$ rpki-client -vvf rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft File: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft (raw, json) Hash identifier: EMlhLE/SW37aVUy1PqVr6L397rHAvtmtVEBQV6kBpBY= Subject key identifier: 47:71:16:6E:67:B9:56:13:DB:DB:75:BF:27:67:0F:2E:B1:0E:D2:ED Authority key identifier: 64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C Certificate issuer: /CN=A91263DF/serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Certificate serial: 09B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft Manifest number: 09AC Signing time: Thu 24 Apr 2025 19:53:19 +0000 Manifest this update: Thu 24 Apr 2025 19:53:19 +0000 Manifest next update: Thu 01 May 2025 19:53:19 +0000 Files and hashes: 1: ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl (hash: 1jChObBGcrOH3E+7eg4A757auB4lODWgh5YIktfoaEw=) 2: 0D3A9110829911EABD93A72DC4F9AE02.roa (hash: uhwFkattcBosExJrmsgASUDe2ERG4iDXiAW7Yb9h7WQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2482 (0x9b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91263DF, serialNumber=643B95F539D6695B50679CBFB57344D4481E9C0C Validity Not Before: Apr 24 19:53:19 2025 GMT Not After : May 1 19:53:19 2025 GMT Subject: CN=680a96af-6d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:27:ec:05:30:19:01:0a:b7:cc:7c:65:f6: 3f:1b:25:b0:9e:15:10:3b:be:4f:15:6f:23:79:86: d8:e4:80:9c:66:30:8d:77:55:ef:bf:24:13:5b:8a: f5:46:dd:d5:c3:6e:f8:70:db:ea:1b:c7:26:55:ae: 04:c4:da:d4:97:81:cb:f6:92:11:10:59:63:ca:34: 30:c8:dc:b7:5d:42:8d:39:ca:ca:91:a6:c0:94:c9: 3f:cf:df:46:84:db:71:9b:23:40:d2:33:86:96:02: d8:17:6c:6f:69:35:0a:a5:3b:b7:9a:f6:84:9f:10: 83:59:19:a8:70:04:79:91:89:f4:d4:eb:f7:5e:26: a6:ee:9d:d1:e2:cb:7c:ef:aa:c0:85:6b:5a:75:41: 8f:ad:1d:f7:68:4b:60:89:09:3e:fd:a7:a6:29:36: b2:18:3d:f1:0b:71:21:d7:ae:1a:cb:99:c5:e1:51: 7d:61:b2:bc:2b:05:d6:97:ca:d0:ae:cc:87:1d:cb: fe:c4:dd:32:40:c3:5e:fc:c0:fd:e4:51:64:dd:70: 22:6c:d9:c1:d2:09:3f:21:d1:ca:27:80:7e:64:38: 98:77:be:ee:5d:cf:36:55:4e:34:bd:35:8f:c2:36: 6a:22:9c:4d:3e:4e:aa:e5:68:7f:42:ae:37:bb:47: 34:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:71:16:6E:67:B9:56:13:DB:DB:75:BF:27:67:0F:2E:B1:0E:D2:ED X509v3 Authority Key Identifier: keyid:64:3B:95:F5:39:D6:69:5B:50:67:9C:BF:B5:73:44:D4:48:1E:9C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263DF/399EF60C829811EAB152002DC4F9AE02/ZDuV9TnWaVtQZ5y_tXNE1EgenAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:59:31:02:5f:13:f5:8d:c6:be:9d:ce:c8:27:00:d9:44:72: 30:09:10:d5:1b:8e:5b:af:bf:c8:2e:2b:ca:14:6f:53:66:9d: f6:fe:36:b4:6e:81:0d:bc:21:9b:98:5f:65:80:61:51:a1:8f: a8:a2:27:c1:09:65:fc:10:07:b9:4b:d6:b2:f1:1b:7c:9b:3d: b1:8a:6c:68:0d:a1:f3:32:e8:38:ec:96:99:d0:4c:32:fb:4c: bf:5e:b4:e4:d4:a8:46:84:b1:df:c4:c4:9c:95:f5:e6:12:81: c3:0c:0b:4e:c4:38:a1:45:70:74:5b:5e:89:e9:36:b3:59:82: a1:e0:47:f8:ad:4e:7d:93:0c:de:60:64:a4:13:6a:ad:b4:f1: 6f:69:98:77:60:f2:27:2e:eb:e3:6e:af:49:a9:d4:c8:29:78: ac:f0:2e:49:3a:e5:59:de:2b:5a:81:5c:a1:32:e8:c9:2f:8d: 5a:02:5d:08:53:f1:7e:83:4a:b3:e9:e1:be:77:5e:0b:70:dc: 20:f7:b0:62:89:b1:eb:48:be:49:e0:07:8f:ce:a0:75:6d:dc: 96:a5:33:20:d8:34:86:6a:4b:d1:3f:bd:9f:de:02:a8:0e:8e: 52:f4:ab:17:e0:c5:5e:6d:90:b1:fc:b0:19:f8:cb:89:d8:c0: 60:ad:f2:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYzREYxMTAvBgNVBAUTKDY0M0I5NUY1MzlENjY5NUI1MDY3OUNCRkI1NzM0NEQ0 NDgxRTlDMEMwHhcNMjUwNDI0MTk1MzE5WhcNMjUwNTAxMTk1MzE5WjAYMRYwFAYD VQQDEw02ODBhOTZhZi02ZDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg0n7AUwGQEKt8x8ZfY/GyWwnhUQO75PFW8jeYbY5ICcZjCNd1XvvyQTW4r1 Rt3Vw274cNvqG8cmVa4ExNrUl4HL9pIREFljyjQwyNy3XUKNOcrKkabAlMk/z99G hNtxmyNA0jOGlgLYF2xvaTUKpTu3mvaEnxCDWRmocAR5kYn01Ov3Xiam7p3R4st8 76rAhWtadUGPrR33aEtgiQk+/aemKTayGD3xC3Eh164ay5nF4VF9YbK8KwXWl8rQ rsyHHcv+xN0yQMNe/MD95FFk3XAibNnB0gk/IdHKJ4B+ZDiYd77uXc82VU40vTWP wjZqIpxNPk6q5Wh/Qq43u0c0twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdxFm5n uVYT29t1vydnDy6xDtLtMB8GA1UdIwQYMBaAFGQ7lfU51mlbUGecv7VzRNRIHpwM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjNERi8zOTlFRjYwQzgy OTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FWdFFaNXlfdFhORTFFZ2Vu QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEdVY5VG5XYVZ0UVo1eV90WE5FMUVnZW5Bdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjNERi8zOTlFRjYwQzgyOTgxMUVBQjE1MjAwMkRDNEY5QUUwMi9aRHVWOVRuV2FW dFFaNXlfdFhORTFFZ2VuQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGWTECXxP1jca+nc7IJwDZRHIwCRDVG45br7/ILivKFG9TZp32/ja0 boENvCGbmF9lgGFRoY+ooifBCWX8EAe5S9ay8Rt8mz2ximxoDaHzMug47JaZ0Ewy +0y/XrTk1KhGhLHfxMSclfXmEoHDDAtOxDihRXB0W16J6TazWYKh4Ef4rU59kwze YGSkE2qttPFvaZh3YPInLuvjbq9JqdTIKXis8C5JOuVZ3itagVyhMujJL41aAl0I U/F+g0qz6eG+d14LcNwg97BiibHrSL5J4AePzqB1bdyWpTMg2DSGakvRP72f3gKo Do5S9KsX4MVebZCx/LAZ+MuJ2MBgrfJK -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:32 2025 by rpki-client