$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: Kt6NHMCG5E4cJxxCz36CqN47D7UZHTknveZnQLzA/nY= Subject key identifier: FD:AD:FF:4C:86:EB:FB:76:9D:D1:91:14:98:1A:46:F7:5A:54:50:67 Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 06DF Signing time: Fri 18 Apr 2025 22:03:35 +0000 Manifest this update: Fri 18 Apr 2025 22:03:35 +0000 Manifest next update: Fri 25 Apr 2025 22:03:35 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: wweNEEfYQJT3wcW+vVZTD39MxaDYQ3Cq3ZX1+yx0d6g=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Apr 18 22:03:35 2025 GMT Not After : Apr 25 22:03:35 2025 GMT Subject: CN=6802cc37-60fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:88:9f:82:70:c6:48:53:15:d6:38:6b:c2:2b: 7e:1e:e4:86:68:fe:5c:49:2c:c5:71:b0:61:48:03: 77:3a:2e:93:fe:af:04:c4:0c:ce:87:2b:27:01:e2: e3:bc:79:48:0a:6e:2b:44:4a:cf:41:ad:29:b4:11: 98:18:2b:61:0c:da:f3:e7:87:1f:90:75:23:4d:28: 66:d1:db:f8:c8:ab:e9:04:7e:40:c0:83:37:69:6a: 52:8c:8a:17:67:d1:ab:fd:ca:c2:2a:fb:c6:45:d6: 2d:65:f4:85:d5:06:65:15:47:0e:d4:7a:ea:c1:f3: 52:f1:d2:90:d5:3c:9a:0e:94:36:d7:7b:68:d2:91: 68:82:75:1f:62:ea:9a:92:ce:10:3b:bc:a6:31:db: d4:f2:fd:c5:89:9a:35:b6:95:91:13:72:b8:92:90: e3:d4:c9:d4:ca:06:ae:7d:52:d2:fb:9a:fd:c6:b3: 93:a3:e1:9d:ea:57:da:17:0e:4c:27:29:a4:fa:3b: d8:2c:62:4d:60:8f:25:6a:b3:50:cd:e3:74:55:5b: d6:71:4c:62:5d:1c:fa:d7:47:79:2d:55:13:21:7e: 52:ee:02:f6:09:d0:eb:b8:4c:c1:e1:77:18:55:40: 98:7a:5c:ab:57:92:e4:5b:97:49:96:69:96:1c:15: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AD:FF:4C:86:EB:FB:76:9D:D1:91:14:98:1A:46:F7:5A:54:50:67 X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e0:c1:b4:a4:ec:ee:c9:ea:84:94:5f:78:57:f8:54:64:ea: be:e7:d0:15:17:35:03:11:b2:c0:1a:aa:58:08:f1:99:41:a9: 8b:d4:ac:2b:f2:a4:9d:fe:11:24:59:41:74:fa:4d:9c:55:c6: 42:bd:80:76:e3:a7:c1:77:73:4c:41:9f:32:97:55:7c:49:53: fd:dc:3b:f2:08:73:b3:9f:2c:b7:49:c7:07:41:3d:de:69:47: 57:8d:3e:9a:c8:18:96:50:d7:7d:cc:96:35:6f:36:b2:80:d7: a9:74:02:e5:05:06:18:48:d9:3f:60:ff:4a:7a:44:24:cf:b9: bd:2f:7d:03:39:8b:73:14:71:8c:e5:ff:c0:aa:3f:78:b8:c1: ca:a5:df:eb:a7:0c:4f:8d:65:1c:f6:65:90:49:fc:ef:5c:31: 29:fc:28:94:a3:37:80:e0:7f:49:a7:48:8e:bb:21:7c:78:36: c9:ee:46:f1:79:77:ce:0c:fa:93:97:17:60:a3:25:d5:7e:10: d2:5e:40:f7:1e:07:d0:f9:48:21:aa:38:15:8c:f6:41:be:78: 93:e8:fe:43:07:18:a2:d8:34:92:0d:0d:7d:87:63:bc:5c:4c: 0d:ca:29:18:27:f8:f8:15:6d:bb:f0:41:03:ca:5d:1b:b5:f7: 52:25:8c:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUwNDE4MjIwMzM1WhcNMjUwNDI1MjIwMzM1WjAYMRYwFAYD VQQDEw02ODAyY2MzNy02MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4YifgnDGSFMV1jhrwit+HuSGaP5cSSzFcbBhSAN3Oi6T/q8ExAzOhysnAeLj vHlICm4rRErPQa0ptBGYGCthDNrz54cfkHUjTShm0dv4yKvpBH5AwIM3aWpSjIoX Z9Gr/crCKvvGRdYtZfSF1QZlFUcO1HrqwfNS8dKQ1TyaDpQ213to0pFognUfYuqa ks4QO7ymMdvU8v3FiZo1tpWRE3K4kpDj1MnUygaufVLS+5r9xrOTo+Gd6lfaFw5M Jymk+jvYLGJNYI8larNQzeN0VVvWcUxiXRz610d5LVUTIX5S7gL2CdDruEzB4XcY VUCYelyrV5LkW5dJlmmWHBVnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2t/0yG 6/t2ndGRFJgaRvdaVFBnMB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAf4MG0pOzuyeqElF94V/hUZOq+59AVFzUDEbLAGqpYCPGZQamL1Kwr 8qSd/hEkWUF0+k2cVcZCvYB246fBd3NMQZ8yl1V8SVP93DvyCHOznyy3SccHQT3e aUdXjT6ayBiWUNd9zJY1bzaygNepdALlBQYYSNk/YP9KekQkz7m9L30DOYtzFHGM 5f/Aqj94uMHKpd/rpwxPjWUc9mWQSfzvXDEp/CiUozeA4H9Jp0iOuyF8eDbJ7kbx eXfODPqTlxdgoyXVfhDSXkD3HgfQ+UghqjgVjPZBvniT6P5DBxii2DSSDQ19h2O8 XEwNyikYJ/j4FW278EEDyl0btfdSJYys -----END CERTIFICATE-----Generated at Sat Apr 19 02:16:29 2025 by rpki-client