$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: D5kSDfXnlJnntv8RTjsQV0LUNfoDHNzVuJQW8XuMYhY= Subject key identifier: 33:52:DE:F8:4F:58:5D:C6:BC:EA:5F:37:96:15:78:33:8B:F9:AB:0F Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 0570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 0564 Signing time: Fri 28 Mar 2025 23:40:50 +0000 Manifest this update: Fri 28 Mar 2025 23:40:50 +0000 Manifest next update: Fri 04 Apr 2025 23:40:50 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: oSANA5dxQSq4XCn+VvY21h5+E9K559OsNTW1PSJot/k=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: SEXcu7MCAx7BgjEXcpxfIMBCBr8bF8QoXI0x5nMZMBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Apr 2025 23:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1392 (0x570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C Validity Not Before: Mar 28 23:40:50 2025 GMT Not After : Apr 4 23:40:50 2025 GMT Subject: CN=67e73382-a056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:38:ad:a2:bc:4d:48:2c:63:c6:f6:74:b4: 8f:cf:5f:91:48:2c:6f:4e:41:6d:88:10:52:0f:0c: 85:65:a2:42:c1:90:b3:20:2a:72:29:de:a4:ae:bb: 4d:ba:b1:c0:dd:8a:84:70:a4:6d:e6:17:54:53:86: 93:90:b5:75:19:16:f5:a9:b2:d6:c9:da:90:a8:7e: 03:4a:c6:37:bb:ff:d2:e9:7e:b6:ac:4e:0e:24:09: 84:48:25:2c:7d:76:fe:07:74:a0:74:00:34:e0:f9: 71:28:59:38:79:58:f2:d5:cf:0b:a9:09:94:b7:82: d9:15:00:c6:04:71:4b:54:b9:58:d4:74:fd:13:37: 56:c5:53:57:0f:b5:18:dd:e8:da:3d:96:a8:7c:bf: f2:4c:0b:1b:28:7a:c2:bc:16:51:59:78:d8:6c:bd: e8:06:38:c3:a1:e8:c8:c8:c8:65:d9:b4:6c:27:47: 05:c2:df:7f:70:b1:47:3e:9f:5f:9f:9a:2d:84:60: b3:fe:5e:f3:a9:a2:da:e0:27:34:60:2c:e4:69:db: 8c:38:22:89:b3:c3:5e:61:25:c9:70:3c:3d:3e:18: f9:c8:25:c5:61:4c:c2:f6:94:51:fd:91:52:d7:d8: 4b:c4:1d:59:b5:07:bd:eb:a7:0b:7f:18:8c:2c:d7: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:52:DE:F8:4F:58:5D:C6:BC:EA:5F:37:96:15:78:33:8B:F9:AB:0F X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:ab:38:1a:a2:33:13:6c:4a:c9:6a:bc:b7:e0:62:44:3d:5a: f1:95:8a:9e:0d:57:a7:d3:20:88:3e:55:39:c4:00:cb:b3:cf: 4e:1e:b4:c4:5b:d2:56:aa:02:3f:37:52:57:78:7d:0d:c2:e6: d4:75:72:27:36:33:f8:65:ef:1c:89:0f:7e:12:12:0c:ab:90: cf:15:b9:ea:15:ac:1a:23:bd:aa:00:1a:06:55:df:fa:14:eb: c3:8b:07:f2:d2:dc:f5:e4:2a:60:bd:e1:80:a3:bd:f8:f2:63: 84:89:1c:0c:0f:af:86:99:39:da:28:a9:28:88:dc:85:97:b7: e9:39:8b:a8:fc:fb:19:e7:b3:79:98:2e:8a:47:d7:d7:5b:dc: 28:70:c6:93:15:88:f3:33:71:c9:bb:d5:a3:6d:c9:82:88:61: f3:e1:f8:09:d2:1e:1b:f1:a4:0c:f8:7e:09:c0:20:c1:ed:83: c6:28:2c:05:24:a1:22:3f:ce:d3:46:e6:e2:7a:dc:91:41:88: 6b:ba:9a:1c:b8:9c:ac:1f:c1:33:7f:b9:12:af:9b:20:a5:2a: 53:f4:82:41:1a:46:1b:f5:1a:b3:10:e5:61:af:e0:e1:88:6d: 9d:49:11:c8:a1:94:6a:b4:c3:f8:55:46:9c:66:36:47:b8:68: 32:61:5f:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwMzI4MjM0MDUwWhcNMjUwNDA0MjM0MDUwWjAYMRYwFAYD VQQDEw02N2U3MzM4Mi1hMDU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYE4raK8TUgsY8b2dLSPz1+RSCxvTkFtiBBSDwyFZaJCwZCzICpyKd6krrtN urHA3YqEcKRt5hdUU4aTkLV1GRb1qbLWydqQqH4DSsY3u//S6X62rE4OJAmESCUs fXb+B3SgdAA04PlxKFk4eVjy1c8LqQmUt4LZFQDGBHFLVLlY1HT9EzdWxVNXD7UY 3ejaPZaofL/yTAsbKHrCvBZRWXjYbL3oBjjDoejIyMhl2bRsJ0cFwt9/cLFHPp9f n5othGCz/l7zqaLa4Cc0YCzkaduMOCKJs8NeYSXJcDw9Phj5yCXFYUzC9pRR/ZFS 19hLxB1ZtQe966cLfxiMLNfrPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNS3vhP WF3GvOpfN5YVeDOL+asPMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4qzgaojMTbErJary34GJEPVrxlYqeDVen0yCIPlU5xADLs89OHrTE W9JWqgI/N1JXeH0NwubUdXInNjP4Ze8ciQ9+EhIMq5DPFbnqFawaI72qABoGVd/6 FOvDiwfy0tz15CpgveGAo7348mOEiRwMD6+GmTnaKKkoiNyFl7fpOYuo/PsZ57N5 mC6KR9fXW9wocMaTFYjzM3HJu9WjbcmCiGHz4fgJ0h4b8aQM+H4JwCDB7YPGKCwF JKEiP87TRubietyRQYhrupocuJysH8Ezf7kSr5sgpSpT9IJBGkYb9RqzEOVhr+Dh iG2dSRHIoZRqtMP4VUacZjZHuGgyYV8Q -----END CERTIFICATE-----Generated at Fri Apr 4 22:15:01 2025 by rpki-client