$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: BBWF7WvA19S70V6VJa0w9X9LblKiqO/xNWo7I7aJHbk= Subject key identifier: CF:AE:E2:B0:AD:CC:6F:16:3D:17:49:F5:6D:2D:80:A6:39:B2:D8:AA Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: B9 Signing time: Thu 15 May 2025 05:13:37 +0000 Manifest this update: Thu 15 May 2025 05:13:36 +0000 Manifest next update: Thu 22 May 2025 05:13:36 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: onBWfvjb1MIalXeK9z+B1vvreqYsrEmFINUL3Yh6aUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: May 15 05:13:36 2025 GMT Not After : May 22 05:13:36 2025 GMT Subject: CN=68257801-e4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:a2:3f:98:fa:30:fa:5f:28:4e:d1:5e:74: a2:8f:90:8f:56:68:85:cb:21:d2:70:47:4f:f3:9d: 63:67:b1:8c:0e:ef:29:6c:aa:87:40:6f:9e:aa:f4: c6:1f:05:df:6c:e4:8a:ed:ab:8c:3b:9c:18:0f:14: 8f:ae:8e:cf:7a:f5:e6:66:11:d1:ae:bf:71:04:80: c0:88:a4:f4:a7:ea:97:85:fa:9a:71:4f:3e:68:52: ed:31:18:58:a0:4b:dd:ca:2f:d0:da:a6:ab:d9:b0: 74:f5:32:34:b8:26:96:95:ca:80:e7:d2:27:db:8d: 13:a3:74:e3:06:45:b4:a3:4c:10:40:50:b6:17:f8: 04:87:af:7c:c9:c2:05:e3:b9:5d:f5:ef:a6:97:04: ef:2c:af:3c:a6:45:3b:97:46:fb:89:48:7a:0e:76: 7f:f2:cd:aa:7b:84:31:65:5e:48:6f:52:a9:60:f5: f8:05:17:b5:ee:2f:3b:6a:ed:55:6c:ea:35:2a:bd: 40:b0:33:17:d8:70:4f:9a:64:8d:33:80:91:27:d2: 7c:5a:60:e3:39:57:c7:ca:53:89:59:4e:f8:e8:fd: 74:bd:51:b4:ba:15:06:fa:76:06:07:e9:9a:3d:ba: b5:76:2e:02:25:4a:cc:ac:f5:ac:eb:6e:ff:57:24: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AE:E2:B0:AD:CC:6F:16:3D:17:49:F5:6D:2D:80:A6:39:B2:D8:AA X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:12:1f:68:e6:6f:cc:87:a4:61:28:d8:4d:94:2b:75:0b:ab: 22:aa:4d:75:9f:87:ee:6d:d6:ab:86:22:95:d4:1e:a9:54:b8: 85:03:92:94:1f:8b:8a:3d:aa:45:80:c3:b9:10:2b:c6:84:e2: 70:3d:10:a9:f0:15:94:a8:38:85:89:3d:24:13:e8:d9:50:ae: 05:67:a3:b5:e1:4c:eb:db:2b:2f:95:57:22:99:eb:93:1d:ab: bc:68:6f:05:de:ad:ab:12:cc:31:a5:1e:49:62:04:73:8a:5a: 70:0b:b4:b5:48:93:2b:f9:eb:c3:65:71:04:93:7f:47:65:79: 61:ad:a4:d8:76:95:c3:72:e0:31:76:7d:ae:e6:8c:06:46:74: bf:04:ca:58:72:9c:22:33:fc:74:5f:47:3a:62:93:18:53:dc: ff:72:37:5e:dd:02:df:f7:2a:57:a0:cb:e0:e8:71:9c:c2:f8: 9c:df:7e:3d:f0:09:2c:0a:e9:7f:cd:2f:24:09:4c:f4:ef:f3: 35:2a:48:51:34:d5:66:a7:ee:37:4e:1c:6d:d9:14:36:18:35: 6f:33:15:fa:da:c8:20:45:4b:98:de:9f:a0:56:6e:2b:9b:e0: a2:9c:c7:45:4e:0b:4d:07:c5:9c:3d:d1:81:2c:11:74:15:f5: be:bd:ad:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUwNTE1MDUxMzM2WhcNMjUwNTIyMDUxMzM2WjAYMRYwFAYD VQQDEw02ODI1NzgwMS1lNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJKiP5j6MPpfKE7RXnSij5CPVmiFyyHScEdP851jZ7GMDu8pbKqHQG+eqvTG HwXfbOSK7auMO5wYDxSPro7PevXmZhHRrr9xBIDAiKT0p+qXhfqacU8+aFLtMRhY oEvdyi/Q2qar2bB09TI0uCaWlcqA59In240To3TjBkW0o0wQQFC2F/gEh698ycIF 47ld9e+mlwTvLK88pkU7l0b7iUh6DnZ/8s2qe4QxZV5Ib1KpYPX4BRe17i87au1V bOo1Kr1AsDMX2HBPmmSNM4CRJ9J8WmDjOVfHylOJWU746P10vVG0uhUG+nYGB+ma Pbq1di4CJUrMrPWs627/VyRjjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+u4rCt zG8WPRdJ9W0tgKY5stiqMB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuEh9o5m/Mh6RhKNhNlCt1C6siqk11n4fubdarhiKV1B6pVLiFA5KU H4uKPapFgMO5ECvGhOJwPRCp8BWUqDiFiT0kE+jZUK4FZ6O14Uzr2ysvlVcimeuT Hau8aG8F3q2rEswxpR5JYgRzilpwC7S1SJMr+evDZXEEk39HZXlhraTYdpXDcuAx dn2u5owGRnS/BMpYcpwiM/x0X0c6YpMYU9z/cjde3QLf9ypXoMvg6HGcwvic3349 8AksCul/zS8kCUz07/M1KkhRNNVmp+43Thxt2RQ2GDVvMxX62sggRUuY3p+gVm4r m+CinMdFTgtNB8WcPdGBLBF0FfW+va01 -----END CERTIFICATE-----Generated at Thu May 15 22:24:59 2025 by rpki-client