$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: VQNVGDdJXcuR8QbD983lk4VV6MthKp0mQmtg38bePEs= Subject key identifier: 11:5F:98:A6:39:C9:EC:52:07:B8:BE:A8:F3:AB:D6:0D:2C:D4:0E:85 Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 0541 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 0541 Signing time: Thu 24 Apr 2025 23:13:21 +0000 Manifest this update: Thu 24 Apr 2025 23:13:21 +0000 Manifest next update: Thu 01 May 2025 23:13:21 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: G+4FFvXBeOmlDNFmbdM7buPxy9GmELQsgB5zjzlPUac=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1345 (0x541) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Apr 24 23:13:21 2025 GMT Not After : May 1 23:13:21 2025 GMT Subject: CN=680ac591-1b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:0d:30:f7:ce:e8:9d:f7:04:5e:c2:62:71: 34:c1:df:cd:75:44:8a:f7:db:94:7e:b3:e8:c4:6c: 77:34:4f:77:b5:50:d1:33:4d:18:c7:79:b2:86:a1: df:79:51:4a:cd:63:45:68:d7:60:74:d7:9c:c8:a7: f3:e9:81:f6:c6:73:9d:12:6a:a5:64:3a:44:f4:fe: ed:3c:2d:58:16:b2:b8:0e:e1:78:05:df:4e:20:0c: 39:27:6c:08:07:7f:12:32:90:be:fc:5d:2b:b5:73: c7:e7:ac:41:08:38:b4:8f:06:41:dd:a3:e1:dd:ef: b4:8c:9c:6c:cd:de:29:12:c6:c9:3e:b2:d6:39:a9: f0:58:cb:be:e0:80:ca:ab:4f:a1:9d:47:95:5f:3b: 57:d6:02:8d:4f:7e:77:82:5b:c6:c9:2d:e6:e2:ca: 79:32:32:ef:5b:04:e8:0b:f5:3d:bd:37:33:10:fe: 25:5c:f9:e3:a3:fa:47:8d:c1:9b:63:da:99:3b:fd: 32:66:a6:8d:a4:a0:67:c0:e9:15:83:39:f3:0a:d2: 9d:42:df:04:4a:88:24:bf:92:e9:5c:91:e2:51:f5: 1f:f8:06:be:63:90:69:c6:05:af:e2:80:25:d9:80: 51:63:8b:7f:39:26:3c:4b:43:de:7a:38:78:c9:6d: 7a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5F:98:A6:39:C9:EC:52:07:B8:BE:A8:F3:AB:D6:0D:2C:D4:0E:85 X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ed:ed:22:3d:25:e2:e5:41:1d:5b:01:86:1e:7a:a9:82:7a:01: cc:e7:72:96:0f:f4:52:3f:e7:3f:99:28:1d:cf:ee:9b:bc:0e: f0:93:b8:5d:1f:4e:ab:ca:52:5b:5d:2f:4a:2d:9f:bf:de:fe: cd:bc:01:f8:b3:1f:65:91:fe:4c:3c:74:f3:03:1c:ce:1a:e1: 30:dc:14:c3:e4:d9:35:23:2d:a6:a6:a7:01:d9:2d:8f:43:79: 1f:21:4f:c9:68:86:84:9f:17:a0:c4:c5:2a:58:88:64:32:d4: 87:31:c0:2a:04:f7:9a:e8:9d:77:1f:a6:3b:f2:7a:d4:17:c3: 14:08:a2:1a:ef:43:08:aa:81:0e:c5:5a:61:2f:e5:0c:b5:b5: cb:b7:a1:6d:d3:a2:25:98:55:a4:b7:eb:f5:9a:cb:b2:52:5e: 02:24:e6:ba:4e:f5:db:15:d2:70:0f:b8:56:f8:15:4b:f5:a1: e6:5f:0f:f8:a2:ee:e8:37:95:47:ce:28:40:f9:52:d0:72:92: f4:92:a0:9d:81:35:9a:1d:c7:df:58:1b:af:96:30:8b:0d:63: b2:4f:23:35:19:3f:59:e3:f2:ef:cc:78:0f:99:40:06:cc:bb: eb:be:fc:b1:5d:4a:d0:f3:6b:7b:a6:a8:b8:75:8e:7a:83:fe: 32:6d:e9:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUwNDI0MjMxMzIxWhcNMjUwNTAxMjMxMzIxWjAYMRYwFAYD VQQDEw02ODBhYzU5MS0xYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMYNMPfO6J33BF7CYnE0wd/NdUSK99uUfrPoxGx3NE93tVDRM00Yx3myhqHf eVFKzWNFaNdgdNecyKfz6YH2xnOdEmqlZDpE9P7tPC1YFrK4DuF4Bd9OIAw5J2wI B38SMpC+/F0rtXPH56xBCDi0jwZB3aPh3e+0jJxszd4pEsbJPrLWOanwWMu+4IDK q0+hnUeVXztX1gKNT353glvGyS3m4sp5MjLvWwToC/U9vTczEP4lXPnjo/pHjcGb Y9qZO/0yZqaNpKBnwOkVgznzCtKdQt8ESogkv5LpXJHiUfUf+Aa+Y5BpxgWv4oAl 2YBRY4t/OSY8S0Peejh4yW161wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBFfmKY5 yexSB7i+qPOr1g0s1A6FMB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDt7SI9JeLlQR1bAYYeeqmCegHM53KWD/RSP+c/mSgdz+6bvA7wk7hd H06rylJbXS9KLZ+/3v7NvAH4sx9lkf5MPHTzAxzOGuEw3BTD5Nk1Iy2mpqcB2S2P Q3kfIU/JaIaEnxegxMUqWIhkMtSHMcAqBPea6J13H6Y78nrUF8MUCKIa70MIqoEO xVphL+UMtbXLt6Ft06IlmFWkt+v1msuyUl4CJOa6TvXbFdJwD7hW+BVL9aHmXw/4 ou7oN5VHzihA+VLQcpL0kqCdgTWaHcffWBuvljCLDWOyTyM1GT9Z4/LvzHgPmUAG zLvrvvyxXUrQ82t7pqi4dY56g/4ybemR -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:05 2025 by rpki-client