$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: v1aEohuRfmMVO0EtluQMF+2MLo3fjbTabL3hQYEI7i8= Subject key identifier: D5:48:33:1E:CC:EE:AB:7A:2F:C1:05:1A:1B:6C:DB:0A:AF:CA:0F:DF Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0BC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0BB9 Signing time: Thu 24 Apr 2025 18:51:15 +0000 Manifest this update: Thu 24 Apr 2025 18:51:14 +0000 Manifest next update: Thu 01 May 2025 18:51:14 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: M9Yp/xb5pgZqqcNmVTWcIzAzN7XIcqJQCQ0+Vor174g=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:51:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3014 (0xbc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Apr 24 18:51:14 2025 GMT Not After : May 1 18:51:14 2025 GMT Subject: CN=680a8822-685e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:20:37:19:3a:6a:87:20:52:05:ec:eb:fe:51: ca:cc:7f:f4:dc:55:8c:ef:ae:53:fa:e5:ec:ee:7b: 3d:08:90:64:da:79:e8:00:07:7f:a8:12:8e:4d:f1: 0e:85:18:c6:8e:e6:08:90:c5:a9:7a:1a:bb:f1:69: d9:b9:c0:61:47:79:dd:5d:51:1d:21:f1:56:c0:63: 60:c9:00:55:4d:5d:45:fa:78:e9:df:93:84:7f:62: 96:55:19:dd:24:9b:94:1f:b7:f7:98:db:06:32:4f: 6b:29:9d:ab:8e:a5:98:60:06:23:79:a7:4d:83:f8: d4:5f:9c:1c:8b:98:89:54:b1:cf:7d:29:02:0f:57: cd:be:35:4c:a0:5a:d8:3e:b6:36:40:92:36:43:ab: ad:14:2c:c5:07:93:5a:2f:16:32:fb:4a:6a:2e:5c: 09:7a:89:d8:ba:25:1b:cb:18:40:bb:f5:b9:93:03: 1f:5a:0f:f9:5c:f1:d4:48:80:e1:d2:38:5c:59:4f: 5f:9a:b7:fa:e9:9b:24:ff:1c:2d:b9:15:44:cd:e0: 6b:70:ca:76:ba:35:22:69:a3:e4:a8:c1:d9:db:f7: f9:86:22:5e:2b:9b:1b:ff:9f:bc:2f:15:5a:22:02: 01:cc:ec:00:58:c5:a9:93:a0:cd:32:a6:db:6c:48: 03:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:48:33:1E:CC:EE:AB:7A:2F:C1:05:1A:1B:6C:DB:0A:AF:CA:0F:DF X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:fd:50:03:2b:a7:d1:40:4e:9d:ab:c6:0a:42:86:47:58:b3: e3:52:be:5a:c2:8f:4f:ad:11:71:2f:4c:e9:2c:03:de:ec:7f: 36:6a:8a:85:ac:71:0c:70:7a:6a:c6:57:dd:28:33:b0:09:03: d4:47:16:36:8e:d1:fd:fe:01:e1:c1:39:b6:ec:1e:96:9d:07: 66:80:4c:9f:10:3b:7d:9c:7f:5c:18:2b:5f:6a:45:f1:90:34: b1:08:69:58:f2:0b:9c:04:48:84:36:81:72:11:56:48:65:1d: 68:c8:cf:97:b3:b0:e4:3a:ab:c5:22:5b:e8:9a:07:5d:a2:5b: f9:df:3e:09:d1:b9:3e:1c:58:3b:24:eb:0f:29:0e:ef:fa:92: 60:3a:2d:21:60:ca:a7:6b:5b:94:d3:ff:bd:fb:16:5f:68:43: fa:22:72:b8:00:c6:b0:a9:7b:9c:c2:2f:23:31:0c:d6:60:9c: 61:04:f5:d1:57:e8:40:bb:79:87:fd:08:ea:7d:9e:c8:49:5e: ea:26:0a:90:fd:f8:9c:80:1e:1a:37:e0:bb:94:c7:03:ca:4f: db:9d:37:03:bd:2d:1c:6c:f4:f6:5c:db:9f:3b:c9:ad:77:21: 15:55:27:d6:0a:76:86:d9:b3:f1:a8:3b:74:3e:35:a9:70:51: cc:13:67:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUwNDI0MTg1MTE0WhcNMjUwNTAxMTg1MTE0WjAYMRYwFAYD VQQDEw02ODBhODgyMi02ODVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8iA3GTpqhyBSBezr/lHKzH/03FWM765T+uXs7ns9CJBk2nnoAAd/qBKOTfEO hRjGjuYIkMWpehq78WnZucBhR3ndXVEdIfFWwGNgyQBVTV1F+njp35OEf2KWVRnd JJuUH7f3mNsGMk9rKZ2rjqWYYAYjeadNg/jUX5wci5iJVLHPfSkCD1fNvjVMoFrY PrY2QJI2Q6utFCzFB5NaLxYy+0pqLlwJeonYuiUbyxhAu/W5kwMfWg/5XPHUSIDh 0jhcWU9fmrf66Zsk/xwtuRVEzeBrcMp2ujUiaaPkqMHZ2/f5hiJeK5sb/5+8LxVa IgIBzOwAWMWpk6DNMqbbbEgDtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVIMx7M 7qt6L8EFGhts2wqvyg/fMB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm/VADK6fRQE6dq8YKQoZHWLPjUr5awo9PrRFxL0zpLAPe7H82aoqF rHEMcHpqxlfdKDOwCQPURxY2jtH9/gHhwTm27B6WnQdmgEyfEDt9nH9cGCtfakXx kDSxCGlY8gucBEiENoFyEVZIZR1oyM+Xs7DkOqvFIlvomgddolv53z4J0bk+HFg7 JOsPKQ7v+pJgOi0hYMqna1uU0/+9+xZfaEP6InK4AMawqXucwi8jMQzWYJxhBPXR V+hAu3mH/QjqfZ7ISV7qJgqQ/ficgB4aN+C7lMcDyk/bnTcDvS0cbPT2XNufO8mt dyEVVSfWCnaG2bPxqDt0PjWpcFHME2e5 -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:46 2025 by rpki-client