$ rpki-client -vvf rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft File: zF1c4NwYIQkMvHU417txI3GQguc.mft (raw, json) Hash identifier: dw1H8fR1m++I1kWKC6R13umXHjuXOA35CjLmq6pk+Ig= Subject key identifier: 8C:0D:7D:B3:D2:F4:B9:14:E1:96:73:E7:62:68:EE:B6:8F:50:89:23 Authority key identifier: CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 Certificate issuer: /CN=A91C91A6/serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Certificate serial: 0818 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft Manifest number: 080D Signing time: Wed 14 May 2025 20:57:21 +0000 Manifest this update: Wed 14 May 2025 20:57:20 +0000 Manifest next update: Wed 21 May 2025 20:57:20 +0000 Files and hashes: 1: zF1c4NwYIQkMvHU417txI3GQguc.crl (hash: r1ag8sl9GxBfvYM7JOee/C48Gz0s9NmYPiVJFwHbYHo=) 2: 5A020E1229E011EB80A2FF13C4F9AE02.roa (hash: cqbI01oJRPBEH+/wJOlpiaUkORzn2kWmqx1uTWAfIc8=) 3: 5B1534BE29E011EB80A2FF13C4F9AE02.roa (hash: 1CIYo//bwjYUMyQBStYQUQ8rbC/A2KlKjD1S8BvGyiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2072 (0x818) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C91A6, serialNumber=CC5D5CE0DC1821090CBC7538D7BB7123719082E7 Validity Not Before: May 14 20:57:20 2025 GMT Not After : May 21 20:57:20 2025 GMT Subject: CN=682503b1-b3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:70:76:b5:af:d2:36:5b:e6:52:ba:8f:36:9d: 4d:b8:88:82:0d:09:70:8d:ab:f9:26:e7:47:08:cd: 0b:0b:24:a4:0f:63:99:f5:16:b7:04:97:46:f3:69: 9d:5e:29:ea:28:65:62:99:82:92:d6:ba:b2:68:6c: 42:39:a3:33:77:8e:b6:49:dd:5d:8b:37:42:fd:55: 8e:00:7b:d0:26:1c:58:3f:f0:80:4a:bc:9e:cf:4e: 76:e5:10:22:6b:9e:9f:69:6b:3f:22:34:be:62:45: 01:da:c3:a0:68:7f:8b:dc:17:bc:16:58:44:00:3e: 89:0e:82:7d:16:dd:b0:eb:68:aa:68:60:97:31:e4: 89:ca:6a:d6:63:34:7f:be:ca:0f:a3:12:4f:81:6c: 09:a9:99:f8:4e:09:79:0b:4f:9e:c1:71:a1:f8:e9: 3c:a2:79:f4:f4:f8:41:f3:b3:5a:e9:8c:d7:e3:a7: 2b:72:e6:ac:85:d6:79:a3:d4:31:31:aa:2d:10:d0: 09:c4:19:27:f8:91:cf:6b:6b:ff:cc:c4:5b:b8:e8: 5b:f0:d9:a2:3d:9d:48:38:00:c5:1b:bd:c3:b7:1e: 66:1a:14:77:f9:10:f3:51:ca:fd:dd:2e:cc:25:5f: 2e:b8:88:c8:9d:a7:48:9e:03:10:02:f8:27:95:c7: 30:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:7D:B3:D2:F4:B9:14:E1:96:73:E7:62:68:EE:B6:8F:50:89:23 X509v3 Authority Key Identifier: keyid:CC:5D:5C:E0:DC:18:21:09:0C:BC:75:38:D7:BB:71:23:71:90:82:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zF1c4NwYIQkMvHU417txI3GQguc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C91A6/BA4CCE0ED72B11EA8C1BBD4DC4F9AE02/zF1c4NwYIQkMvHU417txI3GQguc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a2:dc:e4:ed:b6:0a:fc:6e:d7:75:87:e2:d1:dc:37:6e:f9: 39:0e:26:58:8e:26:6b:ac:e5:4c:b4:d0:f7:73:9f:8f:76:c3: 79:0a:27:60:e3:2a:43:53:9b:15:70:c4:52:dd:7f:5f:4e:2a: 3d:0f:3f:2e:cb:cf:2f:30:b8:3a:40:9b:68:2d:b4:88:9b:13: 62:93:49:44:b8:4e:66:e1:01:34:3a:18:45:81:83:33:2a:f5: 5e:06:96:3f:2a:55:51:37:9f:05:01:62:09:9c:18:e7:79:f7: 30:ef:0a:01:97:f4:49:bb:af:7f:2e:7a:40:83:7d:4b:61:f7: 8f:d7:9b:7d:8f:01:9e:99:44:d3:d9:7d:a6:61:5e:5e:3e:c4: 17:48:0f:47:e4:e6:07:64:51:b0:f5:fa:4e:64:8f:17:c6:6b: a1:52:5c:6d:29:c1:99:cd:13:0e:04:98:b7:bd:5e:ea:a6:d9: 13:d6:7a:17:95:6d:c1:ca:5c:f5:91:f4:35:9d:aa:f9:63:03: a4:8b:9b:ad:16:e3:74:65:d6:da:a5:f7:40:aa:2c:b2:02:14: bd:9b:d0:40:d2:5a:7d:c8:5d:3a:26:1a:dc:b3:3c:06:1a:23: e8:0f:4e:35:a1:54:88:63:27:6e:42:a2:f7:90:ca:9c:05:15: d1:2b:0b:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxQTYxMTAvBgNVBAUTKENDNUQ1Q0UwREMxODIxMDkwQ0JDNzUzOEQ3QkI3MTIz NzE5MDgyRTcwHhcNMjUwNTE0MjA1NzIwWhcNMjUwNTIxMjA1NzIwWjAYMRYwFAYD VQQDEw02ODI1MDNiMS1iM2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs3B2ta/SNlvmUrqPNp1NuIiCDQlwjav5JudHCM0LCySkD2OZ9Ra3BJdG82md XinqKGVimYKS1rqyaGxCOaMzd462Sd1dizdC/VWOAHvQJhxYP/CASryez0525RAi a56faWs/IjS+YkUB2sOgaH+L3Be8FlhEAD6JDoJ9Ft2w62iqaGCXMeSJymrWYzR/ vsoPoxJPgWwJqZn4Tgl5C0+ewXGh+Ok8onn09PhB87Na6YzX46crcuashdZ5o9Qx MaotENAJxBkn+JHPa2v/zMRbuOhb8NmiPZ1IOADFG73Dtx5mGhR3+RDzUcr93S7M JV8uuIjInadIngMQAvgnlccwSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwNfbPS 9LkU4ZZz52Jo7raPUIkjMB8GA1UdIwQYMBaAFMxdXODcGCEJDLx1ONe7cSNxkILn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTFBNi9CQTRDQ0UwRUQ3 MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlRa012SFU0MTd0eEkzR1Fn dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGMWM0TndZSVFrTXZIVTQxN3R4STNHUWd1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTFBNi9CQTRDQ0UwRUQ3MkIxMUVBOEMxQkJENERDNEY5QUUwMi96RjFjNE53WUlR a012SFU0MTd0eEkzR1FndWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWotzk7bYK/G7XdYfi0dw3bvk5DiZYjiZrrOVMtND3c5+PdsN5Cidg 4ypDU5sVcMRS3X9fTio9Dz8uy88vMLg6QJtoLbSImxNik0lEuE5m4QE0OhhFgYMz KvVeBpY/KlVRN58FAWIJnBjnefcw7woBl/RJu69/LnpAg31LYfeP15t9jwGemUTT 2X2mYV5ePsQXSA9H5OYHZFGw9fpOZI8XxmuhUlxtKcGZzRMOBJi3vV7qptkT1noX lW3Bylz1kfQ1nar5YwOki5utFuN0ZdbapfdAqiyyAhS9m9BA0lp9yF06JhrcszwG GiPoD041oVSIYyduQqL3kMqcBRXRKwuA -----END CERTIFICATE-----Generated at Thu May 15 00:45:09 2025 by rpki-client