$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft File: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json) Hash identifier: XtL4RkJx1QMQJU/eAi1V6JYBM3xBBPma6hh11CnEMTk= Subject key identifier: F3:ED:55:76:6F:49:C4:04:70:37:6E:54:51:13:48:C2:CA:03:AC:64 Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft Manifest number: 59 Signing time: Fri 25 Apr 2025 06:07:24 +0000 Manifest this update: Fri 25 Apr 2025 06:07:24 +0000 Manifest next update: Fri 02 May 2025 06:07:24 +0000 Files and hashes: 1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: uHIs4Pf4S1XUCP0tXMhIO853NaH6s5oNAU/kmmI8EKM=) 2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: NvVW1egmPiHSwj4KXew0q649a1yhcF9ppuNr/Hl7yDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Apr 25 06:07:24 2025 GMT Not After : May 2 06:07:24 2025 GMT Subject: CN=680b269c-254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:52:01:09:4f:e6:77:5e:86:f0:7f:0c:a6: 30:76:c4:04:69:39:60:85:be:46:53:fe:16:88:6f: fd:1f:08:a1:49:42:76:f4:91:f3:a0:be:d6:47:fa: ee:58:14:60:42:63:d9:f9:e9:73:57:d5:74:7e:af: 55:2d:18:cd:66:2d:2e:f8:4a:f5:58:c9:49:d3:2d: 81:bb:d2:b2:41:ef:72:08:5f:db:0b:2a:bc:5e:32: 85:cf:59:ab:9f:60:9c:b0:1a:d6:73:b1:69:19:d6: d3:eb:a4:f7:02:6e:2f:3a:bc:5c:64:e5:5f:26:be: a1:4e:b7:fe:6d:4a:24:1e:4a:54:ef:c8:cf:87:57: 52:02:c0:b8:0a:b8:d8:2b:00:55:40:6a:d1:bb:73: 0d:cb:5b:8d:78:ef:d1:81:3c:c7:8c:02:7d:73:20: 3c:85:52:b3:5d:bd:d8:3b:41:eb:e5:e7:16:7e:74: 99:11:09:bd:f9:6e:f4:34:06:7e:42:54:f5:f6:fb: d0:27:21:e0:3a:9c:3d:f2:cd:14:c9:ee:65:cc:c8: 99:a2:29:28:d3:a1:46:52:6b:6a:79:b3:d5:12:09: e8:43:38:b2:70:5b:30:6f:c9:ac:af:1c:dd:93:9d: 44:47:99:71:fc:6d:15:59:82:13:8d:b9:3f:de:f9: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:ED:55:76:6F:49:C4:04:70:37:6E:54:51:13:48:C2:CA:03:AC:64 X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a9:25:9f:3e:b0:bf:73:4c:d2:ba:45:f6:73:b6:13:3c:82: c3:34:e9:76:3d:88:a1:01:25:76:e8:2c:67:19:b6:a2:2b:25: 02:3b:98:a1:59:56:32:bd:60:9f:0d:d2:4b:e1:3e:70:3c:a3: 88:15:5d:cf:11:8b:8c:51:f9:b7:42:3c:55:16:9c:8f:e7:7a: d7:0b:cd:0f:59:3f:40:1f:e1:4a:04:f3:66:f6:af:0b:58:91: 08:f6:36:24:80:83:16:86:a9:72:0b:18:60:8c:49:fc:d4:e1: a1:2e:49:97:f9:4f:05:07:8f:70:fb:58:67:11:c3:c4:64:89: b1:c7:47:9b:f0:ea:7b:20:63:fe:e8:c2:c8:9a:8c:21:8b:d8: ba:23:03:86:57:44:f4:62:a6:4a:ed:68:39:78:a8:b7:7a:63: 80:f1:af:be:cf:24:21:9d:92:81:c0:c0:64:a9:c6:22:36:42: ba:6f:10:c6:c1:2b:29:60:f1:36:0a:8e:c6:df:05:58:c4:b4: d6:23:27:dd:58:e5:e1:61:61:a4:f8:4c:a7:37:0e:a8:a1:16: 04:4b:53:53:62:90:d2:63:9c:50:7d:40:06:92:38:01:5c:dc: f4:fc:b9:62:0b:31:f1:66:9c:c4:d3:3f:a4:8e:cf:ec:cf:eb: 2b:f4:22:63 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDlGRTExMC8GA1UEBRMoNjRDQ0MxNjZDNThDMzhGRThDQzE5NzZGNUNGMDdDMURE MDZGNjgxNDAeFw0yNTA0MjUwNjA3MjRaFw0yNTA1MDIwNjA3MjRaMBgxFjAUBgNV BAMTDTY4MGIyNjljLTI1NGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4plIBCU/md16G8H8MpjB2xARpOWCFvkZT/haIb/0fCKFJQnb0kfOgvtZH+u5Y FGBCY9n56XNX1XR+r1UtGM1mLS74SvVYyUnTLYG70rJB73IIX9sLKrxeMoXPWauf YJywGtZzsWkZ1tPrpPcCbi86vFxk5V8mvqFOt/5tSiQeSlTvyM+HV1ICwLgKuNgr AFVAatG7cw3LW41479GBPMeMAn1zIDyFUrNdvdg7Qevl5xZ+dJkRCb35bvQ0Bn5C VPX2+9AnIeA6nD3yzRTJ7mXMyJmiKSjToUZSa2p5s9USCehDOLJwWzBvyayvHN2T nURHmXH8bRVZghONuT/e+UotAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8+1Vdm9J xARwN25UURNIwsoDrGQwHwYDVR0jBBgwFoAUZMzBZsWMOP6MwZdvXPB8HdBvaBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOUZFLzM4MDNBQTFDOUIx MjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk16QlpzV01PUDZNd1pkdlhQQjhIZEJ2YUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OUZFLzM4MDNBQTFDOUIxMjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2 TXdaZHZYUEI4SGRCdmFCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+pJZ8+sL9zTNK6RfZzthM8gsM06XY9iKEBJXboLGcZtqIrJQI7mKFZ VjK9YJ8N0kvhPnA8o4gVXc8Ri4xR+bdCPFUWnI/netcLzQ9ZP0Af4UoE82b2rwtY kQj2NiSAgxaGqXILGGCMSfzU4aEuSZf5TwUHj3D7WGcRw8RkibHHR5vw6nsgY/7o wsiajCGL2LojA4ZXRPRipkrtaDl4qLd6Y4Dxr77PJCGdkoHAwGSpxiI2QrpvEMbB Kylg8TYKjsbfBVjEtNYjJ91Y5eFhYaT4TKc3DqihFgRLU1NikNJjnFB9QAaSOAFc 3PT8uWILMfFmnMTTP6SOz+zP6yv0ImM= -----END CERTIFICATE-----Generated at Sat Apr 26 14:13:24 2025 by rpki-client