$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: t6uSHzw1EqY29sPfD49j/R5jq2FCg1iNI+RFztwE//k= Subject key identifier: 1C:D0:28:8A:39:17:BB:3D:15:85:BD:5F:2C:62:18:BE:0D:59:F4:FC Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 061D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 0619 Signing time: Wed 02 Apr 2025 22:46:08 +0000 Manifest this update: Wed 02 Apr 2025 22:46:08 +0000 Manifest next update: Wed 09 Apr 2025 22:46:08 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: MuIieIl6htoW4oi5LJ80juM4dT/phz6nAFEqeDODjmk=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: xxTbwjHg1QikAjf8vr4+JJb23plKRbhPg2PJNBw2Jn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1565 (0x61d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150 Validity Not Before: Apr 2 22:46:08 2025 GMT Not After : Apr 9 22:46:08 2025 GMT Subject: CN=67edbe30-d6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:71:cc:b7:93:ce:e4:50:23:22:54:bd:91: b9:ef:2a:4c:a0:ec:78:5a:89:01:53:51:c1:15:81: 3c:13:79:c2:e2:3d:ed:37:67:8d:df:51:12:a9:09: 3e:5a:3f:1e:64:99:df:09:5e:94:06:5e:0f:7e:bc: cb:bf:22:b3:e6:47:4f:34:db:12:a1:5a:05:83:48: 27:f2:d6:7e:40:57:9e:83:7b:c3:a7:98:31:02:19: ab:e8:ab:b2:c6:75:7d:7d:47:16:64:e7:a2:0e:b6: 8e:68:73:69:56:d9:d5:10:d2:e7:76:87:72:5b:96: 73:34:95:69:2b:b7:0f:08:e1:31:9f:01:e7:bf:d5: 1f:b9:6b:40:bf:44:e1:30:ae:fa:90:e6:a5:f8:3f: 21:0e:45:48:81:f4:49:6e:32:00:54:42:2d:41:a8: af:fb:56:30:e7:8c:26:ef:8c:49:f5:19:6c:3a:bd: 78:96:01:eb:a2:3a:15:c7:5f:4e:61:76:46:d6:27: 5f:04:fc:67:2c:19:d4:a3:fd:ca:c2:cf:7c:ee:5b: 1e:27:5c:56:4d:09:a7:ed:f7:31:70:cf:ea:1f:50: d0:1d:42:83:f4:c5:cb:21:b4:66:76:11:b1:9b:ac: 85:f5:ba:4d:71:18:ea:0e:0e:ec:2b:ca:91:be:33: 22:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D0:28:8A:39:17:BB:3D:15:85:BD:5F:2C:62:18:BE:0D:59:F4:FC X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:65:4a:7d:36:dc:bc:15:f4:21:35:f2:4d:7d:9d:09:85:ed: 06:4b:7e:5e:e6:99:fc:c5:e7:74:de:b2:bd:d0:75:4e:64:af: 41:69:d7:20:02:98:71:9a:52:05:d6:10:75:e4:c7:a0:3f:e3: a1:fc:88:07:9a:37:bd:80:96:e4:29:b6:20:23:60:e0:ac:ff: 5c:e1:b6:1a:28:3e:71:11:75:2c:64:d7:ae:47:53:ad:be:e5: bf:40:db:6e:b6:39:0e:8a:42:e4:01:21:16:5f:03:9f:d5:20: b5:bb:20:45:3c:78:0b:cd:73:26:32:b5:04:3a:21:0a:e2:81: 57:4b:ce:04:3f:57:94:de:20:1b:fd:50:06:cf:c9:75:b3:5a: a5:e8:38:5e:7d:04:96:a2:4b:31:8b:8e:3c:c3:07:c2:40:75: 96:93:af:45:bc:22:72:b3:6f:06:fe:53:99:77:a0:07:ba:44: 37:e7:72:17:fa:a8:e1:3e:cb:1d:7e:86:9a:7c:ec:10:2b:16: c7:58:e3:e6:0a:ab:02:d1:14:9e:97:81:53:49:69:f6:8a:32: 6f:66:a2:e5:1e:22:f3:17:48:06:39:63:b0:fd:49:78:f5:11: 33:56:d5:44:05:43:d8:70:bb:7b:c6:f1:04:64:1a:b1:fc:64: 97:c4:2a:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjUwNDAyMjI0NjA4WhcNMjUwNDA5MjI0NjA4WjAYMRYwFAYD VQQDEw02N2VkYmUzMC1kNmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTVxzLeTzuRQIyJUvZG57ypMoOx4WokBU1HBFYE8E3nC4j3tN2eN31ESqQk+ Wj8eZJnfCV6UBl4PfrzLvyKz5kdPNNsSoVoFg0gn8tZ+QFeeg3vDp5gxAhmr6Kuy xnV9fUcWZOeiDraOaHNpVtnVENLndodyW5ZzNJVpK7cPCOExnwHnv9UfuWtAv0Th MK76kOal+D8hDkVIgfRJbjIAVEItQaiv+1Yw54wm74xJ9RlsOr14lgHrojoVx19O YXZG1idfBPxnLBnUo/3Kws987lseJ1xWTQmn7fcxcM/qH1DQHUKD9MXLIbRmdhGx m6yF9bpNcRjqDg7sK8qRvjMirwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzQKIo5 F7s9FYW9XyxiGL4NWfT8MB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAZUp9Nty8FfQhNfJNfZ0Jhe0GS35e5pn8xed03rK90HVOZK9Badcg AphxmlIF1hB15MegP+Oh/IgHmje9gJbkKbYgI2DgrP9c4bYaKD5xEXUsZNeuR1Ot vuW/QNtutjkOikLkASEWXwOf1SC1uyBFPHgLzXMmMrUEOiEK4oFXS84EP1eU3iAb /VAGz8l1s1ql6DhefQSWoksxi448wwfCQHWWk69FvCJys28G/lOZd6AHukQ353IX +qjhPssdfoaafOwQKxbHWOPmCqsC0RSel4FTSWn2ijJvZqLlHiLzF0gGOWOw/Ul4 9REzVtVEBUPYcLt7xvEEZBqx/GSXxCr0 -----END CERTIFICATE-----Generated at Fri Apr 4 22:30:02 2025 by rpki-client