$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: Rzg/QgtzdiKUAkgS8DFVM4IJWsHktle/R5jJGah0fsM= Subject key identifier: C8:ED:F9:82:2B:B6:98:C9:67:E9:6A:06:94:6E:5C:C8:4B:97:9C:46 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 010E Signing time: Fri 25 Apr 2025 04:09:21 +0000 Manifest this update: Fri 25 Apr 2025 04:09:20 +0000 Manifest next update: Fri 02 May 2025 04:09:20 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: 76PLCI5q+zWgrnG0bAkoIxXKzQ8TxTLq2rDIcmwuRMM=) 2: 3E269BEE155F11F0A4BD4442C4F9AE02.roa (hash: YepcYqCU3z67JdbH5lWyJSuimAJ/H7ABqSOHQGnz6Xw=) 3: 3EE85A64F15011EFB213307AC4F9AE02.roa (hash: FZiV32cBEg2NN1DO+SVE2QlqP4jS8vRZNJ/pSFiMq2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Apr 25 04:09:20 2025 GMT Not After : May 2 04:09:20 2025 GMT Subject: CN=680b0af0-11a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:74:b5:6a:f2:a1:13:de:4b:4c:80:e3:a0: 8d:4d:41:2e:1e:e7:0e:5d:31:ed:e0:94:d7:75:5d: 89:d4:83:3e:24:49:34:d4:e6:6c:32:08:a7:19:14: 8a:aa:d0:40:71:11:80:93:42:33:d8:20:55:2c:47: 91:3a:49:3f:43:e6:7c:c7:91:47:35:0b:f8:a4:7e: a6:2b:4e:64:dc:68:df:16:6b:6e:b9:c1:f3:ed:4a: e6:84:4b:db:cb:63:c2:21:3f:c9:3b:88:21:68:8d: 3f:f9:b7:87:dd:00:15:b6:57:a7:b6:c7:77:88:9b: 86:cc:91:b0:89:6c:e2:b1:bb:3b:32:39:5a:73:6d: 79:d7:2d:62:0b:7d:7e:fd:7b:01:ed:22:f7:f0:83: dc:37:96:cb:fd:ea:b8:d6:10:91:31:d1:04:c7:92: c6:9e:cb:32:2f:63:f2:66:8b:d7:81:d4:ba:7e:c7: fe:73:3b:6d:f5:b1:46:7f:89:34:49:ab:bc:7b:38: 63:95:ba:e2:a7:00:32:ce:7c:cf:c3:bd:df:7f:8a: a3:f4:ad:2b:38:ed:6f:09:99:7f:ce:3a:9a:ee:a9: 3a:f1:61:25:78:85:c2:90:17:b3:fc:51:cd:1b:27: 7b:32:cd:9b:06:91:8d:af:0a:4a:e8:b7:a9:60:bf: 0a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:ED:F9:82:2B:B6:98:C9:67:E9:6A:06:94:6E:5C:C8:4B:97:9C:46 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:9b:c1:a5:c5:39:a6:11:6a:e7:cd:62:d6:92:f9:08:35:11: dc:e6:41:26:72:62:f9:5a:a3:75:b5:85:34:a9:fc:e8:cc:4c: 52:91:c2:b9:55:d6:72:09:2a:18:79:a2:b6:55:8f:1a:99:88: 3d:b7:9e:69:83:2a:6f:0d:6f:37:89:e8:57:7b:ce:b2:69:da: f1:28:5a:3d:4a:a3:11:77:3e:b0:bf:03:bd:32:4e:c6:36:51: 87:c0:b9:53:33:88:62:7e:78:33:82:9c:b1:79:3e:f4:25:9e: 98:51:28:81:71:dc:a0:55:d2:67:c2:3c:c4:89:20:34:c2:7e: a2:6d:b3:08:4a:53:12:58:31:3d:ae:34:92:0f:c3:e8:d4:e7: 9d:5f:88:3c:f6:e4:4f:f0:a8:45:0f:79:62:9b:f0:da:8b:16: be:a0:55:c9:0d:2c:aa:95:cd:d4:16:a9:8a:55:0f:6b:3d:67: 64:c5:2c:64:b4:3a:99:68:42:af:86:c6:c5:bd:a1:11:61:21: 2d:67:15:4a:d6:cb:3e:1d:30:b2:cd:00:02:bb:c2:2b:95:4c: d9:9b:68:69:1b:43:3e:34:f4:a5:10:6c:f4:d0:04:cd:46:b1: d1:e3:76:a1:8c:e8:5b:bf:bd:7f:6d:01:d3:64:8b:85:0f:02: a2:c1:89:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUwNDI1MDQwOTIwWhcNMjUwNTAyMDQwOTIwWjAYMRYwFAYD VQQDEw02ODBiMGFmMC0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFd0tWryoRPeS0yA46CNTUEuHucOXTHt4JTXdV2J1IM+JEk01OZsMginGRSK qtBAcRGAk0Iz2CBVLEeROkk/Q+Z8x5FHNQv4pH6mK05k3GjfFmtuucHz7UrmhEvb y2PCIT/JO4ghaI0/+beH3QAVtlentsd3iJuGzJGwiWzisbs7Mjlac2151y1iC31+ /XsB7SL38IPcN5bL/eq41hCRMdEEx5LGnssyL2PyZovXgdS6fsf+cztt9bFGf4k0 Sau8ezhjlbripwAyznzPw73ff4qj9K0rOO1vCZl/zjqa7qk68WEleIXCkBez/FHN Gyd7Ms2bBpGNrwpK6LepYL8KPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjt+YIr tpjJZ+lqBpRuXMhLl5xGMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHm8GlxTmmEWrnzWLWkvkINRHc5kEmcmL5WqN1tYU0qfzozExSkcK5 VdZyCSoYeaK2VY8amYg9t55pgypvDW83iehXe86yadrxKFo9SqMRdz6wvwO9Mk7G NlGHwLlTM4hifngzgpyxeT70JZ6YUSiBcdygVdJnwjzEiSA0wn6ibbMISlMSWDE9 rjSSD8Po1OedX4g89uRP8KhFD3lim/Daixa+oFXJDSyqlc3UFqmKVQ9rPWdkxSxk tDqZaEKvhsbFvaERYSEtZxVK1ss+HTCyzQACu8IrlUzZm2hpG0M+NPSlEGz00ATN RrHR43ahjOhbv71/bQHTZIuFDwKiwYkb -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:43 2025 by rpki-client