$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: z2QJoiRk6jB/axmsKqgTCB5TvesB+q/s5j6hunxl6mE= Subject key identifier: 6C:E3:FF:F7:63:AB:4E:BB:8C:DE:5F:77:48:5B:EC:D6:E6:9D:68:36 Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: 6B Signing time: Fri 25 Apr 2025 05:53:36 +0000 Manifest this update: Fri 25 Apr 2025 05:53:36 +0000 Manifest next update: Fri 02 May 2025 05:53:36 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: 6wdXGc5Awr4ChPu60pGEQjR/75c+NwSfMM4VYfN+LIQ=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: jvqTe31x/hXb7xXYlkCK4m1tiC8DGQsXAio95m/E2uI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Apr 25 05:53:36 2025 GMT Not After : May 2 05:53:36 2025 GMT Subject: CN=680b2360-c1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e9:fe:b3:86:7d:d7:1b:ce:12:89:07:56:19: 3d:2d:4b:6b:2e:b9:15:fb:32:af:ba:a1:c3:fc:3e: 42:eb:65:c7:8c:76:14:3d:02:60:0a:eb:c5:98:88: 23:4e:ca:f8:98:b5:c6:3b:8d:33:eb:b1:fe:44:42: c7:d6:77:57:fa:5a:7e:4c:9f:b4:0f:d7:f9:b6:0d: ea:f1:d9:db:2d:ae:6a:07:7a:6a:16:a0:a4:3b:1d: fe:ed:38:c5:3a:50:d7:6e:5f:66:6d:18:73:76:9b: c5:cc:a3:87:77:48:be:ef:31:b3:c6:2b:66:c3:c0: bf:6f:e8:11:e4:eb:a8:a5:7a:c4:28:f7:7e:20:21: d2:d7:54:c4:d2:07:99:74:93:57:d7:d8:43:86:c4: 0f:34:cf:43:ef:21:98:62:c5:40:74:90:a5:3b:ea: 50:6d:87:7c:39:fe:b9:95:87:8c:a1:89:ea:c7:a4: 33:52:c3:99:fb:29:98:ea:b7:b6:c3:8b:ab:95:bd: eb:19:81:97:29:82:cc:26:28:f6:31:54:62:0d:3f: 10:b0:ea:bc:57:c1:49:6c:48:9b:8f:9a:85:74:1f: 70:d0:eb:b1:04:50:c6:4c:3f:2c:71:d0:a9:e2:e5: 8d:9b:ca:14:b2:f0:f6:8b:98:4e:69:50:2c:9b:9c: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E3:FF:F7:63:AB:4E:BB:8C:DE:5F:77:48:5B:EC:D6:E6:9D:68:36 X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:a7:a1:c0:07:44:cb:42:fc:3d:d3:d7:f0:a0:cd:c7:1a:c4: de:f0:4d:c7:76:98:8a:1a:a6:60:b8:17:dc:df:c2:81:f8:e3: 35:45:b9:37:b7:de:26:6d:e7:bd:24:81:cf:a4:5f:bd:65:59: 38:c3:02:65:51:7a:c0:0d:da:2d:49:7c:1f:36:a4:e3:07:ba: e0:33:11:27:5e:4e:69:27:76:1c:6a:bb:2a:16:76:ce:94:bf: 8d:93:1c:30:81:9b:06:ef:45:52:75:e7:3d:78:15:46:af:45: 71:0b:f9:15:6e:df:68:a7:a8:4e:5b:58:dc:e0:d5:b9:45:7c: 0c:5c:60:41:92:a7:2b:02:f1:be:20:8b:cc:a3:db:8d:b2:ac: d3:cc:7b:e9:42:19:39:47:65:fa:56:18:f8:ec:18:b2:38:78: f2:b0:a5:91:62:e7:b5:5b:75:e3:80:8f:39:44:a1:7b:5f:72: 87:ad:14:64:f1:c1:8e:b9:18:68:df:33:5c:5a:49:8d:82:34: 81:d2:2f:d3:8f:8a:1b:d9:ed:4e:4b:b1:d9:d7:3d:47:48:80: 9c:c1:74:17:fe:6f:a7:2b:05:f6:21:5d:31:15:c6:bb:de:2b: 83:31:26:33:0d:88:39:c1:b8:e3:8c:2b:40:56:61:ba:7e:79: 28:a3:33:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MzZERjExMC8GA1UEBRMoNjRGMjFDREU2NDhCMzlCNTI4MkI4Q0IxMjc5MjhFMjMz MjQ4ODI5NDAeFw0yNTA0MjUwNTUzMzZaFw0yNTA1MDIwNTUzMzZaMBgxFjAUBgNV BAMTDTY4MGIyMzYwLWMxZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa6f6zhn3XG84SiQdWGT0tS2suuRX7Mq+6ocP8PkLrZceMdhQ9AmAK68WYiCNO yviYtcY7jTPrsf5EQsfWd1f6Wn5Mn7QP1/m2Derx2dstrmoHemoWoKQ7Hf7tOMU6 UNduX2ZtGHN2m8XMo4d3SL7vMbPGK2bDwL9v6BHk66ilesQo934gIdLXVMTSB5l0 k1fX2EOGxA80z0PvIZhixUB0kKU76lBth3w5/rmVh4yhierHpDNSw5n7KZjqt7bD i6uVvesZgZcpgswmKPYxVGINPxCw6rxXwUlsSJuPmoV0H3DQ67EEUMZMPyxx0Kni 5Y2byhSy8PaLmE5pUCybnHtjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbOP/92Or TruM3l93SFvs1uadaDYwHwYDVR0jBBgwFoAUZPIc3mSLObUoK4yxJ5KOIzJIgpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMzNkRGLzIzMTg0MDhDODEz RjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlBJYzNtU0xPYlVvSzR5eEo1S09JekpJZ3BRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMz NkRGLzIzMTg0MDhDODEzRjExRUY5Q0NFMUExQUM0RjlBRTAyL1pQSWMzbVNMT2JV b0s0eXhKNUtPSXpKSWdwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOnocAHRMtC/D3T1/CgzccaxN7wTcd2mIoapmC4F9zfwoH44zVFuTe3 3iZt570kgc+kX71lWTjDAmVResAN2i1JfB82pOMHuuAzESdeTmkndhxquyoWds6U v42THDCBmwbvRVJ15z14FUavRXEL+RVu32inqE5bWNzg1blFfAxcYEGSpysC8b4g i8yj242yrNPMe+lCGTlHZfpWGPjsGLI4ePKwpZFi57VbdeOAjzlEoXtfcoetFGTx wY65GGjfM1xaSY2CNIHSL9OPihvZ7U5LsdnXPUdIgJzBdBf+b6crBfYhXTEVxrve K4MxJjMNiDnBuOOMK0BWYbp+eSijMyU= -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:58 2025 by rpki-client