$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: kQ8fe7kdQStrg9BKVBm7p/ETOPB1SbBZwn2utOIC6io= Subject key identifier: 6C:D2:CA:5C:D1:6C:E0:CA:8E:BB:5B:C4:D5:95:19:59:15:33:A6:FF Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0F93 Signing time: Thu 24 Apr 2025 17:32:51 +0000 Manifest this update: Thu 24 Apr 2025 17:32:51 +0000 Manifest next update: Thu 01 May 2025 17:32:51 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: VsGVZ7X61JMuYzz1H8SNAnDXrXi5Yh/uh/An3/0xLiI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Apr 24 17:32:51 2025 GMT Not After : May 1 17:32:51 2025 GMT Subject: CN=680a75c3-52af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:7b:79:49:93:32:09:2c:2d:29:47:5d:77: 12:fe:49:8e:63:84:8b:e3:21:f9:92:b9:11:d2:04: ed:3c:13:fd:aa:7e:d1:06:e2:f8:94:85:3a:38:a6: 24:01:e1:3f:28:fc:d9:c2:f6:08:53:04:84:4f:b5: 42:e1:25:c8:b6:85:72:94:60:d5:9f:e0:21:58:65: cb:05:82:6e:d7:af:2c:70:2e:63:d5:2e:ff:c9:93: 0b:4d:fa:e8:21:7b:44:64:2d:f6:70:f6:75:73:3c: c7:99:9f:a1:fb:4c:c0:32:34:8c:e6:80:47:e7:ba: 54:40:9c:d5:9a:fa:87:cc:87:b6:5a:db:c7:c6:62: e9:d1:24:3e:55:9b:bd:96:8a:90:b1:61:69:4a:05: e2:f8:7c:0f:97:fb:ad:43:ab:98:f7:af:ed:49:ba: 5f:c3:55:ed:b3:0b:50:5c:aa:da:3f:b2:17:c4:39: 92:f7:36:d3:07:4f:1b:fc:c4:95:f6:9c:75:19:ea: 5d:c0:06:4c:dd:cc:2d:e6:d3:e1:42:f5:47:d3:bc: fe:11:fc:2f:12:37:a5:66:42:2c:28:23:04:06:49: e1:36:51:04:c6:73:b2:a4:f4:70:9d:76:6b:db:7b: f4:14:6d:72:80:3b:23:03:fb:97:ed:22:39:5d:05: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D2:CA:5C:D1:6C:E0:CA:8E:BB:5B:C4:D5:95:19:59:15:33:A6:FF X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:44:9d:10:40:ba:bf:86:6a:f9:35:47:76:8d:8a:0a:6c:cf: 84:33:36:96:66:ac:dd:6d:cb:37:df:86:1e:5a:28:70:b0:46: 54:41:29:9a:67:15:ee:38:fc:7d:f7:b0:7f:1b:3c:5c:54:cb: 64:f1:6d:d0:72:59:0e:12:7c:27:da:2f:02:2b:f3:95:d1:cd: 1a:aa:b7:3a:86:cd:26:91:fd:41:b7:71:10:ba:44:97:58:2f: e7:12:d5:03:f3:f0:51:7d:83:84:a1:90:2e:1e:a5:42:72:23: 39:b2:c0:38:2b:a6:59:b7:75:f8:42:d0:62:ea:df:c5:68:ef: 53:af:48:d2:31:10:14:42:56:67:7f:d1:cf:ee:e9:6e:0d:95: 6f:bf:74:f5:51:e5:c7:46:28:ed:72:81:65:30:0e:8a:cb:62: 08:99:c5:7d:5f:c6:2d:56:19:17:29:a7:9e:dd:71:ab:52:36: 34:fa:6b:fd:5c:c4:4d:95:01:bc:1a:34:be:fd:dc:a7:de:17: 13:4d:77:35:c6:5b:8d:21:68:40:47:a4:a3:35:ff:81:c5:7a: fc:0f:89:33:8e:e8:7b:99:77:8d:b6:9a:fd:a8:9a:47:c8:72: 1f:d9:ca:de:99:95:b2:63:c7:36:f5:6e:1b:d4:2b:9a:24:83: 7c:47:59:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUwNDI0MTczMjUxWhcNMjUwNTAxMTczMjUxWjAYMRYwFAYD VQQDEw02ODBhNzVjMy01MmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWt7eUmTMgksLSlHXXcS/kmOY4SL4yH5krkR0gTtPBP9qn7RBuL4lIU6OKYk AeE/KPzZwvYIUwSET7VC4SXItoVylGDVn+AhWGXLBYJu168scC5j1S7/yZMLTfro IXtEZC32cPZ1czzHmZ+h+0zAMjSM5oBH57pUQJzVmvqHzIe2WtvHxmLp0SQ+VZu9 loqQsWFpSgXi+HwPl/utQ6uY96/tSbpfw1XtswtQXKraP7IXxDmS9zbTB08b/MSV 9px1GepdwAZM3cwt5tPhQvVH07z+EfwvEjelZkIsKCMEBknhNlEExnOypPRwnXZr 23v0FG1ygDsjA/uX7SI5XQXTPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzSylzR bODKjrtbxNWVGVkVM6b/MB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMRJ0QQLq/hmr5NUd2jYoKbM+EMzaWZqzdbcs334YeWihwsEZUQSma ZxXuOPx997B/GzxcVMtk8W3QclkOEnwn2i8CK/OV0c0aqrc6hs0mkf1Bt3EQukSX WC/nEtUD8/BRfYOEoZAuHqVCciM5ssA4K6ZZt3X4QtBi6t/FaO9Tr0jSMRAUQlZn f9HP7uluDZVvv3T1UeXHRijtcoFlMA6Ky2IImcV9X8YtVhkXKaee3XGrUjY0+mv9 XMRNlQG8GjS+/dyn3hcTTXc1xluNIWhAR6SjNf+BxXr8D4kzjuh7mXeNtpr9qJpH yHIf2cremZWyY8c29W4b1CuaJIN8R1n0 -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:14 2025 by rpki-client