$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft File: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft (raw, json) Hash identifier: SUUwU8LjOjp1twxE1PT6LamNQVzdibCw0lFBu6GRUH0= Subject key identifier: A0:A7:14:5C:67:B4:83:7B:1B:FD:5E:E7:ED:B3:AE:72:34:6A:87:D4 Authority key identifier: 65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD Certificate issuer: /CN=A91E77F3/serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Certificate serial: 87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft Manifest number: 85 Signing time: Fri 25 Apr 2025 05:35:22 +0000 Manifest this update: Fri 25 Apr 2025 05:35:22 +0000 Manifest next update: Fri 02 May 2025 05:35:22 +0000 Files and hashes: 1: ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl (hash: gwf1NDjovpcMuKgJvA1z9cEIHk6FfPrqaUeQvm8Uov0=) 2: CAADA49A5B9C11EF9AD89645C4F9AE02.roa (hash: ScK5Mkjc4CtGpC9rnxIJeiwAah1HeyqfBAVqLucgBa0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 135 (0x87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77F3, serialNumber=65114B1743FD60DD7728DEE1E85B49EEA1BF0DAD Validity Not Before: Apr 25 05:35:22 2025 GMT Not After : May 2 05:35:22 2025 GMT Subject: CN=680b1f1a-d4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:e6:54:72:57:1a:16:66:1f:5b:b6:d0:01: f0:d2:1b:85:c6:e8:a5:69:c5:38:60:41:f4:2a:2c: 44:21:25:1b:d8:51:96:93:3c:f3:1e:05:c3:2a:50: 07:f9:89:7c:97:c8:2d:0d:ed:ff:2d:78:58:d2:4f: 1e:ce:97:fb:1c:84:82:58:3c:59:cd:1c:15:99:5d: f5:cf:75:7d:fc:5d:01:fb:d5:96:b7:22:9b:87:fb: 01:4b:73:4d:49:bb:1d:58:72:37:58:b0:14:01:04: 5c:25:94:a1:ee:3f:db:84:3a:7d:ab:62:53:86:8e: 24:ae:f0:41:6c:42:50:fd:42:2e:3a:aa:e2:e0:9d: 6a:f2:89:74:e4:7c:b1:ad:8f:f8:0c:65:d9:d7:13: 08:b3:af:17:24:10:b4:72:43:ae:04:7c:34:49:68: 58:4c:28:92:22:4b:11:c2:70:64:fd:c6:89:a5:a0: d0:e1:74:a4:bc:7b:60:0c:9d:ec:60:a6:0c:cb:ae: cf:3e:bb:cd:cc:cd:f1:3f:fd:48:04:9b:33:5e:aa: 14:0b:02:91:23:e2:b8:d0:8e:72:7e:3f:4b:51:ed: e6:a2:3f:0f:67:f6:29:4e:32:cc:1f:1e:d1:77:f7: d7:aa:cf:e0:11:2f:b8:f2:14:00:af:0b:73:c4:1a: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A7:14:5C:67:B4:83:7B:1B:FD:5E:E7:ED:B3:AE:72:34:6A:87:D4 X509v3 Authority Key Identifier: keyid:65:11:4B:17:43:FD:60:DD:77:28:DE:E1:E8:5B:49:EE:A1:BF:0D:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77F3/94EFCC0C5B9C11EF8CEA3145C4F9AE02/ZRFLF0P9YN13KN7h6FtJ7qG_Da0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:01:dd:08:88:e5:13:2a:25:6a:d4:38:8d:ef:25:4c:ee:f4: 38:33:f6:7d:cf:3e:2b:c7:e9:4b:16:67:72:a9:69:0c:f7:75: d8:15:60:b8:48:b4:ed:f8:61:2a:de:39:cf:97:8d:73:c0:73: a6:36:54:1e:77:0a:72:9a:17:e9:69:8b:83:1b:27:43:6d:14: 6b:75:5a:2e:33:80:75:52:34:36:08:a3:6a:22:54:53:34:df: aa:0e:0d:e7:ca:6e:d8:98:a7:8c:40:19:81:09:a4:dd:21:95: 22:98:b3:7d:95:0b:f5:7b:8f:b2:a2:2d:15:fc:45:f8:1f:22: b2:31:7f:30:32:87:bb:95:74:41:b0:6b:1f:10:12:c7:31:d7: 10:fd:28:f6:f4:c0:41:ae:3a:cb:db:fb:68:94:7e:30:55:60: 79:8a:e1:37:3b:46:1b:ff:96:f1:54:1a:d7:7a:a5:20:e0:e6: ae:ff:70:9e:ef:59:42:07:10:69:e7:50:21:a9:e7:f6:8d:dd: e6:35:72:cd:e6:fa:a0:59:5e:a0:25:28:af:b5:eb:22:d6:3d: a9:fc:4b:e4:26:f2:0d:b4:08:6c:70:f0:6b:a2:3d:ef:5f:c7: 92:59:2c:ea:40:f9:99:2b:a8:1d:d4:cb:50:5b:74:65:cb:36: be:19:23:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3RjMxMTAvBgNVBAUTKDY1MTE0QjE3NDNGRDYwREQ3NzI4REVFMUU4NUI0OUVF QTFCRjBEQUQwHhcNMjUwNDI1MDUzNTIyWhcNMjUwNTAyMDUzNTIyWjAYMRYwFAYD VQQDEw02ODBiMWYxYS1kNGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwPmVHJXGhZmH1u20AHw0huFxuilacU4YEH0KixEISUb2FGWkzzzHgXDKlAH +Yl8l8gtDe3/LXhY0k8ezpf7HISCWDxZzRwVmV31z3V9/F0B+9WWtyKbh/sBS3NN SbsdWHI3WLAUAQRcJZSh7j/bhDp9q2JTho4krvBBbEJQ/UIuOqri4J1q8ol05Hyx rY/4DGXZ1xMIs68XJBC0ckOuBHw0SWhYTCiSIksRwnBk/caJpaDQ4XSkvHtgDJ3s YKYMy67PPrvNzM3xP/1IBJszXqoUCwKRI+K40I5yfj9LUe3moj8PZ/YpTjLMHx7R d/fXqs/gES+48hQArwtzxBr0xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCnFFxn tIN7G/1e5+2zrnI0aofUMB8GA1UdIwQYMBaAFGURSxdD/WDddyje4ehbSe6hvw2t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdGMy85NEVGQ0MwQzVC OUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlOMTNLTjdoNkZ0SjdxR19E YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pSRkxGMFA5WU4xM0tON2g2RnRKN3FHX0RhMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdGMy85NEVGQ0MwQzVCOUMxMUVGOENFQTMxNDVDNEY5QUUwMi9aUkZMRjBQOVlO MTNLTjdoNkZ0SjdxR19EYTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfAd0IiOUTKiVq1DiN7yVM7vQ4M/Z9zz4rx+lLFmdyqWkM93XYFWC4 SLTt+GEq3jnPl41zwHOmNlQedwpymhfpaYuDGydDbRRrdVouM4B1UjQ2CKNqIlRT NN+qDg3nym7YmKeMQBmBCaTdIZUimLN9lQv1e4+yoi0V/EX4HyKyMX8wMoe7lXRB sGsfEBLHMdcQ/Sj29MBBrjrL2/tolH4wVWB5iuE3O0Yb/5bxVBrXeqUg4Oau/3Ce 71lCBxBp51Ahqef2jd3mNXLN5vqgWV6gJSivtesi1j2p/EvkJvINtAhscPBroj3v X8eSWSzqQPmZK6gd1MtQW3Rlyza+GSM0 -----END CERTIFICATE-----Generated at Sat Apr 26 04:34:20 2025 by rpki-client