$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: XUHABiZjydWnyUsV2rVKLS4KwRVnZutO4jNIh+pa+Vk= Subject key identifier: F2:3B:FB:9F:A3:B3:BB:07:F4:A1:13:32:B9:14:BB:43:6D:A4:27:77 Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: 2B Signing time: Fri 25 Apr 2025 06:43:05 +0000 Manifest this update: Fri 25 Apr 2025 06:43:04 +0000 Manifest next update: Fri 02 May 2025 06:43:04 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: UMPWICUvEvCgqslfOwHC3g/WbCZ3ObikCPPl7DGMW4g=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: h0Bd3mrZsqytRvgmEj0DxUL66b35/lpEECIlTQlJZwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Apr 25 06:43:04 2025 GMT Not After : May 2 06:43:04 2025 GMT Subject: CN=680b2ef8-934c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:89:74:d7:e8:20:ec:6b:e6:a8:46:8e:af:76: 6c:23:ef:a7:ce:ac:ce:b8:e6:41:2b:f6:83:25:95: 5a:ad:7b:ab:54:93:9e:e6:0e:ce:c3:94:7c:14:9d: c0:ec:d5:26:7f:6f:91:ea:6e:e6:09:ef:89:b9:fc: 1f:49:b6:37:a7:a0:a1:30:b9:fa:da:d7:ea:65:ed: a5:7a:6e:0d:f3:83:3b:4d:df:68:29:8f:b0:76:ab: 2c:6c:2a:73:9d:ae:63:3a:3e:a3:7a:2f:a1:48:fd: 4f:1e:59:65:f6:be:7c:06:c7:43:aa:03:b4:7d:6a: 8b:26:b6:db:e0:fe:b7:c6:bb:2f:e9:40:e9:bb:09: ca:63:66:71:9c:ba:13:8b:95:e3:d9:84:d6:7b:ed: 5b:75:14:61:08:15:9c:f2:b8:74:30:ca:12:92:72: fb:16:33:e7:83:6c:23:18:50:66:71:43:22:ba:25: 1d:e6:dc:fb:60:8c:58:c2:16:4a:aa:41:fc:34:05: 02:c1:e2:3d:13:0e:2a:c1:10:3c:0c:72:1d:c8:e8: c9:2d:a5:ac:fa:d7:c1:0b:89:0c:2d:28:dd:10:84: 92:cf:80:b7:c3:b7:f0:2d:93:e5:26:97:7d:66:60: db:d5:50:fa:20:87:95:c8:87:07:83:75:f5:b6:30: 06:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:FB:9F:A3:B3:BB:07:F4:A1:13:32:B9:14:BB:43:6D:A4:27:77 X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:55:f3:e4:ec:ac:7a:c0:ed:42:ee:2c:1f:2b:33:71:56:54: c8:30:ae:05:42:f2:e4:58:01:0d:2c:a4:6b:97:53:55:10:f7: 47:42:e2:86:bc:e3:3f:cb:27:f2:d2:b9:ca:c7:c6:c8:1f:48: d2:63:ff:72:88:9c:8d:70:76:ed:5e:78:33:97:9c:b2:78:3a: db:da:b0:64:fe:5d:dc:7a:9d:79:e6:78:90:89:73:58:c0:52: 83:ff:bc:a5:83:3d:d3:c1:52:dc:53:54:c3:29:db:eb:8d:b9: 4f:0b:ce:59:e7:06:af:60:90:2d:cf:42:f3:e7:8b:c5:55:bc: 78:89:fd:c8:4e:74:df:91:54:9e:35:0d:08:90:61:bb:fa:be: 2d:33:c7:e5:3a:4c:eb:f5:bd:c4:23:d7:4d:54:98:71:9a:55: d1:c6:1d:30:e9:51:c6:0a:cf:81:6e:90:65:78:8c:bd:b3:47: 23:1d:44:b3:4c:4f:82:2d:62:89:8e:5e:a0:f7:ae:fd:b7:79: 9b:4d:1d:a6:d4:7d:c5:73:9e:04:f3:ea:a8:c1:61:60:a6:f4: 6a:8b:c0:85:c7:7e:c3:e8:31:40:96:6a:33:88:7a:ad:45:a4: d9:5a:b6:63:d4:4d:6d:a4:54:f9:da:86:44:39:ba:bc:fa:c3: a6:f9:1d:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUMzMTExMC8GA1UEBRMoNjdENzlDM0IxMTE2RDM2RkI5RTE3MUQ2NjU4RjhGNDNC NTNDNzJGQTAeFw0yNTA0MjUwNjQzMDRaFw0yNTA1MDIwNjQzMDRaMBgxFjAUBgNV BAMTDTY4MGIyZWY4LTkzNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdiXTX6CDsa+aoRo6vdmwj76fOrM645kEr9oMllVqte6tUk57mDs7DlHwUncDs 1SZ/b5HqbuYJ74m5/B9JtjenoKEwufra1+pl7aV6bg3zgztN32gpj7B2qyxsKnOd rmM6PqN6L6FI/U8eWWX2vnwGx0OqA7R9aosmttvg/rfGuy/pQOm7CcpjZnGcuhOL lePZhNZ77Vt1FGEIFZzyuHQwyhKScvsWM+eDbCMYUGZxQyK6JR3m3PtgjFjCFkqq Qfw0BQLB4j0TDirBEDwMch3I6Mktpaz618ELiQwtKN0QhJLPgLfDt/Atk+Uml31m YNvVUPogh5XIhweDdfW2MAajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8jv7n6Oz uwf0oRMyuRS7Q22kJ3cwHwYDVR0jBBgwFoAUZ9ecOxEW02+54XHWZY+PQ7U8cvow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQzMxLzNDRjUzNjIyRTRB NDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjllY094RVcwMi01NFhIV1pZLVBRN1U4Y3ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QzMxLzNDRjUzNjIyRTRBNDExRUZCMjc2RjI1REM0RjlBRTAyL1o5ZWNPeEVXMDIt NTRYSFdaWS1QUTdVOGN2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKRV8+TsrHrA7ULuLB8rM3FWVMgwrgVC8uRYAQ0spGuXU1UQ90dC4oa8 4z/LJ/LSucrHxsgfSNJj/3KInI1wdu1eeDOXnLJ4OtvasGT+Xdx6nXnmeJCJc1jA UoP/vKWDPdPBUtxTVMMp2+uNuU8LzlnnBq9gkC3PQvPni8VVvHiJ/chOdN+RVJ41 DQiQYbv6vi0zx+U6TOv1vcQj101UmHGaVdHGHTDpUcYKz4FukGV4jL2zRyMdRLNM T4ItYomOXqD3rv23eZtNHabUfcVzngTz6qjBYWCm9GqLwIXHfsPoMUCWajOIeq1F pNlatmPUTW2kVPnahkQ5urz6w6b5HeM= -----END CERTIFICATE-----Generated at Sat Apr 26 04:21:58 2025 by rpki-client