$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: kGr2HpCcGjTHj1BDrveE6RPa+dOBb1JpyYr3eDUEd34= Subject key identifier: 91:A4:F3:C9:40:1F:A9:93:89:5A:78:40:30:50:30:11:A9:98:12:C3 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0904 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 08FF Signing time: Thu 24 Apr 2025 20:12:49 +0000 Manifest this update: Thu 24 Apr 2025 20:12:48 +0000 Manifest next update: Thu 01 May 2025 20:12:48 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: RHJsyDQJZNxQsuIj0ssw0FExUD4MJ0aua027rG0Q0Dc=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: Nx148Hia3mtZBzFRIhXoxgU+sJRRy0O36TW1Esz7mxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:12:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2308 (0x904) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Apr 24 20:12:48 2025 GMT Not After : May 1 20:12:48 2025 GMT Subject: CN=680a9b40-af1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:84:33:a7:88:91:5e:33:bb:68:84:dd:c2:ee: 5f:d8:67:0b:15:98:5a:b8:e0:64:64:77:26:a5:d3: 42:96:b7:61:69:36:87:04:b9:8c:4f:e3:dd:e9:e3: 22:4d:1e:06:2e:e3:f3:1d:4e:0b:7d:f1:c3:08:b3: 3a:c8:dc:d4:c3:99:42:92:e5:dd:19:df:23:1a:74: 84:1b:26:14:d9:28:57:52:ce:fc:7a:0a:9c:95:12: 3d:6b:23:c3:9d:3f:e7:6f:22:40:98:68:80:1a:42: e9:c7:e7:ea:bd:ec:3c:70:67:c0:be:38:98:b0:97: 02:1d:e0:0a:42:9c:2b:06:2b:b0:1c:a5:b8:cb:f8: 2d:7b:01:d8:41:00:5b:0b:69:2c:6c:bb:47:4c:ec: 63:c1:5f:2f:b1:0c:de:f0:b4:ae:e3:61:83:b4:d7: 35:d2:ba:a5:56:05:b3:7a:ee:1e:85:3a:87:e9:a8: 14:f5:a4:c2:e8:0b:5f:19:aa:f2:62:c0:21:23:05: a2:dc:3a:40:01:ed:73:50:60:5d:68:d4:e0:ff:6f: 1d:16:8c:a1:db:8f:94:5a:b0:c3:5d:02:38:de:5f: 82:f3:1a:4c:ed:e0:f4:12:c8:4b:8e:c5:15:79:5b: f9:6a:ae:db:ee:d1:de:19:b9:fa:0d:06:90:19:88: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A4:F3:C9:40:1F:A9:93:89:5A:78:40:30:50:30:11:A9:98:12:C3 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:cd:24:c9:82:ea:17:fa:e9:85:f4:89:66:08:52:56:a6:aa: e1:e1:41:fa:22:c1:26:e3:e7:ee:e4:cd:d2:82:c6:d6:9a:c0: d5:a7:3b:95:72:7c:c4:d8:db:22:34:5d:1b:55:04:ab:fc:50: 8b:d3:cc:f8:b8:da:6d:ad:55:35:5d:c0:10:9c:26:65:c5:11: 13:b6:52:00:cc:21:03:b2:65:61:60:df:63:b7:eb:85:85:09: 6a:d4:55:20:70:e7:30:81:74:ef:d3:df:1a:d5:31:3e:8a:41: ef:84:b4:8d:ff:c3:19:a3:5d:7f:84:aa:6c:82:b7:25:63:88: e2:69:15:f6:96:65:f6:37:d0:07:0c:3f:8f:b9:f1:68:fe:60: 19:e3:85:97:04:58:03:1a:fc:21:23:12:8e:82:e1:e8:20:1c: 90:90:76:0e:0d:f3:53:5e:5d:26:98:38:e9:d2:06:31:82:0b: 1d:53:7c:2a:7e:5d:82:63:6c:3b:f3:fa:a4:5e:be:a8:92:69: 21:2e:32:62:f6:d7:56:dd:ac:5b:99:1c:de:21:42:13:29:07: c2:58:58:ae:04:c6:a6:d3:25:3c:71:cb:d3:3f:12:88:d9:94: 2e:e0:49:42:ce:18:58:dd:e0:a4:4d:e3:65:4e:7c:3b:02:87: bf:a2:df:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUwNDI0MjAxMjQ4WhcNMjUwNTAxMjAxMjQ4WjAYMRYwFAYD VQQDEw02ODBhOWI0MC1hZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYQzp4iRXjO7aITdwu5f2GcLFZhauOBkZHcmpdNClrdhaTaHBLmMT+Pd6eMi TR4GLuPzHU4LffHDCLM6yNzUw5lCkuXdGd8jGnSEGyYU2ShXUs78egqclRI9ayPD nT/nbyJAmGiAGkLpx+fqvew8cGfAvjiYsJcCHeAKQpwrBiuwHKW4y/gtewHYQQBb C2ksbLtHTOxjwV8vsQze8LSu42GDtNc10rqlVgWzeu4ehTqH6agU9aTC6AtfGary YsAhIwWi3DpAAe1zUGBdaNTg/28dFoyh24+UWrDDXQI43l+C8xpM7eD0EshLjsUV eVv5aq7b7tHeGbn6DQaQGYi6uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGk88lA H6mTiVp4QDBQMBGpmBLDMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlzSTJguoX+umF9IlmCFJWpqrh4UH6IsEm4+fu5M3SgsbWmsDVpzuV cnzE2NsiNF0bVQSr/FCL08z4uNptrVU1XcAQnCZlxRETtlIAzCEDsmVhYN9jt+uF hQlq1FUgcOcwgXTv098a1TE+ikHvhLSN/8MZo11/hKpsgrclY4jiaRX2lmX2N9AH DD+PufFo/mAZ44WXBFgDGvwhIxKOguHoIByQkHYODfNTXl0mmDjp0gYxggsdU3wq fl2CY2w78/qkXr6okmkhLjJi9tdW3axbmRzeIUITKQfCWFiuBMam0yU8ccvTPxKI 2ZQu4ElCzhhY3eCkTeNlTnw7Aoe/ot+3 -----END CERTIFICATE-----Generated at Sat Apr 26 13:07:36 2025 by rpki-client