$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: Q7BktSr2YDnIEtNZ5rZ2/dAaSy9xdThvvlUIdw3R/yc= Subject key identifier: 2F:92:6C:98:A5:96:FD:01:61:B9:82:16:FA:3E:6B:9B:F8:33:72:C2 Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0E47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 29D0 Signing time: Wed 18 Jun 2025 16:57:20 +0000 Manifest this update: Wed 18 Jun 2025 16:57:19 +0000 Manifest next update: Wed 25 Jun 2025 16:57:19 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: I7erXz1HajTQmCXBD5f1PlG/aFYDFkmxFldZ9AkXCNk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Jun 18 16:57:19 2025 GMT Not After : Jun 25 16:57:19 2025 GMT Subject: CN=6852eff0-d11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:4e:ab:6e:00:db:10:f9:33:a9:39:dd:fd: 5a:b3:e4:c7:c3:38:00:0b:b7:07:b6:46:3d:ec:46: 9f:21:ff:b1:cd:ef:59:0f:81:b3:f4:30:42:43:2e: 55:ff:1b:97:77:15:e1:44:69:b2:e2:5b:68:ec:23: 80:62:d7:ab:e9:fb:21:d9:63:18:71:0d:17:90:90: f4:39:a7:bd:90:78:f4:e5:23:ad:74:ed:cb:40:e8: 6e:a5:a5:8e:29:8e:46:7f:f8:1e:6e:60:3f:d5:22: 35:21:e9:97:e5:1c:10:ce:a0:ad:ab:6a:03:55:55: 98:94:47:0f:9c:8a:b3:f5:36:75:5a:38:cc:01:ea: f1:7a:8b:76:25:83:3e:0d:75:66:f5:54:3b:07:ef: d3:81:97:f8:a7:e9:57:35:d0:05:22:f4:c4:3f:04: 99:ea:03:9a:9f:a6:b6:6d:e7:29:43:f3:6e:17:34: 7b:37:22:42:ab:ca:f3:eb:ce:91:62:d8:40:b8:8c: 1d:25:fb:ce:a4:63:7c:e9:b0:e2:be:8b:d3:fe:03: 62:80:b0:31:95:12:f9:86:da:4d:c6:9f:14:e3:0e: 60:32:82:8f:61:81:b6:e5:a1:66:82:c5:7e:64:02: f7:b7:10:26:d6:50:05:1c:c3:01:1f:ed:4b:6b:d4: 88:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:92:6C:98:A5:96:FD:01:61:B9:82:16:FA:3E:6B:9B:F8:33:72:C2 X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:5b:57:c1:c9:96:6c:14:b9:34:8e:55:dd:c6:7a:6c:1e:ed: 47:48:80:cd:59:11:f6:d5:6d:6e:14:5d:9e:26:fd:7a:d4:ec: 34:55:d4:7e:40:a3:ec:06:3c:6f:32:97:4e:f5:a3:2d:0f:41: 86:c4:24:0c:e6:f2:85:a7:7a:de:c1:68:ee:a6:45:47:c6:c7: 7d:e6:9c:b3:c8:55:a5:6c:00:f3:92:46:54:73:f5:f8:70:a5: 73:7b:40:92:9f:3b:57:93:24:98:52:41:07:22:21:70:c8:8d: 23:fa:80:13:52:57:c9:16:de:83:e5:a6:1d:f7:3b:b9:02:21: f0:63:11:b4:d6:6e:c0:1b:f1:2c:f5:43:2f:be:38:bd:6d:2e: 6b:9c:90:bd:54:c8:eb:dc:ca:a2:46:b9:65:68:bb:74:2a:16: c9:a7:cd:ef:a0:b2:06:a4:e1:0f:b0:81:9f:4b:75:4b:74:b1: d1:88:77:81:97:d9:14:06:fa:c2:91:4c:46:52:11:dc:88:c3: 0c:54:8b:49:5f:e8:33:70:e6:48:83:c6:df:ec:1b:af:70:a5: 0c:44:1b:0c:7e:e3:47:d5:b0:e2:db:1b:65:93:03:86:ba:45: 37:0b:32:7a:8b:0f:af:0a:05:e4:79:10:0e:ab:69:e6:ee:9d: 05:66:64:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUwNjE4MTY1NzE5WhcNMjUwNjI1MTY1NzE5WjAYMRYwFAYD VQQDEw02ODUyZWZmMC1kMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvf1Oq24A2xD5M6k53f1as+THwzgAC7cHtkY97EafIf+xze9ZD4Gz9DBCQy5V /xuXdxXhRGmy4lto7COAYter6fsh2WMYcQ0XkJD0Oae9kHj05SOtdO3LQOhupaWO KY5Gf/gebmA/1SI1IemX5RwQzqCtq2oDVVWYlEcPnIqz9TZ1WjjMAerxeot2JYM+ DXVm9VQ7B+/TgZf4p+lXNdAFIvTEPwSZ6gOan6a2becpQ/NuFzR7NyJCq8rz686R YthAuIwdJfvOpGN86bDivovT/gNigLAxlRL5htpNxp8U4w5gMoKPYYG25aFmgsV+ ZAL3txAm1lAFHMMBH+1La9SIGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC+SbJil lv0BYbmCFvo+a5v4M3LCMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3W1fByZZsFLk0jlXdxnpsHu1HSIDNWRH21W1uFF2eJv161Ow0VdR+ QKPsBjxvMpdO9aMtD0GGxCQM5vKFp3rewWjupkVHxsd95pyzyFWlbADzkkZUc/X4 cKVze0CSnztXkySYUkEHIiFwyI0j+oATUlfJFt6D5aYd9zu5AiHwYxG01m7AG/Es 9UMvvji9bS5rnJC9VMjr3MqiRrllaLt0KhbJp83voLIGpOEPsIGfS3VLdLHRiHeB l9kUBvrCkUxGUhHciMMMVItJX+gzcOZIg8bf7BuvcKUMRBsMfuNH1bDi2xtlkwOG ukU3CzJ6iw+vCgXkeRAOq2nm7p0FZmRB -----END CERTIFICATE-----Generated at Thu Jun 19 22:31:43 2025 by rpki-client