$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: 2ZxzsE2HFnzgM6gauJ0uDTy3GQ/2fAv6Ihf5YrMEh3o= Subject key identifier: CD:26:DC:2F:2E:AB:AE:92:E4:19:B9:74:CE:E2:59:30:C7:5A:82:28 Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 25 Signing time: Thu 15 May 2025 07:07:21 +0000 Manifest this update: Thu 15 May 2025 07:07:20 +0000 Manifest next update: Thu 22 May 2025 07:07:20 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: JUAwdZqO/qXb3gbuf0NmKDwJv9yUa75H1hqUGhEGwVU=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 07:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: May 15 07:07:20 2025 GMT Not After : May 22 07:07:20 2025 GMT Subject: CN=682592a8-b934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:06:f5:f4:67:a4:ff:4d:38:d6:8a:fb:97: c2:4c:1c:3d:25:af:e2:0e:80:21:0c:d4:dd:21:1c: eb:4f:65:86:4f:78:99:ca:54:89:04:9f:75:cb:46: 74:37:ab:a7:ce:bd:ca:59:70:03:de:b3:72:67:80: fa:30:e5:a3:71:f7:f8:d0:3f:55:57:f6:3b:12:ba: 00:8f:f8:e9:6c:2a:e3:f2:2f:72:14:52:b2:07:9e: a7:60:23:0e:e6:9a:f1:f5:7f:e5:0a:ba:a4:f5:9b: 75:13:c9:9d:a6:3a:6c:3b:67:6f:3a:d1:34:50:ad: fb:49:51:db:f2:ad:99:c2:a5:e3:da:05:b6:78:10: 72:b4:aa:ba:36:0e:5f:67:1b:6a:cd:b9:d2:cf:e8: 96:06:52:31:7a:bd:6e:10:99:5f:80:51:07:c6:e7: 77:4d:fa:21:8a:1a:9d:22:53:32:b0:70:db:0d:37: 8b:6f:4f:dc:65:d1:e0:f6:49:4d:5d:ff:c9:ea:8f: 1d:bc:5c:1d:d5:7d:85:80:a9:13:01:c9:3d:5e:d4: 9c:dd:40:f9:0b:6f:17:1f:0c:8e:9b:ce:54:a7:24: b1:9c:37:22:ac:8b:ee:50:d9:68:12:56:e7:64:f5: ab:05:b2:e1:a3:01:6f:a2:c3:69:5e:c2:4a:03:67: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:26:DC:2F:2E:AB:AE:92:E4:19:B9:74:CE:E2:59:30:C7:5A:82:28 X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:ca:43:74:5d:aa:e6:93:14:30:b1:6b:31:18:c0:98:30:3a: ec:cd:1d:68:b1:27:42:3b:f7:d4:83:b9:b7:f3:53:dd:c0:a2: af:91:ab:da:72:b0:86:51:b4:e8:49:4a:3d:ad:62:f0:01:aa: 68:12:81:ca:17:bf:33:62:0c:dc:c9:c5:c5:f8:d7:ff:2e:fc: 8b:fe:11:0d:12:e8:56:f9:29:fa:07:64:b0:61:47:44:91:35: 63:db:fd:9b:90:cb:c0:a3:45:01:83:b1:de:7a:fc:48:cb:73: 9a:4c:28:cf:74:39:6d:11:08:f2:ee:e6:72:4f:20:67:5b:e6: 72:39:ee:59:e5:15:31:f9:85:89:13:28:55:6b:1b:1c:08:9a: 6b:28:40:f8:65:77:c8:4a:c9:56:2c:be:10:34:ac:fe:a6:8c: fa:c1:5b:e5:19:f6:12:23:60:95:5b:7d:ff:8e:3a:12:f0:9e: 81:55:d6:81:d4:f7:ff:49:84:d0:54:ce:ca:c5:9b:3d:df:ba: 9f:8f:af:93:9c:e8:34:63:c0:f7:6f:8a:26:4a:c5:57:b3:53: 75:f8:f9:31:1c:fd:e8:bf:64:a4:d9:2a:19:d6:2a:68:bb:bc: fd:eb:70:5c:cb:d1:d7:ba:1b:e1:3f:b7:93:e1:89:df:83:ce: dd:ee:06:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTA1MTUwNzA3MjBaFw0yNTA1MjIwNzA3MjBaMBgxFjAUBgNV BAMTDTY4MjU5MmE4LWI5MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDECgb19Gek/0041or7l8JMHD0lr+IOgCEM1N0hHOtPZYZPeJnKVIkEn3XLRnQ3 q6fOvcpZcAPes3JngPow5aNx9/jQP1VX9jsSugCP+OlsKuPyL3IUUrIHnqdgIw7m mvH1f+UKuqT1m3UTyZ2mOmw7Z2860TRQrftJUdvyrZnCpePaBbZ4EHK0qro2Dl9n G2rNudLP6JYGUjF6vW4QmV+AUQfG53dN+iGKGp0iUzKwcNsNN4tvT9xl0eD2SU1d /8nqjx28XB3VfYWAqRMByT1e1JzdQPkLbxcfDI6bzlSnJLGcNyKsi+5Q2WgSVudk 9asFsuGjAW+iw2lewkoDZ4lJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzSbcLy6r rpLkGbl0zuJZMMdagigwHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABfKQ3RdquaTFDCxazEYwJgwOuzNHWixJ0I799SDubfzU93Aoq+Rq9py sIZRtOhJSj2tYvABqmgSgcoXvzNiDNzJxcX41/8u/Iv+EQ0S6Fb5KfoHZLBhR0SR NWPb/ZuQy8CjRQGDsd56/EjLc5pMKM90OW0RCPLu5nJPIGdb5nI57lnlFTH5hYkT KFVrGxwImmsoQPhld8hKyVYsvhA0rP6mjPrBW+UZ9hIjYJVbff+OOhLwnoFV1oHU 9/9JhNBUzsrFmz3fup+Pr5Oc6DRjwPdviiZKxVezU3X4+TEc/ei/ZKTZKhnWKmi7 vP3rcFzL0de6G+E/t5Phid+Dzt3uBj0= -----END CERTIFICATE-----Generated at Fri May 16 21:39:15 2025 by rpki-client