$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: 7rFA0qp417fLyPdzZb7JoYSPj9KL2EIDGJWTxWUSkLU= Subject key identifier: 1C:85:DB:57:EE:16:A7:18:19:A3:A3:A9:7C:9B:81:0F:45:25:AB:84 Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: 8C Signing time: Fri 25 Apr 2025 05:29:22 +0000 Manifest this update: Fri 25 Apr 2025 05:29:22 +0000 Manifest next update: Fri 02 May 2025 05:29:22 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: YHezaLyh7FjGnFbYdl/tKv1ckUMluRgtx4FxgKPeKh0=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Apr 25 05:29:22 2025 GMT Not After : May 2 05:29:22 2025 GMT Subject: CN=680b1db2-990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5f:12:ab:08:68:70:b3:d4:6c:e3:cd:9f:09: 61:31:3f:2d:fe:27:20:e4:f3:b1:eb:8c:35:60:41: de:83:1b:25:47:b7:bc:09:b6:30:fa:03:33:0e:3f: ef:06:59:3b:44:8d:89:23:ab:e5:d3:3d:f1:09:4c: b6:56:4e:8e:0a:66:1e:00:61:75:47:31:97:b8:c0: a4:2a:81:f2:c9:4a:9f:52:97:8f:cb:bb:ca:76:34: 64:93:95:13:d4:7f:eb:cb:0f:dd:49:47:00:08:88: b4:00:60:f6:a5:5f:e5:06:6b:28:ab:4a:f8:c3:09: f2:64:c8:88:4c:02:ab:59:ab:47:68:94:19:67:e0: fd:48:a9:39:4f:85:f6:e8:17:95:4f:3d:02:c7:d5: 45:25:2b:dc:0f:ed:28:2a:0d:40:63:c4:28:06:dd: 3c:f6:8b:b1:5c:55:6e:dd:37:3d:04:3a:01:46:db: a3:2e:da:40:bd:b0:18:2c:58:be:1c:fd:92:23:2a: 5c:58:a2:55:f9:d7:4b:7a:ea:57:a3:02:88:1f:d7: c9:85:58:3b:55:29:2b:1d:43:1b:15:ae:ff:28:69: 0e:09:e2:1c:54:11:33:90:54:bb:f8:3f:35:0b:46: a7:55:6c:31:c8:b2:d4:78:e6:42:d6:53:8b:48:59: 92:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:85:DB:57:EE:16:A7:18:19:A3:A3:A9:7C:9B:81:0F:45:25:AB:84 X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:86:2e:26:a2:90:14:4c:0c:a1:a6:83:3f:02:13:92:b0:e6: d6:05:4f:73:5e:06:3d:83:52:97:ad:f7:9b:80:e5:c7:27:53: 23:3b:de:9b:cc:0c:82:25:c4:66:1b:5d:98:41:40:31:1e:b2: 02:03:cd:70:7f:46:ae:bd:a7:da:bd:60:84:8c:8b:f0:6a:59: aa:c0:5c:1a:9e:70:82:4d:92:7d:53:d4:83:40:c9:c3:01:43: c4:86:8e:d9:ed:cc:45:ff:64:64:b3:38:6e:4c:98:30:0b:1c: 88:33:74:3c:da:90:b1:4d:e2:90:4c:15:3f:70:b8:6f:2a:52: cd:cb:f5:cf:b0:72:9d:5a:12:34:1b:d0:ec:de:85:78:3f:31: f5:57:95:09:a8:e2:0f:57:c1:bb:fb:a8:f6:b3:ff:dc:99:c2: 2e:6a:f0:b3:2f:e3:9b:f5:73:40:6b:55:eb:a6:2e:97:cd:0c: b2:a0:11:08:bf:df:23:5e:4c:7a:7f:53:99:04:5f:94:3d:73: a9:fb:2f:04:6b:c7:f5:14:c2:03:14:01:6e:04:4c:b0:0f:35: 11:12:d2:ae:17:e6:5c:e8:ad:c1:05:0e:19:8a:f4:7e:c7:ff: 29:80:70:29:6b:c6:a7:34:fa:40:16:54:b7:3e:27:81:cc:36: 6d:08:da:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUwNDI1MDUyOTIyWhcNMjUwNTAyMDUyOTIyWjAYMRYwFAYD VQQDEw02ODBiMWRiMi05OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApF8SqwhocLPUbOPNnwlhMT8t/icg5POx64w1YEHegxslR7e8CbYw+gMzDj/v Blk7RI2JI6vl0z3xCUy2Vk6OCmYeAGF1RzGXuMCkKoHyyUqfUpePy7vKdjRkk5UT 1H/ryw/dSUcACIi0AGD2pV/lBmsoq0r4wwnyZMiITAKrWatHaJQZZ+D9SKk5T4X2 6BeVTz0Cx9VFJSvcD+0oKg1AY8QoBt089ouxXFVu3Tc9BDoBRtujLtpAvbAYLFi+ HP2SIypcWKJV+ddLeupXowKIH9fJhVg7VSkrHUMbFa7/KGkOCeIcVBEzkFS7+D81 C0anVWwxyLLUeOZC1lOLSFmSzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByF21fu FqcYGaOjqXybgQ9FJauEMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8hi4mopAUTAyhpoM/AhOSsObWBU9zXgY9g1KXrfebgOXHJ1MjO96b zAyCJcRmG12YQUAxHrICA81wf0auvafavWCEjIvwalmqwFwannCCTZJ9U9SDQMnD AUPEho7Z7cxF/2RkszhuTJgwCxyIM3Q82pCxTeKQTBU/cLhvKlLNy/XPsHKdWhI0 G9Ds3oV4PzH1V5UJqOIPV8G7+6j2s//cmcIuavCzL+Ob9XNAa1Xrpi6XzQyyoBEI v98jXkx6f1OZBF+UPXOp+y8Ea8f1FMIDFAFuBEywDzUREtKuF+Zc6K3BBQ4ZivR+ x/8pgHApa8anNPpAFlS3PieBzDZtCNpa -----END CERTIFICATE-----Generated at Sat Apr 26 05:55:00 2025 by rpki-client