$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: XpxX7+MB7IIlfKZyoDQRgiZfmml7fQXz3INK6mruSk4= Subject key identifier: 10:7C:1B:11:60:8F:9C:3F:1E:BA:8E:A7:F0:0D:CC:8D:50:5B:45:15 Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 01AC Signing time: Wed 07 May 2025 02:31:43 +0000 Manifest this update: Wed 07 May 2025 02:31:42 +0000 Manifest next update: Wed 14 May 2025 02:31:42 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: 13qTbgJSHM6gw1oUz+47sL/FDegwVNgMVRjOxdPZTeo=) 2: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=) 3: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: May 7 02:31:42 2025 GMT Not After : May 14 02:31:42 2025 GMT Subject: CN=681ac60f-f5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:86:a7:b9:b7:98:2f:72:85:38:38:6e:93: 92:d8:22:d0:46:f3:6a:fa:d4:5e:71:0f:09:41:3b: 67:e9:04:ce:62:50:21:e0:66:43:f2:46:1c:2c:0b: a7:79:13:29:ec:75:eb:55:6b:01:9b:d5:42:5f:e0: 01:c0:3b:1a:b0:8a:b3:c2:3b:7c:6c:e5:22:c3:78: 94:e6:91:33:5c:67:8e:74:a2:c7:e0:ca:02:49:93: 4a:da:00:ee:f4:d8:4f:f1:6b:dd:7e:05:a5:65:02: 85:e0:3c:18:80:0d:9d:09:54:c8:9a:f7:10:00:51: c0:c9:a3:9c:c6:d7:cd:5c:6b:c5:61:5a:13:22:f8: 92:00:b8:fa:64:32:c9:15:a4:b7:fd:87:ef:4a:48: c3:27:5e:86:b0:62:d4:34:d7:44:11:51:0e:8b:cb: d9:40:0b:df:b8:a9:dc:01:2e:6e:8d:71:07:c2:00: ed:c5:81:1c:c0:0f:a0:c4:ac:84:28:36:56:67:75: 6d:76:e4:8b:5d:bc:de:3b:2c:19:93:65:72:19:e3: 99:13:65:6d:1b:59:9c:fe:6e:b0:d6:9d:db:6c:d1: ad:d8:f0:57:f5:2e:c4:a9:d3:74:4e:5a:ae:05:3d: 96:52:37:1f:da:4c:ea:fa:79:b1:bf:0f:c4:a0:f5: 3f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:1B:11:60:8F:9C:3F:1E:BA:8E:A7:F0:0D:CC:8D:50:5B:45:15 X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:db:0d:ea:88:d2:74:95:b2:85:b2:cf:c1:43:f6:09:2e:12: 94:b9:9e:53:65:79:7e:d0:0d:8b:c1:64:36:61:00:05:0b:92: fd:56:77:55:bd:73:88:65:a1:a4:06:7f:ea:14:20:84:e8:66: 07:61:dc:f5:f9:0c:49:51:3e:be:a3:ef:ad:2e:8e:d4:fd:e2: 3b:13:73:69:c9:2e:82:01:f5:d9:c1:80:65:6a:41:d4:61:b6: 8e:db:af:ef:24:2d:16:1b:4d:77:79:08:32:91:4f:ee:b9:84: 79:5d:66:7c:54:4d:4b:91:40:a9:82:c3:b0:2d:c3:d4:c0:74: 05:95:fa:6d:49:da:7f:ca:45:be:86:9f:6d:27:74:72:91:a8: c3:a3:e1:47:31:92:72:e3:5d:c6:01:10:1a:fc:b6:55:90:52: 38:0c:be:c6:58:46:c5:e5:de:83:97:5a:5f:92:da:e0:5f:31: a8:ac:ab:bc:2d:9f:95:d8:86:a2:89:f0:17:08:c8:ed:90:02: b9:03:d1:aa:ba:e4:a8:5a:cf:6f:81:fc:13:44:c4:54:22:04: 83:12:db:40:59:d4:46:84:26:4c:0d:cf:d9:a0:6b:f7:9c:97: df:80:56:cf:1c:87:a9:c0:31:ed:57:6e:5b:22:7b:0a:82:b5: 26:9e:21:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjUwNTA3MDIzMTQyWhcNMjUwNTE0MDIzMTQyWjAYMRYwFAYD VQQDEw02ODFhYzYwZi1mNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSWGp7m3mC9yhTg4bpOS2CLQRvNq+tRecQ8JQTtn6QTOYlAh4GZD8kYcLAun eRMp7HXrVWsBm9VCX+ABwDsasIqzwjt8bOUiw3iU5pEzXGeOdKLH4MoCSZNK2gDu 9NhP8WvdfgWlZQKF4DwYgA2dCVTImvcQAFHAyaOcxtfNXGvFYVoTIviSALj6ZDLJ FaS3/YfvSkjDJ16GsGLUNNdEEVEOi8vZQAvfuKncAS5ujXEHwgDtxYEcwA+gxKyE KDZWZ3VtduSLXbzeOywZk2VyGeOZE2VtG1mc/m6w1p3bbNGt2PBX9S7EqdN0Tlqu BT2WUjcf2kzq+nmxvw/EoPU/qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBB8GxFg j5w/HrqOp/ANzI1QW0UVMB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCF2w3qiNJ0lbKFss/BQ/YJLhKUuZ5TZXl+0A2LwWQ2YQAFC5L9VndV vXOIZaGkBn/qFCCE6GYHYdz1+QxJUT6+o++tLo7U/eI7E3NpyS6CAfXZwYBlakHU YbaO26/vJC0WG013eQgykU/uuYR5XWZ8VE1LkUCpgsOwLcPUwHQFlfptSdp/ykW+ hp9tJ3RykajDo+FHMZJy413GARAa/LZVkFI4DL7GWEbF5d6Dl1pfktrgXzGorKu8 LZ+V2IaiifAXCMjtkAK5A9GquuSoWs9vgfwTRMRUIgSDEttAWdRGhCZMDc/ZoGv3 nJffgFbPHIepwDHtV25bInsKgrUmniHo -----END CERTIFICATE-----Generated at Wed May 7 22:07:45 2025 by rpki-client