$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: zuB3DjcLxU9IFtMr5ACKkMSXz1xUWDalzKiRmuTEBTk= Subject key identifier: C1:6C:01:C4:E4:FA:5F:C1:B9:05:98:23:97:6A:F7:7C:8A:83:4F:37 Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 08EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 08ED Signing time: Thu 24 Apr 2025 20:14:42 +0000 Manifest this update: Thu 24 Apr 2025 20:14:42 +0000 Manifest next update: Thu 01 May 2025 20:14:42 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: v7cwCL6dESjOVz3Ng+etYmWIdADuWAwStNupHFCUrag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2286 (0x8ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Apr 24 20:14:42 2025 GMT Not After : May 1 20:14:42 2025 GMT Subject: CN=680a9bb2-2aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:b4:bd:98:d3:b1:0e:d1:64:7c:de:08:2b: 1a:7e:05:12:01:f3:f9:8a:9e:a4:21:e0:c6:dd:4a: b6:11:c6:f2:e0:d9:17:5e:a9:8d:ed:03:17:83:e6: 4c:21:42:a2:99:f0:4c:69:01:cb:ae:81:dc:9d:43: 25:70:f0:b8:7c:3e:23:22:d2:19:9f:46:d3:39:20: 31:45:e8:6f:e2:c5:da:78:1c:3a:11:00:27:fa:14: 6c:98:51:e9:35:4d:a8:43:bd:a8:35:78:2c:ef:98: 12:7e:49:60:5f:a8:b8:43:49:44:88:7b:b7:96:bd: fd:d5:cb:45:25:ca:58:a7:93:59:e5:e9:18:b6:5a: 01:37:a9:d0:12:a6:1d:d2:28:ae:99:56:6f:bc:e4: 45:46:75:29:e0:cc:41:38:70:17:ac:71:45:8b:67: e7:a0:2d:ce:7f:df:b5:90:b3:87:6f:19:1b:29:d5: 4a:f4:4d:a5:64:ea:35:5d:87:a4:6c:00:6a:05:03: 39:32:e8:ea:54:08:2f:51:a0:d5:9c:e3:a9:6f:17: e8:07:16:a9:40:fa:f4:c0:11:c2:42:e9:3a:80:a3: f3:9b:e1:5e:9d:56:38:ba:d7:61:58:35:ef:c7:43: 73:a3:1b:93:fb:32:e7:28:f9:d4:3d:68:ad:4c:a5: 32:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6C:01:C4:E4:FA:5F:C1:B9:05:98:23:97:6A:F7:7C:8A:83:4F:37 X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:18:cb:dc:8a:13:2b:23:fc:f7:97:c8:98:de:f5:66:86:ee: 5a:c3:46:a7:29:2c:06:bf:72:0a:ab:03:e7:f4:ad:5b:de:0c: 95:1e:21:39:2a:b5:c8:8f:67:cb:0b:f4:fd:31:c1:1b:5a:45: e0:5b:e8:19:92:b8:1a:dc:5c:22:1f:03:ce:09:34:3c:44:f6: a0:3d:34:f8:c2:d1:78:f1:9f:87:00:7a:1d:fc:7b:b8:57:97: d4:97:e7:fb:ed:33:c2:1a:f7:57:b2:da:e6:72:f1:f8:a8:a6: ac:d9:41:56:3e:f4:24:9f:5e:8f:db:55:56:ca:f5:22:2b:49: c9:10:8c:04:9a:34:a2:00:37:c6:54:d4:c8:29:11:5a:f7:f8: f8:82:89:8e:ad:c9:7b:72:c1:1d:9d:61:fa:95:65:41:ef:5f: 4e:9f:11:43:29:d6:69:25:07:ff:78:b8:99:90:29:27:ee:ba: 26:1a:61:e5:2b:16:65:fd:f5:85:93:ba:37:5f:3b:fe:bc:76: b0:19:ab:90:a4:22:23:44:af:49:5b:9c:be:a8:4d:09:4f:b8: 61:ec:dd:6f:ee:d3:c2:b1:ba:da:4b:4d:73:0f:cc:e3:be:46: 47:50:37:79:34:a5:f5:9d:e3:f2:a8:cf:24:d8:5e:e8:bc:6e: 68:b5:8c:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUwNDI0MjAxNDQyWhcNMjUwNTAxMjAxNDQyWjAYMRYwFAYD VQQDEw02ODBhOWJiMi0yYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuk+0vZjTsQ7RZHzeCCsafgUSAfP5ip6kIeDG3Uq2Ecby4NkXXqmN7QMXg+ZM IUKimfBMaQHLroHcnUMlcPC4fD4jItIZn0bTOSAxRehv4sXaeBw6EQAn+hRsmFHp NU2oQ72oNXgs75gSfklgX6i4Q0lEiHu3lr391ctFJcpYp5NZ5ekYtloBN6nQEqYd 0iiumVZvvORFRnUp4MxBOHAXrHFFi2fnoC3Of9+1kLOHbxkbKdVK9E2lZOo1XYek bABqBQM5MujqVAgvUaDVnOOpbxfoBxapQPr0wBHCQuk6gKPzm+FenVY4utdhWDXv x0NzoxuT+zLnKPnUPWitTKUyswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFsAcTk +l/BuQWYI5dq93yKg083MB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdGMvcihMrI/z3l8iY3vVmhu5aw0anKSwGv3IKqwPn9K1b3gyVHiE5 KrXIj2fLC/T9McEbWkXgW+gZkrga3FwiHwPOCTQ8RPagPTT4wtF48Z+HAHod/Hu4 V5fUl+f77TPCGvdXstrmcvH4qKas2UFWPvQkn16P21VWyvUiK0nJEIwEmjSiADfG VNTIKRFa9/j4gomOrcl7csEdnWH6lWVB719OnxFDKdZpJQf/eLiZkCkn7romGmHl KxZl/fWFk7o3Xzv+vHawGauQpCIjRK9JW5y+qE0JT7hh7N1v7tPCsbraS01zD8zj vkZHUDd5NKX1nePyqM8k2F7ovG5otYwk -----END CERTIFICATE-----Generated at Sat Apr 26 17:09:07 2025 by rpki-client