$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: PSIDuXgYm5ppmixhdPiXHbwJvHrsYJZWsOjAOF309r0= Subject key identifier: 45:F7:14:A7:33:75:70:6B:C6:F5:FF:CD:E9:91:34:D8:C5:0C:FF:92 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: A8 Signing time: Fri 25 Apr 2025 05:09:18 +0000 Manifest this update: Fri 25 Apr 2025 05:09:18 +0000 Manifest next update: Fri 02 May 2025 05:09:18 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 2a+K31bf3RrqggM9ZjfssV+s040BMKtaRLk5e2QxFN4=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Apr 25 05:09:18 2025 GMT Not After : May 2 05:09:18 2025 GMT Subject: CN=680b18fe-b908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:be:e3:dc:f5:e1:94:55:63:22:34:2a:67: 18:ae:fe:97:31:27:cf:f3:95:3d:5f:4f:61:6f:91: c3:bf:f8:62:f6:80:8b:ed:42:1e:0c:57:f6:cf:ff: ef:ea:40:f6:ba:3c:43:35:b8:a2:67:db:be:6f:41: 06:22:f1:4f:56:34:97:0b:70:3e:5f:1b:35:66:e8: d5:0d:af:92:4b:bd:f5:0f:13:73:6f:37:07:76:c3: 3c:52:82:86:0f:b3:f2:6e:01:5b:bb:91:fc:82:dc: 60:4d:d2:e0:23:a5:22:da:83:de:36:9c:5a:ed:cd: fd:b5:47:a1:f0:c3:aa:0d:9d:3c:c8:61:f7:38:13: 5b:29:8a:9b:c5:70:13:85:6e:09:68:29:9c:c5:ce: 1f:ca:19:8a:4f:66:c9:1e:e0:17:4a:ae:9d:97:56: 77:80:71:db:b6:ac:e1:20:9d:2f:61:c5:0c:58:e2: 2b:35:ac:6f:07:4a:58:c4:88:98:81:5e:f9:46:80: 24:e1:c3:d9:cc:18:2f:d8:6c:02:f9:60:46:6d:5e: c5:f2:24:7a:81:e5:08:a1:20:e8:63:d4:05:b0:20: 04:f7:78:e2:94:78:62:b3:76:16:27:c0:19:a8:c0: ff:be:96:28:1d:b4:94:2b:9d:17:ea:a9:6e:d3:d8: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F7:14:A7:33:75:70:6B:C6:F5:FF:CD:E9:91:34:D8:C5:0C:FF:92 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:71:98:7f:5b:60:bd:56:53:99:52:4d:0e:96:51:2b:bc:80: 5c:6a:09:12:b9:aa:47:de:9d:c9:e3:1e:d9:ce:23:5b:92:f7: 38:2a:55:4d:65:d6:36:7b:1c:8c:d9:a7:bd:75:d5:95:6b:0e: b0:e8:30:13:86:41:8d:86:53:34:fb:a7:08:ef:e8:4d:47:7c: 43:6a:aa:86:fc:33:89:eb:dd:65:ea:44:3f:7d:28:8d:01:04: 4e:9e:83:6e:51:e5:9e:5e:a8:ed:02:bc:62:e6:5b:3a:c8:c4: 27:ad:67:2f:89:22:d7:b5:b4:18:30:66:da:e6:78:08:f8:df: b1:aa:a1:af:c3:f2:ee:9b:7b:c2:8a:58:e5:2b:3e:2d:b9:6d: 9f:02:d8:36:8a:76:e0:de:4d:f8:bc:cb:a7:91:b5:b9:ef:e4: 0a:b7:1a:51:a5:0c:b6:60:74:00:b6:a0:92:a6:71:bd:dd:fb: 22:34:86:f4:54:8a:e1:9a:b3:b6:b4:73:7f:63:2a:40:f7:b2: a8:fb:9e:92:f6:3a:c1:fb:d2:d7:a3:f1:e0:86:41:d9:c8:7b: 6c:bc:c9:ef:70:0e:da:b8:18:c4:f2:2e:51:73:9c:12:20:eb: 57:31:8b:be:7c:61:76:c1:31:67:c3:7b:fa:81:a4:aa:1a:a1: d5:0a:5d:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNDI1MDUwOTE4WhcNMjUwNTAyMDUwOTE4WjAYMRYwFAYD VQQDEw02ODBiMThmZS1iOTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyta+49z14ZRVYyI0KmcYrv6XMSfP85U9X09hb5HDv/hi9oCL7UIeDFf2z//v 6kD2ujxDNbiiZ9u+b0EGIvFPVjSXC3A+Xxs1ZujVDa+SS731DxNzbzcHdsM8UoKG D7PybgFbu5H8gtxgTdLgI6Ui2oPeNpxa7c39tUeh8MOqDZ08yGH3OBNbKYqbxXAT hW4JaCmcxc4fyhmKT2bJHuAXSq6dl1Z3gHHbtqzhIJ0vYcUMWOIrNaxvB0pYxIiY gV75RoAk4cPZzBgv2GwC+WBGbV7F8iR6geUIoSDoY9QFsCAE93jilHhis3YWJ8AZ qMD/vpYoHbSUK50X6qlu09j0IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEX3FKcz dXBrxvX/zemRNNjFDP+SMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHcZh/W2C9VlOZUk0OllErvIBcagkSuapH3p3J4x7ZziNbkvc4KlVN ZdY2exyM2ae9ddWVaw6w6DAThkGNhlM0+6cI7+hNR3xDaqqG/DOJ691l6kQ/fSiN AQROnoNuUeWeXqjtArxi5ls6yMQnrWcviSLXtbQYMGba5ngI+N+xqqGvw/Lum3vC iljlKz4tuW2fAtg2inbg3k34vMunkbW57+QKtxpRpQy2YHQAtqCSpnG93fsiNIb0 VIrhmrO2tHN/YypA97Ko+56S9jrB+9LXo/HghkHZyHtsvMnvcA7auBjE8i5Rc5wS IOtXMYu+fGF2wTFnw3v6gaSqGqHVCl3X -----END CERTIFICATE-----Generated at Sat Apr 26 17:06:27 2025 by rpki-client