$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: yCJw673RLbMNAnuS5SDyyvM49RipK5moLYZtG5QnUO4= Subject key identifier: A2:A1:FA:A8:06:39:C8:4E:3D:ED:63:E1:F5:19:FC:A8:BF:6A:B7:3E Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0206 Signing time: Mon 21 Apr 2025 01:38:07 +0000 Manifest this update: Mon 21 Apr 2025 01:38:07 +0000 Manifest next update: Mon 28 Apr 2025 01:38:07 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: QUcZ6w1kmfi883qm8dNCfRML5BNGZXS/nYLHcqyltTY=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: 6NVu2HEI/2vQueP99wzaqxsinrZpCobkN5jNBib82oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 01:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Apr 21 01:38:07 2025 GMT Not After : Apr 28 01:38:07 2025 GMT Subject: CN=6805a17f-a542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6b:ba:0d:4a:be:92:4f:47:5e:df:1c:fd:e3: 59:aa:a4:21:75:9c:2f:4f:9c:33:43:c6:e4:4a:ff: 0d:39:39:a1:6d:79:94:92:c7:6f:df:65:9a:77:d8: 30:e7:bd:34:c9:f2:95:c2:61:62:4f:31:3b:4b:6b: 07:d3:76:bb:91:bb:9a:1c:15:72:dd:d6:28:09:29: 87:95:b5:fb:30:9c:92:6b:df:80:be:b2:38:fc:b9: de:ef:7d:71:d9:47:a4:43:4c:e0:e7:3f:aa:a5:29: b2:09:23:3a:06:26:2b:89:79:97:3d:c5:4b:19:0a: b8:ef:73:76:77:e4:45:5c:3f:cb:48:59:d5:0c:a2: 6d:07:d2:2e:19:70:56:96:91:df:e8:c2:5b:81:fd: 69:9d:6c:27:f6:84:aa:36:56:51:db:f4:16:99:89: 77:5b:8e:92:f3:df:b7:d1:fb:48:c6:f9:16:a0:9b: cc:cf:59:ce:bb:41:25:76:ea:df:68:7a:26:07:72: 1b:90:ac:c2:87:73:12:b4:73:b2:e2:dc:4a:0c:94: e3:97:52:c7:2d:4e:99:38:43:36:7b:56:46:17:23: f0:46:13:88:97:4f:8f:8d:2e:5c:6d:b5:93:22:3a: e7:03:ae:54:ff:0a:2e:d1:f6:6d:94:30:0c:21:bf: fe:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A1:FA:A8:06:39:C8:4E:3D:ED:63:E1:F5:19:FC:A8:BF:6A:B7:3E X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:6b:5f:df:14:0d:c7:10:56:46:b3:97:ab:df:5b:ce:94:c0: 55:5b:a1:e4:d6:45:14:16:2b:12:a0:39:4b:40:4a:5f:8b:9c: 3c:cb:7d:9f:76:1c:a6:2c:99:98:6c:d4:10:af:89:59:e1:28: 34:7a:6f:7f:a3:3a:93:f5:15:54:e7:1a:66:d1:28:8f:41:1d: 6a:ed:97:89:96:7b:42:0c:3c:10:84:08:9c:e4:d0:3c:63:41: ec:e5:39:eb:41:3e:33:ee:60:cc:ed:a8:90:e1:3e:e9:9f:1a: 2e:64:74:d0:91:ef:7c:62:dd:24:a5:8c:33:34:99:8d:53:c8: 22:5e:7d:29:45:1a:31:ce:5d:2b:9a:ee:53:70:89:5e:0d:b8: f5:cd:d3:d2:1a:98:84:97:90:ef:13:8e:88:79:a5:57:b7:72: ab:23:33:fe:06:88:df:90:a4:f5:51:ad:2a:09:d1:70:be:03: 06:b3:d8:29:a7:00:f1:df:ed:b2:40:a3:75:d5:1a:0b:4e:e2: a4:08:6e:88:c8:af:79:4a:b7:84:4b:90:6c:3f:62:27:76:49: e9:f4:e5:27:18:dd:af:36:b3:ce:f1:6f:0a:57:4a:28:6a:2d: c2:61:b8:5c:5e:7e:ab:9a:4e:1d:5d:c9:98:00:e1:ac:fb:06: c1:d8:20:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUwNDIxMDEzODA3WhcNMjUwNDI4MDEzODA3WjAYMRYwFAYD VQQDEw02ODA1YTE3Zi1hNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8mu6DUq+kk9HXt8c/eNZqqQhdZwvT5wzQ8bkSv8NOTmhbXmUksdv32Wad9gw 5700yfKVwmFiTzE7S2sH03a7kbuaHBVy3dYoCSmHlbX7MJySa9+AvrI4/Lne731x 2UekQ0zg5z+qpSmyCSM6BiYriXmXPcVLGQq473N2d+RFXD/LSFnVDKJtB9IuGXBW lpHf6MJbgf1pnWwn9oSqNlZR2/QWmYl3W46S89+30ftIxvkWoJvMz1nOu0Eldurf aHomB3IbkKzCh3MStHOy4txKDJTjl1LHLU6ZOEM2e1ZGFyPwRhOIl0+PjS5cbbWT IjrnA65U/wou0fZtlDAMIb/+gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKh+qgG OchOPe1j4fUZ/Ki/arc+MB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAja1/fFA3HEFZGs5er31vOlMBVW6Hk1kUUFisSoDlLQEpfi5w8y32f dhymLJmYbNQQr4lZ4Sg0em9/ozqT9RVU5xpm0SiPQR1q7ZeJlntCDDwQhAic5NA8 Y0Hs5TnrQT4z7mDM7aiQ4T7pnxouZHTQke98Yt0kpYwzNJmNU8giXn0pRRoxzl0r mu5TcIleDbj1zdPSGpiEl5DvE46IeaVXt3KrIzP+BojfkKT1Ua0qCdFwvgMGs9gp pwDx3+2yQKN11RoLTuKkCG6IyK95SreES5BsP2Indknp9OUnGN2vNrPO8W8KV0oo ai3CYbhcXn6rmk4dXcmYAOGs+wbB2CDN -----END CERTIFICATE-----Generated at Tue Apr 22 01:53:56 2025 by rpki-client