$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: 1ETqI+GLCqiMg4qILDcRLEQfu9YNgRtuRfzXPbu1v44= Subject key identifier: 05:69:EC:53:8D:C3:71:17:CB:6C:EB:4F:4D:38:6C:60:27:0C:BC:14 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 8B Signing time: Fri 25 Apr 2025 05:30:09 +0000 Manifest this update: Fri 25 Apr 2025 05:30:08 +0000 Manifest next update: Fri 02 May 2025 05:30:08 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: qrEYpvN99DATo5G5JcCQJfo0faIYxzFAPVlawlNxPzg=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: jMt+zPSdsH4GLtGoNnFENbcQ9dEXXEWL0+DSZgg74rs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:30:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Apr 25 05:30:08 2025 GMT Not After : May 2 05:30:08 2025 GMT Subject: CN=680b1de0-cd13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:27:6b:d2:a0:80:e2:de:f9:48:c4:da:f3: 0d:91:a0:eb:80:40:dc:b0:27:d4:59:4e:24:ed:bd: db:94:dd:04:74:4b:4d:86:89:4d:db:5d:d0:6b:fe: b2:cf:f8:e1:66:7c:82:5f:4b:c4:01:3c:a7:bc:1d: 31:6f:35:f4:4d:f2:3d:ee:61:70:e2:6f:40:1e:34: 18:84:ce:ba:8c:e7:ac:a1:4b:9b:e5:55:90:e6:a9: 7a:eb:29:8b:ef:6c:c0:f3:aa:61:5a:2b:0d:51:fb: 5b:f7:1d:d6:05:4a:d6:07:1d:ba:ee:7c:4c:39:d5: d2:94:a3:01:24:d4:f8:00:9b:63:48:7f:62:6f:93: 19:07:6e:8a:e5:e3:7f:7c:be:9d:42:50:e3:98:03: 5d:3c:37:a1:9c:2f:82:cf:91:ef:5a:3b:01:bd:47: 2d:0b:59:49:22:3f:63:f7:46:ba:a4:92:e4:24:b3: b6:f2:73:c9:e8:ed:e7:54:03:dc:7b:e8:b8:bb:56: 46:98:aa:4e:e3:34:4f:58:eb:29:54:59:5f:44:87: 8e:19:fb:1f:cc:48:27:6a:b6:b3:6c:56:00:51:d8: d1:8d:13:6c:b5:ea:52:0d:03:ee:ea:f3:0f:eb:91: 15:6a:e2:fb:61:c0:d3:08:4d:cf:b3:72:51:31:9f: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:69:EC:53:8D:C3:71:17:CB:6C:EB:4F:4D:38:6C:60:27:0C:BC:14 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:c0:fc:1e:31:4b:73:86:0d:6b:80:53:0f:3c:6c:06:7e: ae:d6:e5:12:19:6b:0f:6a:74:80:ff:c9:29:8d:c2:3a:22:f1: 88:fe:c9:a4:b9:a4:2e:6c:04:52:22:48:e6:f4:ec:cd:fb:37: 13:ce:44:51:a0:82:80:54:aa:16:f2:63:fb:ed:f8:4c:6d:6b: 15:50:f2:41:73:da:33:27:5b:85:2e:17:ca:ff:9d:2b:3c:39: d1:6a:dd:b9:ae:79:9a:e6:45:69:2b:a3:18:71:20:0e:10:1e: d4:64:81:32:e4:d1:2f:e1:a0:24:29:a1:dd:70:4f:ad:a9:2d: 27:86:f7:3b:3d:06:0e:48:28:49:f4:68:48:01:84:85:54:ba: 0c:8e:b0:82:1c:c4:9f:1b:b1:6f:a4:06:94:9b:f8:f3:a1:10: 2f:77:8b:4e:79:c1:91:7a:08:76:ef:7a:c0:5d:60:d1:6a:b8: 38:30:ac:90:9b:f3:6b:4e:69:ee:6a:97:48:9b:dd:57:29:3d: 44:12:7c:4f:0d:12:98:94:de:93:5b:d5:49:2c:f9:03:45:b0: 2d:19:f1:82:4d:da:f6:6b:c4:b9:7a:a2:2a:db:04:8a:00:fb: f6:cf:99:a5:20:6f:35:80:2f:78:52:a1:88:8d:1d:b4:99:26: 7d:92:86:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUwNDI1MDUzMDA4WhcNMjUwNTAyMDUzMDA4WjAYMRYwFAYD VQQDEw02ODBiMWRlMC1jZDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw8Ena9KggOLe+UjE2vMNkaDrgEDcsCfUWU4k7b3blN0EdEtNholN213Qa/6y z/jhZnyCX0vEATynvB0xbzX0TfI97mFw4m9AHjQYhM66jOesoUub5VWQ5ql66ymL 72zA86phWisNUftb9x3WBUrWBx267nxMOdXSlKMBJNT4AJtjSH9ib5MZB26K5eN/ fL6dQlDjmANdPDehnC+Cz5HvWjsBvUctC1lJIj9j90a6pJLkJLO28nPJ6O3nVAPc e+i4u1ZGmKpO4zRPWOspVFlfRIeOGfsfzEgnarazbFYAUdjRjRNstepSDQPu6vMP 65EVauL7YcDTCE3Ps3JRMZ8LQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVp7FON w3EXy2zrT004bGAnDLwUMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd2MD8HjFLc4YNa4BTDzxsBn6u1uUSGWsPanSA/8kpjcI6IvGI/smk uaQubARSIkjm9OzN+zcTzkRRoIKAVKoW8mP77fhMbWsVUPJBc9ozJ1uFLhfK/50r PDnRat25rnma5kVpK6MYcSAOEB7UZIEy5NEv4aAkKaHdcE+tqS0nhvc7PQYOSChJ 9GhIAYSFVLoMjrCCHMSfG7FvpAaUm/jzoRAvd4tOecGRegh273rAXWDRarg4MKyQ m/NrTmnuapdIm91XKT1EEnxPDRKYlN6TW9VJLPkDRbAtGfGCTdr2a8S5eqIq2wSK APv2z5mlIG81gC94UqGIjR20mSZ9koaf -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:55 2025 by rpki-client