$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft File: zupmODV1Y6xVdo8A2E0nezpjxEk.mft (raw, json) Hash identifier: 1Oz4Ss6n0TztsGidPfqwkLBM0zTsrdl+FDmwBzdRVOk= Subject key identifier: AA:39:CD:C4:B3:60:B8:0C:4A:FB:10:51:27:6A:01:E4:31:C1:F3:D0 Authority key identifier: CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 Certificate issuer: /CN=A91F2F18/serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft Manifest number: 33 Signing time: Fri 13 Jun 2025 06:33:05 +0000 Manifest this update: Fri 13 Jun 2025 06:33:05 +0000 Manifest next update: Fri 20 Jun 2025 06:33:05 +0000 Files and hashes: 1: zupmODV1Y6xVdo8A2E0nezpjxEk.crl (hash: xIIHrlxG7r0w/zBJ7JNxAKq2oJ15m/0uoXqux1HkvMA=) 2: 65FCC030FB6511EF88F1AD24C4F9AE02.roa (hash: 2AzcWDQppJmuezlbwVz+XBibo6nd4SBXfykYXbtUpSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2F18, serialNumber=CEEA6638357563AC55768F00D84D277B3A63C449 Validity Not Before: Jun 13 06:33:05 2025 GMT Not After : Jun 20 06:33:05 2025 GMT Subject: CN=684bc621-e7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:4a:8a:08:27:ac:7e:c0:ba:ce:32:8b:02: 51:8e:44:18:2a:6e:80:b0:0b:cb:91:70:55:aa:62: 02:c5:34:40:24:07:ff:06:eb:ca:1b:39:5b:10:0e: ad:48:03:67:36:61:ec:49:0a:cb:84:aa:d9:b0:91: 38:2e:79:dc:43:84:90:23:ac:d8:4c:48:8a:b4:9b: 50:bb:e4:53:bc:76:d1:52:cf:44:4a:bf:3b:c8:6c: 1f:07:bb:9b:bb:72:d1:d6:3a:22:da:63:28:cc:03: 82:42:fd:43:17:a5:cd:48:1d:28:01:2e:0b:a3:5f: 3d:0c:34:cd:8e:5c:8e:8e:1b:3c:f2:f2:2b:c8:c4: 0d:42:98:52:54:db:a5:ac:ae:dd:bd:54:5e:0b:1f: 67:b2:90:04:f1:bf:cc:87:5c:93:99:8f:01:a9:f3: f0:c8:8a:48:37:cb:e0:70:eb:ce:48:46:cf:05:36: 83:83:e2:fe:eb:94:02:6b:a4:fb:24:a2:f8:8e:0a: 6b:32:81:8a:19:1a:26:96:04:70:6c:ff:df:06:22: f6:ad:6d:f3:a0:64:16:f8:a6:7a:6e:18:f6:3e:9c: 45:38:c4:03:2e:24:32:6f:2c:61:ef:92:aa:bf:95: b7:6d:ba:72:bd:59:b3:40:27:3b:79:2c:b8:c0:9e: 20:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:CD:C4:B3:60:B8:0C:4A:FB:10:51:27:6A:01:E4:31:C1:F3:D0 X509v3 Authority Key Identifier: keyid:CE:EA:66:38:35:75:63:AC:55:76:8F:00:D8:4D:27:7B:3A:63:C4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zupmODV1Y6xVdo8A2E0nezpjxEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2F18/09504348FB6511EFB45A8966C4F9AE02/zupmODV1Y6xVdo8A2E0nezpjxEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0b:b5:4a:af:90:8f:96:5b:7a:69:91:2a:7c:2c:b5:4e:a5: 50:d6:a6:f5:c5:ee:ba:e1:d5:0c:96:f8:c7:70:80:3c:c2:fe: 16:d3:b2:60:2d:06:15:f9:97:54:1e:0a:74:34:eb:86:cd:3e: 86:c1:43:37:3a:50:af:de:ea:73:6a:9e:20:91:0c:a9:d0:69: 5e:df:12:82:b7:9b:2c:6f:ad:93:db:fd:40:d2:bd:15:0a:42: 44:30:2c:32:32:ff:a7:91:b6:1b:ff:cb:5d:41:75:64:6b:1a: 85:45:0b:18:e9:c0:83:80:f0:fe:d4:cd:d9:0c:05:fc:20:19: d7:ef:d2:30:6d:a2:b6:54:bb:96:e8:4d:1c:76:f0:47:fc:ba: cf:1b:f3:0e:20:d0:5e:c7:c2:43:07:85:95:e7:72:be:fd:0d: 73:14:b4:05:be:33:76:27:b6:46:46:c8:28:20:a0:16:e1:65: f0:47:a3:c8:19:8e:ba:f0:18:cd:78:0f:dd:95:21:ca:49:ec: 57:d7:4d:c1:da:18:71:bd:12:b4:6b:09:ce:cf:93:d2:dc:9f: 13:95:bd:c7:d1:a2:8f:d5:ce:e7:3d:ef:1e:5b:c3:a4:52:77: bd:27:10:fa:9c:b1:ab:32:b3:2d:7f:d6:69:a9:8e:ae:1a:ce: 72:ee:ad:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkYxODExMC8GA1UEBRMoQ0VFQTY2MzgzNTc1NjNBQzU1NzY4RjAwRDg0RDI3N0Iz QTYzQzQ0OTAeFw0yNTA2MTMwNjMzMDVaFw0yNTA2MjAwNjMzMDVaMBgxFjAUBgNV BAMTDTY4NGJjNjIxLWU3ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcXkqKCCesfsC6zjKLAlGORBgqboCwC8uRcFWqYgLFNEAkB/8G68obOVsQDq1I A2c2YexJCsuEqtmwkTguedxDhJAjrNhMSIq0m1C75FO8dtFSz0RKvzvIbB8Hu5u7 ctHWOiLaYyjMA4JC/UMXpc1IHSgBLgujXz0MNM2OXI6OGzzy8ivIxA1CmFJU26Ws rt29VF4LH2eykATxv8yHXJOZjwGp8/DIikg3y+Bw685IRs8FNoOD4v7rlAJrpPsk oviOCmsygYoZGiaWBHBs/98GIvatbfOgZBb4pnpuGPY+nEU4xAMuJDJvLGHvkqq/ lbdtunK9WbNAJzt5LLjAniAvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqjnNxLNg uAxK+xBRJ2oB5DHB89AwHwYDVR0jBBgwFoAUzupmODV1Y6xVdo8A2E0nezpjxEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRjE4LzA5NTA0MzQ4RkI2 NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4VmRvOEEyRTBuZXpwanhF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenVwbU9EVjFZNnhWZG84QTJFMG5lenBqeEVrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RjE4LzA5NTA0MzQ4RkI2NTExRUZCNDVBODk2NkM0RjlBRTAyL3p1cG1PRFYxWTZ4 VmRvOEEyRTBuZXpwanhFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB4LtUqvkI+WW3ppkSp8LLVOpVDWpvXF7rrh1QyW+MdwgDzC/hbTsmAt BhX5l1QeCnQ064bNPobBQzc6UK/e6nNqniCRDKnQaV7fEoK3myxvrZPb/UDSvRUK QkQwLDIy/6eRthv/y11BdWRrGoVFCxjpwIOA8P7UzdkMBfwgGdfv0jBtorZUu5bo TRx28Ef8us8b8w4g0F7HwkMHhZXncr79DXMUtAW+M3YntkZGyCggoBbhZfBHo8gZ jrrwGM14D92VIcpJ7FfXTcHaGHG9ErRrCc7Pk9LcnxOVvcfRoo/Vzuc97x5bw6RS d70nEPqcsasysy1/1mmpjq4aznLurS8= -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:32 2025 by rpki-client