$ rpki-client -vvf rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft File: ZTiBnzv0kyyggsFGry_qy--HjLg.mft (raw, json) Hash identifier: cOZPtgfSUNwUNXkIBTCKNFAqh7xZZe6oACnK9X/WKog= Subject key identifier: 0E:F5:B7:16:D7:54:99:79:3F:93:BD:EA:93:7D:F4:AF:10:56:1C:D7 Authority key identifier: 65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 Certificate issuer: /CN=A918134E/serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft Manifest number: ED Signing time: Fri 25 Apr 2025 04:25:13 +0000 Manifest this update: Fri 25 Apr 2025 04:25:12 +0000 Manifest next update: Fri 02 May 2025 04:25:12 +0000 Files and hashes: 1: ZTiBnzv0kyyggsFGry_qy--HjLg.crl (hash: ddHUVQTvbln/YI6u7X+e8K97MEK8SBHzRzEPh86ZRu0=) 2: F8672B3EBB5D11EEB6706D74C4F9AE02.roa (hash: swMzWxPUqu2w8enIQOaAGC2JS9Sa03i552bDyyqge7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918134E, serialNumber=6538819F3BF4932CA082C146AF2FEACBEF878CB8 Validity Not Before: Apr 25 04:25:12 2025 GMT Not After : May 2 04:25:12 2025 GMT Subject: CN=680b0ea8-07c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:a9:1f:f2:36:81:ad:21:50:31:9e:e7:d8: ec:c2:14:98:04:06:d5:eb:a7:42:5f:c9:15:06:1a: 82:1e:19:53:1a:21:bd:b6:3e:48:a8:7b:09:b3:21: 5b:cd:8e:58:4e:bb:77:a6:88:fe:53:c2:db:73:43: 3a:54:16:e8:7a:31:f3:ef:99:15:6d:78:a8:48:89: a4:c8:dc:61:c6:8f:c4:51:e0:f2:e5:5e:5b:38:5b: 43:b9:13:17:fb:b2:6a:df:58:0f:12:eb:a4:1a:bf: eb:2f:bd:d3:94:56:28:03:07:c6:8b:7b:33:c8:99: cf:7d:0a:c3:a2:28:a4:19:19:07:43:13:7d:a7:c1: 4f:ed:33:1d:e2:cf:a0:7a:8f:41:0e:3d:2a:e1:07: f2:ea:d2:87:5d:d2:04:04:60:36:81:20:db:59:c3: fc:6e:cc:c0:63:11:cf:f0:e8:f7:a6:89:eb:75:34: 20:87:83:e7:5d:97:5c:ca:7e:f4:ce:9a:b0:8b:b3: fb:8d:e0:0c:e5:0f:a5:11:52:f3:c7:be:54:6e:f1: d8:88:fc:cb:f8:51:1b:08:bc:f2:87:ab:53:9e:c7: 78:66:47:4d:39:d4:06:0b:a8:fb:10:b9:9b:cd:b7: 40:f5:99:f7:65:f4:04:d9:54:2b:4d:8c:6d:a2:63: db:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:B7:16:D7:54:99:79:3F:93:BD:EA:93:7D:F4:AF:10:56:1C:D7 X509v3 Authority Key Identifier: keyid:65:38:81:9F:3B:F4:93:2C:A0:82:C1:46:AF:2F:EA:CB:EF:87:8C:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZTiBnzv0kyyggsFGry_qy--HjLg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918134E/2BFF1412BB5D11EE83302073C4F9AE02/ZTiBnzv0kyyggsFGry_qy--HjLg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:ee:ea:ce:52:c3:b8:2b:71:f8:45:6a:ac:15:3d:bb:1a:6c: 46:51:58:50:c4:e2:38:a5:ba:15:11:80:fb:f0:23:41:19:86: e5:23:bd:df:22:b1:3c:6f:61:e7:20:cb:de:fd:f4:cc:4c:40: 3d:8d:98:5b:2c:a1:97:82:07:d4:02:4e:73:3b:86:8e:74:9f: 77:82:4e:47:22:81:ac:7a:87:d1:2a:59:2c:20:13:b1:be:d6: a5:f4:81:61:c5:e6:cb:4e:af:46:a9:68:7a:20:c1:42:72:9a: 13:26:89:45:82:e4:86:78:3e:bd:b6:ad:16:14:dc:90:7f:4e: 89:31:17:b7:65:e6:ef:d2:b0:2c:e6:d5:f9:54:52:ce:f4:e5: 23:c7:b1:fa:af:1e:05:28:3d:97:0b:ba:b6:b8:93:2c:6f:17: 9c:2c:7d:2d:ae:8a:c6:e5:87:6b:9b:3d:dc:e2:f7:b6:44:8f: 9d:a7:1e:e4:b5:30:67:de:38:51:a0:47:79:fb:a0:f6:f6:32: c3:cb:f4:b3:e6:aa:8c:34:4a:d0:e2:8c:29:2e:20:86:44:78: 5d:78:fe:d1:d1:26:44:3f:72:15:2b:69:ed:b4:7c:31:bd:c5: a7:ea:04:af:a9:d2:3d:49:cc:19:3f:95:b3:af:38:de:34:3f: f3:40:8e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzNEUxMTAvBgNVBAUTKDY1Mzg4MTlGM0JGNDkzMkNBMDgyQzE0NkFGMkZFQUNC RUY4NzhDQjgwHhcNMjUwNDI1MDQyNTEyWhcNMjUwNTAyMDQyNTEyWjAYMRYwFAYD VQQDEw02ODBiMGVhOC0wN2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLOpH/I2ga0hUDGe59jswhSYBAbV66dCX8kVBhqCHhlTGiG9tj5IqHsJsyFb zY5YTrt3poj+U8Lbc0M6VBboejHz75kVbXioSImkyNxhxo/EUeDy5V5bOFtDuRMX +7Jq31gPEuukGr/rL73TlFYoAwfGi3szyJnPfQrDoiikGRkHQxN9p8FP7TMd4s+g eo9BDj0q4Qfy6tKHXdIEBGA2gSDbWcP8bszAYxHP8Oj3ponrdTQgh4PnXZdcyn70 zpqwi7P7jeAM5Q+lEVLzx75UbvHYiPzL+FEbCLzyh6tTnsd4ZkdNOdQGC6j7ELmb zbdA9Zn3ZfQE2VQrTYxtomPbHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA71txbX VJl5P5O96pN99K8QVhzXMB8GA1UdIwQYMBaAFGU4gZ879JMsoILBRq8v6svvh4y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM0RS8yQkZGMTQxMkJC NUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5eWdnc0ZHcnlfcXktLUhq TGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUaUJuenYwa3l5Z2dzRkdyeV9xeS0tSGpMZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM0RS8yQkZGMTQxMkJCNUQxMUVFODMzMDIwNzNDNEY5QUUwMi9aVGlCbnp2MGt5 eWdnc0ZHcnlfcXktLUhqTGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDH7urOUsO4K3H4RWqsFT27GmxGUVhQxOI4pboVEYD78CNBGYblI73f IrE8b2HnIMve/fTMTEA9jZhbLKGXggfUAk5zO4aOdJ93gk5HIoGseofRKlksIBOx vtal9IFhxebLTq9GqWh6IMFCcpoTJolFguSGeD69tq0WFNyQf06JMRe3Zebv0rAs 5tX5VFLO9OUjx7H6rx4FKD2XC7q2uJMsbxecLH0trorG5Ydrmz3c4ve2RI+dpx7k tTBn3jhRoEd5+6D29jLDy/Sz5qqMNErQ4owpLiCGRHhdeP7R0SZEP3IVK2nttHwx vcWn6gSvqdI9ScwZP5WzrzjeND/zQI6V -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:50 2025 by rpki-client