$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft File: ZUCRhgKOxUzUW1g0_77K9LePGcI.mft (raw, json) Hash identifier: L2/2HdyKa3awpORpyKtSAj2izMd81mbmv8gjpWYortY= Subject key identifier: BF:52:1C:B6:43:B1:83:99:73:A9:75:AE:E0:90:C1:22:48:87:FC:AD Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 Certificate issuer: /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2 Certificate serial: 0C35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft Manifest number: 0C1B Signing time: Fri 04 Apr 2025 18:45:25 +0000 Manifest this update: Fri 04 Apr 2025 18:45:25 +0000 Manifest next update: Fri 11 Apr 2025 18:45:25 +0000 Files and hashes: 1: ZUCRhgKOxUzUW1g0_77K9LePGcI.crl (hash: CiPDfQM3LKOTBHAjLAY0Odysb2i9nMh7nKwRhzw8ALs=) 2: 7136F65A37A811EE94E32169C4F9AE02.roa (hash: k8QKeKvOcm3atVDcEJg6MmKWLZSx6mGrjHPmscLBCDI=) 3: 1B54858065B711EE93D6ED6DC4F9AE02.roa (hash: 2MxCJYfvpN2/WDss7B4Jv4sIh2MvUP8VKJ1MtNugmSc=) 4: FF4F13D4448711ECA80CFC34C4F9AE02.roa (hash: Lum2cofSNoPumFBaR2DxKDAktprJD0nZPj1gi1bjrYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3125 (0xc35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BBF1 Validity Not Before: Apr 4 18:45:25 2025 GMT Not After : Apr 11 18:45:25 2025 GMT Subject: CN=67f028c5-486c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:24:12:b2:e6:f1:d0:69:df:10:77:dc:31: df:01:5d:bd:c6:1e:31:83:35:9c:ef:51:e9:fc:16: 66:72:02:2d:06:bc:61:62:4d:a2:c4:84:65:ba:2e: a5:f1:78:a1:92:0d:dd:ea:2a:ca:06:ff:70:92:76: fb:5d:ee:55:d0:4f:c6:89:85:58:b1:7f:58:58:24: 13:7d:21:5e:c4:a0:2d:ea:86:86:c0:9d:81:36:c2: 34:4d:b2:33:bf:52:b8:8e:02:ff:75:ce:7f:31:99: 2d:ae:b7:a2:70:64:f2:29:48:4c:e9:a5:26:0c:ba: 14:ea:f1:b7:47:7a:f6:3e:ae:60:35:d8:1b:22:fb: 0d:1d:6d:a2:b4:fe:b1:56:dd:5e:f3:5d:d6:20:59: 6a:e9:11:5e:dd:ce:af:11:58:b1:4e:e6:da:42:f4: 42:17:3c:84:f4:12:17:3c:5e:5a:a1:4d:be:f6:fc: 7b:5e:fd:1e:58:1f:88:ed:df:92:e5:ae:fe:e5:c0: 83:7f:4f:cb:21:bc:77:f3:5f:c5:7c:a2:ae:53:b8: cc:7c:ba:9c:0b:7d:f5:34:0f:77:43:6e:83:ee:52: fd:01:2c:2c:90:0a:41:57:c2:f2:ba:74:04:7d:12: 86:99:a4:83:e7:06:2a:d4:e1:19:63:51:d4:fb:f6: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:52:1C:B6:43:B1:83:99:73:A9:75:AE:E0:90:C1:22:48:87:FC:AD X509v3 Authority Key Identifier: keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:d6:98:a0:3f:df:d1:c9:a3:f9:cf:a9:06:f6:5a:91:c5:87: 1c:db:32:4a:4e:dc:6e:15:62:25:52:81:43:6f:79:99:ef:2a: 91:c2:14:92:62:2a:3c:53:bf:71:43:e4:92:6b:ac:4b:6a:ae: cf:b8:c6:03:66:5d:12:8f:dd:32:8c:6f:ee:f2:52:5e:c4:20: d8:54:de:be:dc:f2:67:6e:66:ab:3f:ee:e4:17:36:3a:75:ae: ed:c9:4c:a3:84:6a:8d:f1:27:14:71:8f:25:59:99:b2:f6:bc: 94:dd:1f:ac:5f:10:20:85:74:c1:e0:3b:93:36:9e:f6:e8:e9: 93:ee:5f:b1:a7:21:e4:9c:97:4a:17:9c:c1:0d:5d:52:8a:bb: 16:b5:c5:cd:71:fa:51:30:71:5a:f8:a5:f1:b9:d1:28:33:11: d0:aa:8f:e7:d1:fd:c5:21:a2:50:42:02:4a:bc:4d:50:90:a8: ee:c4:fb:6d:d0:c2:c8:53:f5:5f:3d:61:a7:d4:f4:eb:d4:bf: b4:6c:73:6c:8f:c4:ba:4c:2d:5f:6f:c9:4c:88:a7:a1:2b:77: 9b:7e:cb:52:00:d1:ce:da:86:f7:2b:da:42:8b:30:1b:98:21: ef:88:1b:d5:9d:65:88:cc:1f:39:48:9d:82:b1:94:13:f0:6d: e4:81:b9:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDDUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JCRjExMTAvBgNVBAUTKDY1NDA5MTg2MDI4RUM1NENENDVCNTgzNEZGQkVDQUY0 Qjc4RjE5QzIwHhcNMjUwNDA0MTg0NTI1WhcNMjUwNDExMTg0NTI1WjAYMRYwFAYD VQQDEw02N2YwMjhjNS00ODZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAraUkErLm8dBp3xB33DHfAV29xh4xgzWc71Hp/BZmcgItBrxhYk2ixIRlui6l 8Xihkg3d6irKBv9wknb7Xe5V0E/GiYVYsX9YWCQTfSFexKAt6oaGwJ2BNsI0TbIz v1K4jgL/dc5/MZktrreicGTyKUhM6aUmDLoU6vG3R3r2Pq5gNdgbIvsNHW2itP6x Vt1e813WIFlq6RFe3c6vEVixTubaQvRCFzyE9BIXPF5aoU2+9vx7Xv0eWB+I7d+S 5a7+5cCDf0/LIbx381/FfKKuU7jMfLqcC331NA93Q26D7lL9ASwskApBV8LyunQE fRKGmaSD5wYq1OEZY1HU+/ZGrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9SHLZD sYOZc6l1ruCQwSJIh/ytMB8GA1UdIwQYMBaAFGVAkYYCjsVM1FtYNP++yvS3jxnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkJGMS8yNDVEQzVDQTBB RjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hVelVXMWcwXzc3SzlMZVBH Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pVQ1JoZ0tPeFV6VVcxZzBfNzdLOUxlUEdjSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkJGMS8yNDVEQzVDQTBBRjcxMUVBQTg1QTVEMUFDNEY5QUUwMi9aVUNSaGdLT3hV elVXMWcwXzc3SzlMZVBHY0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAH1pigP9/RyaP5z6kG9lqRxYcc2zJKTtxuFWIlUoFDb3mZ7yqRwhSS Yio8U79xQ+SSa6xLaq7PuMYDZl0Sj90yjG/u8lJexCDYVN6+3PJnbmarP+7kFzY6 da7tyUyjhGqN8ScUcY8lWZmy9ryU3R+sXxAghXTB4DuTNp726OmT7l+xpyHknJdK F5zBDV1SirsWtcXNcfpRMHFa+KXxudEoMxHQqo/n0f3FIaJQQgJKvE1QkKjuxPtt 0MLIU/VfPWGn1PTr1L+0bHNsj8S6TC1fb8lMiKehK3ebfstSANHO2ob3K9pCizAb mCHviBvVnWWIzB85SJ2CsZQT8G3kgbkM -----END CERTIFICATE-----Generated at Sun Apr 6 06:39:49 2025 by rpki-client