$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft File: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft (raw, json) Hash identifier: UXk5gr6W3BA9L6qY9Otn9qJnpLW+tNFF6One9pqYT0M= Subject key identifier: 0B:38:1F:24:FC:52:1C:0D:40:49:8C:45:62:57:F1:69:68:28:CE:75 Authority key identifier: 66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD Certificate issuer: /CN=A91FF3B6/serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Certificate serial: 05E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft Manifest number: 05D4 Signing time: Mon 12 May 2025 22:50:59 +0000 Manifest this update: Mon 12 May 2025 22:50:58 +0000 Manifest next update: Mon 19 May 2025 22:50:58 +0000 Files and hashes: 1: Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl (hash: +3Zzx0/smjTI3Cj+zJI3nzCfGR7XBxlG/Jtl4N8C7cI=) 2: 4E17ACCEF02511EE94BE6C37C4F9AE02.roa (hash: u1gaPe1rNZR7+OinWikix9cuKzKOycOECZnxKnKlico=) 3: 6D6C7AC8F02511EE80ACAA37C4F9AE02.roa (hash: 4TctzXO0btCTekhddll2PNBwAz/wBJ33Bqt1TjTpsa8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 22:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF3B6, serialNumber=660EDDBB35D53756C306BD8CD917DACFF7896CBD Validity Not Before: May 12 22:50:58 2025 GMT Not After : May 19 22:50:58 2025 GMT Subject: CN=68227b52-f242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:40:f5:cc:7a:15:19:3b:39:8f:81:60:4f:fc: ff:02:a4:4b:09:c3:5f:e9:55:22:d6:15:2d:a8:48: 2c:2a:f2:f4:e8:5b:54:07:2d:93:31:c1:4c:23:3e: 2a:de:94:57:91:af:ee:5f:9a:c6:b2:60:fe:0e:b9: 1e:ec:a9:d7:31:99:40:dd:36:93:42:3e:3f:a5:70: 74:4a:75:4c:6b:6c:4e:ce:3c:cd:37:f5:91:f2:af: fb:3a:ba:2f:7c:28:f7:e8:cc:dc:96:20:61:47:80: c1:c4:7c:e4:36:4f:86:bf:2f:09:6e:81:3f:4e:18: 3f:3d:18:ef:70:2a:0e:32:cc:d0:f2:28:1a:9c:7e: b2:6b:12:58:0f:23:ae:66:42:30:3d:1c:1a:ba:1e: 81:a4:70:74:7b:1a:fd:b0:20:b2:52:b5:2e:8c:af: eb:9e:90:07:cf:73:82:f7:46:07:9e:91:fa:cd:10: d9:f9:aa:2d:4b:93:12:19:39:dc:e1:de:9d:36:c6: e6:6c:7f:36:01:c6:e9:df:8a:48:8e:d9:ef:75:a5: 67:8e:84:a2:d6:d3:3e:f9:4e:1e:9c:9a:59:33:65: d6:e3:7c:38:34:54:77:42:f6:70:a9:c9:d9:66:9b: 5c:09:95:f9:eb:b9:e9:e9:0a:65:a6:6a:34:97:c4: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:1F:24:FC:52:1C:0D:40:49:8C:45:62:57:F1:69:68:28:CE:75 X509v3 Authority Key Identifier: keyid:66:0E:DD:BB:35:D5:37:56:C3:06:BD:8C:D9:17:DA:CF:F7:89:6C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF3B6/508ACD28BC9911EBA1AB564BC4F9AE02/Zg7duzXVN1bDBr2M2Rfaz_eJbL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:a4:9a:e6:5b:d3:f6:7e:61:b4:d0:8f:c7:6e:d2:04:89:48: f8:f8:42:0d:67:b0:37:39:53:a4:87:43:6c:e2:49:91:19:7c: 50:d0:72:a5:7b:b9:c2:7c:fa:f1:2a:b4:0d:58:9f:2b:2d:f6: e5:5a:4a:b4:3f:e9:b4:bd:7d:94:de:de:99:f7:78:86:1f:15: 0b:6d:34:69:1e:89:24:ee:e6:1d:d9:df:0a:72:93:81:bf:43: dd:ac:f9:1b:59:d3:91:fb:6a:ea:db:38:50:04:16:06:60:ec: 01:cd:17:ee:23:b2:32:3a:28:1a:a0:94:ba:4c:48:a8:8e:68: 37:10:71:32:eb:8e:96:30:20:07:f4:c0:6c:52:a0:82:ba:a8: 88:65:91:b5:f8:37:0e:eb:d6:7e:41:8a:af:fb:96:21:d8:ee: f1:37:4c:88:2a:d7:8e:14:6d:2e:96:3b:c1:fa:4a:1c:ac:56: 59:e4:93:f3:3a:e2:42:a8:26:ca:0d:ae:1b:51:17:5b:52:03: ef:1e:88:ad:3e:f6:ad:bb:d7:26:37:cc:8d:93:e2:66:f1:21: 43:e3:9a:15:d5:70:be:ad:03:3a:e1:03:95:9b:6e:fa:f7:89: 0d:c6:bb:22:6d:7b:a2:1b:55:a3:30:8c:ca:11:95:e2:98:de: 4c:d9:31:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYzQjYxMTAvBgNVBAUTKDY2MEVEREJCMzVENTM3NTZDMzA2QkQ4Q0Q5MTdEQUNG Rjc4OTZDQkQwHhcNMjUwNTEyMjI1MDU4WhcNMjUwNTE5MjI1MDU4WjAYMRYwFAYD VQQDEw02ODIyN2I1Mi1mMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0D1zHoVGTs5j4FgT/z/AqRLCcNf6VUi1hUtqEgsKvL06FtUBy2TMcFMIz4q 3pRXka/uX5rGsmD+Drke7KnXMZlA3TaTQj4/pXB0SnVMa2xOzjzNN/WR8q/7Orov fCj36MzcliBhR4DBxHzkNk+Gvy8JboE/Thg/PRjvcCoOMszQ8iganH6yaxJYDyOu ZkIwPRwauh6BpHB0exr9sCCyUrUujK/rnpAHz3OC90YHnpH6zRDZ+aotS5MSGTnc 4d6dNsbmbH82Acbp34pIjtnvdaVnjoSi1tM++U4enJpZM2XW43w4NFR3QvZwqcnZ ZptcCZX567np6Qplpmo0l8TnxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs4HyT8 UhwNQEmMRWJX8WloKM51MB8GA1UdIwQYMBaAFGYO3bs11TdWwwa9jNkX2s/3iWy9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjNCNi81MDhBQ0QyOEJD OTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4xYkRCcjJNMlJmYXpfZUpi TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnN2R1elhWTjFiREJyMk0yUmZhel9lSmJMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjNCNi81MDhBQ0QyOEJDOTkxMUVCQTFBQjU2NEJDNEY5QUUwMi9aZzdkdXpYVk4x YkRCcjJNMlJmYXpfZUpiTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmpJrmW9P2fmG00I/HbtIEiUj4+EINZ7A3OVOkh0Ns4kmRGXxQ0HKl e7nCfPrxKrQNWJ8rLfblWkq0P+m0vX2U3t6Z93iGHxULbTRpHokk7uYd2d8KcpOB v0PdrPkbWdOR+2rq2zhQBBYGYOwBzRfuI7IyOigaoJS6TEiojmg3EHEy646WMCAH 9MBsUqCCuqiIZZG1+DcO69Z+QYqv+5Yh2O7xN0yIKteOFG0uljvB+kocrFZZ5JPz OuJCqCbKDa4bURdbUgPvHoitPvatu9cmN8yNk+Jm8SFD45oV1XC+rQM64QOVm276 94kNxrsibXuiG1WjMIzKEZXimN5M2TEe -----END CERTIFICATE-----Generated at Wed May 14 06:45:18 2025 by rpki-client