$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: 06HbWazF/KTWadLI/rVdKf6My72RMBzZq5ISvwmq2bc= Subject key identifier: 29:DB:E5:AD:AC:46:60:DF:3A:C2:B9:EB:7E:76:CE:62:68:23:5C:D3 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 0168 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 0162 Signing time: Fri 25 Apr 2025 03:09:13 +0000 Manifest this update: Fri 25 Apr 2025 03:09:12 +0000 Manifest next update: Fri 02 May 2025 03:09:12 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: QCtY52frAG9mYn2tPC/5fCfNycKaMZPEz1o1VI6vsKs=) 2: B356B436102911EE834FA76EC4F9AE02.roa (hash: Qe0/BiT1tYA4h/l62j0BMeHxIJuUAO9bXjTbXA245ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:09:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 360 (0x168) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Apr 25 03:09:12 2025 GMT Not After : May 2 03:09:12 2025 GMT Subject: CN=680afcd9-f2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:68:dc:44:6d:ef:dd:8e:ae:69:e5:13:b3:80: d7:ad:94:35:cb:9d:25:38:32:0a:05:14:63:1e:32: 90:b9:33:86:1d:7c:ec:64:95:39:bf:6a:bf:ec:8a: cb:7f:db:f4:d3:cd:fa:dd:19:25:f6:4a:52:60:33: 68:13:d8:a3:66:f8:03:ef:42:6b:8e:25:2e:c1:0d: 85:3b:3b:f5:77:d9:06:0a:3b:9f:e1:f0:41:45:3b: 4c:f0:a0:5b:10:a9:25:00:93:4f:3a:46:93:17:91: 03:f3:33:65:9e:40:8a:1d:7c:0a:c8:ba:ba:d8:5d: 06:46:69:4f:a1:ad:c8:75:b4:39:54:56:01:e5:2e: f6:a4:fe:9d:58:68:33:a2:8b:65:ca:24:ff:17:7b: e5:8f:99:c1:ec:81:cb:0f:9c:23:22:1b:88:94:3f: eb:03:10:0f:49:40:b9:b4:9b:de:a2:dd:06:2a:62: 31:63:e1:ac:d1:22:6c:ac:09:3c:13:de:64:d4:8e: e7:25:4d:ec:67:b1:46:72:c0:68:16:a7:e3:11:83: b0:fc:a6:c9:43:0e:df:16:6e:c1:b3:ee:58:21:fd: 7c:2c:3a:c4:d7:df:70:fc:40:88:6d:81:dd:59:0f: e5:ad:e3:d5:81:fb:3d:ae:1b:43:f6:14:a3:71:2c: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DB:E5:AD:AC:46:60:DF:3A:C2:B9:EB:7E:76:CE:62:68:23:5C:D3 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:7e:b7:8f:b7:bb:77:b2:0d:1b:be:a5:59:f2:5f:3c:5c:89: 64:db:66:c4:87:06:1e:83:82:73:1e:aa:6f:f6:b0:0e:78:3e: 5d:c4:8e:bf:b3:03:ea:61:ae:58:83:2e:5b:92:a0:fd:0b:fe: 74:a9:b7:5b:08:42:cd:e6:c9:74:5b:d1:81:9c:99:90:91:53: 44:47:8f:ca:4f:38:16:72:87:01:01:40:45:98:d6:36:ab:71: 42:b3:74:2c:62:ed:2b:1b:20:54:63:6d:05:6c:3c:18:90:d5: c6:ad:6e:96:e9:de:3e:1f:77:43:73:98:73:66:2a:2c:84:0d: 1b:99:22:ec:0f:41:22:48:b7:f7:7c:d2:d7:46:74:52:a4:57: 21:cd:a0:db:b8:30:22:25:f9:4e:81:fb:e0:47:f8:ec:fe:79: 08:83:54:28:5e:36:c4:89:ab:39:45:35:a1:de:03:5c:9d:54: 38:72:52:cc:5b:11:32:7a:84:c2:c2:06:7c:e3:29:51:6f:42: 53:51:ad:ca:94:21:b8:ed:f6:b7:eb:8e:31:2c:3d:75:f8:b2: 19:f6:2d:d2:d0:60:55:c0:a1:17:d1:95:5a:e6:07:ee:f7:0e: f2:a9:f7:2f:32:a4:28:a4:fb:0e:d1:3f:f1:3d:86:cc:9c:77: 3f:2f:c2:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUwNDI1MDMwOTEyWhcNMjUwNTAyMDMwOTEyWjAYMRYwFAYD VQQDEw02ODBhZmNkOS1mMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WjcRG3v3Y6uaeUTs4DXrZQ1y50lODIKBRRjHjKQuTOGHXzsZJU5v2q/7IrL f9v008363Rkl9kpSYDNoE9ijZvgD70JrjiUuwQ2FOzv1d9kGCjuf4fBBRTtM8KBb EKklAJNPOkaTF5ED8zNlnkCKHXwKyLq62F0GRmlPoa3IdbQ5VFYB5S72pP6dWGgz ootlyiT/F3vlj5nB7IHLD5wjIhuIlD/rAxAPSUC5tJveot0GKmIxY+Gs0SJsrAk8 E95k1I7nJU3sZ7FGcsBoFqfjEYOw/KbJQw7fFm7Bs+5YIf18LDrE199w/ECIbYHd WQ/lrePVgfs9rhtD9hSjcSz0MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnb5a2s RmDfOsK56352zmJoI1zTMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnfrePt7t3sg0bvqVZ8l88XIlk22bEhwYeg4JzHqpv9rAOeD5dxI6/ swPqYa5Ygy5bkqD9C/50qbdbCELN5sl0W9GBnJmQkVNER4/KTzgWcocBAUBFmNY2 q3FCs3QsYu0rGyBUY20FbDwYkNXGrW6W6d4+H3dDc5hzZioshA0bmSLsD0EiSLf3 fNLXRnRSpFchzaDbuDAiJflOgfvgR/js/nkIg1QoXjbEias5RTWh3gNcnVQ4clLM WxEyeoTCwgZ84ylRb0JTUa3KlCG47fa3644xLD11+LIZ9i3S0GBVwKEX0ZVa5gfu 9w7yqfcvMqQopPsO0T/xPYbMnHc/L8L1 -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:00 2025 by rpki-client