$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: 2cNZin1Iiv1sSEKeeUD9JUE9uPmAEZzTQAZ8CBIiMPw= Subject key identifier: BB:1C:4E:19:E0:E5:CF:34:DC:27:6F:6B:C4:92:0D:E5:5C:33:C2:D9 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: 59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: 57 Signing time: Fri 25 Apr 2025 06:11:18 +0000 Manifest this update: Fri 25 Apr 2025 06:11:18 +0000 Manifest next update: Fri 02 May 2025 06:11:18 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: 6LEjkU48EFtZgqY2wXNgyT7LrD+O/BO9mueD6PiQXkY=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: pAKMszCIjt6MmJA/GOLnpRTl7JGqEZooCz2JSaSabrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Apr 25 06:11:18 2025 GMT Not After : May 2 06:11:18 2025 GMT Subject: CN=680b2786-2d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:aa:b2:d2:d5:0b:38:b6:a3:3a:4a:2a:14:64: 5e:08:39:de:94:99:26:5b:3b:1f:fd:13:56:31:ec: 5b:2d:f2:67:a7:07:d2:9a:b9:b7:e3:dd:f4:bd:98: c4:a5:73:e0:f8:83:0b:3c:0b:0c:ca:7d:08:cd:71: 02:e8:55:82:48:38:b5:56:07:88:88:36:7e:1d:4e: 07:77:0b:1c:fa:76:3a:dc:b3:c7:a7:09:85:fc:f6: 1c:99:7a:bc:58:17:5a:36:9c:c7:61:43:13:5c:2d: d4:ad:22:4f:86:18:38:73:32:3c:69:db:62:bc:cd: ed:85:3f:d9:86:98:6e:4c:e5:3b:90:6b:61:38:70: 36:c8:c2:9a:94:e1:75:4b:ec:bf:1f:2f:f5:94:d1: c9:96:a2:f1:3e:88:76:30:aa:c9:61:12:84:b3:f0: 9f:c2:f1:a8:dd:c0:de:b6:39:59:f1:94:e5:b1:01: 5d:5e:ed:bb:e0:6f:36:39:66:dc:8e:d8:78:60:22: 63:e8:c1:be:65:00:50:77:45:b4:46:18:a5:b8:3d: 1b:ab:15:98:18:7b:e7:44:8d:36:e8:6e:9e:74:07: a1:2d:4c:e5:9f:17:52:29:49:b1:ca:02:0c:2e:aa: 54:82:dd:f6:22:11:24:47:62:36:fc:5b:58:39:aa: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1C:4E:19:E0:E5:CF:34:DC:27:6F:6B:C4:92:0D:E5:5C:33:C2:D9 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:ea:69:44:15:32:a7:61:e3:d6:08:17:44:ae:b7:8b:15:36: 16:7c:a0:4d:27:d6:b4:b7:6b:1f:cb:63:0e:39:e1:81:ec:e7: f7:63:20:97:d3:e4:e9:0d:65:2b:4d:90:3f:98:7c:c7:9b:c3: 0d:e4:0d:6c:5d:47:51:3b:0a:9d:fa:25:f9:9e:eb:73:10:28: 75:0f:92:98:f2:75:3b:75:50:a7:a7:f9:ba:c6:2a:2e:40:68: bd:4b:8c:93:f6:62:ac:7d:47:8a:ee:48:4b:d1:47:96:ef:6d: 8d:03:5a:1d:68:13:11:24:e3:12:ee:1c:df:b9:ca:b6:70:e5: ae:6b:1e:91:f0:6f:7f:84:14:ae:da:8d:33:49:26:01:6b:75: 89:b6:29:b6:c9:76:6a:dc:0b:d0:bd:0b:ee:50:e5:23:76:a7: 1e:29:6f:b6:db:ef:98:30:18:1a:13:05:24:d0:a4:1f:46:73: 4f:5c:1f:22:49:38:51:f0:50:83:15:3e:76:5c:8e:3e:16:02: a7:df:01:ac:74:cb:46:78:d3:75:85:bc:25:4b:9d:09:63:e1: ea:d9:f4:ff:9b:cf:fe:f0:fd:bc:da:90:2d:0f:fd:31:18:6f: 55:7d:c4:72:c4:41:82:86:ee:04:b3:d3:84:47:9e:68:c4:45: 04:c2:3c:c6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy RTg3RTExMC8GA1UEBRMoQ0Y3OUM2NUY0QjU1MDEwRkIyNUNFNkM0NUI4QzkxOURC MDkzQTMyRDAeFw0yNTA0MjUwNjExMThaFw0yNTA1MDIwNjExMThaMBgxFjAUBgNV BAMTDTY4MGIyNzg2LTJkNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrqrLS1Qs4tqM6SioUZF4IOd6UmSZbOx/9E1Yx7Fst8menB9Kaubfj3fS9mMSl c+D4gws8CwzKfQjNcQLoVYJIOLVWB4iINn4dTgd3Cxz6djrcs8enCYX89hyZerxY F1o2nMdhQxNcLdStIk+GGDhzMjxp22K8ze2FP9mGmG5M5TuQa2E4cDbIwpqU4XVL 7L8fL/WU0cmWovE+iHYwqslhEoSz8J/C8ajdwN62OVnxlOWxAV1e7bvgbzY5ZtyO 2HhgImPowb5lAFB3RbRGGKW4PRurFZgYe+dEjTbobp50B6EtTOWfF1IpSbHKAgwu qlSC3fYiESRHYjb8W1g5qmI9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuxxOGeDl zzTcJ29rxJIN5VwzwtkwHwYDVR0jBBgwFoAUz3nGX0tVAQ+yXObEW4yRnbCToy0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJFODdFLzg0MjhCOUU2QTFD RjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejNuR1gwdFZBUS15WE9iRVc0eVJuYkNUb3kwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJF ODdFLzg0MjhCOUU2QTFDRjExRUY4NzhFNjA2MUM0RjlBRTAyL3ozbkdYMHRWQVEt eVhPYkVXNHlSbmJDVG95MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKDqaUQVMqdh49YIF0Sut4sVNhZ8oE0n1rS3ax/LYw454YHs5/djIJfT 5OkNZStNkD+YfMebww3kDWxdR1E7Cp36Jfme63MQKHUPkpjydTt1UKen+brGKi5A aL1LjJP2Yqx9R4ruSEvRR5bvbY0DWh1oExEk4xLuHN+5yrZw5a5rHpHwb3+EFK7a jTNJJgFrdYm2KbbJdmrcC9C9C+5Q5SN2px4pb7bb75gwGBoTBSTQpB9Gc09cHyJJ OFHwUIMVPnZcjj4WAqffAax0y0Z403WFvCVLnQlj4erZ9P+bz/7w/bzakC0P/TEY b1V9xHLEQYKG7gSz04RHnmjERQTCPMY= -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:20 2025 by rpki-client