$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: /Jg4/vze/H/VwUlYEf3kNTpJ9+Qaz+bGYL/p3++oPrw= Subject key identifier: 2B:0A:65:43:A4:28:FA:19:3C:C3:4D:00:09:B5:DB:49:47:19:50:D4 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 60 Signing time: Tue 15 Apr 2025 05:48:33 +0000 Manifest this update: Tue 15 Apr 2025 05:48:33 +0000 Manifest next update: Tue 22 Apr 2025 05:48:33 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: X2qOvanvFjyumtSTgOEzM1AcFs9ZkwpTFMir8bH3Sps=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Apr 15 05:48:33 2025 GMT Not After : Apr 22 05:48:33 2025 GMT Subject: CN=67fdf331-a731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5d:bc:2f:cf:e5:ab:96:cd:57:50:ec:f3:61: 17:6f:d8:96:30:08:2a:27:3d:20:a4:35:f5:81:4c: ef:e2:e4:ec:0b:15:70:84:a1:be:0c:a0:43:f2:91: 06:4a:aa:e4:93:86:1e:29:7e:5a:4d:65:01:13:f9: 62:87:1a:17:4b:2f:5c:f5:b2:f6:a6:91:a1:43:e6: 70:b5:d5:3e:73:bd:88:41:78:f5:61:3e:f3:7b:9e: a5:72:4f:c6:47:2f:bb:88:23:8d:a8:ca:ac:c8:22: 1d:b1:d8:fa:86:c4:e3:eb:41:92:d0:d2:de:05:e0: 38:cd:4a:66:27:f8:04:e7:40:28:d4:05:f5:82:1d: e4:b5:62:5a:51:78:c2:de:7b:af:de:79:52:25:32: 17:0d:25:14:26:8d:11:48:c8:f1:9f:6c:3a:4b:52: 18:a3:f7:e2:61:06:73:d6:a5:95:a2:eb:55:e7:2d: fa:df:11:e0:92:c7:b6:c2:1a:ae:9d:45:a2:32:a9: 4d:6f:d5:4f:cb:77:09:ca:c7:3e:a3:66:af:ed:86: 98:d4:5b:17:cb:56:3f:9a:73:df:ff:7f:2f:54:80: 5a:1a:65:d0:70:53:94:06:82:3e:d1:d6:00:6c:f8: ec:ec:73:3b:4a:11:4a:1f:02:00:e5:f1:67:c2:94: 5c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0A:65:43:A4:28:FA:19:3C:C3:4D:00:09:B5:DB:49:47:19:50:D4 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:f8:b6:24:0d:6d:99:bf:09:69:9c:f1:69:cd:42:4d:da: 58:15:ae:49:90:af:51:37:68:57:05:0a:7a:3a:e3:54:9f:fc: 2f:72:52:e1:d7:82:08:a7:c5:b4:07:c3:6a:bc:33:52:90:cb: f2:33:38:22:b2:f6:c9:c8:75:47:b9:5d:f4:fc:30:cf:9d:44: b0:5a:d6:48:fb:b5:9d:61:79:30:62:20:6b:4e:74:cd:bf:20: 44:30:cc:12:22:de:ba:8a:98:a2:dd:f4:e3:ae:84:fe:4a:ee: 57:6a:d3:3b:42:ef:59:a1:a2:2c:95:47:1c:30:6d:80:af:ea: 8f:81:1a:59:4f:1c:9d:d7:81:72:d4:1d:4d:18:1e:fb:16:b5: ce:8d:74:21:c5:04:2a:26:5f:3f:ad:90:47:2d:f7:5e:cf:5a: 8e:00:88:5d:24:07:c2:ff:da:37:70:ba:0b:3d:7d:4f:46:ab: 53:e9:e7:75:99:73:de:3b:bb:3c:b6:0f:be:62:b3:30:e1:73: 24:5b:50:94:a7:d4:be:1c:2a:92:c4:30:93:62:d3:51:71:39: 08:42:07:d5:8c:1f:e8:c0:94:9c:87:61:76:f2:fe:75:35:ce: ee:dc:9a:e1:cf:2b:58:97:85:7a:89:81:61:11:a0:bf:3c:5f: 83:26:35:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FGMTExMC8GA1UEBRMoNjY5NDFEQTdFQUYzMEU5MzQ0RTAzMjFGMEI3NTRFN0FF RkZDMzUyOTAeFw0yNTA0MTUwNTQ4MzNaFw0yNTA0MjIwNTQ4MzNaMBgxFjAUBgNV BAMTDTY3ZmRmMzMxLWE3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsXbwvz+Wrls1XUOzzYRdv2JYwCConPSCkNfWBTO/i5OwLFXCEob4MoEPykQZK quSThh4pflpNZQET+WKHGhdLL1z1svamkaFD5nC11T5zvYhBePVhPvN7nqVyT8ZH L7uII42oyqzIIh2x2PqGxOPrQZLQ0t4F4DjNSmYn+ATnQCjUBfWCHeS1YlpReMLe e6/eeVIlMhcNJRQmjRFIyPGfbDpLUhij9+JhBnPWpZWi61XnLfrfEeCSx7bCGq6d RaIyqU1v1U/LdwnKxz6jZq/thpjUWxfLVj+ac9//fy9UgFoaZdBwU5QGgj7R1gBs +OzscztKEUofAgDl8WfClFxfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKwplQ6Qo +hk8w00ACbXbSUcZUNQwHwYDVR0jBBgwFoAUZpQdp+rzDpNE4DIfC3VOeu/8NSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzAwMzEzQzMyOEFB RDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5T ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnBRZHAtcnpEcE5FNERJZkMzVk9ldV84TlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUYxLzAwMzEzQzMyOEFBRDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBO RTRESWZDM1ZPZXVfOE5Tay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACXh+LYkDW2ZvwlpnPFpzUJN2lgVrkmQr1E3aFcFCno641Sf/C9yUuHX gginxbQHw2q8M1KQy/IzOCKy9snIdUe5XfT8MM+dRLBa1kj7tZ1heTBiIGtOdM2/ IEQwzBIi3rqKmKLd9OOuhP5K7ldq0ztC71mhoiyVRxwwbYCv6o+BGllPHJ3XgXLU HU0YHvsWtc6NdCHFBComXz+tkEct917PWo4AiF0kB8L/2jdwugs9fU9Gq1Pp53WZ c947uzy2D75iszDhcyRbUJSn1L4cKpLEMJNi01FxOQhCB9WMH+jAlJyHYXby/nU1 zu7cmuHPK1iXhXqJgWERoL88X4MmNaU= -----END CERTIFICATE-----Generated at Tue Apr 15 10:14:18 2025 by rpki-client