$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: e4iMI7NgKJI5aTwIKNVzs3dco85kn0k85Q6AULmVH8w= Subject key identifier: 44:B0:70:57:83:66:B5:1D:BF:D8:5C:4C:81:71:0F:C3:0B:7B:71:61 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0503 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 04EC Signing time: Thu 12 Jun 2025 23:22:38 +0000 Manifest this update: Thu 12 Jun 2025 23:22:38 +0000 Manifest next update: Thu 19 Jun 2025 23:22:38 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: +A5+rltOz3rgepHckDuHpew3p1xsm6ayWvPFGtzmMIo=) 2: 0302AEA644EC11F0A3CAA17CC4F9AE02.roa (hash: 0z1waO+5HW62K3EJHAb4r2vi3xr/GTetqDAZuDYFPrM=) 3: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1283 (0x503) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Jun 12 23:22:38 2025 GMT Not After : Jun 19 23:22:38 2025 GMT Subject: CN=684b613e-7ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:80:12:6f:be:51:00:0c:35:b0:c5:89:e3: c7:90:35:44:5c:fd:ac:da:2a:cc:18:d8:9d:53:e0: c4:2b:46:bc:f8:c1:23:f2:56:5e:54:b6:37:8d:9e: e3:c0:5e:3d:40:73:f9:79:04:5a:4b:1d:7c:b7:18: fc:78:17:6d:56:81:9f:de:ad:3e:d2:6b:8e:2c:6f: a7:e8:0b:6e:f6:b1:58:83:36:cc:b6:04:94:5c:cc: e6:63:66:a7:a6:7a:ae:85:80:ce:19:93:c2:e8:18: 23:99:01:fd:e8:ac:d1:af:c5:78:44:4d:61:de:19: 06:90:cb:d4:b5:c0:bc:40:02:c3:7f:01:5e:26:64: 5e:2c:b3:ce:81:71:6d:08:1f:d8:7a:0a:30:2c:db: 32:2d:9a:95:27:8c:f0:97:9f:81:0d:cf:4c:68:43: bb:ec:49:b3:7e:ba:25:df:3b:d7:7a:cf:55:82:c5: 55:d9:c1:d7:d4:33:9c:d1:06:c8:cb:3a:ad:4c:34: 9c:43:04:4d:76:e5:cb:e0:47:2b:21:18:fd:dd:ba: da:47:43:c4:a3:27:9b:de:25:b1:59:36:b6:06:6e: 7e:4c:b5:66:15:08:db:51:1d:71:32:68:15:a0:a3: 49:cf:de:ef:93:ee:0a:19:55:64:f9:64:5d:f1:a5: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B0:70:57:83:66:B5:1D:BF:D8:5C:4C:81:71:0F:C3:0B:7B:71:61 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:6a:66:1d:0f:9d:fb:fb:9c:b1:5c:55:44:0f:d4:51:41:d4: fe:10:31:2a:29:c5:07:dc:9d:05:82:e3:c5:98:c9:54:0a:23: 48:d5:66:d6:61:e7:6c:cf:40:15:96:25:2a:df:41:95:2b:0c: a4:92:36:7c:04:59:10:ec:57:23:a8:fd:03:6d:45:20:89:07: b6:46:79:86:a5:4a:97:fa:f5:c4:42:3d:5b:d7:e9:61:df:93: 99:c7:99:2a:fe:99:49:72:86:c3:83:31:5c:8c:ae:82:e7:f9: 5b:41:ac:4f:1e:57:d3:81:d5:f3:eb:a9:81:fd:62:47:65:80: b1:33:77:49:64:e6:34:7c:36:eb:a7:86:2c:9f:9d:73:48:00: 6e:19:f5:4d:3d:79:09:72:c4:f8:26:41:6c:6e:a8:d6:db:1b: 91:80:0f:88:c5:e4:f5:3b:cc:b6:11:5c:6e:b3:43:ac:31:1c: 38:68:79:a3:4f:b1:6e:c4:d1:93:04:70:e3:d3:75:a4:de:3c: bf:44:45:e2:45:77:eb:ed:1e:45:bb:a3:c4:e2:0d:2a:08:6b: 23:97:aa:da:cd:e3:e3:1d:f1:79:36:00:c9:6f:b5:84:7d:39: 19:a6:73:6b:60:2f:f4:36:d0:f7:f5:03:da:87:af:fa:90:49: b7:81:ef:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwNjEyMjMyMjM4WhcNMjUwNjE5MjMyMjM4WjAYMRYwFAYD VQQDEw02ODRiNjEzZS03ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aKAEm++UQAMNbDFiePHkDVEXP2s2irMGNidU+DEK0a8+MEj8lZeVLY3jZ7j wF49QHP5eQRaSx18txj8eBdtVoGf3q0+0muOLG+n6Atu9rFYgzbMtgSUXMzmY2an pnquhYDOGZPC6BgjmQH96KzRr8V4RE1h3hkGkMvUtcC8QALDfwFeJmReLLPOgXFt CB/YegowLNsyLZqVJ4zwl5+BDc9MaEO77Emzfrol3zvXes9VgsVV2cHX1DOc0QbI yzqtTDScQwRNduXL4EcrIRj93braR0PEoyeb3iWxWTa2Bm5+TLVmFQjbUR1xMmgV oKNJz97vk+4KGVVk+WRd8aV/GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFESwcFeD ZrUdv9hcTIFxD8MLe3FhMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoamYdD537+5yxXFVED9RRQdT+EDEqKcUH3J0FguPFmMlUCiNI1WbW Yedsz0AVliUq30GVKwykkjZ8BFkQ7FcjqP0DbUUgiQe2RnmGpUqX+vXEQj1b1+lh 35OZx5kq/plJcobDgzFcjK6C5/lbQaxPHlfTgdXz66mB/WJHZYCxM3dJZOY0fDbr p4Ysn51zSABuGfVNPXkJcsT4JkFsbqjW2xuRgA+IxeT1O8y2EVxus0OsMRw4aHmj T7FuxNGTBHDj03Wk3jy/REXiRXfr7R5Fu6PE4g0qCGsjl6razePjHfF5NgDJb7WE fTkZpnNrYC/0NtD39QPah6/6kEm3ge+w -----END CERTIFICATE-----Generated at Sat Jun 14 18:05:18 2025 by rpki-client