$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: GEd03wWXco2sVvaurFsYpmOlI7ZoW5usQlD2QSgdlQU= Subject key identifier: 7E:39:E7:62:32:2B:96:6C:5C:06:38:AE:96:BA:8F:E7:31:78:85:0D Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 25 Signing time: Fri 25 Apr 2025 06:47:22 +0000 Manifest this update: Fri 25 Apr 2025 06:47:21 +0000 Manifest next update: Fri 02 May 2025 06:47:21 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: yACQlU4XChoTBoBQbTrJV1NVocFnj6nyUR2OZ+azakc=) 2: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Apr 25 06:47:21 2025 GMT Not After : May 2 06:47:21 2025 GMT Subject: CN=680b2ff9-e70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:e7:90:b1:04:f6:ba:bb:89:da:00:1a:fd: b0:49:f6:1f:02:92:db:77:c1:d9:14:21:a6:9d:8b: 05:ad:61:a8:13:90:14:6d:15:70:de:e3:49:bf:4a: af:d5:63:14:0a:8e:dc:5d:be:37:42:a9:a7:81:9b: 09:65:05:8f:c2:36:f3:bd:23:aa:db:7b:3c:86:c5: 4d:24:6f:1f:7f:ea:d1:fc:b2:23:06:db:a5:50:99: 54:d5:38:05:53:4f:35:74:a9:a6:a6:ea:d8:f5:2d: 55:b0:bc:5e:86:63:d0:09:78:fb:0b:f1:49:d9:93: fe:84:36:00:30:0c:b0:32:b5:dd:11:2a:db:b5:b2: c5:37:9f:cf:b7:b9:9d:32:44:f2:1d:b0:7f:ba:6d: 88:ac:29:92:2f:1a:37:fd:20:ff:e8:26:79:13:17: da:2d:a6:c9:fc:f4:0f:79:a6:61:c4:c3:99:4e:78: 16:e2:a2:d9:ad:f3:07:97:af:d5:cf:76:5c:d0:67: a8:dd:00:91:07:ee:37:92:73:52:c7:9c:09:37:39: 1a:76:33:e3:01:ee:b1:25:9f:c0:87:6f:f6:9b:9c: 15:38:87:86:63:61:89:8b:45:c8:39:db:5d:9a:37: 63:3b:96:c7:52:f5:cb:de:9b:90:e8:3e:5e:ed:e6: 16:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:39:E7:62:32:2B:96:6C:5C:06:38:AE:96:BA:8F:E7:31:78:85:0D X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:e3:b4:5c:ae:e7:95:1e:a7:01:af:ee:d3:8a:d6:9c:5c:f1: 6e:5e:8f:3b:b3:aa:7a:e4:06:ee:60:85:80:01:12:d0:e8:67: 51:9d:c3:84:8a:07:2c:a1:ef:06:f7:4d:dd:c4:86:a3:14:a2: 4a:4c:54:17:62:ab:11:7b:78:7a:c9:82:1a:3d:49:ea:fc:ae: 2f:f2:b0:d2:c0:14:f9:7b:98:18:1d:0a:8f:ce:9d:c6:ac:fd: 90:a9:0d:9a:0b:fc:3d:f8:b6:d6:86:fb:ab:86:05:e9:3a:44: ae:53:60:3b:51:b8:73:b2:46:8e:90:ff:c9:e8:0d:1b:1b:be: be:87:c0:da:b3:4f:52:7b:f5:93:4d:a0:72:45:5d:7d:d6:fe: bd:a5:27:69:92:ca:b0:ad:a6:0a:5b:eb:f6:9b:45:9a:e7:dd: 0c:eb:48:58:50:38:c7:73:2d:50:0c:c7:95:38:7c:76:50:61: 27:28:dd:17:da:b7:4e:ab:8c:6b:9a:2e:62:36:6b:53:5f:14: 27:c7:5c:01:fa:c5:72:a8:56:12:6a:4c:72:97:bd:2f:88:e9: 60:3a:13:4a:5b:40:ba:65:dd:e6:c5:83:ee:66:0f:61:2f:55: 42:39:ef:27:be:55:71:e3:24:6c:fd:ad:2f:83:bd:e0:26:62: d9:6a:de:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG OThCNTExMC8GA1UEBRMoQ0RCRkEwQTZEMDYxRTFGRTcwMzRCNDBGMkVFMkU0QjUz REU4RkRFMTAeFw0yNTA0MjUwNjQ3MjFaFw0yNTA1MDIwNjQ3MjFaMBgxFjAUBgNV BAMTDTY4MGIyZmY5LWU3MGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDOu+eQsQT2uruJ2gAa/bBJ9h8Cktt3wdkUIaadiwWtYagTkBRtFXDe40m/Sq/V YxQKjtxdvjdCqaeBmwllBY/CNvO9I6rbezyGxU0kbx9/6tH8siMG26VQmVTVOAVT TzV0qaam6tj1LVWwvF6GY9AJePsL8UnZk/6ENgAwDLAytd0RKtu1ssU3n8+3uZ0y RPIdsH+6bYisKZIvGjf9IP/oJnkTF9otpsn89A95pmHEw5lOeBbiotmt8weXr9XP dlzQZ6jdAJEH7jeSc1LHnAk3ORp2M+MB7rEln8CHb/abnBU4h4ZjYYmLRcg5212a N2M7lsdS9cvem5DoPl7t5hZlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfjnnYjIr lmxcBjiulrqP5zF4hQ0wHwYDVR0jBBgwFoAUzb+gptBh4f5wNLQPLuLktT3o/eEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5OEI1Lzk2RDgyMzhBRUMw MDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19l RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemItZ3B0Qmg0ZjV3TkxRUEx1TGt0VDNvX2VFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY5 OEI1Lzk2RDgyMzhBRUMwMDExRUY4QjVEMTcyREM0RjlBRTAyL3piLWdwdEJoNGY1 d05MUVBMdUxrdFQzb19lRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB3jtFyu55UepwGv7tOK1pxc8W5ejzuzqnrkBu5ghYABEtDoZ1Gdw4SK Byyh7wb3Td3EhqMUokpMVBdiqxF7eHrJgho9Ser8ri/ysNLAFPl7mBgdCo/Oncas /ZCpDZoL/D34ttaG+6uGBek6RK5TYDtRuHOyRo6Q/8noDRsbvr6HwNqzT1J79ZNN oHJFXX3W/r2lJ2mSyrCtpgpb6/abRZrn3QzrSFhQOMdzLVAMx5U4fHZQYSco3Rfa t06rjGuaLmI2a1NfFCfHXAH6xXKoVhJqTHKXvS+I6WA6E0pbQLpl3ebFg+5mD2Ev VUI57ye+VXHjJGz9rS+DveAmYtlq3qA= -----END CERTIFICATE-----Generated at Sat Apr 26 04:19:09 2025 by rpki-client