$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json) Hash identifier: FLPYMs7+hcndMb04dz8rkX2XSeg59SrHEEooHsKsENo= Subject key identifier: B7:7C:62:D1:87:32:21:FE:39:E6:3E:55:C5:0E:F1:63:92:AB:BF:EB Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Certificate serial: 89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft Manifest number: 87 Signing time: Tue 15 Apr 2025 05:20:21 +0000 Manifest this update: Tue 15 Apr 2025 05:20:21 +0000 Manifest next update: Tue 22 Apr 2025 05:20:21 +0000 Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: HL791dRhj5gvH6WIom15SPR3upS55e7FY+1D1T4dkkI=) 2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: NfFMnt+VEyqSWVwOi+J918td9eREww3K9CdjnLDT82w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 05:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418 Validity Not Before: Apr 15 05:20:21 2025 GMT Not After : Apr 22 05:20:21 2025 GMT Subject: CN=67fdec95-2c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b5:93:d9:f1:ea:ff:b2:c1:6b:76:fc:65:19: 2a:c2:b4:8a:ac:be:b9:4b:a1:66:40:fc:f7:e6:c8: e2:a6:0e:bf:0e:90:2d:c2:58:d4:4e:d4:2d:48:be: 58:8d:f0:93:af:69:61:4d:94:86:12:71:2e:10:dc: 98:63:9d:a5:da:67:54:b8:ef:ab:88:7d:53:0c:c4: ad:14:05:e6:5b:10:c9:c0:2a:53:bb:ac:f5:34:32: 8f:dc:04:b6:39:1c:3a:1d:ba:36:9b:5c:7e:70:50: f9:8a:9f:77:47:37:8a:28:27:33:03:d9:dc:26:c6: f3:1e:ec:f3:fb:b9:4f:60:51:c4:da:ee:1f:52:a0: c0:89:ed:81:3b:8f:e5:40:e3:b3:d0:92:35:c9:d9: fe:fa:4f:31:27:f8:fe:f3:5b:ee:0a:24:b9:9a:71: b5:63:cd:48:55:d5:cb:24:0d:f7:32:2c:62:6b:50: fe:b1:c1:d4:3b:e4:33:80:62:fc:13:81:47:6b:95: 3a:0e:f1:31:57:48:3b:f0:12:1c:ca:fb:f9:b7:b8: 3e:5c:23:6d:ef:1a:75:a9:85:59:73:dd:0b:cf:5e: 23:70:33:11:0d:be:f9:66:0a:3e:b3:70:62:d8:30: 3f:4f:75:40:a9:b6:aa:3e:88:b6:1e:4f:62:59:c1: c2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:62:D1:87:32:21:FE:39:E6:3E:55:C5:0E:F1:63:92:AB:BF:EB X509v3 Authority Key Identifier: keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:6b:2f:fe:92:eb:ac:b1:2b:dc:de:20:b4:a1:fe:35:0b:64: fc:9d:15:de:dd:99:82:90:e6:4f:62:8f:c8:37:ee:11:86:f0: c9:f6:1d:0b:a8:27:6a:e7:15:61:92:83:70:63:24:eb:a5:b8: 78:ca:90:a9:d2:31:81:e0:26:0b:46:ff:1e:91:c7:6b:b0:4c: b5:4e:5e:45:99:bc:69:25:7d:3d:0d:8f:e6:94:9b:9f:76:fc: a2:8e:df:90:c6:f4:3a:92:96:6d:60:8d:46:79:55:ea:d1:57: a3:d2:15:bb:b2:89:a2:fa:75:8a:a7:74:4c:eb:ed:0d:19:84: 01:57:eb:c6:cb:9d:ca:cc:d1:9d:36:d1:ad:91:c6:b9:5a:2b: 3e:1d:ab:da:4d:a5:75:78:b7:6f:b2:ad:c0:79:bb:73:5b:87: 13:78:dc:13:5f:fd:41:db:67:62:b3:3c:3c:60:ce:7e:0c:c9: a0:5b:f5:fc:ec:74:61:9d:42:90:a8:83:d9:58:a0:30:e4:69: 80:8b:9b:c3:87:91:51:c4:25:6f:21:37:7f:e8:25:64:8d:8b: 5a:07:37:07:91:d6:38:a6:47:32:9f:74:e8:63:c1:05:f9:86: 3c:91:c2:64:59:5d:bb:e5:0d:44:31:d1:95:62:3f:a5:1d:40: 64:27:44:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzMUQxMTAvBgNVBAUTKDY2OUJDQTBBOTBERTU4MDM5MUE4RUU2NDlCRTRFRkJF MzZDRTg0MTgwHhcNMjUwNDE1MDUyMDIxWhcNMjUwNDIyMDUyMDIxWjAYMRYwFAYD VQQDEw02N2ZkZWM5NS0yYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApLWT2fHq/7LBa3b8ZRkqwrSKrL65S6FmQPz35sjipg6/DpAtwljUTtQtSL5Y jfCTr2lhTZSGEnEuENyYY52l2mdUuO+riH1TDMStFAXmWxDJwCpTu6z1NDKP3AS2 ORw6Hbo2m1x+cFD5ip93RzeKKCczA9ncJsbzHuzz+7lPYFHE2u4fUqDAie2BO4/l QOOz0JI1ydn++k8xJ/j+81vuCiS5mnG1Y81IVdXLJA33Mixia1D+scHUO+QzgGL8 E4FHa5U6DvExV0g78BIcyvv5t7g+XCNt7xp1qYVZc90Lz14jcDMRDb75Zgo+s3Bi 2DA/T3VAqbaqPoi2Hk9iWcHCUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLd8YtGH MiH+OeY+VcUO8WOSq7/rMB8GA1UdIwQYMBaAFGabygqQ3lgDkajuZJvk7742zoQY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDMxRC9FRDQ2M0JDNjRF RUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdBT1JxTzVrbS1UdnZqYk9o QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwdktDcERlV0FPUnFPNWttLVR2dmpiT2hCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDMxRC9FRDQ2M0JDNjRFRUUxMUVGQjFEMzMwMzBDNEY5QUUwMi9acHZLQ3BEZVdB T1JxTzVrbS1UdnZqYk9oQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIay/+kuussSvc3iC0of41C2T8nRXe3ZmCkOZPYo/IN+4RhvDJ9h0L qCdq5xVhkoNwYyTrpbh4ypCp0jGB4CYLRv8ekcdrsEy1Tl5FmbxpJX09DY/mlJuf dvyijt+QxvQ6kpZtYI1GeVXq0Vej0hW7somi+nWKp3RM6+0NGYQBV+vGy53KzNGd NtGtkca5Wis+HavaTaV1eLdvsq3AebtzW4cTeNwTX/1B22diszw8YM5+DMmgW/X8 7HRhnUKQqIPZWKAw5GmAi5vDh5FRxCVvITd/6CVkjYtaBzcHkdY4pkcyn3ToY8EF +YY8kcJkWV275Q1EMdGVYj+lHUBkJ0QH -----END CERTIFICATE-----Generated at Wed Apr 16 17:18:08 2025 by rpki-client