$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft File: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft (raw, json) Hash identifier: 5EC9/hyVOaA4A2YfkkZxyzPHy8FFfhpqtquTT31MTCE= Subject key identifier: 66:B9:BC:18:6A:70:C1:2F:DB:45:C2:5F:CF:3A:DF:8D:25:60:CA:02 Authority key identifier: 65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD Certificate issuer: /CN=A91E4743/serialNumber=65542CEC28111FC54BA3D2AEE33F4CE87B7F90AD Certificate serial: 088E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft Manifest number: 0885 Signing time: Fri 04 Apr 2025 20:46:30 +0000 Manifest this update: Fri 04 Apr 2025 20:46:29 +0000 Manifest next update: Fri 11 Apr 2025 20:46:29 +0000 Files and hashes: 1: ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl (hash: AcN94EY9lMxP91WdvEdVUPefM3CSE2nzKSBwH5zVlVA=) 2: 1B2E0738BB7011EA93F7DE4EC4F9AE02.roa (hash: Kkq3FSGMJtrxAckL14K8lEjZBbSHWGV4MxpopXgePZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4743 Validity Not Before: Apr 4 20:46:29 2025 GMT Not After : Apr 11 20:46:29 2025 GMT Subject: CN=67f04525-6b1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:dc:70:10:6f:05:81:60:85:31:0e:79:21: b6:85:27:8d:4b:21:68:8f:b3:55:0c:02:b5:d5:77: 59:57:7e:5c:44:4f:4f:83:ba:0c:ab:dc:ac:ac:08: 9a:f7:d1:09:56:e1:63:99:3b:6c:4e:65:25:79:e7: 14:3e:07:1e:0e:8f:70:6b:af:85:11:1d:d3:5e:5f: e3:da:01:63:40:6a:07:50:93:e7:1b:e0:64:aa:78: 3f:63:04:ed:bd:46:d3:2b:f5:c3:68:f0:9a:b0:35: 3a:34:18:c2:2f:fe:01:2a:13:e2:47:92:db:0c:50: 4a:4f:ab:29:bd:d2:54:da:dd:1d:4d:f6:e4:5d:cf: 25:f8:b3:14:90:3d:30:81:ec:5c:bb:59:5e:da:27: 7e:83:34:bf:e5:38:24:4c:e9:35:2c:c4:1f:41:f4: 23:4f:39:18:70:44:22:02:c3:58:12:44:ba:fa:08: be:c0:16:20:46:ff:30:f8:46:7b:4e:43:c5:e0:f0: e7:20:2b:0c:5f:36:c4:ae:b1:38:10:f1:85:b0:f5: 9f:f2:3e:8d:81:d6:28:45:05:a9:2c:ae:e6:fa:ac: a6:71:da:c1:05:c1:cd:32:8f:84:bf:ef:96:08:2c: fc:e0:ae:dd:0b:c8:f5:4e:13:9d:a3:10:71:7b:34: 9b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B9:BC:18:6A:70:C1:2F:DB:45:C2:5F:CF:3A:DF:8D:25:60:CA:02 X509v3 Authority Key Identifier: keyid:65:54:2C:EC:28:11:1F:C5:4B:A3:D2:AE:E3:3F:4C:E8:7B:7F:90:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4743/670F8092BB6F11EA961FB84EC4F9AE02/ZVQs7CgRH8VLo9Ku4z9M6Ht_kK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ed:1b:85:93:69:c1:17:ca:e6:1f:de:bc:e6:a5:d1:bf:b8: af:d7:d2:d3:f2:39:53:e1:10:f5:2f:9d:3d:76:dc:2a:f5:8c: ca:ae:c2:cf:6b:5f:0e:07:d7:56:a6:bd:c9:d0:51:f5:f1:67: 5b:4e:8c:64:b9:7d:49:94:a2:77:d0:db:69:72:32:f5:5d:0f: 7f:e4:66:3b:06:d1:a0:72:d6:76:69:03:06:5b:79:b4:17:9e: 56:4e:54:d5:26:c5:97:5d:76:47:db:6b:a1:65:c6:3d:f1:4e: 70:d3:3e:bc:93:0d:89:c7:cd:29:ad:6a:47:79:28:11:67:2d: 53:9d:cc:cd:91:8e:5c:f6:a2:f3:5d:d1:9c:3a:ed:88:fd:bd: a6:b0:a0:da:d7:9c:a0:d0:c9:d0:ef:cf:56:da:f3:4e:48:00: e3:80:03:e4:ad:17:c4:21:55:88:4a:23:51:70:e5:e3:32:29: 60:74:4c:3e:21:8a:80:f2:9e:ca:ba:a6:46:bf:1c:57:33:fe: 12:72:16:a5:0b:69:74:4b:d7:f6:73:90:78:9e:e5:c0:b0:cc: eb:ad:30:7e:d3:a8:cc:1b:1b:15:c8:0e:21:14:08:9c:63:1c: 7f:ac:ea:d9:60:07:30:ff:f5:43:f2:30:68:01:42:ca:eb:0c: 01:a8:27:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3NDMxMTAvBgNVBAUTKDY1NTQyQ0VDMjgxMTFGQzU0QkEzRDJBRUUzM0Y0Q0U4 N0I3RjkwQUQwHhcNMjUwNDA0MjA0NjI5WhcNMjUwNDExMjA0NjI5WjAYMRYwFAYD VQQDEw02N2YwNDUyNS02YjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32nccBBvBYFghTEOeSG2hSeNSyFoj7NVDAK11XdZV35cRE9Pg7oMq9ysrAia 99EJVuFjmTtsTmUleecUPgceDo9wa6+FER3TXl/j2gFjQGoHUJPnG+Bkqng/YwTt vUbTK/XDaPCasDU6NBjCL/4BKhPiR5LbDFBKT6spvdJU2t0dTfbkXc8l+LMUkD0w gexcu1le2id+gzS/5TgkTOk1LMQfQfQjTzkYcEQiAsNYEkS6+gi+wBYgRv8w+EZ7 TkPF4PDnICsMXzbErrE4EPGFsPWf8j6NgdYoRQWpLK7m+qymcdrBBcHNMo+Ev++W CCz84K7dC8j1ThOdoxBxezSbhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGa5vBhq cMEv20XCX886340lYMoCMB8GA1UdIwQYMBaAFGVULOwoER/FS6PSruM/TOh7f5Ct MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDc0My82NzBGODA5MkJC NkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4VkxvOUt1NHo5TTZIdF9r SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWUXM3Q2dSSDhWTG85S3U0ejlNNkh0X2tLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDc0My82NzBGODA5MkJCNkYxMUVBOTYxRkI4NEVDNEY5QUUwMi9aVlFzN0NnUkg4 VkxvOUt1NHo5TTZIdF9rSzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCW7RuFk2nBF8rmH9685qXRv7iv19LT8jlT4RD1L509dtwq9YzKrsLP a18OB9dWpr3J0FH18WdbToxkuX1JlKJ30NtpcjL1XQ9/5GY7BtGgctZ2aQMGW3m0 F55WTlTVJsWXXXZH22uhZcY98U5w0z68kw2Jx80prWpHeSgRZy1TnczNkY5c9qLz XdGcOu2I/b2msKDa15yg0MnQ789W2vNOSADjgAPkrRfEIVWISiNRcOXjMilgdEw+ IYqA8p7KuqZGvxxXM/4SchalC2l0S9f2c5B4nuXAsMzrrTB+06jMGxsVyA4hFAic Yxx/rOrZYAcw//VD8jBoAULK6wwBqCc1 -----END CERTIFICATE-----Generated at Sun Apr 6 02:35:12 2025 by rpki-client