 (0x34df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: May 10 14:27:16 2025 GMT Not After : May 17 14:27:16 2025 GMT Subject: CN=681f6245-36d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:50:e2:f3:d1:d1:77:e5:74:ca:73:c4:ef: cf:d9:aa:5e:aa:97:96:6c:66:24:c7:b8:28:4d:ee: 36:62:fe:12:ef:96:43:f8:65:4f:ed:d5:e5:63:7b: d7:9b:c8:25:48:52:71:5e:da:2c:f1:df:b7:c8:e9: 88:20:b9:d4:d6:05:88:d3:c0:91:45:dd:fa:16:ba: db:ea:ab:a2:a3:3a:a4:2f:5e:81:c1:7e:67:84:74: 09:18:e5:2b:c2:fe:2f:9e:2f:5d:cb:d4:93:aa:63: 5d:7b:70:27:79:c0:8b:7e:be:54:47:c4:81:29:ce: 29:e1:5d:d1:dd:bc:ed:f6:28:ff:73:09:d0:6b:e3: 6e:f5:97:1d:c6:1a:b8:10:7f:b3:cb:67:da:6c:33: d7:df:09:ce:fe:0b:b2:8d:58:07:05:73:a2:53:c3: 97:c9:8e:f2:0a:8f:b0:f0:83:48:2d:33:65:55:ee: 06:d3:87:bd:fd:0b:11:d7:e0:de:91:f1:c7:b4:fa: 01:d6:6a:ce:9f:c7:25:84:7e:19:4f:9b:bc:7f:5c: af:f1:ea:d2:7e:a2:78:52:b8:bb:3c:cd:d4:b3:30: f5:24:68:d4:d1:2e:3a:cd:ef:df:75:32:49:fb:5b: 13:7f:2d:c0:af:58:b3:0e:12:6a:d4:12:3d:c1:ab: 6b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6B:6C:DB:53:46:50:42:79:32:DD:4B:FD:38:9F:A4:EE:22:54:7F X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption da:79:50:e0:20:ab:8a:77:27:ea:9d:d5:67:75:94:05:62:45: 23:5d:68:b4:11:ed:81:f0:dc:e8:a7:8d:0a:51:3d:35:8a:33: ea:7e:65:52:e4:fd:70:ad:ec:c1:6b:7f:5b:44:bb:98:e6:ab: f6:d9:a1:a6:08:74:a1:be:0a:a2:44:8f:f8:ba:90:5a:81:a4: 19:23:2b:7c:05:dd:b8:f1:d0:34:34:75:8f:52:1b:9b:95:04: e0:da:1a:73:1d:70:cd:04:27:75:5f:b2:da:bc:cf:70:7f:a0: 0b:81:50:a2:b7:45:88:e4:af:90:84:5b:ba:b4:b8:94:74:cf: 43:e7:95:65:8e:7f:f9:cd:2c:c6:a3:36:43:ac:22:aa:09:46: 97:7a:bd:80:b4:eb:72:1d:b3:a3:5c:bc:4f:e1:26:52:c7:4a: 06:6c:6c:bb:eb:50:ca:2b:8f:c1:5a:e7:43:a0:8f:dc:ed:66: c5:62:19:2d:7d:6c:af:c2:44:a8:2b:a2:e1:32:e6:64:3a:d3: 00:98:d3:df:b4:4b:dd:b7:c3:09:8f:b4:fc:da:bf:ab:f3:8c: 30:fe:96:91:83:77:c9:a9:48:ff:3f:69:4e:c1:c9:fe:72:a0: e1:ec:1b:8a:63:52:aa:1f:cc:e8:91:62:06:54:70:fe:f9:71: 42:ad:fd:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUwNTEwMTQyNzE2WhcNMjUwNTE3MTQyNzE2WjAYMRYwFAYD VQQDEw02ODFmNjI0NS0zNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnJtQ4vPR0XfldMpzxO/P2apeqpeWbGYkx7goTe42Yv4S75ZD+GVP7dXlY3vX m8glSFJxXtos8d+3yOmIILnU1gWI08CRRd36Frrb6quiozqkL16BwX5nhHQJGOUr wv4vni9dy9STqmNde3AnecCLfr5UR8SBKc4p4V3R3bzt9ij/cwnQa+Nu9Zcdxhq4 EH+zy2fabDPX3wnO/guyjVgHBXOiU8OXyY7yCo+w8INILTNlVe4G04e9/QsR1+De kfHHtPoB1mrOn8clhH4ZT5u8f1yv8erSfqJ4Uri7PM3UszD1JGjU0S46ze/fdTJJ +1sTfy3Ar1izDhJq1BI9watrDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNrbNtT RlBCeTLdS/04n6TuIlR/MB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDaeVDgIKuKdyfqndVndZQFYkUjXWi0Ee2B8Nzop40KUT01ijPqfmVS 5P1wrezBa39bRLuY5qv22aGmCHShvgqiRI/4upBagaQZIyt8Bd248dA0NHWPUhub lQTg2hpzHXDNBCd1X7LavM9wf6ALgVCit0WI5K+QhFu6tLiUdM9D55Vljn/5zSzG ozZDrCKqCUaXer2AtOtyHbOjXLxP4SZSx0oGbGy761DKK4/BWudDoI/c7WbFYhkt fWyvwkSoK6LhMuZkOtMAmNPftEvdt8MJj7T82r+r84ww/paRg3fJqUj/P2lOwcn+ cqDh7BuKY1KqH8zokWIGVHD++XFCrf1f -----END CERTIFICATE-----Generated at Mon May 12 03:59:02 2025 by rpki-client