$ rpki-client -vvf rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft File: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft (raw, json) Hash identifier: CQQF8Tb7UNaDluYXuyCmP5gLZ4+6NLxKy4rqDbrc7m4= Subject key identifier: 9F:10:28:C3:FD:90:73:FD:D2:CA:E2:94:C8:7B:10:C4:71:C2:3D:B3 Authority key identifier: 66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4 Certificate issuer: /CN=A912519D/serialNumber=66B9D84F4336A89D84D1E02E820A79686E1E52C4 Certificate serial: 059E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft Manifest number: 0599 Signing time: Fri 04 Apr 2025 23:19:23 +0000 Manifest this update: Fri 04 Apr 2025 23:19:23 +0000 Manifest next update: Fri 11 Apr 2025 23:19:23 +0000 Files and hashes: 1: ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl (hash: uReIPjSTv1X81IqpFWZ6EmQVPymhicq+Vlf6ejJMFIc=) 2: 10581DEAC75D11EBB00EBD1AC4F9AE02.roa (hash: JmgPCoqfxLnmCXZ9Kqg1cLPcucyGnFbjlpBzEMSmBKg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1438 (0x59e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912519D Validity Not Before: Apr 4 23:19:23 2025 GMT Not After : Apr 11 23:19:23 2025 GMT Subject: CN=67f068fb-6fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6f:9a:18:60:f3:eb:a5:ef:e6:a2:6e:99:23: b3:b5:e9:de:8b:25:fb:32:97:ea:41:50:4b:50:b7: fd:d7:12:2d:37:96:4b:08:8c:f9:53:dd:20:8f:4a: 9f:59:22:24:39:a4:e5:12:93:18:95:b1:69:9e:2f: 45:88:78:a5:80:ba:03:36:ac:ae:7a:6c:43:4c:f8: 0e:89:8b:17:72:45:8b:1b:39:0a:fe:cc:34:ee:de: 62:52:86:62:28:d3:c8:65:88:43:ab:b1:65:73:b6: 50:93:4f:22:f5:82:ca:a1:d5:2b:c6:ba:9a:97:b7: 35:2e:30:f2:ff:05:94:8b:89:81:a5:07:a1:a5:e5: f5:da:a5:28:1f:11:00:01:55:c1:e6:51:96:6a:53: 6c:c9:0f:3a:d7:b8:97:6f:52:02:28:43:17:3e:fe: f0:ad:d7:bd:ce:a5:f4:8d:6b:53:f4:a3:b4:fe:3b: 02:60:2c:59:2f:97:da:04:a0:21:e2:1f:34:84:7f: c3:8c:6c:2a:65:94:29:4f:97:d8:a9:a8:c1:5e:80: f1:37:24:63:04:fb:65:19:f4:78:e4:ab:46:e9:61: 74:d7:f6:5c:6c:a0:ef:74:08:2a:92:82:26:a7:83: ea:c9:95:22:bb:63:e1:15:d6:37:38:39:34:13:bb: 56:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:10:28:C3:FD:90:73:FD:D2:CA:E2:94:C8:7B:10:C4:71:C2:3D:B3 X509v3 Authority Key Identifier: keyid:66:B9:D8:4F:43:36:A8:9D:84:D1:E0:2E:82:0A:79:68:6E:1E:52:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912519D/B8280664C75A11EB81E99E19C4F9AE02/ZrnYT0M2qJ2E0eAuggp5aG4eUsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:04:4f:66:a2:11:e7:95:c8:c2:09:8c:9c:c5:54:49:5a:87: 36:6f:51:5d:48:ac:30:4f:32:94:f7:8b:3d:a3:83:e2:45:88: 37:bc:bf:66:1b:b2:bc:43:01:47:9b:fa:5c:49:1a:32:dd:72: 6f:e0:32:91:60:2b:3e:0b:c0:3d:ac:83:b7:62:3d:2b:c7:3f: 63:71:6a:e4:f6:6a:e9:ae:04:6e:a5:96:9c:13:ca:33:51:44: 65:f2:13:dc:2b:44:e7:1c:8c:58:79:de:8e:00:e1:08:08:e0: af:80:1e:c0:fb:21:d6:bd:b5:70:3c:fd:da:c5:3d:cc:3c:9b: 35:c4:aa:56:4f:d5:28:d5:48:e2:36:81:3e:f9:d9:4d:81:b7: 5e:82:84:57:57:3d:65:f4:a8:d3:6a:4f:04:73:2a:bd:cb:8e: ca:bc:cb:e1:c9:0d:4c:07:e9:54:6f:dc:d3:36:19:01:24:96: 2b:46:ef:1a:f6:8b:35:16:31:e5:e4:6c:90:d2:96:c6:16:a0: 6e:51:c2:fb:44:f7:23:f0:1c:f2:91:cb:22:b7:77:16:e2:67: 47:21:52:32:7b:aa:ef:0b:38:64:8c:92:c9:ba:c6:39:b0:a3: 5e:32:d2:e9:b2:5b:0e:dc:8b:fa:13:24:d3:ad:76:2f:da:e6: 4c:8f:8e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxOUQxMTAvBgNVBAUTKDY2QjlEODRGNDMzNkE4OUQ4NEQxRTAyRTgyMEE3OTY4 NkUxRTUyQzQwHhcNMjUwNDA0MjMxOTIzWhcNMjUwNDExMjMxOTIzWjAYMRYwFAYD VQQDEw02N2YwNjhmYi02ZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2+aGGDz66Xv5qJumSOzteneiyX7MpfqQVBLULf91xItN5ZLCIz5U90gj0qf WSIkOaTlEpMYlbFpni9FiHilgLoDNqyuemxDTPgOiYsXckWLGzkK/sw07t5iUoZi KNPIZYhDq7Flc7ZQk08i9YLKodUrxrqal7c1LjDy/wWUi4mBpQehpeX12qUoHxEA AVXB5lGWalNsyQ8617iXb1ICKEMXPv7wrde9zqX0jWtT9KO0/jsCYCxZL5faBKAh 4h80hH/DjGwqZZQpT5fYqajBXoDxNyRjBPtlGfR45KtG6WF01/ZcbKDvdAgqkoIm p4PqyZUiu2PhFdY3ODk0E7tWvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ8QKMP9 kHP90srilMh7EMRxwj2zMB8GA1UdIwQYMBaAFGa52E9DNqidhNHgLoIKeWhuHlLE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTE5RC9CODI4MDY2NEM3 NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFKMkUwZUF1Z2dwNWFHNGVV c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pybllUME0ycUoyRTBlQXVnZ3A1YUc0ZVVzUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTE5RC9CODI4MDY2NEM3NUExMUVCODFFOTlFMTlDNEY5QUUwMi9acm5ZVDBNMnFK MkUwZUF1Z2dwNWFHNGVVc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsBE9mohHnlcjCCYycxVRJWoc2b1FdSKwwTzKU94s9o4PiRYg3vL9m G7K8QwFHm/pcSRoy3XJv4DKRYCs+C8A9rIO3Yj0rxz9jcWrk9mrprgRupZacE8oz UURl8hPcK0TnHIxYed6OAOEICOCvgB7A+yHWvbVwPP3axT3MPJs1xKpWT9Uo1Uji NoE++dlNgbdegoRXVz1l9KjTak8Ecyq9y47KvMvhyQ1MB+lUb9zTNhkBJJYrRu8a 9os1FjHl5GyQ0pbGFqBuUcL7RPcj8Bzykcsit3cW4mdHIVIye6rvCzhkjJLJusY5 sKNeMtLpslsO3Iv6EyTTrXYv2uZMj46B -----END CERTIFICATE-----Generated at Sun Apr 6 19:38:19 2025 by rpki-client