$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: 4BqJR9sQ7ByCec5ocximSQPm1WHKGi0NkE02nPoDQaw= Subject key identifier: 40:66:87:BA:77:5D:F1:89:0B:55:1E:CD:29:1C:B7:1D:69:92:27:FA Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 0180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 017A Signing time: Fri 13 Jun 2025 02:45:24 +0000 Manifest this update: Fri 13 Jun 2025 02:45:24 +0000 Manifest next update: Fri 20 Jun 2025 02:45:24 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: +lDOqQrTrZFombStgkFuUqoh+hjChfn3tWpcy52wFE8=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: Qe0/BiT1tYA4h/l62j0BMeHxIJuUAO9bXjTbXA245ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Jun 13 02:45:24 2025 GMT Not After : Jun 20 02:45:24 2025 GMT Subject: CN=684b90c4-81aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:ff:4b:51:92:be:bc:c7:95:d3:c2:ea:81: 96:c4:77:7e:e1:f6:bb:f7:bc:01:3a:69:84:19:6f: 1b:7b:4a:95:e0:e5:10:b0:59:1e:c8:92:35:1a:89: e4:86:89:52:2a:5b:49:ce:f2:d9:ed:cd:88:b1:8e: ae:27:20:59:3e:ba:ce:57:c6:2a:f8:65:2e:55:37: 0e:64:70:17:41:67:99:d8:f2:cd:be:04:c9:3f:d9: 82:9f:52:80:ea:26:e9:06:8e:46:ea:b3:3f:26:3e: bc:99:8d:2a:b8:7e:b5:24:e5:ef:de:96:be:56:5d: fc:fc:f9:f3:c3:69:82:53:5d:f7:ab:7c:06:84:95: cd:4e:b0:24:fa:6d:08:b8:5f:2a:c8:3e:7e:09:f7: de:5e:4e:77:47:80:61:82:47:cf:34:d1:94:54:7f: 28:ab:b9:32:0b:61:55:ca:a3:4a:74:47:c4:1b:b5: fe:43:6a:45:71:cb:69:e2:e2:b2:d3:99:20:44:8d: c5:37:3a:6b:a5:06:df:9f:91:cc:6a:d1:2b:c0:83: 03:c8:99:63:60:1f:c7:ae:6e:48:e4:a2:d8:dd:5a: ff:47:bb:d6:55:f0:94:88:4c:ea:10:47:c7:85:47: d9:64:ec:09:e6:91:59:3d:c8:9f:0e:4b:8a:bb:2f: 2b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:87:BA:77:5D:F1:89:0B:55:1E:CD:29:1C:B7:1D:69:92:27:FA X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ea:90:d1:66:fd:04:ce:3f:d8:57:3a:d8:16:65:69:49:a7: a4:db:82:00:df:91:40:87:d4:18:3d:9c:8c:a1:69:4a:01:9e: 58:ec:45:43:a4:a3:ba:eb:06:7f:85:cb:21:4f:10:35:13:6e: c9:de:4f:a7:4c:84:d7:0c:29:3f:8b:b8:6f:9e:bb:8e:ba:81: e9:44:9f:10:5b:25:66:c6:37:32:8b:cd:63:8e:18:57:52:02: 95:19:a0:06:99:0f:a4:18:11:9f:55:a9:24:35:7f:3c:46:f1: f8:36:74:dc:05:13:86:cc:c4:17:9d:ed:5c:f4:27:a3:8e:2c: 25:87:8a:34:ec:6f:24:34:67:16:16:9f:b8:12:ed:ec:3e:36: 5e:b1:39:3d:d1:8d:41:3f:24:6e:5c:41:85:eb:ee:e0:f7:87: a4:c3:a7:62:4c:a8:0e:42:74:76:c4:e5:1a:fa:58:e7:cb:2e: af:11:57:73:95:e0:67:51:04:a7:bb:d7:ce:c2:66:87:18:26: 59:77:0f:12:7c:88:0b:8b:27:6e:ac:34:c6:5d:ad:44:d3:55: 6c:4f:18:b9:3e:3a:e5:87:db:1f:a7:02:c1:66:72:16:a0:b9: 71:66:ae:e2:0a:91:e0:25:60:f4:39:e4:5a:7b:85:32:6c:34: 09:e0:72:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUwNjEzMDI0NTI0WhcNMjUwNjIwMDI0NTI0WjAYMRYwFAYD VQQDEw02ODRiOTBjNC04MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySP/S1GSvrzHldPC6oGWxHd+4fa797wBOmmEGW8be0qV4OUQsFkeyJI1Gonk holSKltJzvLZ7c2IsY6uJyBZPrrOV8Yq+GUuVTcOZHAXQWeZ2PLNvgTJP9mCn1KA 6ibpBo5G6rM/Jj68mY0quH61JOXv3pa+Vl38/Pnzw2mCU133q3wGhJXNTrAk+m0I uF8qyD5+CffeXk53R4BhgkfPNNGUVH8oq7kyC2FVyqNKdEfEG7X+Q2pFcctp4uKy 05kgRI3FNzprpQbfn5HMatErwIMDyJljYB/Hrm5I5KLY3Vr/R7vWVfCUiEzqEEfH hUfZZOwJ5pFZPcifDkuKuy8rRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBmh7p3 XfGJC1UezSkctx1pkif6MB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/6pDRZv0Ezj/YVzrYFmVpSaek24IA35FAh9QYPZyMoWlKAZ5Y7EVD pKO66wZ/hcshTxA1E27J3k+nTITXDCk/i7hvnruOuoHpRJ8QWyVmxjcyi81jjhhX UgKVGaAGmQ+kGBGfVakkNX88RvH4NnTcBROGzMQXne1c9Cejjiwlh4o07G8kNGcW Fp+4Eu3sPjZesTk90Y1BPyRuXEGF6+7g94ekw6diTKgOQnR2xOUa+ljnyy6vEVdz leBnUQSnu9fOwmaHGCZZdw8SfIgLiydurDTGXa1E01VsTxi5Pjrlh9sfpwLBZnIW oLlxZq7iCpHgJWD0OeRae4UybDQJ4HIP -----END CERTIFICATE-----Generated at Sat Jun 14 17:40:47 2025 by rpki-client