$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: 6g+CtmK88PuxGJwOfDy1t8nt5UnCjXxj6xKraGpu1xQ= Subject key identifier: 3C:77:95:07:4D:9D:67:A6:6D:B6:00:0B:75:72:26:54:DA:8C:80:88 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 88 Signing time: Sun 15 Jun 2025 05:38:17 +0000 Manifest this update: Sun 15 Jun 2025 05:38:16 +0000 Manifest next update: Sun 22 Jun 2025 05:38:16 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: qkUmsnoFAvNxpB93cL/Lnlypxejq+GHGuxj6kLfSNxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Jun 15 05:38:16 2025 GMT Not After : Jun 22 05:38:16 2025 GMT Subject: CN=684e5c49-5a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:06:e3:4d:a8:b7:bc:2e:c4:29:ca:4a:e9: 67:7c:49:38:29:4e:39:38:5c:20:b4:c8:ec:9f:3b: b8:8a:8d:79:75:d0:4e:47:89:97:f8:8e:3c:35:38: 8a:bf:c3:be:3f:12:c4:9f:07:ab:ea:f3:1f:cd:e2: 2a:71:cc:27:75:99:5a:1f:ef:5e:d9:e1:36:19:78: 4a:31:3b:40:d0:a3:74:34:42:a6:c7:2b:31:2d:36: ce:ce:61:3b:b9:8d:71:57:1c:47:40:c0:68:e9:92: c2:3c:2d:14:6c:67:0e:70:6a:c6:64:2e:38:b6:56: 4d:9e:b6:b9:5b:1f:e4:52:0d:3f:4b:9f:3d:70:6d: f8:d3:e9:42:6f:fb:16:dc:14:d7:21:ee:bc:1d:c0: a7:13:5b:46:19:76:2e:80:d3:e6:4e:c9:9d:08:82: b1:f6:09:ed:a1:4e:95:f0:34:0a:4a:ae:cd:98:a5: f2:b6:59:b1:4d:bb:b5:ef:41:f3:49:74:05:66:48: 4e:5d:35:56:0a:a4:92:30:51:27:49:45:04:a9:75: 0e:fa:1e:8d:68:2d:97:6d:6f:21:24:41:b9:58:02: 93:c7:4b:3d:5d:a0:ff:74:9e:e8:dd:c0:39:a6:87: ed:fb:ae:a2:03:3a:d5:06:fa:bb:a0:59:90:db:68: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:77:95:07:4D:9D:67:A6:6D:B6:00:0B:75:72:26:54:DA:8C:80:88 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:85:cf:0d:70:7d:c0:c2:76:3e:4d:fc:fe:56:41:a0:45:d8: 0c:49:53:d9:1a:22:08:fc:7e:7c:7e:13:e9:de:73:bc:1e:95: 23:51:3f:65:91:dc:c0:69:f8:e7:ca:ec:5d:a2:d1:3a:fe:33: e7:a5:95:c3:aa:f4:26:a9:34:31:f5:1a:81:1f:d4:c6:fc:45: 5d:bf:7f:60:e5:60:3e:1e:fc:02:ad:f0:46:b7:bb:29:2f:f4: c9:98:b0:85:6e:ab:58:d3:11:ba:42:fb:ae:3a:5c:30:ae:c4: 33:8b:d2:18:f5:78:dc:9b:7a:8d:6d:d0:39:81:73:19:ae:d1: 64:d2:7c:90:b5:d1:f2:48:67:71:63:e5:ba:13:8e:fd:22:6b: 5a:c9:04:75:86:5b:b8:07:02:2e:d2:9c:d1:66:96:0d:a6:fc: dd:ee:ab:19:51:dd:57:be:7c:02:b5:cb:83:41:e7:5e:0f:23: 58:60:14:46:f6:f6:34:93:1e:7c:47:a5:87:65:93:c2:d1:39: 28:c3:17:27:39:55:33:33:40:d9:af:fa:bc:1d:12:4e:25:a6: 5e:cc:c0:b0:f2:41:12:88:5e:b8:e3:b0:b3:82:ca:a3:1d:1f: d4:1f:51:4a:0b:53:d9:0b:f8:8e:f7:50:44:c5:4e:c2:d5:c1: 4f:22:ba:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUwNjE1MDUzODE2WhcNMjUwNjIyMDUzODE2WjAYMRYwFAYD VQQDEw02ODRlNWM0OS01YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqrQG402ot7wuxCnKSulnfEk4KU45OFwgtMjsnzu4io15ddBOR4mX+I48NTiK v8O+PxLEnwer6vMfzeIqccwndZlaH+9e2eE2GXhKMTtA0KN0NEKmxysxLTbOzmE7 uY1xVxxHQMBo6ZLCPC0UbGcOcGrGZC44tlZNnra5Wx/kUg0/S589cG340+lCb/sW 3BTXIe68HcCnE1tGGXYugNPmTsmdCIKx9gntoU6V8DQKSq7NmKXytlmxTbu170Hz SXQFZkhOXTVWCqSSMFEnSUUEqXUO+h6NaC2XbW8hJEG5WAKTx0s9XaD/dJ7o3cA5 poft+66iAzrVBvq7oFmQ22hJBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDx3lQdN nWembbYAC3VyJlTajICIMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADhc8NcH3AwnY+Tfz+VkGgRdgMSVPZGiII/H58fhPp3nO8HpUjUT9l kdzAafjnyuxdotE6/jPnpZXDqvQmqTQx9RqBH9TG/EVdv39g5WA+HvwCrfBGt7sp L/TJmLCFbqtY0xG6QvuuOlwwrsQzi9IY9Xjcm3qNbdA5gXMZrtFk0nyQtdHySGdx Y+W6E479ImtayQR1hlu4BwIu0pzRZpYNpvzd7qsZUd1XvnwCtcuDQedeDyNYYBRG 9vY0kx58R6WHZZPC0TkowxcnOVUzM0DZr/q8HRJOJaZezMCw8kESiF6447Czgsqj HR/UH1FKC1PZC/iO91BExU7C1cFPIrrn -----END CERTIFICATE-----Generated at Sun Jun 15 08:50:58 2025 by rpki-client