$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: pu4fMQcBJaRfqTftPFypYp5gdD7petqZwMbHk1EBqvE= Subject key identifier: 89:DA:A7:1B:14:63:1C:0A:4A:88:A5:FE:35:A3:6F:63:85:97:8D:B5 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 013A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0DE9 Signing time: Thu 24 Apr 2025 18:06:53 +0000 Manifest this update: Thu 24 Apr 2025 18:06:52 +0000 Manifest next update: Thu 01 May 2025 18:06:52 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: TA0hfGvf/6ZVGhU66GOvm52HzU6vnJ2xFdhL3osJ2zE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 314 (0x13a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Apr 24 18:06:52 2025 GMT Not After : May 1 18:06:52 2025 GMT Subject: CN=680a7dbc-085f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cf:79:5a:98:80:49:a5:72:5e:38:59:3a:18: 96:ad:27:00:23:21:51:66:67:ac:25:87:0d:be:80: 1a:cf:62:0e:ae:92:bc:7f:b4:0e:7e:50:df:0b:8a: e4:f8:5a:5b:fd:ef:f0:01:d4:0d:bc:57:57:a0:22: d7:93:7d:c2:02:ab:da:0c:6e:9d:d3:5b:90:fe:f6: 3e:21:12:da:40:e1:91:4b:68:de:df:89:a2:83:a0: 9e:3e:01:89:87:cc:61:4b:7a:7b:1b:0b:eb:26:55: 0e:21:46:47:8c:30:59:7b:c7:2a:13:74:cf:4a:18: 38:84:bc:44:d8:8e:ab:be:9a:fd:f9:81:8f:0b:a0: 79:80:79:c4:b0:d5:67:34:e0:a4:65:c1:21:f5:74: 68:f9:15:cf:5c:73:4e:57:72:ff:cb:7b:59:08:fc: 28:32:bc:57:32:6d:c8:06:7b:fa:08:58:16:3d:ae: 71:f0:e0:6c:50:1d:f9:98:8c:94:c1:03:7a:88:2a: 5b:a1:e0:9c:31:f7:d4:50:bf:b3:13:e8:5a:35:bb: ab:7e:32:f0:b3:10:73:c2:3b:cc:12:4d:ed:63:f4: f4:4c:54:aa:bd:15:20:d6:87:43:2e:41:2c:22:90: 98:72:ae:46:af:ed:a0:fe:38:f2:ee:3c:5a:9f:0f: bb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:DA:A7:1B:14:63:1C:0A:4A:88:A5:FE:35:A3:6F:63:85:97:8D:B5 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ba:dc:52:27:6e:e3:46:10:e0:eb:ac:d5:4a:ca:75:bb:ab: 53:52:9b:bb:28:66:97:c5:e2:eb:18:d2:ad:2b:fd:c8:62:7b: ed:1d:7f:a1:af:29:77:ba:1b:3d:0d:81:b5:ec:e6:07:11:00: ce:ed:21:bd:f9:b8:ee:85:74:af:a3:b8:05:3b:0e:1a:cd:b0: bf:82:59:11:88:02:85:0e:c5:f0:21:d4:4f:a7:49:6c:bc:ef: 42:ff:9c:3e:00:03:6c:b9:09:ea:e2:19:77:bf:83:26:b0:ad: 72:55:d2:b6:2b:c8:51:28:45:cc:6a:7d:f8:a1:34:ad:a0:fc: f4:72:63:42:88:9e:83:82:fd:89:23:c3:63:c1:31:ba:eb:ef: 4a:6d:81:f4:be:f5:0c:d4:d9:e5:9e:4a:f3:1b:7c:86:3a:17: 97:e1:04:d4:ab:18:3c:6f:64:f2:6c:dd:26:e4:55:c6:03:15: 70:70:79:5d:d7:09:55:74:f4:1b:c9:06:cd:74:63:fe:18:b9: f0:b5:05:c7:4c:62:70:0f:8c:8b:16:17:3d:01:98:54:fd:96: 79:cc:3f:c2:d3:b6:3f:3c:3b:99:07:f6:55:a5:f2:0e:d3:3c: 62:c5:bf:ef:09:de:2f:f6:a3:e4:8d:0b:63:86:d8:3c:bb:a8: 69:8a:5b:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjUwNDI0MTgwNjUyWhcNMjUwNTAxMTgwNjUyWjAYMRYwFAYD VQQDEw02ODBhN2RiYy0wODVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtM95WpiASaVyXjhZOhiWrScAIyFRZmesJYcNvoAaz2IOrpK8f7QOflDfC4rk +Fpb/e/wAdQNvFdXoCLXk33CAqvaDG6d01uQ/vY+IRLaQOGRS2je34mig6CePgGJ h8xhS3p7GwvrJlUOIUZHjDBZe8cqE3TPShg4hLxE2I6rvpr9+YGPC6B5gHnEsNVn NOCkZcEh9XRo+RXPXHNOV3L/y3tZCPwoMrxXMm3IBnv6CFgWPa5x8OBsUB35mIyU wQN6iCpboeCcMffUUL+zE+haNburfjLwsxBzwjvMEk3tY/T0TFSqvRUg1odDLkEs IpCYcq5Gr+2g/jjy7jxanw+71QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFInapxsU YxwKSoil/jWjb2OFl421MB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9utxSJ27jRhDg66zVSsp1u6tTUpu7KGaXxeLrGNKtK/3IYnvtHX+h ryl3uhs9DYG17OYHEQDO7SG9+bjuhXSvo7gFOw4azbC/glkRiAKFDsXwIdRPp0ls vO9C/5w+AANsuQnq4hl3v4MmsK1yVdK2K8hRKEXMan34oTStoPz0cmNCiJ6Dgv2J I8NjwTG66+9KbYH0vvUM1NnlnkrzG3yGOheX4QTUqxg8b2TybN0m5FXGAxVwcHld 1wlVdPQbyQbNdGP+GLnwtQXHTGJwD4yLFhc9AZhU/ZZ5zD/C07Y/PDuZB/ZVpfIO 0zxixb/vCd4v9qPkjQtjhtg8u6hpils2 -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:54 2025 by rpki-client