$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: XVIr6N4Qk7vAtsnVW5f1G9k/7hk4qtAXakLMF3P1PQM= Subject key identifier: 9B:13:EE:E5:D0:85:EB:F1:EC:9B:73:42:FB:74:E3:90:30:1F:37:95 Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 0807 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 07F2 Signing time: Sat 10 May 2025 20:40:22 +0000 Manifest this update: Sat 10 May 2025 20:40:22 +0000 Manifest next update: Sat 17 May 2025 20:40:22 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: TUty+itw6LyUqsePQ7qRf0ow3QBBmZkY8+u93vPNwig=) 2: E120E32E316111EEB9B76E4CC4F9AE02.roa (hash: x3JJ5fywP75b0VuxKMEwbNWWTXHH7l+L5PLPkPQYjmY=) 3: 5816B2BA4B5711EEB25C4483C4F9AE02.roa (hash: by0/Ko9TJNWSCYMY+AHCa5W7Y7EGdhoiyC4VFd9dKfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2055 (0x807) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: May 10 20:40:22 2025 GMT Not After : May 17 20:40:22 2025 GMT Subject: CN=681fb9b6-9cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:62:70:5e:42:33:67:77:5c:eb:9e:da:52:8c: c1:9d:81:6c:71:08:e9:be:06:10:84:a7:99:bd:2e: b8:a2:52:63:64:b3:93:97:f2:b6:15:dc:14:ce:a9: 71:60:4e:95:df:f1:14:36:d4:fd:23:6c:a8:cf:ff: 24:1d:bf:30:77:6a:01:0a:bd:ca:4d:a4:c8:5f:72: 03:ca:b2:bd:14:8b:da:cb:5c:99:f4:de:51:a5:c0: 33:af:d3:87:17:ce:fd:85:2d:a7:60:d4:ef:bb:05: 9a:76:68:5c:2d:d8:b0:f7:a8:a4:ca:42:75:06:94: 6a:02:3d:a6:58:75:8b:e8:81:bb:f7:97:86:28:1d: 58:55:fd:d8:49:5f:07:58:26:90:a0:74:ca:b7:ef: f1:e3:23:c4:84:fc:79:d4:79:13:24:b9:2d:69:29: 0c:9f:28:86:43:1f:39:bb:39:5e:27:62:b0:1b:94: 3d:06:b1:cc:f5:3e:7b:82:04:70:63:df:87:89:84: 61:43:15:5c:d7:da:2c:e0:81:39:39:68:7a:f1:cf: 82:86:6a:58:ab:7c:95:b4:2c:f2:ac:b9:9c:75:96: c2:69:78:7a:db:ca:ee:e2:4d:ae:84:51:29:dc:14: da:34:3d:a5:6c:e6:36:e0:11:af:7b:83:c1:48:f8: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:13:EE:E5:D0:85:EB:F1:EC:9B:73:42:FB:74:E3:90:30:1F:37:95 X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0f:f3:7b:df:a7:45:26:1c:8d:f3:f6:97:71:6a:05:5a:40: 6f:5e:86:f8:5f:86:ca:86:9d:fe:20:01:20:e7:69:12:46:a6: a1:17:cc:09:d6:e5:69:84:62:35:ed:1c:01:10:79:32:c2:1e: f6:4a:b9:ab:76:1d:3a:97:65:32:7e:de:79:01:89:e8:38:3b: ad:57:2c:b7:9d:77:b8:6b:8d:ea:17:4c:d2:e8:72:17:b8:e1: ef:1f:cd:c4:00:7d:b9:73:15:1b:0e:ca:4c:9c:66:10:71:31: 1b:51:33:db:5a:2e:53:f5:da:90:01:1d:8d:5c:4f:be:a5:4a: ec:5d:dd:2e:2d:11:1d:3f:82:e4:33:ba:cb:5f:23:41:d4:7a: c2:7e:53:e8:37:9e:40:ca:d0:89:d8:f6:03:93:e5:e9:0b:77: eb:f1:a6:6a:9a:18:71:47:03:49:80:ce:df:27:ce:f0:c8:c7: 20:05:43:25:dd:a9:69:41:f7:47:5b:ac:6d:a0:bf:69:47:f0: 05:bc:ea:87:8f:5b:57:71:15:5e:40:23:62:41:27:be:fd:4b: 0e:9f:dc:31:56:12:c2:7d:cb:cb:c2:f1:ff:c2:10:3f:71:15: 05:99:1a:62:44:3d:72:8d:17:f0:3f:e3:93:87:93:05:63:c6: ab:45:6b:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUwNTEwMjA0MDIyWhcNMjUwNTE3MjA0MDIyWjAYMRYwFAYD VQQDEw02ODFmYjliNi05Y2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2JwXkIzZ3dc657aUozBnYFscQjpvgYQhKeZvS64olJjZLOTl/K2FdwUzqlx YE6V3/EUNtT9I2yoz/8kHb8wd2oBCr3KTaTIX3IDyrK9FIvay1yZ9N5RpcAzr9OH F879hS2nYNTvuwWadmhcLdiw96ikykJ1BpRqAj2mWHWL6IG795eGKB1YVf3YSV8H WCaQoHTKt+/x4yPEhPx51HkTJLktaSkMnyiGQx85uzleJ2KwG5Q9BrHM9T57ggRw Y9+HiYRhQxVc19os4IE5OWh68c+ChmpYq3yVtCzyrLmcdZbCaXh628ru4k2uhFEp 3BTaND2lbOY24BGve4PBSPgh2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsT7uXQ hevx7JtzQvt045AwHzeVMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFD/N736dFJhyN8/aXcWoFWkBvXob4X4bKhp3+IAEg52kSRqahF8wJ 1uVphGI17RwBEHkywh72Srmrdh06l2Uyft55AYnoODutVyy3nXe4a43qF0zS6HIX uOHvH83EAH25cxUbDspMnGYQcTEbUTPbWi5T9dqQAR2NXE++pUrsXd0uLREdP4Lk M7rLXyNB1HrCflPoN55AytCJ2PYDk+XpC3fr8aZqmhhxRwNJgM7fJ87wyMcgBUMl 3alpQfdHW6xtoL9pR/AFvOqHj1tXcRVeQCNiQSe+/UsOn9wxVhLCfcvLwvH/whA/ cRUFmRpiRD1yjRfwP+OTh5MFY8arRWuX -----END CERTIFICATE-----Generated at Sun May 11 20:08:33 2025 by rpki-client