$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: /Hpa1yzbdW2Sqgg9OEsSvcFnISdMjD7p94RGhe/UWSQ= Subject key identifier: 10:C0:B0:3B:F3:4D:BD:5D:9A:6B:29:2B:93:92:DB:8D:50:63:78:9F Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: 6C Signing time: Sun 11 May 2025 05:44:48 +0000 Manifest this update: Sun 11 May 2025 05:44:48 +0000 Manifest next update: Sun 18 May 2025 05:44:47 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: aYf+e4zFtMtcPG/8WhGt02DP80nCVyD0uXe9FxJd5y0=) 2: 1A4E810A9C4711EFBCAF2961C4F9AE02.roa (hash: H/SNFy0blXHf51g3f4tDsQMfyr+dfN3zT3EjfHQV3so=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: May 11 05:44:48 2025 GMT Not After : May 18 05:44:47 2025 GMT Subject: CN=68203950-6293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:52:2f:7a:f1:e7:2b:b1:81:2e:28:0b:5d:9d: e4:e0:99:a8:cf:1e:8a:44:52:a4:34:02:f6:14:21: 53:00:56:b1:de:05:ea:1d:5e:0c:cf:d2:c1:40:c5: 65:04:4d:3a:e1:ee:16:db:b2:44:86:5e:7e:e7:0b: 4b:53:a4:99:cf:5e:84:7d:59:02:46:3d:78:57:e4: d4:ef:5f:9c:ac:43:a4:3f:72:b0:d6:d4:bd:95:1f: 12:7b:a9:19:a9:51:da:1d:79:f8:87:de:3c:0a:e3: 4b:45:12:a6:1e:25:83:b3:52:f6:e5:07:34:c2:7b: 82:21:37:b4:bd:73:f2:01:1e:b1:57:93:46:79:87: bd:72:c3:51:3c:f1:81:1d:de:b7:67:94:19:85:f2: b2:2b:e1:9b:39:1b:c9:36:49:a2:47:7c:7b:8c:c0: 54:57:52:5a:c9:75:3b:03:b6:3b:83:c0:78:54:f9: fe:bf:da:d6:34:ac:56:9c:16:f6:88:c5:42:94:d5: 2c:7a:91:3b:82:4e:41:f6:2a:4e:58:5f:40:7c:26: e1:23:2c:c0:74:3e:3f:84:1f:5c:dd:c9:d8:88:65: 0a:5a:02:99:ca:ca:0a:0e:18:b0:47:54:33:a0:b5: de:79:c1:9c:07:5b:ee:46:86:11:44:dd:3a:71:80: db:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C0:B0:3B:F3:4D:BD:5D:9A:6B:29:2B:93:92:DB:8D:50:63:78:9F X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f9:ea:01:40:a1:44:de:fb:2c:8c:bb:7d:c2:b0:7d:e8:92: d2:a3:f2:78:22:dd:0f:49:e4:db:1f:10:ed:07:b1:28:31:8a: 3c:34:5a:62:50:a9:dd:15:6f:5e:ec:be:cc:6b:49:1f:7c:87: 76:ae:ff:22:27:c9:d3:00:be:16:2b:f5:d4:40:39:27:1a:70: 53:65:16:b2:db:6b:26:22:1e:8d:40:af:4b:de:eb:40:61:e8: 16:72:e0:83:ca:a7:c7:7c:bb:e2:53:85:20:b4:5c:ff:6a:29: b6:d0:e5:2c:93:79:62:43:1a:f3:19:32:44:98:5d:94:cd:69: 9e:c5:27:29:f3:4f:45:05:f3:23:3f:c9:d9:3d:f9:da:c2:2a: 1f:1e:34:af:de:03:cd:58:6d:f2:ab:41:2c:35:b7:37:d5:23: 70:32:a3:4a:ab:28:1f:cf:eb:36:1c:9c:70:e1:e8:f3:6e:30: 8e:e7:5d:af:cc:57:12:71:b8:ae:4c:a6:99:27:91:bd:1f:c7: 0d:81:14:00:42:a8:8a:1e:53:af:03:ef:7d:ed:b8:5b:f6:1a: 7e:56:21:43:05:8c:54:5b:fd:b7:18:6b:80:02:cc:45:22:65: 22:ce:b1:e2:3d:0f:dc:4c:c9:5c:5e:3a:a1:df:3e:12:38:e6: d6:1b:47:84 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RkM5NDExMC8GA1UEBRMoNjUzQ0I4QTc1MTBEQjlCNkMxQTI3RDg3N0QyMTIxRTZE RjQyMTk4MjAeFw0yNTA1MTEwNTQ0NDhaFw0yNTA1MTgwNTQ0NDdaMBgxFjAUBgNV BAMTDTY4MjAzOTUwLTYyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDqUi968ecrsYEuKAtdneTgmajPHopEUqQ0AvYUIVMAVrHeBeodXgzP0sFAxWUE TTrh7hbbskSGXn7nC0tTpJnPXoR9WQJGPXhX5NTvX5ysQ6Q/crDW1L2VHxJ7qRmp UdodefiH3jwK40tFEqYeJYOzUvblBzTCe4IhN7S9c/IBHrFXk0Z5h71yw1E88YEd 3rdnlBmF8rIr4Zs5G8k2SaJHfHuMwFRXUlrJdTsDtjuDwHhU+f6/2tY0rFacFvaI xUKU1Sx6kTuCTkH2Kk5YX0B8JuEjLMB0Pj+EH1zdydiIZQpaApnKygoOGLBHVDOg td55wZwHW+5GhhFE3TpxgNsvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEMCwO/NN vV2aaykrk5LbjVBjeJ8wHwYDVR0jBBgwFoAUZTy4p1ENubbBon2HfSEh5t9CGYIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGQzk0L0E4Q0QwMTY0OTRE QTExRUY4OTA4NkQyMUM0RjlBRTAyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWlR5NHAxRU51YmJCb24ySGZTRWg1dDlDR1lJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG Qzk0L0E4Q0QwMTY0OTREQTExRUY4OTA4NkQyMUM0RjlBRTAyL1pUeTRwMUVOdWJi Qm9uMkhmU0VoNXQ5Q0dZSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH/56gFAoUTe+yyMu33CsH3oktKj8ngi3Q9J5NsfEO0HsSgxijw0WmJQ qd0Vb17svsxrSR98h3au/yInydMAvhYr9dRAOScacFNlFrLbayYiHo1Ar0ve60Bh 6BZy4IPKp8d8u+JThSC0XP9qKbbQ5SyTeWJDGvMZMkSYXZTNaZ7FJynzT0UF8yM/ ydk9+drCKh8eNK/eA81YbfKrQSw1tzfVI3Ayo0qrKB/P6zYcnHDh6PNuMI7nXa/M VxJxuK5Mppknkb0fxw2BFABCqIoeU68D733tuFv2Gn5WIUMFjFRb/bcYa4ACzEUi ZSLOseI9D9xMyVxeOqHfPhI45tYbR4Q= -----END CERTIFICATE-----Generated at Mon May 12 19:38:10 2025 by rpki-client