$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: fqrsoSww86RFYl78Wjo2/DHv+wkZ7dKo9SmjCjAgCj4= Subject key identifier: 03:F3:7C:71:E3:FB:F1:38:C6:73:F9:56:ED:14:74:D9:D3:36:C1:4E Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 085B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 0855 Signing time: Thu 24 Apr 2025 20:35:15 +0000 Manifest this update: Thu 24 Apr 2025 20:35:15 +0000 Manifest next update: Thu 01 May 2025 20:35:15 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: WqXvtHom75RZkE48T4SIc26bp+AkkelT9YloQ2wxiVw=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2139 (0x85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Apr 24 20:35:15 2025 GMT Not After : May 1 20:35:15 2025 GMT Subject: CN=680aa083-7e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:52:6b:ba:fc:e2:05:38:7f:ce:14:b8:0e: 1b:27:4f:53:0e:8c:ff:48:7d:e2:6f:b5:30:a2:0b: 3d:b5:ec:22:e9:ae:17:32:68:a0:a0:d3:38:fb:94: 91:67:fb:3d:42:a3:2b:72:a9:0f:ec:b5:f2:50:3d: 15:28:07:19:5a:71:e3:0d:88:79:92:4c:14:bd:3d: b7:89:56:3f:2b:74:e8:49:e5:b8:17:47:d8:45:fb: fe:f8:c8:78:08:06:5a:94:bf:34:33:3c:65:21:28: 2e:75:e3:0f:c7:6c:4d:c8:99:88:bd:77:44:2a:95: d3:e4:53:7f:3a:b3:ba:5c:ca:59:69:8a:93:5a:2a: 1c:2c:7f:27:29:d3:b0:b8:c9:58:2c:db:b8:4c:89: 74:ac:84:6e:fa:ea:74:dd:ce:51:ae:4a:ba:4a:f5: bd:72:d1:62:72:b9:03:58:cf:a8:85:4e:f9:8f:58: 08:5b:ca:85:42:77:33:ee:ff:4a:4a:7e:a3:ba:b6: 97:bf:e2:3b:71:76:ca:27:c5:f5:27:ac:17:b2:92: 5f:1f:c9:b8:32:c1:68:cc:1f:fb:55:20:37:76:07: 62:c6:7d:e8:59:7e:2a:19:81:1d:3c:e6:93:84:e1: 5a:21:53:a6:59:7f:67:60:28:a7:9b:35:d8:6a:a9: 43:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:7C:71:E3:FB:F1:38:C6:73:F9:56:ED:14:74:D9:D3:36:C1:4E X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:84:a9:67:99:df:4b:61:46:ff:01:8d:da:9d:b3:08:36:2d: e3:5b:8a:8b:a7:1c:06:ff:6f:f5:5b:31:36:e4:3e:51:00:90: 96:fa:e7:57:83:cf:34:b4:31:ae:eb:67:cb:3a:81:93:57:86: 2f:37:d3:0e:fa:18:4e:ce:34:c3:7b:8c:61:7e:a6:2f:f2:ca: 0c:e8:0e:9c:4a:ef:19:29:e1:98:9c:19:76:2a:e9:92:b6:f8: 8c:f6:3d:63:6f:fd:d0:5f:3c:b2:de:c5:95:0b:a4:c7:d5:5b: eb:ed:cd:09:03:79:19:af:e7:63:a2:9e:f7:ca:38:21:10:ea: 70:30:b1:1d:4f:a2:68:ca:5e:35:8b:f3:2e:72:ea:00:bb:88: 40:4e:bd:d4:74:42:4f:a8:b1:59:06:9c:e4:c1:bb:e3:c8:b5: a8:52:7a:6f:5c:b3:93:2d:39:b2:4d:d0:a3:5e:27:11:1a:f9: 73:cd:74:5a:fc:11:e3:82:c4:6b:d4:60:69:2d:69:ca:6b:b5: 9a:3e:1f:49:00:31:62:e6:65:8b:58:f5:b0:73:09:c8:d6:ed: a1:40:0d:ef:16:5e:78:97:bb:b1:04:37:f1:d1:2e:94:ec:ba: 9d:9e:16:55:85:64:97:13:e1:32:0d:ff:6c:28:3c:c6:69:bd: f0:fd:19:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwNDI0MjAzNTE1WhcNMjUwNTAxMjAzNTE1WjAYMRYwFAYD VQQDEw02ODBhYTA4My03ZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MRSa7r84gU4f84UuA4bJ09TDoz/SH3ib7Uwogs9tewi6a4XMmigoNM4+5SR Z/s9QqMrcqkP7LXyUD0VKAcZWnHjDYh5kkwUvT23iVY/K3ToSeW4F0fYRfv++Mh4 CAZalL80MzxlISgudeMPx2xNyJmIvXdEKpXT5FN/OrO6XMpZaYqTWiocLH8nKdOw uMlYLNu4TIl0rIRu+up03c5Rrkq6SvW9ctFicrkDWM+ohU75j1gIW8qFQncz7v9K Sn6juraXv+I7cXbKJ8X1J6wXspJfH8m4MsFozB/7VSA3dgdixn3oWX4qGYEdPOaT hOFaIVOmWX9nYCinmzXYaqlDHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAPzfHHj +/E4xnP5Vu0UdNnTNsFOMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzhKlnmd9LYUb/AY3anbMINi3jW4qLpxwG/2/1WzE25D5RAJCW+udX g880tDGu62fLOoGTV4YvN9MO+hhOzjTDe4xhfqYv8soM6A6cSu8ZKeGYnBl2KumS tviM9j1jb/3QXzyy3sWVC6TH1Vvr7c0JA3kZr+djop73yjghEOpwMLEdT6Joyl41 i/MucuoAu4hATr3UdEJPqLFZBpzkwbvjyLWoUnpvXLOTLTmyTdCjXicRGvlzzXRa /BHjgsRr1GBpLWnKa7WaPh9JADFi5mWLWPWwcwnI1u2hQA3vFl54l7uxBDfx0S6U 7LqdnhZVhWSXE+EyDf9sKDzGab3w/Rko -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:38 2025 by rpki-client