$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft File: zIQ-FAouPvvguUneDtgDg5BgVB0.mft (raw, json) Hash identifier: ae/SMDxf22dop8A7abAaL8LQYboQh8FQkdOvvfroWGw= Subject key identifier: 33:88:7D:A9:3D:06:12:1B:58:5F:20:A6:9A:B1:98:2D:04:CC:9B:27 Authority key identifier: CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D Certificate issuer: /CN=A91C1A37/serialNumber=CC843E140A2E3EFBE0B949DE0ED803839060541D Certificate serial: 308E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft Manifest number: 3076 Signing time: Fri 04 Apr 2025 15:30:16 +0000 Manifest this update: Fri 04 Apr 2025 15:30:15 +0000 Manifest next update: Fri 11 Apr 2025 15:30:15 +0000 Files and hashes: 1: zIQ-FAouPvvguUneDtgDg5BgVB0.crl (hash: h5Cw1RDCFT2lsctWnpRP3XxWK9XRAk8qtLlgjFaphAY=) 2: C3F53A0654F011E7BE4A6431C4F9AE02.roa (hash: RIHl6Xkp1XZPPxS+HyPNCc+Pc796rHw6pr2rD1+TdCA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 15:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12430 (0x308e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A37 Validity Not Before: Apr 4 15:30:15 2025 GMT Not After : Apr 11 15:30:15 2025 GMT Subject: CN=67effb07-e113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f8:2d:4d:dd:92:59:ad:56:ad:b3:b5:f7:23: f8:79:43:3d:bb:cc:4b:8b:a8:2c:40:cd:fa:72:d1: a7:c8:b9:c6:2b:c6:b4:53:84:9f:3b:e1:16:35:74: ee:62:9c:6b:ec:33:ae:a4:78:23:39:a7:97:86:55: 0f:7f:05:06:84:e9:62:e6:ad:cd:a6:34:43:46:24: 19:68:3b:ff:14:50:fe:9b:66:54:3d:30:07:b3:d1: b7:7e:22:c0:6a:26:95:72:0b:e7:49:72:4c:b2:2a: aa:dc:06:a8:85:a9:a7:a8:fa:1f:f3:56:4c:73:1c: 4f:54:28:33:4c:5f:ed:8c:56:6f:c1:2a:83:ab:f8: 3c:19:ba:d9:ba:60:18:68:6d:94:27:17:21:1f:2b: d1:18:6b:4c:6c:b7:75:36:2b:43:75:59:93:82:c4: 8a:25:4e:f8:a0:32:1e:f9:22:eb:55:78:82:a8:9c: c7:79:62:3d:89:7a:1c:05:f0:37:cc:95:67:40:bf: 11:8c:94:c1:aa:2a:2a:b4:76:62:50:18:eb:73:c9: 89:d4:d3:c7:b4:2c:ee:fd:f4:ab:f2:d5:5f:4f:38: 95:7d:5e:47:c7:0a:7a:ba:0e:50:4c:3e:66:de:b1: c2:a1:59:1e:34:fc:5d:59:75:fb:4b:3f:79:dd:7c: f8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:7D:A9:3D:06:12:1B:58:5F:20:A6:9A:B1:98:2D:04:CC:9B:27 X509v3 Authority Key Identifier: keyid:CC:84:3E:14:0A:2E:3E:FB:E0:B9:49:DE:0E:D8:03:83:90:60:54:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIQ-FAouPvvguUneDtgDg5BgVB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A37/6868E028E7F011E28C2805845911EA32/zIQ-FAouPvvguUneDtgDg5BgVB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:6d:ff:20:f8:50:94:bd:de:1f:29:20:9a:47:2c:a2:35:ad: 0d:82:20:9d:27:d5:ce:80:f7:c2:88:5b:d6:1e:78:1f:f7:61: 3b:0b:c2:4c:ab:28:8a:ef:bc:32:02:a4:13:17:cf:8d:48:ec: cb:5f:d6:3b:04:53:6e:db:af:34:f2:b2:94:05:82:e8:36:e1: e1:6c:75:d6:7b:4c:2c:0c:c1:3d:92:56:23:07:53:96:53:03: 4d:20:e8:61:16:49:71:77:73:77:80:e3:e0:8e:24:e5:d8:a6: 27:43:25:7d:c9:e9:4e:e5:f3:27:28:5c:08:9b:e0:db:ae:15: da:0e:9e:c0:2a:94:25:d3:e1:8d:76:35:d3:75:8e:42:35:94: 52:56:ce:23:ba:0d:31:f1:8f:a1:23:f8:49:2e:6f:7c:56:b5: 32:dc:5c:fb:6f:36:65:b9:10:71:ab:8c:04:04:92:cd:d7:10: bd:33:0f:c8:92:43:0d:77:d4:dd:92:ce:19:03:4a:97:0d:3f: c4:fa:11:99:b6:48:70:71:4a:8b:bc:79:09:03:fb:8b:8b:aa: aa:e2:cd:84:22:e6:30:c8:b5:f8:e7:ec:db:5f:8e:f5:96:44: 65:e5:4d:2d:94:ea:a4:94:ee:2f:89:f5:19:72:4c:6c:8d:07: 73:b4:d1:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMzcxMTAvBgNVBAUTKENDODQzRTE0MEEyRTNFRkJFMEI5NDlERTBFRDgwMzgz OTA2MDU0MUQwHhcNMjUwNDA0MTUzMDE1WhcNMjUwNDExMTUzMDE1WjAYMRYwFAYD VQQDEw02N2VmZmIwNy1lMTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/gtTd2SWa1WrbO19yP4eUM9u8xLi6gsQM36ctGnyLnGK8a0U4SfO+EWNXTu Ypxr7DOupHgjOaeXhlUPfwUGhOli5q3NpjRDRiQZaDv/FFD+m2ZUPTAHs9G3fiLA aiaVcgvnSXJMsiqq3AaohamnqPof81ZMcxxPVCgzTF/tjFZvwSqDq/g8GbrZumAY aG2UJxchHyvRGGtMbLd1NitDdVmTgsSKJU74oDIe+SLrVXiCqJzHeWI9iXocBfA3 zJVnQL8RjJTBqioqtHZiUBjrc8mJ1NPHtCzu/fSr8tVfTziVfV5Hxwp6ug5QTD5m 3rHCoVkeNPxdWXX7Sz953Xz43wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDOIfak9 BhIbWF8gppqxmC0EzJsnMB8GA1UdIwQYMBaAFMyEPhQKLj774LlJ3g7YA4OQYFQd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUEzNy82ODY4RTAyOEU3 RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2dmd1VW5lRHRnRGc1QmdW QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJUS1GQW91UHZ2Z3VVbmVEdGdEZzVCZ1ZCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUEzNy82ODY4RTAyOEU3RjAxMUUyOEMyODA1ODQ1OTExRUEzMi96SVEtRkFvdVB2 dmd1VW5lRHRnRGc1QmdWQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZbf8g+FCUvd4fKSCaRyyiNa0NgiCdJ9XOgPfCiFvWHngf92E7C8JM qyiK77wyAqQTF8+NSOzLX9Y7BFNu26808rKUBYLoNuHhbHXWe0wsDME9klYjB1OW UwNNIOhhFklxd3N3gOPgjiTl2KYnQyV9yelO5fMnKFwIm+DbrhXaDp7AKpQl0+GN djXTdY5CNZRSVs4jug0x8Y+hI/hJLm98VrUy3Fz7bzZluRBxq4wEBJLN1xC9Mw/I kkMNd9Tdks4ZA0qXDT/E+hGZtkhwcUqLvHkJA/uLi6qq4s2EIuYwyLX45+zbX471 lkRl5U0tlOqklO4vifUZckxsjQdztNGT -----END CERTIFICATE-----Generated at Fri Apr 4 22:34:32 2025 by rpki-client