$ rpki-client -vvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json) Hash identifier: hTO+kW7luMn2oQUXmwQuLmEX6FN3P3VCl6LqxBBM5qs= Subject key identifier: A6:68:33:25:F2:4B:F7:02:9F:8E:10:A7:42:B0:2F:04:0A:D9:F0:79 Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Certificate serial: 17E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft Manifest number: 17D1 Signing time: Fri 16 May 2025 16:46:44 +0000 Manifest this update: Fri 16 May 2025 16:46:44 +0000 Manifest next update: Fri 23 May 2025 16:46:44 +0000 Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: DYYQipAXY9wgteDZU7IVeOt426+LuY6CPaEOkWxjEEI=) 2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: o72VLQ1AaTbDR0LUWxX7H2rR6ueROwUZcL0xiM3p7KI=) 3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: XSMOrkD+VKk/yODIQVEJZLLi9dBXNMbWFRIFf5Gr+QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:46:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6116 (0x17e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F Validity Not Before: May 16 16:46:44 2025 GMT Not After : May 23 16:46:44 2025 GMT Subject: CN=68276bf4-cfa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9f:07:13:0a:7d:c2:fd:0b:6f:a1:74:85:97: 9c:54:0d:0b:8e:d1:56:1d:ea:86:37:a5:c9:e4:3a: 95:6b:e9:2d:2e:b6:85:b3:55:f8:4d:22:24:29:60: e4:1f:ac:b0:ea:62:e8:25:1b:a7:6e:1a:68:4d:de: 4b:41:74:44:98:61:f7:f6:06:29:d7:4f:d9:f9:84: 59:fd:5b:8b:38:81:ab:1f:d2:0b:0f:ae:fc:14:b9: 7b:fb:2c:22:9b:b0:73:ab:84:d3:80:a2:78:7d:6c: e7:a1:47:cf:42:78:10:70:45:54:2b:fb:9c:60:aa: 3e:c6:90:97:cf:c4:b4:26:cf:32:08:55:a1:de:91: 8b:fd:eb:c4:6d:fd:96:09:53:bd:6b:90:4e:0a:c4: 02:0e:55:50:35:01:3c:82:9f:ae:c2:dc:de:8b:74: a1:87:a0:51:20:02:81:a6:cf:93:cf:15:f9:17:3a: ae:94:18:50:35:ef:05:41:58:fb:fd:ab:e6:ee:fd: ea:b2:9c:1c:8d:6f:f5:df:b6:e4:30:33:c7:eb:6d: 8a:b5:c8:a3:1a:0d:af:00:60:47:27:15:55:2d:78: 83:7f:02:5d:51:8d:a1:ea:3c:a7:94:3f:8a:96:39: a3:57:e1:4f:82:af:d0:fb:da:ca:70:15:bf:ba:21: 94:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:68:33:25:F2:4B:F7:02:9F:8E:10:A7:42:B0:2F:04:0A:D9:F0:79 X509v3 Authority Key Identifier: keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:04:5c:a4:a9:ef:d4:74:51:1d:26:86:0a:59:b7:3d:f6:56: c7:40:27:2c:c0:01:91:a9:98:ed:82:b5:a2:c4:3e:58:39:bd: 92:4a:70:a0:dd:e2:84:7d:8a:ef:5f:ff:52:80:67:d6:fe:22: 2a:fa:33:7f:ef:9a:fa:e4:3e:f3:fd:0d:e9:33:19:df:ae:f0: e0:61:f3:25:e4:69:74:11:c9:0f:b1:99:7c:a0:c9:21:a2:56: 48:1e:f2:d9:a4:65:63:82:db:5f:b1:ca:7e:2c:5c:33:87:9e: e5:fc:0e:7b:45:dd:96:2e:b0:29:0f:4e:66:d3:db:c5:ae:48: db:33:dc:ce:17:9b:01:40:b4:75:1a:aa:bf:f1:79:ac:ad:08: 92:cb:70:a6:9b:32:a2:21:57:25:56:69:95:2c:a0:12:a3:cd: 12:26:d4:eb:91:c2:30:5c:32:b5:34:12:58:94:af:31:24:9c: 12:21:2f:ab:bc:8a:44:08:73:29:9a:28:94:b0:f1:b5:b2:9f: 60:56:b1:8d:15:0b:c4:bb:3a:d4:77:8d:22:d3:9a:12:d9:78: 3b:9c:4d:81:11:a8:06:d8:77:9a:ab:f2:cc:82:3e:e1:cc:c5: 0e:74:a2:2e:0c:61:70:3c:e7:1f:28:fb:06:cb:47:5a:f9:24: 6c:6a:06:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU2Q0ExMTAvBgNVBAUTKDY3NUE4Njc2RUQzN0QxNkFCQkNBMkZFRjhFQUExRjIz RjI1N0IyOUYwHhcNMjUwNTE2MTY0NjQ0WhcNMjUwNTIzMTY0NjQ0WjAYMRYwFAYD VQQDEw02ODI3NmJmNC1jZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ8HEwp9wv0Lb6F0hZecVA0LjtFWHeqGN6XJ5DqVa+ktLraFs1X4TSIkKWDk H6yw6mLoJRunbhpoTd5LQXREmGH39gYp10/Z+YRZ/VuLOIGrH9ILD678FLl7+ywi m7Bzq4TTgKJ4fWznoUfPQngQcEVUK/ucYKo+xpCXz8S0Js8yCFWh3pGL/evEbf2W CVO9a5BOCsQCDlVQNQE8gp+uwtzei3Shh6BRIAKBps+TzxX5FzqulBhQNe8FQVj7 /avm7v3qspwcjW/137bkMDPH622KtcijGg2vAGBHJxVVLXiDfwJdUY2h6jynlD+K ljmjV+FPgq/Q+9rKcBW/uiGUzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZoMyXy S/cCn44Qp0KwLwQK2fB5MB8GA1UdIwQYMBaAFGdahnbtN9Fqu8ov746qHyPyV7Kf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTZDQS85MTRFNTNGNkMw RDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBXcTd5aV92anFvZklfSlhz cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxcUdkdTAzMFdxN3lpX3ZqcW9mSV9KWHNwOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTZDQS85MTRFNTNGNkMwRDExMUU3OEQxRUY4MkJDNEY5QUUwMi9aMXFHZHUwMzBX cTd5aV92anFvZklfSlhzcDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgBFykqe/UdFEdJoYKWbc99lbHQCcswAGRqZjtgrWixD5YOb2SSnCg 3eKEfYrvX/9SgGfW/iIq+jN/75r65D7z/Q3pMxnfrvDgYfMl5Gl0EckPsZl8oMkh olZIHvLZpGVjgttfscp+LFwzh57l/A57Rd2WLrApD05m09vFrkjbM9zOF5sBQLR1 Gqq/8XmsrQiSy3CmmzKiIVclVmmVLKASo80SJtTrkcIwXDK1NBJYlK8xJJwSIS+r vIpECHMpmiiUsPG1sp9gVrGNFQvEuzrUd40i05oS2Xg7nE2BEagG2Heaq/LMgj7h zMUOdKIuDGFwPOcfKPsGy0da+SRsagb1 -----END CERTIFICATE-----Generated at Fri May 16 22:30:16 2025 by rpki-client