$ rpki-client -vvf rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft File: ZI5HI0RBcbar4W19wDDonAbwUNw.mft (raw, json) Hash identifier: X6ps9CpUu6lp7okPvatUKkh4D0fflBUjELVu0hLUQ/Q= Subject key identifier: FF:A1:D8:11:BE:E3:F3:40:AD:F4:CB:8A:E2:E7:F8:7E:23:98:19:E1 Authority key identifier: 64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC Certificate issuer: /CN=A91408BE/serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Certificate serial: 0B01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft Manifest number: 0AFB Signing time: Thu 24 Apr 2025 19:11:24 +0000 Manifest this update: Thu 24 Apr 2025 19:11:23 +0000 Manifest next update: Thu 01 May 2025 19:11:23 +0000 Files and hashes: 1: ZI5HI0RBcbar4W19wDDonAbwUNw.crl (hash: e+WpFEFsTzK4Xp8gOj4GEER7M2cPsSxSJM5BYYHNDBQ=) 2: 5DCB0A0C410C11EA8A6C412DC4F9AE02.roa (hash: J/8oDeRELdGOcwKCSIyZI2ucZRyx8ILa8bbFd/o79oQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:11:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2817 (0xb01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91408BE, serialNumber=648E4723444171B6ABE16D7DC030E89C06F050DC Validity Not Before: Apr 24 19:11:23 2025 GMT Not After : May 1 19:11:23 2025 GMT Subject: CN=680a8cdc-b06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:db:c4:23:a8:09:2f:c7:c6:28:ed:94:43: c7:b7:42:e4:00:4f:fd:dc:cf:7e:b1:49:c2:0e:c1: 16:37:c8:60:b8:e5:87:e6:2c:46:d3:28:1e:e6:42: 10:32:fa:fd:97:5d:a0:60:e5:50:d1:07:05:cc:4b: a7:f6:51:de:80:61:3f:28:d7:22:62:51:1b:fd:8a: 7f:a5:98:af:6d:f4:9e:fb:c3:dc:a8:cf:6c:51:72: c2:4c:d2:48:1f:7a:03:03:69:29:d8:e1:d3:93:cb: 17:37:af:84:a9:03:9a:f3:0e:44:15:ed:aa:c1:03: 0a:dc:c3:a9:92:ef:bc:80:bc:20:81:dc:76:95:ef: a8:2e:68:f3:0b:18:03:fa:21:61:aa:30:d0:2f:50: 08:b5:43:11:41:93:72:2b:26:87:7d:2b:a7:6e:31: 50:c3:c1:74:a3:4e:b8:0a:24:1f:e8:2b:d9:a8:08: b0:62:fb:79:54:69:73:0e:f5:6a:f8:72:e9:06:8f: 3b:21:70:e8:a4:8e:9b:27:3a:69:c6:d0:84:a3:1b: c8:86:10:26:05:a6:27:12:3e:7c:fc:9a:06:96:bb: e8:fe:2e:cc:ab:26:83:6a:26:20:2f:cf:b5:7a:c7: dc:e7:c6:83:1f:16:f1:85:42:7e:4a:f7:32:4f:ae: 57:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:D8:11:BE:E3:F3:40:AD:F4:CB:8A:E2:E7:F8:7E:23:98:19:E1 X509v3 Authority Key Identifier: keyid:64:8E:47:23:44:41:71:B6:AB:E1:6D:7D:C0:30:E8:9C:06:F0:50:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZI5HI0RBcbar4W19wDDonAbwUNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91408BE/A2C827EE410B11EAB6954A2CC4F9AE02/ZI5HI0RBcbar4W19wDDonAbwUNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:bb:c2:29:eb:df:87:95:70:69:45:44:24:5f:da:fc:0a:e9: ba:cd:9e:2d:4e:25:03:a7:70:ff:93:9a:c4:08:86:84:98:d6: ac:14:2f:69:03:22:ce:52:d5:9e:98:48:c9:d7:73:8f:a2:75: 74:43:d0:42:ab:46:d3:e0:76:12:bf:dd:0b:80:10:92:7d:c3: e3:26:c0:01:50:93:07:05:75:3d:12:59:23:e6:b1:29:7c:42: b4:f7:c1:18:74:20:d7:74:f8:c4:11:df:be:2c:5c:64:e2:cf: 1a:a0:0b:03:e8:99:29:ee:3d:b4:fa:17:9f:fc:50:0d:37:f6: 56:57:83:8c:ff:7b:7f:90:8b:18:5c:b4:06:43:8d:a4:83:4c: 0e:89:5f:f7:05:f8:23:91:7f:91:da:cf:2f:3c:18:f0:5c:d6: 8b:7b:b7:76:de:9c:d4:e3:b7:e2:23:d8:27:7a:de:b0:f2:cc: 9f:4d:71:ff:ea:f0:03:63:fd:53:85:8b:39:2e:74:d0:14:62: 6c:bb:04:b1:99:34:44:8a:1e:13:35:fa:34:eb:a5:8b:27:e5: 4e:bb:62:70:8c:27:9f:15:f2:dc:d2:e9:48:e0:2d:7b:5f:dd: c6:c5:2c:fc:6b:44:77:42:04:e4:c4:0d:20:31:5d:1d:bf:a8: 85:76:9d:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA4QkUxMTAvBgNVBAUTKDY0OEU0NzIzNDQ0MTcxQjZBQkUxNkQ3REMwMzBFODlD MDZGMDUwREMwHhcNMjUwNDI0MTkxMTIzWhcNMjUwNTAxMTkxMTIzWjAYMRYwFAYD VQQDEw02ODBhOGNkYy1iMDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2PbxCOoCS/HxijtlEPHt0LkAE/93M9+sUnCDsEWN8hguOWH5ixG0yge5kIQ Mvr9l12gYOVQ0QcFzEun9lHegGE/KNciYlEb/Yp/pZivbfSe+8PcqM9sUXLCTNJI H3oDA2kp2OHTk8sXN6+EqQOa8w5EFe2qwQMK3MOpku+8gLwggdx2le+oLmjzCxgD +iFhqjDQL1AItUMRQZNyKyaHfSunbjFQw8F0o064CiQf6CvZqAiwYvt5VGlzDvVq +HLpBo87IXDopI6bJzppxtCEoxvIhhAmBaYnEj58/JoGlrvo/i7MqyaDaiYgL8+1 esfc58aDHxbxhUJ+SvcyT65XtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+h2BG+ 4/NArfTLiuLn+H4jmBnhMB8GA1UdIwQYMBaAFGSORyNEQXG2q+FtfcAw6JwG8FDc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDhCRS9BMkM4MjdFRTQx MEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNiYXI0VzE5d0REb25BYndV TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pJNUhJMFJCY2JhcjRXMTl3RERvbkFid1VOdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDhCRS9BMkM4MjdFRTQxMEIxMUVBQjY5NTRBMkNDNEY5QUUwMi9aSTVISTBSQmNi YXI0VzE5d0REb25BYndVTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeu8Ip69+HlXBpRUQkX9r8Cum6zZ4tTiUDp3D/k5rECIaEmNasFC9p AyLOUtWemEjJ13OPonV0Q9BCq0bT4HYSv90LgBCSfcPjJsABUJMHBXU9Elkj5rEp fEK098EYdCDXdPjEEd++LFxk4s8aoAsD6Jkp7j20+hef/FANN/ZWV4OM/3t/kIsY XLQGQ42kg0wOiV/3BfgjkX+R2s8vPBjwXNaLe7d23pzU47fiI9gnet6w8syfTXH/ 6vADY/1ThYs5LnTQFGJsuwSxmTREih4TNfo066WLJ+VOu2JwjCefFfLc0ulI4C17 X93GxSz8a0R3QgTkxA0gMV0dv6iFdp2M -----END CERTIFICATE-----Generated at Sat Apr 26 16:59:58 2025 by rpki-client