$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: rErrxnNfJzxLV80xG4DsA2s4+zA0kkCuqJTDDx7LsXs= Subject key identifier: 25:69:19:E7:3E:79:8E:D5:EF:19:46:32:37:C4:D2:12:DF:AA:60:3B Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 08D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 08C9 Signing time: Sat 26 Apr 2025 20:13:58 +0000 Manifest this update: Sat 26 Apr 2025 20:13:57 +0000 Manifest next update: Sat 03 May 2025 20:13:57 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: UMR1V2ABVKfJSkQ8e5XlhkJPgXipV7rbitdnrPy+iNc=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: liguL5yWelfphfIz9rHVaKh3TqmzzrhEVoBWguDMI9M=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: /n6JoBCxKb39xofyDRMG1k20W82UdWlbULQ4CPVAgMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 20:13:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2264 (0x8d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Apr 26 20:13:57 2025 GMT Not After : May 3 20:13:57 2025 GMT Subject: CN=680d3e86-9903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:f8:c8:c5:56:b0:9a:fd:36:5f:b4:6f:32: 81:4e:00:da:97:5f:95:3c:6a:45:f2:97:95:fc:dd: 4b:99:3d:85:a6:4f:22:b9:21:33:7d:aa:89:07:6a: d5:4c:fb:f1:ac:66:e6:bd:83:cc:1a:11:44:7e:be: 21:6b:90:2d:8c:24:21:9a:4c:27:49:1c:b6:d4:94: b1:7d:ed:60:cc:b4:40:62:6d:e8:84:3c:01:7e:f3: f2:56:29:47:92:9a:8d:2e:b8:89:d9:1f:a8:99:5f: 25:81:ed:8c:bb:04:d5:f9:26:63:ff:b9:db:66:e5: c3:37:be:92:2d:00:0a:0d:6e:a0:4c:ef:45:86:89: 7e:1e:2b:41:0c:10:40:b5:1e:77:59:81:2a:f4:0b: 7b:b4:f1:92:92:20:c1:cf:b1:69:a5:3f:85:97:44: df:5f:fd:ad:dc:ec:6a:d1:4b:90:dc:5d:72:c3:c5: 30:0c:fe:e1:31:6e:c3:f8:42:9e:65:6f:8f:c9:1a: e7:06:fd:cd:df:45:c1:aa:88:c2:a6:26:cf:77:c1: cf:44:e3:b9:16:2a:28:29:6e:05:b2:af:c3:96:76: ad:89:e2:fc:24:1f:cd:1f:bd:84:e6:fd:51:88:f8: 77:5b:62:d7:45:a9:b0:07:4c:c2:49:8c:b4:bf:e6: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:69:19:E7:3E:79:8E:D5:EF:19:46:32:37:C4:D2:12:DF:AA:60:3B X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c0:bc:6c:2a:56:de:98:91:3e:a3:30:6f:71:9e:8d:cb:4d: 0a:43:e3:c0:22:86:93:6d:4d:6e:5d:4a:5c:b9:cb:f8:67:e8: 69:03:07:78:98:77:96:de:7a:42:46:ee:4d:83:dc:18:bb:18: 07:e8:30:e1:0b:e1:e5:a0:43:2c:0b:ec:98:f7:52:81:12:a1: a8:b4:a2:e6:32:a4:b5:e6:02:dc:fa:10:fd:c6:c2:92:b4:8c: 29:26:5d:f6:55:df:68:54:7e:a1:59:06:3f:50:1b:0c:93:f9: 5f:af:29:a2:fb:62:fd:c4:b7:4b:e4:bf:d6:14:46:d4:6e:32: 44:08:da:92:05:57:ef:46:58:b0:2a:74:8c:3c:22:e0:94:d4: 73:c0:7f:3f:2b:84:40:3d:f1:03:cc:3e:5d:a3:a6:dc:c5:fa: 06:ca:6e:08:65:d9:a9:02:8a:08:56:62:74:75:86:99:29:82: a7:9f:46:7a:e7:02:ee:23:c0:62:94:09:38:27:6b:11:88:a6: 47:9f:ff:3b:f6:cd:93:76:7d:00:cd:24:f0:d1:0e:91:2b:72: b0:45:2b:ba:6a:07:86:2e:3b:97:f7:d1:ff:38:d6:fa:7a:2d: 6f:16:a4:43:2e:c2:e0:05:a1:8c:d0:32:e7:8a:b5:3e:f4:ff: 65:bb:a1:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUwNDI2MjAxMzU3WhcNMjUwNTAzMjAxMzU3WjAYMRYwFAYD VQQDEw02ODBkM2U4Ni05OTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtV34yMVWsJr9Nl+0bzKBTgDal1+VPGpF8peV/N1LmT2Fpk8iuSEzfaqJB2rV TPvxrGbmvYPMGhFEfr4ha5AtjCQhmkwnSRy21JSxfe1gzLRAYm3ohDwBfvPyVilH kpqNLriJ2R+omV8lge2MuwTV+SZj/7nbZuXDN76SLQAKDW6gTO9Fhol+HitBDBBA tR53WYEq9At7tPGSkiDBz7FppT+Fl0TfX/2t3Oxq0UuQ3F1yw8UwDP7hMW7D+EKe ZW+PyRrnBv3N30XBqojCpibPd8HPROO5FiooKW4Fsq/DlnatieL8JB/NH72E5v1R iPh3W2LXRamwB0zCSYy0v+YJ+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCVpGec+ eY7V7xlGMjfE0hLfqmA7MB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBewLxsKlbemJE+ozBvcZ6Ny00KQ+PAIoaTbU1uXUpcucv4Z+hpAwd4 mHeW3npCRu5Ng9wYuxgH6DDhC+HloEMsC+yY91KBEqGotKLmMqS15gLc+hD9xsKS tIwpJl32Vd9oVH6hWQY/UBsMk/lfrymi+2L9xLdL5L/WFEbUbjJECNqSBVfvRliw KnSMPCLglNRzwH8/K4RAPfEDzD5do6bcxfoGym4IZdmpAooIVmJ0dYaZKYKnn0Z6 5wLuI8BilAk4J2sRiKZHn/879s2Tdn0AzSTw0Q6RK3KwRSu6ageGLjuX99H/ONb6 ei1vFqRDLsLgBaGM0DLnirU+9P9lu6F5 -----END CERTIFICATE-----Generated at Sun Apr 27 22:08:58 2025 by rpki-client