$ rpki-client -vvf rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft File: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft (raw, json) Hash identifier: RNxQW3KOV+AWI2uvv+02Z+/k+TPD9MI5eR5TKYhGcpA= Subject key identifier: F8:B5:12:A9:D5:2D:A0:19:E6:43:3F:42:63:B8:7B:5C:98:B3:72:9F Authority key identifier: 64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 Certificate issuer: /CN=A91F09FE/serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Certificate serial: 53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft Manifest number: 52 Signing time: Fri 11 Apr 2025 06:25:05 +0000 Manifest this update: Fri 11 Apr 2025 06:25:05 +0000 Manifest next update: Fri 18 Apr 2025 06:25:05 +0000 Files and hashes: 1: ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl (hash: aU99UFVFTvbt7cVn8z8exfDk31R9W36n35wr/u/I+2Y=) 2: 841585749B1211EFBFBF913CC4F9AE02.roa (hash: NvVW1egmPiHSwj4KXew0q649a1yhcF9ppuNr/Hl7yDs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 06:25:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F09FE, serialNumber=64CCC166C58C38FE8CC1976F5CF07C1DD06F6814 Validity Not Before: Apr 11 06:25:05 2025 GMT Not After : Apr 18 06:25:05 2025 GMT Subject: CN=67f8b5c1-4080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fa:8e:66:5d:2c:8b:cf:8f:e5:c2:da:34:42: a2:48:e0:11:fc:f0:63:6b:de:69:1a:74:6b:17:46: ca:03:cf:37:b1:02:c7:e3:3a:42:32:81:52:97:a9: c8:bb:75:5b:99:c1:9a:51:ee:f0:1e:db:fb:bf:c8: 96:bb:38:d1:96:ea:ed:54:d3:3c:18:f8:78:15:04: 8e:bd:27:d5:67:20:1e:2e:01:c9:4c:ba:c5:e5:96: 7c:20:b3:65:42:54:fe:3e:18:b7:d5:dc:6f:4c:4d: 69:6b:41:26:55:5a:63:0f:87:48:5f:e1:41:47:98: 69:63:69:81:d7:4e:a4:07:10:50:d8:4a:8d:1c:55: 34:56:3d:5b:a5:2c:50:21:b8:92:b6:ff:a5:18:d5: 0e:ba:da:3c:52:46:15:1c:0d:19:65:d7:60:1d:86: f8:1d:f3:8c:54:b4:8e:53:70:06:0c:00:a7:b9:b8: bc:93:d1:6e:d3:7b:61:ae:d5:c7:be:fe:56:46:ef: 2a:de:c9:c7:80:ad:61:f7:ba:02:9a:40:a8:5e:7b: 98:a0:0c:27:26:53:4a:d2:65:01:5e:7d:36:31:ab: a7:e0:10:7f:f0:19:df:3c:2b:fb:4b:b3:2a:34:5a: fe:7a:cf:e7:73:a0:22:21:77:e2:03:7d:19:7b:92: 8e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B5:12:A9:D5:2D:A0:19:E6:43:3F:42:63:B8:7B:5C:98:B3:72:9F X509v3 Authority Key Identifier: keyid:64:CC:C1:66:C5:8C:38:FE:8C:C1:97:6F:5C:F0:7C:1D:D0:6F:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F09FE/3803AA1C9B1211EFA87BB43BC4F9AE02/ZMzBZsWMOP6MwZdvXPB8HdBvaBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:78:e3:cf:63:99:26:94:c8:c9:a0:68:82:34:52:a2:6c:3a: 44:d4:e0:23:72:48:42:b2:41:c1:39:a4:8c:ff:55:b0:63:5f: 6f:37:2b:03:03:42:02:ab:d2:48:54:8b:48:4a:fd:fe:5d:71: a0:bf:d7:04:38:0f:9e:f9:05:4a:c2:25:c8:a9:83:7b:58:2d: 80:da:07:cd:1c:1d:0a:37:ef:d7:40:4b:e8:0d:47:04:94:19: 47:2d:df:74:d6:fe:5b:d0:d1:45:52:c1:1e:06:72:d5:60:8d: 3c:1c:d0:48:f0:b9:7a:ca:54:de:41:52:9a:5e:8c:eb:99:a8: 23:bb:f4:61:f4:c8:89:d6:08:ff:36:45:6d:66:d7:5e:60:e2: 81:b1:45:e0:49:4a:19:85:a4:55:8f:f1:91:bc:65:ca:02:6c: 95:97:46:a4:ea:77:25:83:31:ef:00:ee:db:af:5b:11:3f:06: 30:cd:da:31:1e:87:60:0a:6e:4a:38:af:e3:4e:27:97:fc:d9: 7e:ec:86:0a:c8:b6:ba:03:1e:0b:3c:39:a7:4e:82:f1:d5:e9: 0f:e0:28:2a:d1:60:27:50:2e:e9:4f:e7:2b:74:5e:6f:15:14: 97:dd:20:a1:c8:a2:b5:be:5e:47:20:c9:20:95:6d:4e:a1:28: bf:73:81:d2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDlGRTExMC8GA1UEBRMoNjRDQ0MxNjZDNThDMzhGRThDQzE5NzZGNUNGMDdDMURE MDZGNjgxNDAeFw0yNTA0MTEwNjI1MDVaFw0yNTA0MTgwNjI1MDVaMBgxFjAUBgNV BAMTDTY3ZjhiNWMxLTQwODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu+o5mXSyLz4/lwto0QqJI4BH88GNr3mkadGsXRsoDzzexAsfjOkIygVKXqci7 dVuZwZpR7vAe2/u/yJa7ONGW6u1U0zwY+HgVBI69J9VnIB4uAclMusXllnwgs2VC VP4+GLfV3G9MTWlrQSZVWmMPh0hf4UFHmGljaYHXTqQHEFDYSo0cVTRWPVulLFAh uJK2/6UY1Q662jxSRhUcDRll12Adhvgd84xUtI5TcAYMAKe5uLyT0W7Te2Gu1ce+ /lZG7yreyceArWH3ugKaQKhee5igDCcmU0rSZQFefTYxq6fgEH/wGd88K/tLsyo0 Wv56z+dzoCIhd+IDfRl7ko5fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+LUSqdUt oBnmQz9CY7h7XJizcp8wHwYDVR0jBBgwFoAUZMzBZsWMOP6MwZdvXPB8HdBvaBQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOUZFLzM4MDNBQTFDOUIx MjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2TXdaZHZYUEI4SGRCdmFC US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk16QlpzV01PUDZNd1pkdlhQQjhIZEJ2YUJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OUZFLzM4MDNBQTFDOUIxMjExRUZBODdCQjQzQkM0RjlBRTAyL1pNekJac1dNT1A2 TXdaZHZYUEI4SGRCdmFCUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEh4489jmSaUyMmgaII0UqJsOkTU4CNySEKyQcE5pIz/VbBjX283KwMD QgKr0khUi0hK/f5dcaC/1wQ4D575BUrCJcipg3tYLYDaB80cHQo379dAS+gNRwSU GUct33TW/lvQ0UVSwR4GctVgjTwc0EjwuXrKVN5BUppejOuZqCO79GH0yInWCP82 RW1m115g4oGxReBJShmFpFWP8ZG8ZcoCbJWXRqTqdyWDMe8A7tuvWxE/BjDN2jEe h2AKbko4r+NOJ5f82X7shgrItroDHgs8OadOgvHV6Q/gKCrRYCdQLulP5yt0Xm8V FJfdIKHIorW+XkcgySCVbU6hKL9zgdI= -----END CERTIFICATE-----Generated at Sat Apr 12 22:50:49 2025 by rpki-client