$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: kImtd5Ga7j+360O3zrfm25UsKhOI1D3I4IyWPotjhGU= Subject key identifier: EA:B0:FC:08:76:50:19:82:9A:9F:13:6B:84:CE:F6:FE:57:7C:EA:97 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0E1D Signing time: Sat 14 Jun 2025 18:00:45 +0000 Manifest this update: Sat 14 Jun 2025 18:00:44 +0000 Manifest next update: Sat 21 Jun 2025 18:00:44 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: 49Zh2wAGgLUTjxouU09fsgSrKnsmpq44NRJL/7P/Ku0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: Jun 14 18:00:44 2025 GMT Not After : Jun 21 18:00:44 2025 GMT Subject: CN=684db8cc-a31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:59:38:6b:c8:e0:b6:28:3a:c0:51:73:5d: 4e:78:8f:09:20:aa:7d:ab:64:9e:ad:d9:9f:1b:48: eb:e3:44:d9:20:2b:1e:c0:ec:b7:10:1c:e8:3f:97: c9:02:36:20:15:82:e3:73:80:4a:f8:79:82:de:8d: c2:a6:9f:be:4b:c9:3a:cc:79:e6:53:78:1c:cd:23: 28:e6:ba:85:cb:cc:8e:99:37:98:c1:2a:3f:fb:c0: 6d:da:90:55:bc:f4:27:2e:f1:1b:a2:02:16:4a:ce: 2a:ce:87:10:18:e1:d7:fb:20:ca:53:52:e8:70:78: 17:72:61:fb:a6:b6:a9:92:0a:4c:35:89:05:9c:44: 0a:a5:0f:e8:b8:00:78:77:b5:6d:8e:b3:6d:83:68: 28:3b:81:0a:7c:e4:11:91:bf:93:6e:3a:d4:52:cb: 51:1c:94:e1:e1:6d:cf:15:b6:64:e0:77:b6:19:9a: 83:ef:e2:ea:5e:a4:ac:63:d6:3c:24:1a:74:dd:80: 3e:b8:c2:49:37:af:77:a9:0e:d5:e0:f6:00:e3:8b: 58:6c:8d:b5:4d:dd:b9:c6:8f:62:84:5c:08:ff:a0: 1b:85:ee:ed:44:25:11:9b:4f:ba:65:a3:33:26:1c: 17:4e:43:12:22:03:62:e9:2b:eb:05:2f:5d:10:5c: 8f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B0:FC:08:76:50:19:82:9A:9F:13:6B:84:CE:F6:FE:57:7C:EA:97 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:30:c9:fa:97:68:9a:cc:29:09:bf:f6:8e:f1:21:03:2f:d8: 0d:28:f1:50:86:a2:53:ed:37:81:91:1b:2b:10:7b:5e:4b:09: 37:b0:e0:28:3d:c7:b5:2a:f4:b2:8c:74:af:7a:aa:53:f9:9d: 96:33:ed:25:ac:6c:52:84:d9:58:fa:11:fe:d1:35:c8:09:14: 0b:11:2d:a2:a1:cd:51:9c:e7:c3:8a:73:0d:3b:91:54:a3:e6: 89:4c:a4:da:06:c3:37:95:dd:3d:81:03:aa:9f:2f:1d:08:bb: bf:50:81:8d:29:cb:a8:dd:5c:47:85:f0:03:04:c3:45:6d:a5: c3:97:d4:ac:cb:24:d2:df:ea:f1:95:c8:8f:18:49:73:76:0e: fd:15:0c:32:de:ff:08:25:b9:c8:2c:a8:e2:72:c7:24:ae:ab: 27:7b:3a:24:57:23:9f:82:1a:a8:da:e8:63:1f:b1:7e:ff:5c: 59:7d:63:0a:ff:8b:42:6b:89:fe:e8:77:46:56:b3:c1:99:e6: 19:c8:63:44:a6:5c:a4:e3:14:8f:9a:17:58:de:7c:5d:7b:94: 32:c8:39:e8:3e:0f:5f:e9:86:7b:03:30:2e:be:7e:ca:85:4c: c9:75:fd:f4:ef:0c:22:e3:07:3d:cd:07:9e:ce:ab:d2:20:d5: 99:b6:6b:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjUwNjE0MTgwMDQ0WhcNMjUwNjIxMTgwMDQ0WjAYMRYwFAYD VQQDEw02ODRkYjhjYy1hMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUJZOGvI4LYoOsBRc11OeI8JIKp9q2SerdmfG0jr40TZICsewOy3EBzoP5fJ AjYgFYLjc4BK+HmC3o3Cpp++S8k6zHnmU3gczSMo5rqFy8yOmTeYwSo/+8Bt2pBV vPQnLvEbogIWSs4qzocQGOHX+yDKU1LocHgXcmH7prapkgpMNYkFnEQKpQ/ouAB4 d7VtjrNtg2goO4EKfOQRkb+TbjrUUstRHJTh4W3PFbZk4He2GZqD7+LqXqSsY9Y8 JBp03YA+uMJJN693qQ7V4PYA44tYbI21Td25xo9ihFwI/6Abhe7tRCURm0+6ZaMz JhwXTkMSIgNi6SvrBS9dEFyPuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqw/Ah2 UBmCmp8Ta4TO9v5XfOqXMB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7MMn6l2iazCkJv/aO8SEDL9gNKPFQhqJT7TeBkRsrEHteSwk3sOAo Pce1KvSyjHSveqpT+Z2WM+0lrGxShNlY+hH+0TXICRQLES2ioc1RnOfDinMNO5FU o+aJTKTaBsM3ld09gQOqny8dCLu/UIGNKcuo3VxHhfADBMNFbaXDl9SsyyTS3+rx lciPGElzdg79FQwy3v8IJbnILKjicsckrqsnezokVyOfghqo2uhjH7F+/1xZfWMK /4tCa4n+6HdGVrPBmeYZyGNEplyk4xSPmhdY3nxde5QyyDnoPg9f6YZ7AzAuvn7K hUzJdf307wwi4wc9zQeezqvSINWZtms4 -----END CERTIFICATE-----Generated at Sat Jun 14 19:34:36 2025 by rpki-client