$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: KFhsIB+apW3zq5//KLmw01tEhMVdcC5wdUJNFRZU15w= Subject key identifier: C0:44:3C:62:80:A0:46:C5:91:61:D3:E7:4E:CD:04:EA:0A:77:35:76 Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 17D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 1780 Signing time: Wed 14 May 2025 16:41:18 +0000 Manifest this update: Wed 14 May 2025 16:41:18 +0000 Manifest next update: Wed 21 May 2025 16:41:18 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: yDZmrX3b1xkb7ODYroTrNtHS2OX9v4izctyHgbIQ5+4=) 2: 3F43565CB4A711EFA3D95012C4F9AE02.roa (hash: OELdD8LbVgXXbJX6bTHTOCI+oCTaXDP2euo2Avh/+Rk=) 3: C4C407A6ABFE11EF8BC3AC17C4F9AE02.roa (hash: EhC7Iw3SYEkIxbf/jSCiFbV/awgcX2mr9+KQdTNr1bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6096 (0x17d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125, serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: May 14 16:41:18 2025 GMT Not After : May 21 16:41:18 2025 GMT Subject: CN=6824c7ae-095c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d1:d4:5a:f4:c6:05:ad:ea:22:91:fa:46:52: 12:0a:dc:84:9a:6d:22:28:be:53:fc:cd:71:6f:c5: bf:81:2c:27:f0:36:61:2a:a7:fc:2f:cb:9e:ea:0c: 52:1c:0f:f0:2d:cb:3b:f8:cf:5a:54:b0:34:ed:bb: 35:aa:5d:39:62:37:5f:46:85:3f:59:7b:e9:df:dc: 94:99:12:10:96:cf:49:be:92:6a:6d:30:59:f7:b2: 14:39:13:3a:a1:77:4e:42:07:60:a1:8c:c7:12:f1: 7d:2c:14:97:4a:ff:0c:a9:83:24:2b:cf:f6:8c:ee: 9d:fc:bf:88:d2:ff:72:08:54:ba:53:78:59:61:31: 3d:00:93:86:2c:38:7c:f9:a8:a0:58:65:0d:a4:95: f3:98:ce:cd:b2:31:96:65:95:ed:0c:ac:4e:6a:a8: 04:90:c5:c7:9e:6c:1d:cf:c9:a0:49:55:08:f0:05: 0e:69:3c:0f:47:5f:c4:8d:2a:92:f4:44:d7:56:08: 2d:68:31:2c:c1:c8:63:e1:d9:9f:fb:02:de:1a:96: d5:a7:81:72:c9:70:a3:20:07:55:d5:12:4a:8a:5a: 83:ca:fe:8c:bc:07:ec:e6:a1:1a:97:b6:ce:3d:09: da:85:7e:6d:0a:e4:ae:99:b8:c9:32:66:b5:32:d2: a5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:44:3C:62:80:A0:46:C5:91:61:D3:E7:4E:CD:04:EA:0A:77:35:76 X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ca:d7:99:fa:a8:66:bc:3f:62:78:d9:31:83:50:b2:a9:c4: 97:51:2c:43:ae:a2:01:ab:c6:28:7c:16:b7:00:bc:2b:87:cc: 85:9f:01:51:03:a6:7e:40:f9:8f:52:46:15:0e:56:72:b6:44: 2d:7d:05:8f:49:a8:62:2c:17:02:29:46:0e:01:23:f0:60:bf: 54:26:b3:81:af:c9:f1:9d:d5:38:8b:ed:53:ba:4c:71:72:f1: 88:fd:fe:4a:43:72:54:a3:e4:b0:b5:01:47:06:8e:a8:38:f0: c2:12:3f:95:e9:b0:57:34:29:b6:42:af:77:22:a7:12:d8:50: dc:27:cd:63:80:a4:4e:06:46:03:29:eb:ed:8e:df:df:4b:75: d6:c1:e9:4f:3e:e2:18:3a:b6:aa:1c:a3:3b:b7:ef:8b:a6:4f: 21:50:2f:2e:d8:bc:33:a2:fd:da:9a:ea:ee:4b:81:0d:ba:0c: 7c:e5:23:64:fa:ac:58:b9:43:77:1e:1c:24:2c:d8:e2:72:08: be:bb:9d:ac:14:1b:e1:66:1d:7c:be:54:aa:8b:94:5b:1a:6c: 17:45:a3:f5:97:15:c4:3a:e2:3a:81:9e:7b:b7:01:53:01:cd: df:08:b7:ec:c0:4c:d1:8b:80:2a:cb:45:e1:2e:3c:a0:2c:fc: 79:54:30:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjUwNTE0MTY0MTE4WhcNMjUwNTIxMTY0MTE4WjAYMRYwFAYD VQQDEw02ODI0YzdhZS0wOTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAytHUWvTGBa3qIpH6RlISCtyEmm0iKL5T/M1xb8W/gSwn8DZhKqf8L8ue6gxS HA/wLcs7+M9aVLA07bs1ql05YjdfRoU/WXvp39yUmRIQls9JvpJqbTBZ97IUORM6 oXdOQgdgoYzHEvF9LBSXSv8MqYMkK8/2jO6d/L+I0v9yCFS6U3hZYTE9AJOGLDh8 +aigWGUNpJXzmM7NsjGWZZXtDKxOaqgEkMXHnmwdz8mgSVUI8AUOaTwPR1/EjSqS 9ETXVggtaDEswchj4dmf+wLeGpbVp4FyyXCjIAdV1RJKilqDyv6MvAfs5qEal7bO PQnahX5tCuSumbjJMma1MtKlPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMBEPGKA oEbFkWHT507NBOoKdzV2MB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCByteZ+qhmvD9ieNkxg1CyqcSXUSxDrqIBq8YofBa3ALwrh8yFnwFR A6Z+QPmPUkYVDlZytkQtfQWPSahiLBcCKUYOASPwYL9UJrOBr8nxndU4i+1Tukxx cvGI/f5KQ3JUo+SwtQFHBo6oOPDCEj+V6bBXNCm2Qq93IqcS2FDcJ81jgKROBkYD Kevtjt/fS3XWwelPPuIYOraqHKM7t++Lpk8hUC8u2Lwzov3amuruS4ENugx85SNk +qxYuUN3HhwkLNjicgi+u52sFBvhZh18vlSqi5RbGmwXRaP1lxXEOuI6gZ57twFT Ac3fCLfswEzRi4Aqy0XhLjygLPx5VDD7 -----END CERTIFICATE-----Generated at Fri May 16 05:06:35 2025 by rpki-client