$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: pMqIDZfy4m/r+ignpNh/xKnb4j5k62/jwGrUprf9S/g= Subject key identifier: 7E:68:39:2D:49:FB:87:09:5D:99:BE:98:9E:A1:15:03:5C:06:59:12 Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 07F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 07E4 Signing time: Sat 12 Apr 2025 20:45:48 +0000 Manifest this update: Sat 12 Apr 2025 20:45:48 +0000 Manifest next update: Sat 19 Apr 2025 20:45:48 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: Av66ZwbXbZ1law4GQxj6eIRWgVm7kQ2kUomwRwOSYgo=) 2: E120E32E316111EEB9B76E4CC4F9AE02.roa (hash: x3JJ5fywP75b0VuxKMEwbNWWTXHH7l+L5PLPkPQYjmY=) 3: 5816B2BA4B5711EEB25C4483C4F9AE02.roa (hash: by0/Ko9TJNWSCYMY+AHCa5W7Y7EGdhoiyC4VFd9dKfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2041 (0x7f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Apr 12 20:45:48 2025 GMT Not After : Apr 19 20:45:48 2025 GMT Subject: CN=67fad0fc-c4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:2e:04:ff:69:7b:a1:73:dc:18:35:24:93: 16:3f:5a:0f:e9:35:a0:7a:b5:de:16:70:0e:c5:d8: 50:84:02:f8:6a:e2:f8:33:92:6c:af:2a:23:52:f2: dd:1d:d9:da:e1:03:5a:34:a0:bf:9c:64:0b:1d:e5: 7d:75:b8:a3:41:b9:57:0f:d0:aa:8d:56:4e:bf:52: 65:cb:bb:d6:32:aa:78:90:e3:2b:fc:2a:b1:f0:86: dd:7b:ef:a4:dc:91:b0:f2:6f:cc:f1:8f:71:5f:d4: c5:96:74:f2:65:88:fa:54:42:c9:23:11:bd:38:b4: 5d:18:30:f8:2a:f6:b4:f1:4b:23:5b:43:85:53:ab: df:ca:88:15:e7:f6:c5:2d:4a:e0:69:32:76:69:90: 4b:02:09:d4:1b:f6:21:85:1f:d4:c5:d8:f3:17:c1: 74:c9:52:4e:da:15:0e:0c:f0:48:6e:98:a6:c9:34: 61:99:10:7f:2c:f6:c2:12:1d:b4:0d:c5:b5:b2:d6: 54:55:31:c6:6d:ac:00:92:9c:47:f1:5a:1d:fd:48: d0:eb:49:4f:6b:60:9d:8b:35:ef:96:51:55:7d:b6: bc:6e:b7:44:e7:9e:37:64:3b:7a:1a:93:63:15:f1: 25:d1:f5:32:17:74:c5:62:73:ba:f3:3e:8c:77:7c: 23:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:68:39:2D:49:FB:87:09:5D:99:BE:98:9E:A1:15:03:5C:06:59:12 X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:0a:03:70:2f:b4:85:37:f8:44:0d:4f:ca:7f:7b:63:2c:a4: f1:65:0e:2c:e8:b0:bb:e6:58:1e:d1:aa:a0:d2:4a:9a:2e:da: 5d:6a:f8:96:8b:f2:ff:22:03:13:b6:78:01:3e:2a:9e:71:7b: f1:a7:24:2e:5f:86:bb:36:65:de:5e:54:99:9c:f1:4a:ca:ae: b2:d1:4d:21:df:97:97:73:4e:dd:33:c2:e2:c0:e8:29:d9:45: df:08:d4:f6:89:7d:a1:db:8e:86:cc:97:93:3f:7d:15:48:5f: 48:f5:c3:c4:f2:75:55:6c:38:ea:8f:2b:71:70:e7:ae:61:c0: 52:9a:de:0b:f3:48:f3:16:ce:1b:d8:5b:35:a9:de:fd:69:c4: c0:b3:de:24:f5:cd:44:01:76:6d:08:98:af:9c:47:58:ab:21: bb:28:3b:01:64:d2:bd:dd:d2:5e:fb:7e:af:0f:b3:97:cb:55: 71:0f:74:b1:3c:18:7b:96:07:09:c3:76:dc:4f:15:a6:f6:23: d2:2c:d5:54:95:c7:36:22:8f:13:3f:50:f8:ca:16:0e:51:08: 15:3e:78:ca:91:a3:fe:b3:5b:96:f2:c3:61:20:bf:a8:c3:8f: 07:20:93:fa:68:ff:08:c0:ba:4f:b8:61:bd:7e:02:be:3a:d1: ca:5d:db:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUwNDEyMjA0NTQ4WhcNMjUwNDE5MjA0NTQ4WjAYMRYwFAYD VQQDEw02N2ZhZDBmYy1jNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0RkuBP9pe6Fz3Bg1JJMWP1oP6TWgerXeFnAOxdhQhAL4auL4M5JsryojUvLd Hdna4QNaNKC/nGQLHeV9dbijQblXD9CqjVZOv1Jly7vWMqp4kOMr/Cqx8Ibde++k 3JGw8m/M8Y9xX9TFlnTyZYj6VELJIxG9OLRdGDD4Kva08UsjW0OFU6vfyogV5/bF LUrgaTJ2aZBLAgnUG/YhhR/UxdjzF8F0yVJO2hUODPBIbpimyTRhmRB/LPbCEh20 DcW1stZUVTHGbawAkpxH8Vod/UjQ60lPa2CdizXvllFVfba8brdE5543ZDt6GpNj FfEl0fUyF3TFYnO68z6Md3wjWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5oOS1J +4cJXZm+mJ6hFQNcBlkSMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1CgNwL7SFN/hEDU/Kf3tjLKTxZQ4s6LC75lge0aqg0kqaLtpdaviW i/L/IgMTtngBPiqecXvxpyQuX4a7NmXeXlSZnPFKyq6y0U0h35eXc07dM8LiwOgp 2UXfCNT2iX2h246GzJeTP30VSF9I9cPE8nVVbDjqjytxcOeuYcBSmt4L80jzFs4b 2Fs1qd79acTAs94k9c1EAXZtCJivnEdYqyG7KDsBZNK93dJe+36vD7OXy1VxD3Sx PBh7lgcJw3bcTxWm9iPSLNVUlcc2Io8TP1D4yhYOUQgVPnjKkaP+s1uW8sNhIL+o w48HIJP6aP8IwLpPuGG9fgK+OtHKXdvm -----END CERTIFICATE-----Generated at Sun Apr 13 01:55:41 2025 by rpki-client