$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: VfS9cFMdfC94nhqFrvR9UGleNK8Z7M7fiNCsvnG7KIA= Subject key identifier: 23:A6:69:E7:CD:ED:D1:C1:50:8C:17:32:D2:1C:56:FD:34:0A:55:E9 Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 0853 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 084D Signing time: Tue 08 Apr 2025 20:35:08 +0000 Manifest this update: Tue 08 Apr 2025 20:35:07 +0000 Manifest next update: Tue 15 Apr 2025 20:35:07 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: 9AZTUuEdjhb49pCvBD5WGaj+oMSQqPWzd2M5v8ZNxoo=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 20:35:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2131 (0x853) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B Validity Not Before: Apr 8 20:35:07 2025 GMT Not After : Apr 15 20:35:07 2025 GMT Subject: CN=67f5887c-550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:af:50:e3:a3:3a:1c:00:5f:c7:46:41:3d: 45:a9:a7:6f:78:a7:d2:a5:22:07:e1:cf:96:f2:1b: c2:08:4b:ed:17:ab:d2:bb:bd:7d:53:5a:ef:8f:8e: 93:15:ea:f0:ea:2a:d5:5b:7c:61:01:08:8f:da:3f: b9:5d:76:1c:4e:b4:b2:1d:81:ff:4d:26:0e:fd:78: 10:94:38:98:8e:69:f0:05:d3:9f:62:d9:ac:ab:9d: 97:5b:40:54:d8:c2:64:ed:e5:9a:8d:91:d5:a4:31: 7c:73:0b:13:ca:c6:89:f9:61:72:1e:0a:8e:70:62: 91:37:5c:e1:68:68:68:cf:ef:b9:78:fb:15:89:d8: bd:7e:7f:cc:34:b7:9f:5e:eb:bb:2c:aa:02:e8:1a: a0:53:0e:69:f8:c4:cf:37:bd:78:fb:9d:e0:25:c3: 96:65:d9:1c:19:b6:f8:a0:97:70:ba:99:e7:cc:8f: d9:8c:d5:8f:40:7a:67:6b:4c:3f:8d:c8:03:0f:9d: dc:f4:a8:34:32:be:65:85:ea:4f:c8:d2:73:4b:b5: b8:0a:cc:fa:57:71:df:28:7d:ea:0a:0a:bd:f6:25: 10:b7:e7:7e:1b:53:87:40:e9:5a:c5:69:21:0b:67: 63:6f:82:a5:dc:7d:8d:19:f8:36:25:d6:32:7c:dc: e7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:69:E7:CD:ED:D1:C1:50:8C:17:32:D2:1C:56:FD:34:0A:55:E9 X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:c0:70:de:f4:c2:7d:ae:80:19:69:51:51:a1:bd:5a:26:ff: 60:4a:a8:6c:f9:4e:7a:05:d1:8e:87:3e:cb:14:6b:8a:32:14: 44:83:33:a2:9b:65:a5:9d:20:46:6f:96:c1:c0:90:96:07:03: 19:bb:93:b1:a8:a5:f9:75:a1:01:d0:62:b7:e2:3d:be:06:9a: c7:fe:a5:31:d4:6c:7b:1c:6b:2b:61:a2:d7:f0:87:a1:a3:72: 39:79:73:6a:fe:9c:68:5b:1d:af:a5:3c:75:1c:69:b6:b4:dc: 8c:42:73:07:b0:ee:c5:74:9e:70:01:fa:da:ca:8d:30:7a:7b: b8:2a:ff:82:18:22:3a:e2:50:85:f0:47:71:87:6d:40:1e:0d: 32:af:96:06:3b:3f:8e:ff:21:50:ec:f1:14:d7:d4:d4:3c:1b: 57:ba:e7:10:2c:18:19:af:b9:ac:1f:3a:f5:e3:ca:5b:74:08: b7:fc:d8:ba:d3:93:62:09:3b:57:9e:bd:ce:f7:3e:6c:f6:22: 6f:fb:74:16:a4:42:8d:9c:b9:8c:dc:c5:fa:3f:d2:92:ad:93: 28:52:83:ec:ab:44:b0:35:a7:c8:44:34:92:48:c7:32:61:98: e8:b9:87:27:58:24:0e:99:55:0a:be:a2:25:ea:4e:c2:6d:7b: f3:c5:d8:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUwNDA4MjAzNTA3WhcNMjUwNDE1MjAzNTA3WjAYMRYwFAYD VQQDEw02N2Y1ODg3Yy01NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY2vUOOjOhwAX8dGQT1FqadveKfSpSIH4c+W8hvCCEvtF6vSu719U1rvj46T Ferw6irVW3xhAQiP2j+5XXYcTrSyHYH/TSYO/XgQlDiYjmnwBdOfYtmsq52XW0BU 2MJk7eWajZHVpDF8cwsTysaJ+WFyHgqOcGKRN1zhaGhoz++5ePsVidi9fn/MNLef Xuu7LKoC6BqgUw5p+MTPN714+53gJcOWZdkcGbb4oJdwupnnzI/ZjNWPQHpna0w/ jcgDD53c9Kg0Mr5lhepPyNJzS7W4Csz6V3HfKH3qCgq99iUQt+d+G1OHQOlaxWkh C2djb4Kl3H2NGfg2JdYyfNzn4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOmaefN 7dHBUIwXMtIcVv00ClXpMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAowHDe9MJ9roAZaVFRob1aJv9gSqhs+U56BdGOhz7LFGuKMhREgzOi m2WlnSBGb5bBwJCWBwMZu5OxqKX5daEB0GK34j2+BprH/qUx1Gx7HGsrYaLX8Ieh o3I5eXNq/pxoWx2vpTx1HGm2tNyMQnMHsO7FdJ5wAfrayo0wenu4Kv+CGCI64lCF 8Edxh21AHg0yr5YGOz+O/yFQ7PEU19TUPBtXuucQLBgZr7msHzr148pbdAi3/Ni6 05NiCTtXnr3O9z5s9iJv+3QWpEKNnLmM3MX6P9KSrZMoUoPsq0SwNafIRDSSSMcy YZjouYcnWCQOmVUKvqIl6k7CbXvzxdi7 -----END CERTIFICATE-----Generated at Fri Apr 11 18:52:24 2025 by rpki-client