$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: ZHIdWxZXXZ26lCKB9NfuYwHzW6Y7qkzpOe2ok7bLlCc= Subject key identifier: 57:BA:7B:EE:32:F0:BE:AE:E0:67:E6:50:91:38:F5:C9:39:FD:6D:5D Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: A3 Signing time: Fri 13 Jun 2025 05:07:57 +0000 Manifest this update: Fri 13 Jun 2025 05:07:56 +0000 Manifest next update: Fri 20 Jun 2025 05:07:56 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: Dc3Z0ry7lINWvVJUoK/m+/XtExo1XDiY74haOE2jRXU=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Jun 13 05:07:56 2025 GMT Not After : Jun 20 05:07:56 2025 GMT Subject: CN=684bb22c-5c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a3:2f:90:c8:c3:2b:29:dd:46:12:5c:80:b5: 70:e0:2b:3d:7c:7c:1c:e5:18:fd:0c:46:33:0d:38: 5d:d2:df:f4:02:01:a3:92:60:1e:1a:ce:58:34:b7: 2f:ad:cd:d1:0d:c8:a0:bb:56:f2:b9:80:6e:40:34: e0:20:5a:8b:24:e5:7f:66:f0:7c:dc:f2:bf:28:1a: ba:21:95:21:bd:3c:2d:b5:b9:7e:a4:d8:e7:b4:a2: 0f:6e:4a:52:a5:7e:62:e2:ff:2d:f6:ba:e2:f8:8d: 0c:7b:21:b2:40:d3:b7:b6:fb:d2:db:e8:43:f5:ad: 99:78:2e:72:0e:19:c4:94:cd:10:f3:07:fa:65:00: 46:a8:2f:97:3f:ff:46:b1:cb:03:dd:d2:c7:87:f8: 01:8b:c1:bb:7f:b4:b5:30:34:35:4a:81:a9:9a:c0: 80:ca:07:dc:cf:16:a6:9a:41:8b:1c:90:97:b2:7f: 6c:38:32:3f:b2:49:fa:7f:cb:56:23:a9:6a:9b:eb: a5:d3:80:92:2a:ed:27:5d:0c:14:b8:0d:6b:7e:28: ef:ce:51:66:b4:01:b7:62:61:2f:05:7c:74:a7:a6: de:27:88:ca:3d:6c:46:32:b6:6f:d6:5a:b0:78:bc: c1:a8:6f:37:8a:ae:43:65:ed:dd:57:9f:86:47:7c: 7d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BA:7B:EE:32:F0:BE:AE:E0:67:E6:50:91:38:F5:C9:39:FD:6D:5D X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:8e:43:c2:f2:03:6f:68:fc:71:47:14:bc:3a:f2:88:d2:36: f8:f6:04:33:c1:f5:d2:10:37:bb:4c:06:76:1c:d4:cc:59:43: ee:ca:d5:15:85:1a:b6:7c:36:cd:90:79:ab:51:12:8d:76:e2: 25:29:c5:cf:ba:24:c2:67:f9:a8:25:6e:37:a9:45:0d:e5:59: 3b:70:e0:dc:5f:a7:b8:48:e5:84:19:7c:27:eb:67:51:f0:d6: 73:1e:87:11:05:2b:27:06:c4:5d:f7:85:e7:03:8c:fa:bc:08: a1:55:1f:75:25:73:e0:c3:1d:8f:5a:dc:5f:6a:47:63:ad:09: 4e:b5:92:70:b9:49:6a:02:ca:5b:0b:4a:a8:11:84:02:1c:dc: 78:1a:65:04:8f:c2:50:32:68:a4:23:02:47:e9:a0:7a:32:15: e6:46:06:2e:70:8d:6f:3f:bb:f1:38:d3:fa:09:20:57:89:be: e1:16:1b:f8:75:33:5a:7d:43:e0:67:50:9d:b1:f6:6d:71:b7: 22:00:dd:20:db:f1:ee:1f:00:db:93:99:75:4a:c6:32:ab:e2: e7:2d:9c:a5:e1:07:fe:0f:77:bf:64:ba:dc:da:e1:07:45:43: 53:bc:15:34:73:ca:33:58:e3:a4:bd:e0:b6:b5:99:6f:6d:88: d8:ad:90:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwNjEzMDUwNzU2WhcNMjUwNjIwMDUwNzU2WjAYMRYwFAYD VQQDEw02ODRiYjIyYy01YzgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqqMvkMjDKyndRhJcgLVw4Cs9fHwc5Rj9DEYzDThd0t/0AgGjkmAeGs5YNLcv rc3RDcigu1byuYBuQDTgIFqLJOV/ZvB83PK/KBq6IZUhvTwttbl+pNjntKIPbkpS pX5i4v8t9rri+I0MeyGyQNO3tvvS2+hD9a2ZeC5yDhnElM0Q8wf6ZQBGqC+XP/9G scsD3dLHh/gBi8G7f7S1MDQ1SoGpmsCAygfczxammkGLHJCXsn9sODI/skn6f8tW I6lqm+ul04CSKu0nXQwUuA1rfijvzlFmtAG3YmEvBXx0p6beJ4jKPWxGMrZv1lqw eLzBqG83iq5DZe3dV5+GR3x9TQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFe6e+4y 8L6u4GfmUJE49ck5/W1dMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDcjkPC8gNvaPxxRxS8OvKI0jb49gQzwfXSEDe7TAZ2HNTMWUPuytUV hRq2fDbNkHmrURKNduIlKcXPuiTCZ/moJW43qUUN5Vk7cODcX6e4SOWEGXwn62dR 8NZzHocRBSsnBsRd94XnA4z6vAihVR91JXPgwx2PWtxfakdjrQlOtZJwuUlqAspb C0qoEYQCHNx4GmUEj8JQMmikIwJH6aB6MhXmRgYucI1vP7vxONP6CSBXib7hFhv4 dTNafUPgZ1CdsfZtcbciAN0g2/HuHwDbk5l1SsYyq+LnLZyl4Qf+D3e/ZLrc2uEH RUNTvBU0c8ozWOOkveC2tZlvbYjYrZDc -----END CERTIFICATE-----Generated at Sat Jun 14 19:28:19 2025 by rpki-client