$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json) Hash identifier: C8Oe66DlQcMKjXKNK5U5o36ccEWQ8fkznVIQLpS0fSM= Subject key identifier: 70:04:92:55:A2:DD:05:AA:D4:E0:7F:F0:56:50:9F:08:EC:68:92:C2 Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft Manifest number: 034C Signing time: Thu 24 Apr 2025 20:52:00 +0000 Manifest this update: Thu 24 Apr 2025 20:51:59 +0000 Manifest next update: Thu 01 May 2025 20:51:59 +0000 Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: 2vXoifY2dqLEBcq+TM7gkc/DrvDkcvuIuxUlUbxFRlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Validity Not Before: Apr 24 20:51:59 2025 GMT Not After : May 1 20:51:59 2025 GMT Subject: CN=680aa46f-e981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:9a:b8:57:43:5b:51:28:48:9d:1b:fb:69: 5a:ad:8e:e1:33:68:7b:96:a2:0d:7c:10:a5:57:0e: 87:46:2e:19:c2:86:71:9e:55:c1:f2:80:3c:7c:cb: ba:7a:e4:89:2b:16:44:5c:df:7a:10:69:3f:bd:df: 2c:25:c7:e0:86:15:34:ed:d7:4e:31:10:e2:12:6b: 2f:ed:9b:f6:75:86:fa:28:b9:47:6b:c2:0f:06:bf: 95:34:94:8d:98:ec:4c:8c:13:4c:48:cb:6f:5f:1c: 85:46:9a:c8:d4:45:31:04:4f:94:2e:ee:ca:5c:16: fe:b0:30:27:a1:1e:55:6c:ce:10:09:20:61:62:28: ef:0c:5e:d0:96:be:c8:98:45:1d:b1:b3:61:a7:16: 0d:37:57:75:0f:85:f3:e6:5d:41:12:27:0a:84:f4: 97:65:e0:3a:77:a1:81:fb:99:18:48:4f:91:5d:1f: d6:25:3e:95:a9:7b:1f:1f:2d:c1:97:76:19:9b:db: 53:54:6c:17:01:4b:36:a8:43:95:da:e5:27:8f:ca: 3c:2e:1a:c1:fb:20:ab:ac:09:a5:e6:96:d9:b1:36: bf:e2:7c:e5:8d:97:92:67:52:e5:d0:3e:dd:62:3e: f1:38:6c:d4:81:23:65:af:86:3a:45:af:e8:65:b3: ab:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:04:92:55:A2:DD:05:AA:D4:E0:7F:F0:56:50:9F:08:EC:68:92:C2 X509v3 Authority Key Identifier: keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:93:00:82:7e:7e:b3:7e:ed:23:d4:7b:67:17:b9:58:33: f0:81:48:12:e1:ee:5a:13:46:e9:68:35:4a:b6:9b:6c:2b:b2: 03:02:29:1b:35:db:a5:15:6d:a7:a5:84:b0:21:05:10:48:de: a5:d6:a6:b7:23:d5:1b:a9:58:a6:2e:7d:0b:7f:e9:f6:39:d6: 6f:ee:0a:50:35:0c:8e:f1:8b:3a:99:fd:65:d5:f8:87:8c:70: 0f:7d:10:64:c5:d5:98:46:e8:bc:64:96:e1:ae:55:a2:d5:5e: 71:a9:12:fe:19:92:01:46:88:a0:d3:c6:5e:5b:de:c0:e4:c7: 7b:17:4f:7e:cb:42:59:70:86:36:ce:d8:05:ba:13:5b:0b:75: 7b:6b:b8:f9:26:9c:1b:ae:72:87:38:54:a4:7e:03:d4:8b:38: 77:a5:42:f0:24:33:ce:6b:d5:d4:48:4c:1d:30:bb:81:df:1a: ff:3a:a6:13:a6:b2:99:87:f6:df:dc:0b:e2:62:82:31:14:a8: c8:dc:cb:ed:a9:f6:8f:29:0e:4d:e0:dd:fc:ee:02:7b:32:de: 35:1a:28:dc:db:ec:74:3b:26:c6:47:67:ae:c7:4a:da:72:49: 3c:3d:a4:18:d8:c6:f6:c6:de:8d:36:c2:3e:ff:d7:c1:af:28: c9:4a:0d:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1 OUZCQkQ1NzQwHhcNMjUwNDI0MjA1MTU5WhcNMjUwNTAxMjA1MTU5WjAYMRYwFAYD VQQDEw02ODBhYTQ2Zi1lOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlOauFdDW1EoSJ0b+2larY7hM2h7lqINfBClVw6HRi4ZwoZxnlXB8oA8fMu6 euSJKxZEXN96EGk/vd8sJcfghhU07ddOMRDiEmsv7Zv2dYb6KLlHa8IPBr+VNJSN mOxMjBNMSMtvXxyFRprI1EUxBE+ULu7KXBb+sDAnoR5VbM4QCSBhYijvDF7Qlr7I mEUdsbNhpxYNN1d1D4Xz5l1BEicKhPSXZeA6d6GB+5kYSE+RXR/WJT6VqXsfHy3B l3YZm9tTVGwXAUs2qEOV2uUnj8o8LhrB+yCrrAml5pbZsTa/4nzljZeSZ1Ll0D7d Yj7xOGzUgSNlr4Y6Ra/oZbOr1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAEklWi 3QWq1OB/8FZQnwjsaJLCMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwmZMAgn5+s37tI9R7Zxe5WDPwgUgS4e5aE0bpaDVKtptsK7IDAikb NdulFW2npYSwIQUQSN6l1qa3I9UbqVimLn0Lf+n2OdZv7gpQNQyO8Ys6mf1l1fiH jHAPfRBkxdWYRui8ZJbhrlWi1V5xqRL+GZIBRoig08ZeW97A5Md7F09+y0JZcIY2 ztgFuhNbC3V7a7j5JpwbrnKHOFSkfgPUizh3pULwJDPOa9XUSEwdMLuB3xr/OqYT prKZh/bf3AviYoIxFKjI3MvtqfaPKQ5N4N387gJ7Mt41Gijc2+x0OybGR2eux0ra ckk8PaQY2Mb2xt6NNsI+/9fBryjJSg31 -----END CERTIFICATE-----Generated at Sat Apr 26 12:19:59 2025 by rpki-client