$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: lg0+oyBAKptmluU9OZrNH/f28Sm8m6SyUJUaN5ed2CI= Subject key identifier: C3:90:9B:D2:CD:BD:AE:18:2B:2F:E5:53:B9:94:33:D2:CC:20:4B:3F Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: C7 Signing time: Fri 25 Apr 2025 04:48:54 +0000 Manifest this update: Fri 25 Apr 2025 04:48:54 +0000 Manifest next update: Fri 02 May 2025 04:48:54 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: z9BzPBpZW5xdULSWEagnK7DUtxGXLHJwiYWy8qsaWQI=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E, serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Apr 25 04:48:54 2025 GMT Not After : May 2 04:48:54 2025 GMT Subject: CN=680b1436-bf7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:86:8b:e8:f8:2b:9d:36:71:cd:4a:be:29: 5f:02:43:41:10:3f:a8:c9:b5:89:aa:31:be:67:1c: d7:48:65:e4:58:dc:9f:be:26:bf:2a:12:f2:1b:c5: 5c:fc:d1:1f:7c:2a:fd:64:92:6d:89:e4:6c:27:d2: 14:0a:11:b3:a2:76:e1:5a:c6:c9:a8:c9:6a:98:8d: ba:b4:69:f2:4f:c4:20:88:02:e6:8a:e4:48:44:0a: 41:a8:f9:e1:68:07:57:a9:d6:72:0b:0f:f2:33:85: e4:58:77:5f:2b:6b:a9:8c:f7:09:12:2f:12:e2:58: 1b:a1:20:9d:11:ce:82:ac:37:30:92:cc:3a:9a:9c: c9:c2:18:26:eb:87:04:db:35:07:eb:6d:d9:dd:26: 0e:2b:22:bb:0b:09:f3:51:61:97:01:af:ee:3c:7c: e1:aa:4a:6d:86:54:a0:9e:b6:62:9a:40:dc:c0:af: a8:4e:11:b5:5d:e2:56:77:36:26:ba:da:39:b2:30: 02:46:f0:53:94:1a:e4:5b:4b:50:40:f0:44:3f:68: 3a:8c:34:2b:89:d9:41:81:48:96:95:c8:33:25:10: 21:36:21:fe:75:ff:e1:fe:52:1c:ea:df:63:0f:2c: 2e:82:80:2c:d7:dd:6a:24:a7:b0:14:37:50:8d:18: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:90:9B:D2:CD:BD:AE:18:2B:2F:E5:53:B9:94:33:D2:CC:20:4B:3F X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:80:a8:10:b2:c7:db:a2:ad:2e:43:5f:0d:51:7f:3d:5e:0d: bd:cb:d4:80:e6:25:25:96:cf:e9:28:07:10:a3:68:69:59:77: f6:58:06:28:0c:b8:6a:e7:90:34:1c:94:34:8d:7c:6f:26:18: 4b:d9:24:65:9b:00:aa:92:8e:e0:27:0a:0b:94:0f:bb:c7:02: 4c:b1:cb:52:d9:dd:20:b7:4a:cb:d6:05:be:ea:58:b6:80:0f: 51:89:11:fb:b8:3c:e7:b2:45:71:af:58:7d:38:7c:b6:8b:79: 31:27:92:bb:70:d5:34:9d:3f:c8:07:99:c1:c6:11:b4:66:9f: 7f:92:04:b7:62:8c:ab:a7:b5:de:3e:9f:98:c1:56:be:88:22: 42:71:25:e7:be:8b:74:ea:03:d0:4e:d8:56:f3:5e:91:2e:ae: b6:00:da:75:25:f8:0d:94:7a:8d:c3:60:67:e9:33:31:c5:cd: b8:2e:3a:33:fe:00:f0:1c:31:13:4e:44:7e:93:3c:96:71:90: 5d:d5:a6:4f:7b:c6:18:47:28:b4:ce:d8:f0:e4:c0:ce:ab:c7: c9:2d:f4:79:00:e6:8e:1e:ab:05:6e:3a:23:1f:00:27:5b:ed: 51:c7:fd:9e:e8:4a:3f:fa:c4:24:e9:66:e6:e0:91:20:31:07: ee:3d:ce:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUwNDI1MDQ0ODU0WhcNMjUwNTAyMDQ0ODU0WjAYMRYwFAYD VQQDEw02ODBiMTQzNi1iZjdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6tKGi+j4K502cc1KvilfAkNBED+oybWJqjG+ZxzXSGXkWNyfvia/KhLyG8Vc /NEffCr9ZJJtieRsJ9IUChGzonbhWsbJqMlqmI26tGnyT8QgiALmiuRIRApBqPnh aAdXqdZyCw/yM4XkWHdfK2upjPcJEi8S4lgboSCdEc6CrDcwksw6mpzJwhgm64cE 2zUH623Z3SYOKyK7CwnzUWGXAa/uPHzhqkpthlSgnrZimkDcwK+oThG1XeJWdzYm uto5sjACRvBTlBrkW0tQQPBEP2g6jDQridlBgUiWlcgzJRAhNiH+df/h/lIc6t9j DywugoAs191qJKewFDdQjRjdFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOQm9LN va4YKy/lU7mUM9LMIEs/MB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/gKgQssfboq0uQ18NUX89Xg29y9SA5iUlls/pKAcQo2hpWXf2WAYo DLhq55A0HJQ0jXxvJhhL2SRlmwCqko7gJwoLlA+7xwJMsctS2d0gt0rL1gW+6li2 gA9RiRH7uDznskVxr1h9OHy2i3kxJ5K7cNU0nT/IB5nBxhG0Zp9/kgS3Yoyrp7Xe Pp+YwVa+iCJCcSXnvot06gPQTthW816RLq62ANp1JfgNlHqNw2Bn6TMxxc24Ljoz /gDwHDETTkR+kzyWcZBd1aZPe8YYRyi0ztjw5MDOq8fJLfR5AOaOHqsFbjojHwAn W+1Rx/2e6Eo/+sQk6Wbm4JEgMQfuPc5C -----END CERTIFICATE-----Generated at Sat Apr 26 13:49:38 2025 by rpki-client