$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json) Hash identifier: s6f+DcBKtM4zOmALMyfVWUUvJrTR62f6Y8TphYWQtFc= Subject key identifier: 43:D7:16:F9:74:31:06:A9:11:C0:79:9A:9A:59:E1:81:2B:25:A1:05 Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: 91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft Manifest number: 8F Signing time: Fri 25 Apr 2025 05:28:16 +0000 Manifest this update: Fri 25 Apr 2025 05:28:15 +0000 Manifest next update: Fri 02 May 2025 05:28:15 +0000 Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: fCRbr2ifs8sSyzKvAtJeiR+v98s7hT9tqSUHpUL9BIM=) 2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 145 (0x91) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: Apr 25 05:28:15 2025 GMT Not After : May 2 05:28:15 2025 GMT Subject: CN=680b1d70-9bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:f9:7b:22:40:79:b2:44:5a:6a:34:cc:77: 49:c0:32:3b:a9:cb:ac:29:c5:b9:27:2b:60:63:ef: 84:70:1d:03:04:96:39:dc:d4:12:e4:c2:60:51:6d: 11:a8:46:ab:02:ca:ad:69:1b:49:9f:69:cf:8e:3a: 18:4a:d2:b2:e6:dc:f7:c9:a9:1d:d4:62:be:dc:03: 5e:3f:d3:c2:2e:db:25:5e:2b:d3:d2:b1:98:38:cb: bc:25:8d:b1:43:13:ee:05:32:a8:f3:0a:0f:87:04: 12:f2:a5:6a:a2:15:9b:83:44:be:b7:3d:6e:4b:db: fd:4c:68:ee:09:15:b6:c9:15:b8:06:26:6d:a0:52: 1a:71:2e:44:12:70:71:3c:ee:70:06:4f:66:4f:83: 05:15:d1:06:8e:e7:21:d7:45:5a:7f:5c:75:86:01: 66:13:87:2b:f9:3e:a0:3d:a3:6f:d8:5f:e8:4f:7f: 65:aa:3a:53:3a:5b:d2:ab:32:90:2c:58:50:c5:61: c1:39:1c:46:49:49:ca:36:92:95:9e:12:c4:e9:bb: ce:7e:7e:e0:f1:34:bd:81:f1:0d:97:a8:0d:f3:91: 3a:50:94:81:fc:90:15:26:81:a7:cb:77:07:67:ad: 52:9b:6e:f5:c6:46:ec:6c:11:e7:4a:2b:50:18:5f: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:16:F9:74:31:06:A9:11:C0:79:9A:9A:59:E1:81:2B:25:A1:05 X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:22:65:d4:41:ca:a9:60:3d:3c:9d:72:69:50:58:00:d0:63: b6:98:cf:d2:0c:ea:cb:62:0c:62:a5:1e:c6:e8:83:0f:e3:64: 2d:44:d1:3d:72:6e:92:09:0e:92:8f:9f:4e:d0:37:37:67:f9: 4f:c1:e5:2b:79:16:bd:83:47:38:e0:97:bf:18:37:3f:40:21: 86:0d:f4:dd:0d:86:fd:08:c9:0f:6c:da:f2:0f:da:62:54:9a: 67:a2:b4:6e:b5:1d:7d:8c:62:59:17:eb:8d:ff:30:dd:1a:c4: d9:ed:6d:d7:69:8e:ff:07:40:a6:21:98:3e:cf:10:82:d3:7f: 40:2f:2f:40:14:cc:07:95:d4:e2:9b:29:25:e9:f4:94:aa:2c: 62:04:7f:9e:93:49:33:9f:06:fd:2b:97:80:01:4b:8f:f1:65: 57:90:fb:8a:d7:f4:36:bf:54:57:20:04:78:8b:a7:e4:2b:02: 0d:37:96:cb:a2:1a:ac:e7:b0:c8:77:21:11:8a:2c:b3:15:a0: 76:73:cc:ca:98:a3:8b:fa:65:05:c5:bf:93:b6:8d:24:3a:1a: 18:b7:c4:b3:39:7a:a1:81:af:fa:ed:13:54:af:6b:3e:0a:1e: 7f:0c:30:18:d0:0c:8e:5f:c4:a7:e6:a4:5d:a5:01:75:a5:6c: 4b:4e:41:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz NzE4MzJDQTUwHhcNMjUwNDI1MDUyODE1WhcNMjUwNTAyMDUyODE1WjAYMRYwFAYD VQQDEw02ODBiMWQ3MC05YmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwpz5eyJAebJEWmo0zHdJwDI7qcusKcW5JytgY++EcB0DBJY53NQS5MJgUW0R qEarAsqtaRtJn2nPjjoYStKy5tz3yakd1GK+3ANeP9PCLtslXivT0rGYOMu8JY2x QxPuBTKo8woPhwQS8qVqohWbg0S+tz1uS9v9TGjuCRW2yRW4BiZtoFIacS5EEnBx PO5wBk9mT4MFFdEGjuch10Vaf1x1hgFmE4cr+T6gPaNv2F/oT39lqjpTOlvSqzKQ LFhQxWHBORxGSUnKNpKVnhLE6bvOfn7g8TS9gfENl6gN85E6UJSB/JAVJoGny3cH Z61Sm271xkbsbBHnSitQGF/1AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPXFvl0 MQapEcB5mppZ4YErJaEFMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ImXUQcqpYD08nXJpUFgA0GO2mM/SDOrLYgxipR7G6IMP42QtRNE9 cm6SCQ6Sj59O0Dc3Z/lPweUreRa9g0c44Je/GDc/QCGGDfTdDYb9CMkPbNryD9pi VJpnorRutR19jGJZF+uN/zDdGsTZ7W3XaY7/B0CmIZg+zxCC039ALy9AFMwHldTi mykl6fSUqixiBH+ek0kznwb9K5eAAUuP8WVXkPuK1/Q2v1RXIAR4i6fkKwINN5bL ohqs57DIdyERiiyzFaB2c8zKmKOL+mUFxb+Tto0kOhoYt8SzOXqhga/67RNUr2s+ Ch5/DDAY0AyOX8Sn5qRdpQF1pWxLTkFF -----END CERTIFICATE-----Generated at Sat Apr 26 15:16:06 2025 by rpki-client