$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: RDVQf/aejL1Z3nRbQmjQr0V9gP2y/WGlaOObgXiwI9k= Subject key identifier: E0:EE:88:FE:92:DE:B3:0C:F5:82:B9:E4:60:98:A4:3F:52:7E:DC:9F Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 9A Signing time: Sat 29 Mar 2025 05:39:32 +0000 Manifest this update: Sat 29 Mar 2025 05:39:32 +0000 Manifest next update: Sat 05 Apr 2025 05:39:32 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: UeYPgiDbL1h/k+L6o8WnRy6zdND+ArqTw1rG9XJAysE=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF Validity Not Before: Mar 29 05:39:32 2025 GMT Not After : Apr 5 05:39:32 2025 GMT Subject: CN=67e78794-4cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:fc:e8:50:ca:2c:02:ea:59:92:d1:aa:df: 54:87:e6:88:0f:82:c4:a0:25:19:00:86:f4:32:8b: 5f:c9:3b:02:d0:1a:ab:06:43:6b:53:86:be:87:c8: 20:37:5a:e2:f6:d0:6e:7f:a5:82:e6:61:26:c8:dd: e0:cb:a4:aa:76:46:46:fc:ed:fe:c0:c1:2b:c6:10: 1f:ef:ae:7f:5f:6f:7b:6a:ce:16:e2:9f:a1:ec:f1: d4:02:3a:3f:86:e2:65:fd:dc:d1:4b:fa:5a:6f:33: ef:62:b8:d3:14:fa:9e:5d:ab:bb:5b:67:37:f0:a7: 17:98:10:fb:d4:f8:31:08:d5:12:3d:42:d1:95:d0: f2:54:00:b3:b0:73:74:19:03:d0:86:bc:57:27:db: cc:3c:f3:36:ee:3a:8a:b1:04:94:58:71:62:2e:30: c0:5e:9f:6d:f4:8f:b6:45:6a:58:e0:3f:39:db:bb: f1:9f:46:50:01:1e:2e:0c:3c:91:91:c5:ab:ad:25: c0:b7:ea:e8:14:d9:71:ae:1b:31:7f:3a:f8:7a:0c: a3:34:1b:33:b8:48:80:9b:98:fb:d0:18:c8:8b:fe: 6b:07:07:46:97:bf:2d:dd:e6:e4:96:26:a0:6c:31: dc:b7:35:19:eb:be:73:7b:1c:e8:89:4e:0e:2b:ed: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:88:FE:92:DE:B3:0C:F5:82:B9:E4:60:98:A4:3F:52:7E:DC:9F X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d8:b3:52:42:59:9e:6b:11:8f:c3:f5:d4:59:0f:c1:4a:b4: 3b:d4:91:27:05:ff:bf:0f:f6:61:ff:c2:83:14:28:2d:70:51: 92:ed:9f:a9:a0:25:8b:b0:0a:e5:d8:ce:89:1e:b1:16:d9:75: 45:fe:d1:bd:f4:66:b7:c0:03:0b:a7:d7:32:8c:1e:54:1a:46: 78:4b:40:9f:29:35:ff:5b:75:07:b0:32:57:30:dc:31:33:4c: 8b:a1:d1:7a:40:60:ab:00:ef:d9:3d:15:53:f3:39:5f:6f:f8: fc:fd:a6:d2:e5:c4:ae:e6:18:37:19:0e:87:1d:8a:31:d9:5d: 7d:72:89:9f:92:23:db:2f:49:64:49:8c:4b:ee:d7:00:4b:58: 77:63:ac:74:bd:b8:83:fb:7a:02:6a:99:fe:5e:63:8b:59:dc: 81:e9:a5:37:99:1b:5a:05:7e:04:69:99:60:ea:9d:63:d3:04: ce:cc:cd:70:79:c7:fc:e7:f1:43:ca:90:8f:64:5d:5e:30:f7: e7:2a:0d:42:ae:02:eb:4e:fd:c8:b1:9d:16:06:b5:d4:c1:08: ce:1d:ba:08:21:28:0b:df:2a:5d:2b:26:e1:ad:14:82:4a:1e: 11:02:0e:90:10:92:86:50:8e:a6:42:46:7b:11:4f:90:b0:68: 1c:20:26:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwMzI5MDUzOTMyWhcNMjUwNDA1MDUzOTMyWjAYMRYwFAYD VQQDEw02N2U3ODc5NC00Y2QwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1iT86FDKLALqWZLRqt9Uh+aID4LEoCUZAIb0MotfyTsC0BqrBkNrU4a+h8gg N1ri9tBuf6WC5mEmyN3gy6SqdkZG/O3+wMErxhAf765/X297as4W4p+h7PHUAjo/ huJl/dzRS/pabzPvYrjTFPqeXau7W2c38KcXmBD71PgxCNUSPULRldDyVACzsHN0 GQPQhrxXJ9vMPPM27jqKsQSUWHFiLjDAXp9t9I+2RWpY4D8527vxn0ZQAR4uDDyR kcWrrSXAt+roFNlxrhsxfzr4egyjNBszuEiAm5j70BjIi/5rBwdGl78t3ebkliag bDHctzUZ675zexzoiU4OK+1spwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODuiP6S 3rMM9YK55GCYpD9SftyfMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf2LNSQlmeaxGPw/XUWQ/BSrQ71JEnBf+/D/Zh/8KDFCgtcFGS7Z+p oCWLsArl2M6JHrEW2XVF/tG99Ga3wAMLp9cyjB5UGkZ4S0CfKTX/W3UHsDJXMNwx M0yLodF6QGCrAO/ZPRVT8zlfb/j8/abS5cSu5hg3GQ6HHYox2V19comfkiPbL0lk SYxL7tcAS1h3Y6x0vbiD+3oCapn+XmOLWdyB6aU3mRtaBX4EaZlg6p1j0wTOzM1w ecf85/FDypCPZF1eMPfnKg1CrgLrTv3IsZ0WBrXUwQjOHboIISgL3ypdKybhrRSC Sh4RAg6QEJKGUI6mQkZ7EU+QsGgcICZY -----END CERTIFICATE-----Generated at Fri Apr 4 18:28:48 2025 by rpki-client