$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: tWeWzK21xE9sKIwQqAduST22wpg5xxGHPvu+g+3YyjA= Subject key identifier: D3:34:59:3A:B3:B9:03:C0:43:51:96:F0:4E:54:E9:DA:55:79:AF:64 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: 68 Signing time: Fri 11 Apr 2025 06:07:45 +0000 Manifest this update: Fri 11 Apr 2025 06:07:44 +0000 Manifest next update: Fri 18 Apr 2025 06:07:44 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: gvY0yy048R4YPJyd5s+ZZKHezDxbsNjHixm4IX/+Xgk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Apr 11 06:07:44 2025 GMT Not After : Apr 18 06:07:44 2025 GMT Subject: CN=67f8b1b1-4cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:dd:87:38:ce:ac:08:94:11:8b:9b:6d:f9: d8:95:98:b7:b9:22:c5:b1:b1:40:2c:6f:ec:c7:53: 0d:55:a9:d1:e1:95:35:2b:8e:66:1c:4a:91:a9:d7: 86:73:e0:2b:71:95:eb:09:e8:f3:95:ad:1a:82:64: fe:29:1e:4e:42:9f:4f:e6:22:bf:40:fb:d4:87:24: e6:39:6b:32:11:3b:b8:95:1c:7f:77:ff:cb:06:01: 03:4c:20:84:98:37:d8:66:03:5d:c3:1c:e0:a3:ed: 4a:23:55:91:68:c6:fe:d1:30:93:c9:69:d3:cc:30: 98:42:cf:fb:a2:2d:08:db:ce:d0:a9:84:84:ce:6b: a0:89:06:07:da:0d:bd:e1:b9:91:ac:6a:8c:7b:6b: 96:f1:e8:9f:42:b4:ad:f8:cf:1f:e7:cf:dc:f6:2b: 46:df:16:16:c1:49:0c:bf:fd:f7:b5:07:ea:5a:ec: f1:b1:5f:4e:20:cb:08:ad:3c:c4:8d:7b:9c:c2:a3: 1a:f2:a0:0a:b1:74:23:88:f7:3c:2a:29:e8:ae:1e: 33:c6:db:06:dc:e5:97:8d:86:b5:41:26:44:0c:19: 5b:8d:3d:17:05:03:ec:e6:e0:f8:21:22:96:87:ec: 4b:d5:b5:ef:09:6e:d2:45:58:f8:92:04:a6:cb:5c: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:34:59:3A:B3:B9:03:C0:43:51:96:F0:4E:54:E9:DA:55:79:AF:64 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:a3:bf:fe:43:2c:7a:a0:85:98:61:a8:4e:b4:79:db:c4:92: b6:91:b5:c0:a9:a0:a6:23:2f:6e:95:94:f5:6e:0e:76:3c:ac: 4b:b9:7d:9c:1a:94:5e:e7:10:b7:fa:6f:45:40:f4:a2:45:8a: 86:4f:e5:eb:6c:e6:ad:6e:83:42:1c:9a:f5:0d:63:3b:04:33: 20:28:0e:97:d4:dc:80:a6:e9:34:09:ad:55:84:ae:1f:03:3b: 0e:b7:d0:9a:9b:7a:1c:de:14:0f:0d:3a:a3:98:13:c5:fa:33: 81:71:f3:0c:78:d8:26:2f:b3:5e:25:40:ce:c5:47:36:47:2b: 91:41:51:b6:42:23:85:f1:5e:fc:61:0a:4b:71:91:30:7f:84: 24:10:94:a7:80:60:47:25:14:c3:ac:19:fa:a1:ea:00:f0:30: 52:f3:7e:e1:ef:1c:e0:a6:85:a2:6e:51:3a:43:26:75:ab:61: 74:6f:be:44:96:c3:7b:d1:59:73:1b:7d:60:d6:a4:50:dd:45: 86:7a:f9:e6:d3:95:bb:97:11:1d:46:79:e7:5f:13:1c:85:d7: 75:8c:6c:f5:08:ab:23:ce:23:f6:67:6e:cb:d7:f1:f8:70:05: 10:2d:c8:ef:b8:45:8e:48:41:04:a2:ea:5e:f9:4e:1d:97:95: 33:a6:31:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUU1NTExMC8GA1UEBRMoNjQzMTk1NjUyQjIyMERDQjIyREE5MUQwN0ZENjNEQTY5 RUI4MTRENTAeFw0yNTA0MTEwNjA3NDRaFw0yNTA0MTgwNjA3NDRaMBgxFjAUBgNV BAMTDTY3ZjhiMWIxLTRjZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWwd2HOM6sCJQRi5tt+diVmLe5IsWxsUAsb+zHUw1VqdHhlTUrjmYcSpGp14Zz 4CtxlesJ6POVrRqCZP4pHk5Cn0/mIr9A+9SHJOY5azIRO7iVHH93/8sGAQNMIISY N9hmA13DHOCj7UojVZFoxv7RMJPJadPMMJhCz/uiLQjbztCphITOa6CJBgfaDb3h uZGsaox7a5bx6J9CtK34zx/nz9z2K0bfFhbBSQy//fe1B+pa7PGxX04gywitPMSN e5zCoxryoAqxdCOI9zwqKeiuHjPG2wbc5ZeNhrVBJkQMGVuNPRcFA+zm4PghIpaH 7EvVte8JbtJFWPiSBKbLXLPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0zRZOrO5 A8BDUZbwTlTp2lV5r2QwHwYDVR0jBBgwFoAUZDGVZSsiDcsi2pHQf9Y9pp64FNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRTU1LzU1NUIwNDBBNzhG QTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRHVlpTc2lEY3NpMnBIUWY5WTlwcDY0Rk5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx RTU1LzU1NUIwNDBBNzhGQTExRUZBNDRGRTU4NkM0RjlBRTAyL1pER1ZaU3NpRGNz aTJwSFFmOVk5cHA2NEZOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADWjv/5DLHqghZhhqE60edvEkraRtcCpoKYjL26VlPVuDnY8rEu5fZwa lF7nELf6b0VA9KJFioZP5ets5q1ug0IcmvUNYzsEMyAoDpfU3ICm6TQJrVWErh8D Ow630JqbehzeFA8NOqOYE8X6M4Fx8wx42CYvs14lQM7FRzZHK5FBUbZCI4XxXvxh CktxkTB/hCQQlKeAYEclFMOsGfqh6gDwMFLzfuHvHOCmhaJuUTpDJnWrYXRvvkSW w3vRWXMbfWDWpFDdRYZ6+ebTlbuXER1GeedfExyF13WMbPUIqyPOI/ZnbsvX8fhw BRAtyO+4RY5IQQSi6l75Th2XlTOmMZY= -----END CERTIFICATE-----Generated at Sat Apr 12 17:50:25 2025 by rpki-client