$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json) Hash identifier: BQTevOz4NVOzh9xYNAvxWhAH6Cs4Q6XaDAQZJ8ojUew= Subject key identifier: 7C:B0:05:44:9D:98:61:30:9C:1A:B0:39:91:0E:22:AF:5C:42:59:AD Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Certificate serial: 08B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft Manifest number: 089E Signing time: Thu 24 Apr 2025 20:25:35 +0000 Manifest this update: Thu 24 Apr 2025 20:25:35 +0000 Manifest next update: Thu 01 May 2025 20:25:35 +0000 Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: CInMGY1vbr1NpISn5q1Jg5Xhfw/rmgo9iF/5FDCCfD4=) 2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: j0i0jOhZZOWP9s/TIb9RjR+IPetIqCuM8Ixx2VI3fzI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2224 (0x8b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049 Validity Not Before: Apr 24 20:25:35 2025 GMT Not After : May 1 20:25:35 2025 GMT Subject: CN=680a9e3f-e957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:8b:48:fa:cf:1d:f4:3d:1d:36:b1:ce:1b: 75:57:c3:43:e5:99:1f:60:e7:b2:29:9c:2b:bf:1c: fc:5f:0b:66:be:cc:17:67:68:fb:66:02:04:31:1d: 5c:56:2f:90:9d:40:fd:38:b1:04:a3:36:cb:96:6b: 02:a4:4d:31:4c:29:5c:58:79:24:6b:23:51:15:ba: d3:0a:c2:d8:d6:12:5a:ee:b3:94:77:3c:13:67:44: 99:43:9b:34:42:60:26:29:4e:f8:7c:ae:1f:ed:b3: cf:29:e0:33:18:ca:b4:5e:02:d4:5b:10:5a:d2:73: 5c:26:a6:30:4c:e1:be:2e:93:cf:af:19:bd:00:2d: 28:7a:9a:55:6b:4c:ab:94:3c:9f:28:fd:c8:df:8b: f5:77:d9:47:c0:bb:ad:00:e6:70:0e:d0:d2:e7:75: 92:20:86:e5:15:da:43:64:47:5f:c9:55:73:17:7f: 66:97:74:c3:39:aa:bd:84:30:40:15:ab:e8:e4:cb: 5d:4b:b3:99:0d:99:c0:81:94:f8:26:18:d3:c3:7d: 85:f7:77:53:8f:cd:5e:5a:40:63:8a:95:56:fb:c5: b1:50:12:6c:59:ae:c1:5f:28:0e:f6:4e:6d:ee:a4: 6f:72:af:1d:21:a6:fe:6c:b5:0c:98:52:45:c8:a8: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B0:05:44:9D:98:61:30:9C:1A:B0:39:91:0E:22:AF:5C:42:59:AD X509v3 Authority Key Identifier: keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5b:24:77:68:da:96:74:80:65:a7:a4:b9:7b:ea:e7:0e:b2: 7f:dc:b0:02:45:1d:56:d0:e4:1d:58:1c:e4:5d:1b:90:1b:0b: 93:be:4f:e0:27:1d:88:02:d9:d1:d0:75:50:07:88:d0:b5:e4: a6:1e:07:ee:f2:eb:6d:3d:0b:5a:b9:7f:eb:cc:4d:04:f1:38: f2:2d:e8:2a:f1:50:e5:ae:73:7e:d1:ee:14:2f:0f:a6:02:73: 61:25:25:0a:76:6d:aa:e6:22:6e:97:6d:1b:d2:09:5b:c0:ec: 1f:f3:d5:d7:34:df:f3:a3:a5:aa:6d:3b:c5:8f:65:3b:eb:66: 95:fe:66:9f:e8:d3:59:03:0d:a6:10:cc:17:65:86:5d:50:c7: 63:bf:6a:c6:4f:de:c6:03:76:4a:f4:b6:7d:23:bb:bb:09:48: 38:ed:48:7d:49:76:06:00:82:ea:77:39:dc:1c:ed:54:e1:bb: fd:65:dc:7a:93:ce:c1:32:1e:10:43:6c:d4:90:19:cf:e8:c7: 2e:d3:f1:87:c9:8c:b5:04:b6:28:1f:d7:e9:07:df:38:8a:7a: 56:1e:85:a5:17:67:6e:e4:f5:32:6b:35:ab:9f:0f:ac:72:48: a6:a7:cd:24:3b:52:04:10:32:7a:92:23:95:ae:40:19:9a:a1: 45:fe:31:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ4RTAxMTAvBgNVBAUTKENDNTQxOUM4QTc4QkNENTNBRDE3MUM1Qjc0QTQwNzFE OTUzOTUwNDkwHhcNMjUwNDI0MjAyNTM1WhcNMjUwNTAxMjAyNTM1WjAYMRYwFAYD VQQDEw02ODBhOWUzZi1lOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqn+LSPrPHfQ9HTaxzht1V8ND5ZkfYOeyKZwrvxz8XwtmvswXZ2j7ZgIEMR1c Vi+QnUD9OLEEozbLlmsCpE0xTClcWHkkayNRFbrTCsLY1hJa7rOUdzwTZ0SZQ5s0 QmAmKU74fK4f7bPPKeAzGMq0XgLUWxBa0nNcJqYwTOG+LpPPrxm9AC0oeppVa0yr lDyfKP3I34v1d9lHwLutAOZwDtDS53WSIIblFdpDZEdfyVVzF39ml3TDOaq9hDBA Favo5MtdS7OZDZnAgZT4JhjTw32F93dTj81eWkBjipVW+8WxUBJsWa7BXygO9k5t 7qRvcq8dIab+bLUMmFJFyKhH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHywBUSd mGEwnBqwOZEOIq9cQlmtMB8GA1UdIwQYMBaAFMxUGcini81TrRccW3SkBx2VOVBJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDhFMC9FRTJENTMyNkI5 NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpWT3RGeHhiZEtRSEhaVTVV RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGUVp5S2VMelZPdEZ4eGJkS1FISFpVNVVFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDhFMC9FRTJENTMyNkI5NDcxMUVBOEE2NDlFNzZDNEY5QUUwMi96RlFaeUtlTHpW T3RGeHhiZEtRSEhaVTVVRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdWyR3aNqWdIBlp6S5e+rnDrJ/3LACRR1W0OQdWBzkXRuQGwuTvk/g Jx2IAtnR0HVQB4jQteSmHgfu8uttPQtauX/rzE0E8TjyLegq8VDlrnN+0e4ULw+m AnNhJSUKdm2q5iJul20b0glbwOwf89XXNN/zo6WqbTvFj2U762aV/maf6NNZAw2m EMwXZYZdUMdjv2rGT97GA3ZK9LZ9I7u7CUg47Uh9SXYGAILqdzncHO1U4bv9Zdx6 k87BMh4QQ2zUkBnP6Mcu0/GHyYy1BLYoH9fpB984inpWHoWlF2du5PUyazWrnw+s ckimp80kO1IEEDJ6kiOVrkAZmqFF/jEt -----END CERTIFICATE-----Generated at Sat Apr 26 04:01:28 2025 by rpki-client