$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: TLeJNhbhuHiUET2vOn3576tnZFWbiozdgzRdWxuTb6U= Subject key identifier: 1A:A4:2A:E7:3C:C3:89:FB:D7:36:33:9F:AD:08:1D:29:94:2B:4B:12 Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: BE Signing time: Mon 07 Apr 2025 04:46:14 +0000 Manifest this update: Mon 07 Apr 2025 04:46:14 +0000 Manifest next update: Mon 14 Apr 2025 04:46:14 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: cpO7QUJTorvseRFebbCF2RWwmoBWtG37s0q1D3GZpoU=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 04:46:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E Validity Not Before: Apr 7 04:46:14 2025 GMT Not After : Apr 14 04:46:14 2025 GMT Subject: CN=67f35896-9faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4b:af:f7:5b:2e:b2:d8:e0:c1:d7:bb:e7:d5: d9:93:e1:6f:54:55:9a:ac:3b:9b:77:4b:ca:86:00: 45:1f:f5:04:30:39:84:06:16:2b:d7:61:d3:60:56: 41:16:68:9e:e9:b5:fb:35:e5:66:a2:40:26:d1:23: af:e4:e6:82:a9:5e:6d:c5:04:64:5c:7e:38:92:ca: c8:6e:f1:40:55:f8:c9:69:a5:9d:37:36:02:08:c5: 08:45:8d:8e:05:9c:f9:3c:82:4c:53:d0:b0:f3:df: bf:8f:cc:04:32:7a:b6:e0:fa:dc:45:ce:44:0e:b8: 2a:a6:2c:bf:dd:d7:fc:41:29:65:e9:38:ee:3e:18: 75:5a:c1:17:33:88:23:ea:34:68:5c:5a:19:5d:c9: 06:33:d2:bc:3b:47:45:77:c9:2d:6a:32:37:57:8f: 5d:0a:9f:8a:89:fe:d5:a1:5b:f4:cc:a5:56:28:01: 5d:53:99:e1:f3:a2:8d:71:52:c9:ae:ab:6c:61:c9: 13:14:b6:3d:a2:b4:4d:3e:c5:58:d2:fe:d0:ce:3e: 24:77:00:5a:5b:09:7c:0c:68:26:85:f5:8c:c6:26: ab:4e:0b:fb:cd:9b:5b:92:8f:64:d1:9c:47:bc:a9: 5d:59:42:d4:de:ef:36:78:53:67:5a:92:af:19:67: 64:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A4:2A:E7:3C:C3:89:FB:D7:36:33:9F:AD:08:1D:29:94:2B:4B:12 X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:ad:d5:35:60:38:fc:ae:cc:32:f1:94:f3:ba:a1:a6:15:b8: 97:2a:7c:68:58:04:80:9c:65:ba:aa:c5:70:c4:6d:b9:9c:88: 9d:18:57:db:09:42:8b:99:19:50:c1:cb:42:98:dc:a6:35:36: ee:00:b5:21:6b:3b:b3:fd:5d:33:99:5e:88:43:03:3c:0c:01: fb:e4:de:9d:c7:d0:2e:b8:a7:51:d5:4d:4b:c1:9b:cf:52:47: 2a:41:d2:b7:f1:44:1a:5d:e2:14:00:8f:86:e7:58:4f:33:6c: 8f:ea:96:c9:d8:6a:72:36:0c:dd:a7:9b:65:49:7b:de:7c:a6: 2a:dd:8e:bf:3c:19:90:e6:56:72:26:05:ae:36:ad:32:29:55: 7a:99:dc:10:7e:1b:d3:b1:81:8a:bf:6f:64:53:d6:a4:c4:5c: 4f:03:f9:79:78:04:29:39:4d:6a:16:4a:3d:2b:c9:41:2b:e0: 32:e9:f5:cd:d2:c1:25:9b:71:c0:f5:c5:3f:af:53:54:fc:03: a3:54:eb:60:36:e3:77:fb:72:90:5a:ea:e4:0a:08:00:b7:a4: 61:40:29:e7:0e:49:d1:47:b6:c9:d9:ff:5d:c3:c2:69:3b:87: ab:de:d1:0a:66:a3:66:d5:9e:30:13:8f:09:dd:6f:c3:7e:5b: 71:bf:79:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUwNDA3MDQ0NjE0WhcNMjUwNDE0MDQ0NjE0WjAYMRYwFAYD VQQDEw02N2YzNTg5Ni05ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA40uv91sustjgwde759XZk+FvVFWarDubd0vKhgBFH/UEMDmEBhYr12HTYFZB Fmie6bX7NeVmokAm0SOv5OaCqV5txQRkXH44ksrIbvFAVfjJaaWdNzYCCMUIRY2O BZz5PIJMU9Cw89+/j8wEMnq24PrcRc5EDrgqpiy/3df8QSll6TjuPhh1WsEXM4gj 6jRoXFoZXckGM9K8O0dFd8ktajI3V49dCp+Kif7VoVv0zKVWKAFdU5nh86KNcVLJ rqtsYckTFLY9orRNPsVY0v7Qzj4kdwBaWwl8DGgmhfWMxiarTgv7zZtbko9k0ZxH vKldWULU3u82eFNnWpKvGWdkxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqkKuc8 w4n71zYzn60IHSmUK0sSMB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGrdU1YDj8rswy8ZTzuqGmFbiXKnxoWASAnGW6qsVwxG25nIidGFfb CUKLmRlQwctCmNymNTbuALUhazuz/V0zmV6IQwM8DAH75N6dx9AuuKdR1U1LwZvP UkcqQdK38UQaXeIUAI+G51hPM2yP6pbJ2GpyNgzdp5tlSXvefKYq3Y6/PBmQ5lZy JgWuNq0yKVV6mdwQfhvTsYGKv29kU9akxFxPA/l5eAQpOU1qFko9K8lBK+Ay6fXN 0sElm3HA9cU/r1NU/AOjVOtgNuN3+3KQWurkCggAt6RhQCnnDknRR7bJ2f9dw8Jp O4er3tEKZqNm1Z4wE48J3W/Dfltxv3ly -----END CERTIFICATE-----Generated at Mon Apr 7 11:03:57 2025 by rpki-client