$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: OY1k3CYXTAGI67sVsJTZNrFtb3NDGZjYG8Np+gvta8w= Subject key identifier: 9D:83:72:94:DD:98:25:9A:D2:5A:6D:63:1E:70:A9:CE:FF:F2:58:F7 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: B9 Signing time: Sat 31 May 2025 05:30:54 +0000 Manifest this update: Sat 31 May 2025 05:30:53 +0000 Manifest next update: Sat 07 Jun 2025 05:30:53 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: dgR9cNcPz1gPoRYV7/FsxsEZj5AbphBZZr4M9bjDW7U=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: May 31 05:30:53 2025 GMT Not After : Jun 7 05:30:53 2025 GMT Subject: CN=683a940d-953a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5d:89:29:a7:d0:6a:63:ad:f2:7f:46:eb:40: de:be:42:05:1e:d6:2d:6a:87:09:fc:c3:b5:07:f4: 3d:eb:52:c4:09:41:40:9b:eb:30:86:2e:c5:c0:20: 67:ce:34:3a:5d:57:7d:30:7f:e3:c2:50:99:9a:26: b7:ea:4c:47:81:60:55:d5:38:dd:5a:41:5d:26:10: 99:31:97:db:a6:cc:51:5b:61:56:52:46:94:17:5a: 47:a0:54:52:0b:f2:6d:e9:5c:d2:4b:2b:a0:a5:20: 5c:fa:a0:dc:c1:53:53:f0:61:77:af:ca:7a:f9:46: 9e:10:38:6d:c4:af:77:d0:29:14:85:cd:97:85:0c: a0:00:20:61:72:0a:a2:e2:5f:84:67:66:4e:3e:a3: 8f:8a:74:cb:81:af:f1:36:f8:80:13:89:e7:49:e4: a7:76:fa:a6:d9:18:b6:86:8d:fe:38:66:7f:3b:4b: 8c:d0:5d:84:9d:d0:54:01:74:af:b3:bf:0a:02:aa: 16:b3:d6:61:93:94:86:68:2f:2d:4f:67:f3:a9:0d: 7b:22:36:5a:0b:71:38:77:c7:5e:a4:68:a3:fd:f2: fd:b7:40:1d:49:85:8f:ef:3e:6a:d4:14:29:d7:49: c1:6e:fa:c2:f3:92:d8:d8:a5:32:0f:78:d3:22:d7: 6f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:72:94:DD:98:25:9A:D2:5A:6D:63:1E:70:A9:CE:FF:F2:58:F7 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:b0:c7:b7:5e:98:01:13:84:df:a8:95:e7:2f:d7:de:1d:ea: d1:15:9e:43:d5:eb:bb:ea:d4:c8:c8:c0:cf:58:4b:6d:e3:07: ce:30:68:f7:1c:82:d8:d9:63:e5:b4:be:89:99:de:4b:34:d7: b7:eb:81:03:b3:f7:b0:f2:50:7b:63:e7:80:63:22:5a:41:8c: 8e:b6:fa:68:1b:78:04:41:69:1c:d8:5a:1d:89:30:1a:15:17: 98:16:84:17:30:fe:77:61:ad:a7:3c:27:bf:1f:fe:df:73:10: bc:e9:65:bd:2a:a4:42:a3:e2:46:ee:7b:ec:86:ab:5c:23:47: 46:71:29:97:f7:09:72:8a:1e:20:97:08:ab:52:40:0b:cd:0c: 3a:1b:0a:a5:1b:a5:d8:d2:56:1f:c4:5d:42:14:33:6a:7a:61: 7b:47:ff:84:1f:8e:3a:82:d7:5a:08:fa:5c:4a:ae:7f:a2:be: 53:40:33:8a:ce:cf:9a:c3:2d:76:96:ab:91:3f:d3:22:7c:ec: 34:4e:0c:86:70:cf:ca:d2:3b:4d:04:0f:54:7b:bc:36:af:a4: 04:8c:45:ac:db:20:8e:89:e0:a9:8e:f5:57:54:a6:36:e1:08: cb:a0:e6:da:d1:0d:53:4e:40:c4:81:48:b4:ab:0b:fd:cf:c7: 30:ee:cf:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNTMxMDUzMDUzWhcNMjUwNjA3MDUzMDUzWjAYMRYwFAYD VQQDEw02ODNhOTQwZC05NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2V2JKafQamOt8n9G60DevkIFHtYtaocJ/MO1B/Q961LECUFAm+swhi7FwCBn zjQ6XVd9MH/jwlCZmia36kxHgWBV1TjdWkFdJhCZMZfbpsxRW2FWUkaUF1pHoFRS C/Jt6VzSSyugpSBc+qDcwVNT8GF3r8p6+UaeEDhtxK930CkUhc2XhQygACBhcgqi 4l+EZ2ZOPqOPinTLga/xNviAE4nnSeSndvqm2Ri2ho3+OGZ/O0uM0F2EndBUAXSv s78KAqoWs9Zhk5SGaC8tT2fzqQ17IjZaC3E4d8depGij/fL9t0AdSYWP7z5q1BQp 10nBbvrC85LY2KUyD3jTItdvOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ2DcpTd mCWa0lptYx5wqc7/8lj3MB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDsMe3XpgBE4TfqJXnL9feHerRFZ5D1eu76tTIyMDPWEtt4wfOMGj3 HILY2WPltL6Jmd5LNNe364EDs/ew8lB7Y+eAYyJaQYyOtvpoG3gEQWkc2FodiTAa FReYFoQXMP53Ya2nPCe/H/7fcxC86WW9KqRCo+JG7nvshqtcI0dGcSmX9wlyih4g lwirUkALzQw6GwqlG6XY0lYfxF1CFDNqemF7R/+EH446gtdaCPpcSq5/or5TQDOK zs+awy12lquRP9MifOw0TgyGcM/K0jtNBA9Ue7w2r6QEjEWs2yCOieCpjvVXVKY2 4QjLoOba0Q1TTkDEgUi0qwv9z8cw7s9h -----END CERTIFICATE-----Generated at Sat May 31 17:41:05 2025 by rpki-client