$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: /+JbHyI8nNlvRHoZmTsT1CB0RSw++XbaRiAavtLtqME= Subject key identifier: B8:45:CC:B3:81:1F:1A:04:2A:41:89:75:68:AB:1C:D1:95:C8:9F:C3 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 6F Signing time: Fri 25 Apr 2025 05:50:13 +0000 Manifest this update: Fri 25 Apr 2025 05:50:12 +0000 Manifest next update: Fri 02 May 2025 05:50:12 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: ALWvI9jhz6GKGr9j9zqmEDK6yri/MEGWF33SStIzE1Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Apr 25 05:50:12 2025 GMT Not After : May 2 05:50:12 2025 GMT Subject: CN=680b2294-865e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:be:49:c9:bb:cd:7b:69:3f:ed:6a:29:62:a5: c2:ab:43:a4:73:5d:f6:c4:77:2c:b6:aa:f8:5b:0a: f2:b2:08:1f:7c:dd:02:24:e5:06:3c:d3:3f:71:b4: 6d:c5:81:67:c8:86:d5:dd:af:16:f7:00:d4:c6:9a: ff:b8:9d:f6:32:3d:15:5e:e0:e4:73:ae:fc:38:d5: 26:3b:3b:ec:4d:f2:0e:64:2e:d2:49:23:0d:14:aa: d6:a5:55:e0:a6:d7:36:93:4e:c1:3c:48:05:53:e8: a8:02:b2:f7:47:12:73:ad:16:d8:02:77:10:ee:ba: 8c:9d:dd:ea:ba:a6:3d:b7:ca:ac:42:8c:d4:43:e9: b6:f3:fd:46:7f:45:36:3e:f5:3e:d7:40:21:75:0b: f8:fe:4e:c7:87:d6:92:32:07:62:f3:a0:e5:87:75: 6c:d3:e0:f8:be:b4:aa:f4:d1:4a:94:da:24:1d:cf: 25:e4:de:5f:e1:62:9c:db:97:e0:3b:3e:e4:08:eb: fd:bd:bd:db:cf:8e:39:7a:c4:61:67:8d:8d:dd:8b: 66:62:9f:b2:79:b6:c5:8c:70:b2:d3:d9:a9:ea:16: f3:d1:4f:71:e9:31:e2:34:1f:ee:e1:8f:f2:70:7c: fe:37:23:ac:2c:54:16:79:44:ac:f7:13:e9:ee:52: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:45:CC:B3:81:1F:1A:04:2A:41:89:75:68:AB:1C:D1:95:C8:9F:C3 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b4:d1:79:1e:db:8e:07:6c:e3:da:7f:69:ac:32:a6:9f:a2: ee:51:9d:66:59:0d:e0:96:ef:95:74:4f:3c:86:1d:63:84:2d: 92:90:9b:36:70:6f:b8:0a:91:5b:5d:05:b5:5c:b8:38:1b:d9: d5:28:b9:8c:86:3e:5a:30:c9:83:a4:12:3c:d7:80:62:54:eb: ea:22:0f:92:29:d3:d6:db:86:88:7f:f6:6c:5f:77:d1:4c:13: 8a:af:c0:07:5c:f5:ff:c2:db:d6:d9:c4:8f:c0:ff:01:29:fe: 38:da:82:d4:ed:24:2e:ed:41:9e:4c:61:2c:fb:0b:0d:46:64: 78:ec:64:5a:be:a0:29:62:fd:c1:c8:f3:80:d9:ce:d7:64:e3: cb:46:77:34:4f:7e:f7:f3:b0:ed:eb:f5:53:0b:5d:a8:46:2b: 21:be:1d:da:17:55:a8:9d:47:b4:e6:1e:47:53:70:4d:3a:30: 95:4e:cd:da:14:d8:45:40:b3:4c:88:36:69:d0:8b:12:03:99: 58:29:7a:d2:60:f9:5a:2c:24:d2:fb:8d:35:9f:b1:ea:44:ae: 94:e6:c5:f3:9f:37:ee:22:34:7f:a2:cc:35:93:fc:e6:fd:0f: da:7e:0d:d2:82:93:e9:5a:56:66:fc:a0:10:a3:a7:a2:66:eb: 39:95:d5:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoNjQzMTk1NjUyQjIyMERDQjIyREE5MUQwN0ZENjNEQTY5 RUI4MTRENTAeFw0yNTA0MjUwNTUwMTJaFw0yNTA1MDIwNTUwMTJaMBgxFjAUBgNV BAMTDTY4MGIyMjk0LTg2NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtvknJu817aT/tailipcKrQ6RzXfbEdyy2qvhbCvKyCB983QIk5QY80z9xtG3F gWfIhtXdrxb3ANTGmv+4nfYyPRVe4ORzrvw41SY7O+xN8g5kLtJJIw0UqtalVeCm 1zaTTsE8SAVT6KgCsvdHEnOtFtgCdxDuuoyd3eq6pj23yqxCjNRD6bbz/UZ/RTY+ 9T7XQCF1C/j+TseH1pIyB2LzoOWHdWzT4Pi+tKr00UqU2iQdzyXk3l/hYpzbl+A7 PuQI6/29vdvPjjl6xGFnjY3di2Zin7J5tsWMcLLT2anqFvPRT3HpMeI0H+7hj/Jw fP43I6wsVBZ5RKz3E+nuUrSVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuEXMs4Ef GgQqQYl1aKsc0ZXIn8MwHwYDVR0jBBgwFoAUZDGVZSsiDcsi2pHQf9Y9pp64FNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzU1NUIwNDBBNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRHVlpTc2lEY3NpMnBIUWY5WTlwcDY0Rk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzU1NUIwNDBBNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNz aTJwSFFmOVk5cHA2NEZOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD600Xke244HbOPaf2msMqafou5RnWZZDeCW75V0TzyGHWOELZKQmzZw b7gKkVtdBbVcuDgb2dUouYyGPlowyYOkEjzXgGJU6+oiD5Ip09bbhoh/9mxfd9FM E4qvwAdc9f/C29bZxI/A/wEp/jjagtTtJC7tQZ5MYSz7Cw1GZHjsZFq+oCli/cHI 84DZztdk48tGdzRPfvfzsO3r9VMLXahGKyG+HdoXVaidR7TmHkdTcE06MJVOzdoU 2EVAs0yINmnQixIDmVgpetJg+VosJNL7jTWfsepErpTmxfOfN+4iNH+izDWT/Ob9 D9p+DdKCk+laVmb8oBCjp6Jm6zmV1RY= -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:48 2025 by rpki-client