$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft File: zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft (raw, json) Hash identifier: C2779izjFKI1VQCGTkXe31lCZzv3vQp3qzKBerSd8GM= Subject key identifier: 1D:C0:16:0A:A8:8F:62:BC:C5:03:05:62:56:7A:AC:D8:3E:FA:79:9A Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E Certificate issuer: /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft Manifest number: FE Signing time: Tue 13 May 2025 04:19:22 +0000 Manifest this update: Tue 13 May 2025 04:19:22 +0000 Manifest next update: Tue 20 May 2025 04:19:22 +0000 Files and hashes: 1: zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl (hash: NivViyyvLkun5fleFctPwJ9AFy/nttRiVGK4GZE93XU=) 2: 91056478AF6A11EE93DDE73AC4F9AE02.roa (hash: ewevHTVGmqHpvpOV2d+aqrkd9ftzXTkReJQtB5PG940=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E Validity Not Before: May 13 04:19:22 2025 GMT Not After : May 20 04:19:22 2025 GMT Subject: CN=6822c84a-b0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:16:87:c4:f9:2f:25:15:37:16:7e:d4:a4: fc:21:cc:34:b9:f9:aa:fe:fb:41:3e:e3:46:5c:80: 33:f3:33:4a:3f:58:5f:8a:13:9c:b2:73:0f:a9:fa: 0e:d8:de:51:39:ab:74:b0:df:8e:fc:6d:64:37:eb: bf:27:f3:67:3b:29:d4:f2:a0:f3:69:90:5f:19:cb: ba:98:be:a4:fd:76:6a:83:b3:86:20:6d:5e:d3:33: f6:8f:72:c8:7f:0b:f9:a1:8e:5f:a9:86:46:ea:1a: 5d:fe:bc:53:8a:05:99:bf:e5:0e:bd:2c:53:15:7e: f2:f7:5e:a5:66:7f:a8:fe:b3:82:2f:20:9d:13:89: 60:9a:ba:39:ec:98:41:b6:b7:03:02:40:90:48:5b: 28:76:86:ef:99:6b:d2:cf:47:a7:b4:a2:c1:f0:be: d7:62:18:93:28:62:18:e7:89:dc:55:44:bc:9d:06: 33:68:01:b8:ff:fe:0c:30:b3:95:35:a2:b2:ef:16: 70:e6:ec:ee:ba:0e:82:5a:74:a8:36:d9:76:bf:07: 32:c0:a0:b2:86:c8:c2:84:30:98:9a:05:d0:26:35: 27:ca:f5:fc:26:93:63:d2:7c:38:4f:44:5b:a4:14: e6:5f:22:9c:5a:62:90:75:fb:de:d1:42:d2:85:37: bd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:16:0A:A8:8F:62:BC:C5:03:05:62:56:7A:AC:D8:3E:FA:79:9A X509v3 Authority Key Identifier: keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:ee:16:0f:d1:97:db:4b:de:92:97:d0:97:56:bb:23:8e:a7: c0:02:c4:cd:e6:f3:1d:14:3b:ff:e0:5d:23:e4:3a:e2:55:4c: ac:a3:fd:f2:77:02:2e:ee:d8:a3:97:76:db:db:91:cd:55:b3: 85:a5:9c:51:3b:3d:56:f4:4b:4b:b6:b1:b3:5e:30:de:cc:bd: ba:51:41:02:dd:71:f7:c7:64:12:c8:d9:19:14:98:42:bd:cf: 93:91:ee:82:05:36:44:a8:9f:3b:9a:7c:c4:db:2c:cf:02:37: 8b:b2:bf:3f:83:be:46:4f:b1:54:3b:a3:17:76:ef:b0:59:48: 06:52:72:9c:e6:38:34:81:17:9a:cc:cf:1b:f4:db:4b:4d:a4: 85:43:18:cb:fb:c5:ee:cc:0c:01:ce:cc:24:0e:0b:6a:09:ff: 5a:21:45:73:a1:bf:05:be:58:f1:a1:e7:1a:15:eb:0e:81:d3: 18:5d:de:9a:7e:18:a5:f3:fe:27:cf:dc:68:04:71:a8:46:92: b1:67:68:47:cb:9a:8d:80:fc:bc:9f:c9:16:b1:e5:3a:44:03: 84:9a:e3:29:58:dc:bc:7e:06:ed:a7:dc:fc:f9:7e:61:08:79: 7a:8e:2b:4a:b1:1c:03:5f:46:f1:f7:0a:58:4e:57:e9:7c:8e: 03:00:8b:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJBMEMxMTAvBgNVBAUTKENENUNENTkwOTEzRTRGODlBRjNEMUNBNkUyOUZBQjND MDY3RDIxNEUwHhcNMjUwNTEzMDQxOTIyWhcNMjUwNTIwMDQxOTIyWjAYMRYwFAYD VQQDEw02ODIyYzg0YS1iMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDEWh8T5LyUVNxZ+1KT8Icw0ufmq/vtBPuNGXIAz8zNKP1hfihOcsnMPqfoO 2N5ROat0sN+O/G1kN+u/J/NnOynU8qDzaZBfGcu6mL6k/XZqg7OGIG1e0zP2j3LI fwv5oY5fqYZG6hpd/rxTigWZv+UOvSxTFX7y916lZn+o/rOCLyCdE4lgmro57JhB trcDAkCQSFsodobvmWvSz0entKLB8L7XYhiTKGIY54ncVUS8nQYzaAG4//4MMLOV NaKy7xZw5uzuug6CWnSoNtl2vwcywKCyhsjChDCYmgXQJjUnyvX8JpNj0nw4T0Rb pBTmXyKcWmKQdfve0ULShTe9GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3AFgqo j2K8xQMFYlZ6rNg++nmaMB8GA1UdIwQYMBaAFM1c1ZCRPk+Jrz0cpuKfqzwGfSFO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkEwQy80MTUzMUIwQ0FF Q0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0bXZQUnltNHAtclBBWjlJ VTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWelZrSkUtVDRtdlBSeW00cC1yUEFaOUlVNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkEwQy80MTUzMUIwQ0FFQ0QxMUVFODZGMUIyNDlDNEY5QUUwMi96VnpWa0pFLVQ0 bXZQUnltNHAtclBBWjlJVTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz7hYP0ZfbS96Sl9CXVrsjjqfAAsTN5vMdFDv/4F0j5DriVUyso/3y dwIu7tijl3bb25HNVbOFpZxROz1W9EtLtrGzXjDezL26UUEC3XH3x2QSyNkZFJhC vc+Tke6CBTZEqJ87mnzE2yzPAjeLsr8/g75GT7FUO6MXdu+wWUgGUnKc5jg0gRea zM8b9NtLTaSFQxjL+8XuzAwBzswkDgtqCf9aIUVzob8FvljxoecaFesOgdMYXd6a fhil8/4nz9xoBHGoRpKxZ2hHy5qNgPy8n8kWseU6RAOEmuMpWNy8fgbtp9z8+X5h CHl6jitKsRwDX0bx9wpYTlfpfI4DAItr -----END CERTIFICATE-----Generated at Tue May 13 21:59:12 2025 by rpki-client