$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft File: zpBWtMZd44V9TQ4dsAI9YLb30ww.mft (raw, json) Hash identifier: Lumm/sz/1jah9RcmIaT+U1m2MYA0j3l1XimCktg5moU= Subject key identifier: 66:46:5C:37:70:47:95:8C:77:B2:3E:91:8D:11:A9:A7:73:67:D6:72 Authority key identifier: CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C Certificate issuer: /CN=A91DD125/serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Certificate serial: 17C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft Manifest number: 1776 Signing time: Thu 24 Apr 2025 16:37:52 +0000 Manifest this update: Thu 24 Apr 2025 16:37:51 +0000 Manifest next update: Thu 01 May 2025 16:37:51 +0000 Files and hashes: 1: zpBWtMZd44V9TQ4dsAI9YLb30ww.crl (hash: Vk+MgoPsKVyEu7ZfCI8Jzktd7jVa2lmvOx386MXZbNg=) 2: 3F43565CB4A711EFA3D95012C4F9AE02.roa (hash: OELdD8LbVgXXbJX6bTHTOCI+oCTaXDP2euo2Avh/+Rk=) 3: C4C407A6ABFE11EF8BC3AC17C4F9AE02.roa (hash: EhC7Iw3SYEkIxbf/jSCiFbV/awgcX2mr9+KQdTNr1bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6086 (0x17c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD125, serialNumber=CE9056B4C65DE3857D4D0E1DB0023D60B6F7D30C Validity Not Before: Apr 24 16:37:51 2025 GMT Not After : May 1 16:37:51 2025 GMT Subject: CN=680a68df-9e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:06:72:0c:85:ca:af:a9:1d:51:75:1a:11:69: 77:d2:b3:6a:dc:87:92:14:bf:54:8f:1d:27:84:11: b6:92:13:cd:91:3d:4b:64:7d:89:57:08:80:5a:00: 11:83:d4:ce:8a:72:38:42:73:67:96:1f:e3:b1:ea: c6:7d:df:e4:79:75:03:fb:b6:83:43:10:28:2f:35: 2d:39:e0:74:61:0b:b3:95:e4:cb:50:06:16:b2:ca: 69:a2:d4:89:34:d8:90:64:ce:4b:27:77:c2:e1:41: a6:be:e2:38:db:0b:e2:d1:f1:16:4c:fe:20:fe:37: a6:bf:1b:ed:34:5f:9d:c0:a3:79:40:cf:d8:13:b6: ff:da:07:d3:20:1d:45:25:0e:7a:65:b8:38:00:2c: ce:c6:24:bb:bc:44:56:3d:01:03:c1:f5:61:e8:e2: d1:fa:34:d1:7c:19:ee:1c:a8:46:41:f9:12:c3:45: be:6e:78:3b:ec:ce:55:9d:b4:74:1d:87:0f:a2:75: df:f2:1d:5c:5b:b3:3e:e6:9d:87:19:7c:28:3d:9d: e1:d2:48:42:56:51:da:46:b3:54:94:45:3d:0c:fa: 94:09:7a:73:b2:bb:50:ec:0d:18:25:14:d6:c3:be: 84:37:8a:f7:d7:45:dc:2d:21:26:36:44:60:11:fe: 02:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:46:5C:37:70:47:95:8C:77:B2:3E:91:8D:11:A9:A7:73:67:D6:72 X509v3 Authority Key Identifier: keyid:CE:90:56:B4:C6:5D:E3:85:7D:4D:0E:1D:B0:02:3D:60:B6:F7:D3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zpBWtMZd44V9TQ4dsAI9YLb30ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD125/7A142D00D95E11E787A1A766C4F9AE02/zpBWtMZd44V9TQ4dsAI9YLb30ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:b7:40:18:29:81:35:d3:cf:c0:b7:c4:7d:d7:ad:bb:2c:07: 6c:00:83:c4:08:0a:db:02:6c:3e:37:c3:93:d2:da:ff:f0:38: df:d3:db:54:f9:16:90:3d:56:50:43:65:1d:21:5b:c5:c2:8e: 42:e4:42:ff:86:9a:cb:1c:62:61:5e:d6:ca:bc:96:35:6f:0d: 5b:2e:89:b6:5d:e1:6e:55:be:9c:5b:f8:bf:8e:08:ef:e3:d6: 96:14:0b:58:93:08:b1:dd:f4:e9:88:bc:22:21:31:7f:3b:e3: 56:40:64:13:e0:00:4f:7e:b3:67:cf:28:5a:e3:6f:82:65:d4: b5:e9:f1:50:b9:d1:7c:e8:6e:bf:90:75:24:e0:75:9f:d5:ae: f4:10:68:79:c7:c2:5a:54:c7:c8:e5:35:99:68:31:18:a1:10: 74:27:0c:cc:e9:c2:11:31:9f:db:08:9f:b0:74:10:2c:50:6b: 95:9f:63:3e:e1:c5:3d:2e:9c:bb:52:19:d5:1d:98:98:6d:c0: e2:e9:8c:39:a4:99:5a:8f:e9:c6:a7:43:72:6b:8d:74:0c:94: 0b:b6:56:da:25:d1:bd:50:bb:54:d9:47:a0:96:fd:e6:10:b3: 33:9d:80:9f:b7:ed:80:f8:7a:e5:5e:4e:bd:e0:6b:c6:08:27: b8:70:8e:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQxMjUxMTAvBgNVBAUTKENFOTA1NkI0QzY1REUzODU3RDREMEUxREIwMDIzRDYw QjZGN0QzMEMwHhcNMjUwNDI0MTYzNzUxWhcNMjUwNTAxMTYzNzUxWjAYMRYwFAYD VQQDEw02ODBhNjhkZi05ZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QZyDIXKr6kdUXUaEWl30rNq3IeSFL9Ujx0nhBG2khPNkT1LZH2JVwiAWgAR g9TOinI4QnNnlh/jserGfd/keXUD+7aDQxAoLzUtOeB0YQuzleTLUAYWssppotSJ NNiQZM5LJ3fC4UGmvuI42wvi0fEWTP4g/jemvxvtNF+dwKN5QM/YE7b/2gfTIB1F JQ56Zbg4ACzOxiS7vERWPQEDwfVh6OLR+jTRfBnuHKhGQfkSw0W+bng77M5VnbR0 HYcPonXf8h1cW7M+5p2HGXwoPZ3h0khCVlHaRrNUlEU9DPqUCXpzsrtQ7A0YJRTW w76EN4r310XcLSEmNkRgEf4CTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZGXDdw R5WMd7I+kY0RqadzZ9ZyMB8GA1UdIwQYMBaAFM6QVrTGXeOFfU0OHbACPWC299MM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDEyNS83QTE0MkQwMEQ5 NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0VjlUUTRkc0FJOVlMYjMw d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pwQld0TVpkNDRWOVRRNGRzQUk5WUxiMzB3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDEyNS83QTE0MkQwMEQ5NUUxMUU3ODdBMUE3NjZDNEY5QUUwMi96cEJXdE1aZDQ0 VjlUUTRkc0FJOVlMYjMwd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYt0AYKYE108/At8R91627LAdsAIPECArbAmw+N8OT0tr/8Djf09tU +RaQPVZQQ2UdIVvFwo5C5EL/hprLHGJhXtbKvJY1bw1bLom2XeFuVb6cW/i/jgjv 49aWFAtYkwix3fTpiLwiITF/O+NWQGQT4ABPfrNnzyha42+CZdS16fFQudF86G6/ kHUk4HWf1a70EGh5x8JaVMfI5TWZaDEYoRB0JwzM6cIRMZ/bCJ+wdBAsUGuVn2M+ 4cU9Lpy7UhnVHZiYbcDi6Yw5pJlaj+nGp0Nya410DJQLtlbaJdG9ULtU2Ueglv3m ELMznYCft+2A+HrlXk694GvGCCe4cI7Y -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:55 2025 by rpki-client