$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json) Hash identifier: 4piVvusolgCCyOhWIo5eWqhC2x+M7Wl4GQPr5yy2IFs= Subject key identifier: 3A:54:B4:51:2E:C1:5B:10:01:44:BA:46:DB:3B:70:71:B3:B8:5F:F1 Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft Manifest number: FB Signing time: Fri 25 Apr 2025 04:21:45 +0000 Manifest this update: Fri 25 Apr 2025 04:21:45 +0000 Manifest next update: Fri 02 May 2025 04:21:45 +0000 Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: Q7wG7tHMWFB+AAmFlTq7j6P2+JkFCEu5RcDk3WDTQPU=) 2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: oOShpLLwZ53WfwV7OnNp44ZUZdSDR6asOa981HQ2+Vc=) 3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: 007pZaHi7dzfk1B80jPKtGC0xcoQZrmeiL6AHZuwDA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83 Validity Not Before: Apr 25 04:21:45 2025 GMT Not After : May 2 04:21:45 2025 GMT Subject: CN=680b0dd9-e2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e0:75:20:82:9b:4c:39:70:32:43:7a:3d:0b: fa:b3:cf:4c:a5:ba:75:14:b3:0f:d7:f4:13:3b:4d: 7d:65:dc:bd:e9:ed:6d:23:63:af:3b:84:75:27:8b: 90:90:dc:d0:c3:a8:bb:82:98:5d:e1:f4:e5:ed:84: cd:34:dd:d5:6e:39:3f:bd:f4:b8:9f:01:08:1f:81: fb:f0:c5:97:75:c9:8f:ea:8b:30:bb:18:4f:30:6d: 1d:e3:6e:fb:34:b4:37:1f:a3:9b:83:ed:8a:bb:0c: 49:80:dd:2d:27:d1:5b:47:e3:67:92:1b:2b:a6:a8: eb:d8:82:bd:ef:ce:fd:0c:be:99:e6:f7:1d:7a:1b: ad:68:b4:85:d2:8a:c7:a7:e6:a3:89:62:6e:8c:10: c1:16:a4:68:0b:3f:ee:4b:bd:ec:a4:08:4a:d7:36: de:a1:45:8d:09:ef:cb:12:78:88:46:72:ee:1d:56: d1:45:76:56:07:83:06:56:fc:17:ac:c5:32:19:64: 77:e2:5e:c6:c6:a1:b8:e9:c3:fd:ef:c7:ca:98:2f: 8b:81:0f:ec:1e:ba:a1:2f:e1:f0:de:b6:73:7f:23: 5c:3c:98:07:7b:24:13:c3:c4:4e:49:27:d9:25:41: ef:f5:65:fd:33:d1:48:cc:30:70:20:e3:3a:43:58: 58:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:54:B4:51:2E:C1:5B:10:01:44:BA:46:DB:3B:70:71:B3:B8:5F:F1 X509v3 Authority Key Identifier: keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f2:6e:fd:3d:b0:2a:15:09:5c:bc:f0:c9:6b:7d:f3:69:26:29: 46:2f:b7:4f:1c:19:ff:44:0f:14:8d:67:21:0f:62:00:37:41: 18:ad:c6:08:dc:f6:20:41:c5:3d:a2:b9:63:94:f8:98:40:e2: 05:52:64:c9:e3:4d:e0:eb:4b:4a:da:31:70:c4:00:7c:9b:ca: 3f:6e:8e:82:c9:b6:71:c4:b8:f0:06:2e:09:dd:15:7d:46:1c: 39:5c:f4:23:9c:c7:fa:2c:27:b2:f1:90:7b:32:4b:76:80:04: 96:42:d5:0d:ce:6b:0a:65:22:4a:8e:f5:cb:90:7d:ee:68:21: cc:9e:6a:b3:42:d0:2f:f8:16:10:b3:31:b3:13:89:32:71:39: f3:53:30:6e:0a:1b:0b:35:b8:31:55:db:7e:01:c7:25:62:3d: 0d:05:22:03:d1:9f:9b:17:de:24:f0:e9:d1:2c:11:ca:08:11: bf:ad:e6:b3:de:d8:bc:83:9a:56:eb:b8:14:81:29:5d:4e:05: 23:d1:28:d7:2b:e1:fb:7d:43:46:d8:90:25:02:33:8f:f7:c5: 0b:89:5d:03:f2:b0:42:41:29:5a:cc:2f:71:ba:82:14:e1:66: 9c:66:f8:bf:1d:c3:cf:30:4e:0f:df:ab:69:fa:b1:72:37:6f: ba:79:6a:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz OERDRTZBODMwHhcNMjUwNDI1MDQyMTQ1WhcNMjUwNTAyMDQyMTQ1WjAYMRYwFAYD VQQDEw02ODBiMGRkOS1lMmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+B1IIKbTDlwMkN6PQv6s89Mpbp1FLMP1/QTO019Zdy96e1tI2OvO4R1J4uQ kNzQw6i7gphd4fTl7YTNNN3Vbjk/vfS4nwEIH4H78MWXdcmP6oswuxhPMG0d4277 NLQ3H6Obg+2KuwxJgN0tJ9FbR+Nnkhsrpqjr2IK97879DL6Z5vcdehutaLSF0orH p+ajiWJujBDBFqRoCz/uS73spAhK1zbeoUWNCe/LEniIRnLuHVbRRXZWB4MGVvwX rMUyGWR34l7GxqG46cP978fKmC+LgQ/sHrqhL+Hw3rZzfyNcPJgHeyQTw8ROSSfZ JUHv9WX9M9FIzDBwIOM6Q1hYfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpUtFEu wVsQAUS6Rts7cHGzuF/xMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1 OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDybv09sCoVCVy88MlrffNpJilGL7dPHBn/RA8UjWchD2IAN0EYrcYI 3PYgQcU9orljlPiYQOIFUmTJ403g60tK2jFwxAB8m8o/bo6CybZxxLjwBi4J3RV9 Rhw5XPQjnMf6LCey8ZB7Mkt2gASWQtUNzmsKZSJKjvXLkH3uaCHMnmqzQtAv+BYQ szGzE4kycTnzUzBuChsLNbgxVdt+AcclYj0NBSID0Z+bF94k8OnRLBHKCBG/reaz 3ti8g5pW67gUgSldTgUj0SjXK+H7fUNG2JAlAjOP98ULiV0D8rBCQSlazC9xuoIU 4WacZvi/HcPPME4P36tp+rFyN2+6eWol -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:53 2025 by rpki-client