$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: IGdTykIaRcH+EpkNrZ1cMpzHV0e3fH9Tt/yVNY775Tw= Subject key identifier: 1B:9E:1E:D0:E1:40:BD:C5:AF:E5:AA:A6:B9:F1:B7:7B:E4:02:87:6D Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 2347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 2336 Signing time: Thu 24 Apr 2025 15:51:28 +0000 Manifest this update: Thu 24 Apr 2025 15:51:27 +0000 Manifest next update: Thu 01 May 2025 15:51:27 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: NLONQbVOrWQnKxxnZDTR0E+SM+Jyvd1J+9ZKdf33t6w=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9031 (0x2347) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Apr 24 15:51:27 2025 GMT Not After : May 1 15:51:27 2025 GMT Subject: CN=680a5dff-4d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a4:82:65:ff:2a:63:f8:16:99:40:da:ff:6a: c8:6f:d5:2e:0c:19:19:f6:e2:7f:6a:af:18:c9:3f: ee:13:32:1b:d0:dd:76:1a:5a:87:9c:5a:76:9e:e9: bc:a0:57:f0:eb:28:7d:3f:6a:66:54:64:d9:38:94: 3a:9b:6a:ee:7f:5f:6b:ba:e1:97:3f:23:be:a7:a7: e9:3d:60:c7:7d:f5:75:40:3e:be:d5:b0:90:d5:09: fa:8b:53:62:32:58:12:d8:25:3a:00:6f:06:e7:9a: 5f:1b:5b:f0:f5:9e:23:ae:ba:c9:37:bc:5c:10:4b: 8a:97:3f:c9:02:bb:b1:9e:94:ce:3a:66:97:ab:82: cf:8a:76:f1:ab:9e:f0:aa:9f:45:62:3e:a4:b7:39: 7d:45:54:98:f3:0b:1c:50:96:b7:8b:65:be:bc:d9: 2e:1a:0e:8e:05:4c:23:5b:cf:90:70:14:87:75:89: 64:e7:3e:62:65:6d:45:07:ce:db:92:e7:05:e4:80: 77:ce:bd:40:c2:a9:51:f4:a5:c3:0b:67:d4:1c:c1: db:3e:2c:55:71:d7:54:90:58:f9:4a:b4:db:0d:07: 03:7c:3a:fe:df:eb:d4:a5:57:29:71:d3:b4:e3:23: 6e:21:8f:e0:58:ba:20:b1:75:0d:46:7a:68:ff:91: 77:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9E:1E:D0:E1:40:BD:C5:AF:E5:AA:A6:B9:F1:B7:7B:E4:02:87:6D X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d2:ad:30:8a:ad:43:c6:d4:1c:e1:12:3b:9b:07:81:da:49: 97:d8:44:c4:dc:6a:31:7d:12:17:1c:01:a5:3c:f9:cf:b4:ee: 65:c6:58:58:21:b4:c5:fd:c8:d5:00:08:54:f4:a6:99:00:e1: 60:5f:16:5d:db:27:fb:e3:2c:68:f2:41:12:23:00:86:a8:4d: eb:4e:16:7d:19:dc:25:81:1f:f0:cb:4c:71:23:de:38:0b:93: b0:62:0b:8d:17:0b:63:cf:02:54:43:fd:89:53:38:5c:3e:32: b0:d4:e6:5f:29:25:1c:c5:04:dc:30:0b:ff:ca:09:67:4a:57: ef:21:06:11:0d:f6:48:9b:81:f6:7f:90:b2:b6:06:33:f2:44: c8:1f:ea:83:e3:7a:c6:bd:d7:3a:ea:b8:13:39:fb:1d:bb:ac: 92:71:03:58:f5:8b:b7:e2:ce:04:5c:c3:cf:5e:c2:1b:80:28: 00:c0:9c:d7:1b:eb:4c:03:6d:08:a0:b6:70:b3:e8:ff:1c:c7: 0a:88:0c:0b:7a:a6:80:7c:38:30:37:fd:57:4c:c1:f9:99:07: bb:03:14:bb:a7:9b:60:59:a9:98:d1:44:11:81:39:10:7d:fd: 8f:b6:67:60:5d:dc:97:41:bf:93:a8:3d:a7:85:04:34:d3:d6: fd:aa:28:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwNDI0MTU1MTI3WhcNMjUwNTAxMTU1MTI3WjAYMRYwFAYD VQQDEw02ODBhNWRmZi00ZDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9KSCZf8qY/gWmUDa/2rIb9UuDBkZ9uJ/aq8YyT/uEzIb0N12GlqHnFp2num8 oFfw6yh9P2pmVGTZOJQ6m2ruf19ruuGXPyO+p6fpPWDHffV1QD6+1bCQ1Qn6i1Ni MlgS2CU6AG8G55pfG1vw9Z4jrrrJN7xcEEuKlz/JAruxnpTOOmaXq4LPinbxq57w qp9FYj6ktzl9RVSY8wscUJa3i2W+vNkuGg6OBUwjW8+QcBSHdYlk5z5iZW1FB87b kucF5IB3zr1AwqlR9KXDC2fUHMHbPixVcddUkFj5SrTbDQcDfDr+3+vUpVcpcdO0 4yNuIY/gWLogsXUNRnpo/5F3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBueHtDh QL3Fr+Wqprnxt3vkAodtMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAd0q0wiq1DxtQc4RI7mweB2kmX2ETE3GoxfRIXHAGlPPnPtO5lxlhY IbTF/cjVAAhU9KaZAOFgXxZd2yf74yxo8kESIwCGqE3rThZ9GdwlgR/wy0xxI944 C5OwYguNFwtjzwJUQ/2JUzhcPjKw1OZfKSUcxQTcMAv/yglnSlfvIQYRDfZIm4H2 f5CytgYz8kTIH+qD43rGvdc66rgTOfsdu6yScQNY9Yu34s4EXMPPXsIbgCgAwJzX G+tMA20IoLZws+j/HMcKiAwLeqaAfDgwN/1XTMH5mQe7AxS7p5tgWamY0UQRgTkQ ff2PtmdgXdyXQb+TqD2nhQQ009b9qij7 -----END CERTIFICATE-----Generated at Sat Apr 26 04:28:59 2025 by rpki-client