$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: 0pRTnS5HcTW9iXGpOVXjcAc2T+JXzY0xZm5yEVazNwg= Subject key identifier: 12:E3:EF:2F:E4:91:F4:27:9F:00:17:47:61:6D:F2:D5:6F:73:E2:D5 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2D69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2D47 Signing time: Thu 24 Apr 2025 15:31:30 +0000 Manifest this update: Thu 24 Apr 2025 15:31:29 +0000 Manifest next update: Thu 01 May 2025 15:31:29 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: DPLDuCJN3moaTP+XwQlNHr6ijUy4CejAJL7aSFLe6C8=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11625 (0x2d69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Apr 24 15:31:29 2025 GMT Not After : May 1 15:31:29 2025 GMT Subject: CN=680a5951-fae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:33:ee:b4:22:87:e0:7f:59:67:3e:13:4e:82: 66:52:13:30:88:c9:71:04:b9:51:87:8d:20:38:6e: 5a:03:8e:cb:ab:d1:07:14:09:39:ad:d8:64:58:6e: e5:96:85:8d:dd:cf:ea:77:1f:0b:bf:3f:da:52:a0: 3f:86:7b:67:97:22:2d:20:1f:e0:2f:65:58:7a:36: bb:8c:67:66:94:5b:66:9c:9a:a4:ec:58:2c:4a:c0: 05:e0:3e:26:82:6b:d5:c7:48:dd:4b:ea:be:16:f2: 7e:a0:09:11:ca:8f:5b:c3:97:37:45:69:5d:e7:75: 33:25:6a:ea:0c:ea:a8:2a:ca:bc:1b:f9:27:cc:85: 57:fe:b5:5a:10:0a:d5:fc:81:62:ed:2b:aa:3f:9f: ca:00:f3:31:47:f2:c6:1d:28:f2:d9:41:19:2d:b8: 39:48:b6:80:06:bf:1c:40:7a:09:1d:41:a8:ae:a8: 10:8c:77:93:30:be:2b:37:d8:4d:77:07:b1:11:1e: 65:fc:84:2b:3d:f9:34:30:ec:d0:f4:6d:dd:e1:34: bd:ef:f2:a4:6f:ea:af:68:3e:a6:5b:1a:03:01:93: 17:64:e7:0c:e7:39:f7:64:2c:4d:93:e2:5d:a5:d0: f1:20:f6:bd:23:06:2a:cd:10:85:4e:b2:e6:e1:38: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E3:EF:2F:E4:91:F4:27:9F:00:17:47:61:6D:F2:D5:6F:73:E2:D5 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:ed:74:70:56:0e:9f:cb:81:7b:0f:5f:39:58:23:42:94:3b: 47:ca:8e:0e:76:2a:8c:ea:0f:9b:ba:9e:8b:99:7b:21:a0:b7: 30:88:79:de:18:22:9c:0e:3c:85:62:82:a8:25:10:8b:2c:eb: b0:ba:91:da:13:57:6f:0a:14:98:00:dc:2d:99:cc:7b:3d:61: 76:fb:1b:ce:26:ee:ea:f7:1e:fe:f0:23:29:36:80:4d:10:8d: 1a:11:cf:f1:59:1e:ae:c6:bf:b4:33:10:38:e6:1b:0a:22:c6: 38:17:2e:9e:04:87:d8:a8:e5:0e:9b:aa:39:2c:a6:4b:b6:10: 92:ef:aa:41:bd:40:df:58:32:96:86:34:1e:34:51:f0:e6:1e: 15:3c:1a:59:36:d7:c7:45:d0:57:1e:3a:1e:1a:e4:7e:3f:b9: fc:5a:5b:19:03:44:2e:30:77:ad:df:61:d5:7d:6d:20:42:70: de:bd:4f:63:62:0a:8b:fd:44:28:e5:a9:35:0b:c5:6a:67:de: 9f:2b:4a:f6:b3:15:72:7b:40:fb:93:f4:42:55:e7:a2:55:9d: a1:f6:8b:44:cb:e7:02:f9:b9:53:6b:52:3a:8e:23:8c:fe:b7: 0f:67:3f:49:b2:af:2d:5f:a2:80:ae:24:b7:fc:7d:0f:59:45: bb:94:58:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUwNDI0MTUzMTI5WhcNMjUwNTAxMTUzMTI5WjAYMRYwFAYD VQQDEw02ODBhNTk1MS1mYWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsTPutCKH4H9ZZz4TToJmUhMwiMlxBLlRh40gOG5aA47Lq9EHFAk5rdhkWG7l loWN3c/qdx8Lvz/aUqA/hntnlyItIB/gL2VYeja7jGdmlFtmnJqk7FgsSsAF4D4m gmvVx0jdS+q+FvJ+oAkRyo9bw5c3RWld53UzJWrqDOqoKsq8G/knzIVX/rVaEArV /IFi7SuqP5/KAPMxR/LGHSjy2UEZLbg5SLaABr8cQHoJHUGorqgQjHeTML4rN9hN dwexER5l/IQrPfk0MOzQ9G3d4TS97/Kkb+qvaD6mWxoDAZMXZOcM5zn3ZCxNk+Jd pdDxIPa9IwYqzRCFTrLm4TjxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLj7y/k kfQnnwAXR2Ft8tVvc+LVMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE7XRwVg6fy4F7D185WCNClDtHyo4OdiqM6g+bup6LmXshoLcwiHne GCKcDjyFYoKoJRCLLOuwupHaE1dvChSYANwtmcx7PWF2+xvOJu7q9x7+8CMpNoBN EI0aEc/xWR6uxr+0MxA45hsKIsY4Fy6eBIfYqOUOm6o5LKZLthCS76pBvUDfWDKW hjQeNFHw5h4VPBpZNtfHRdBXHjoeGuR+P7n8WlsZA0QuMHet32HVfW0gQnDevU9j YgqL/UQo5ak1C8VqZ96fK0r2sxVye0D7k/RCVeeiVZ2h9otEy+cC+blTa1I6jiOM /rcPZz9Jsq8tX6KAriS3/H0PWUW7lFgC -----END CERTIFICATE-----Generated at Sat Apr 26 14:42:28 2025 by rpki-client