$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft File: ZeUkJf-EHg40jVL7EXypaQogvlQ.mft (raw, json) Hash identifier: NtVWXiuxwh7hx4v2gecNY31998cqVZ3p9txS/GDkaVg= Subject key identifier: 71:D6:A8:B1:34:ED:40:52:83:22:EA:85:F6:BE:56:88:B6:99:F0:DE Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 Certificate issuer: /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft Manifest number: 02D2 Signing time: Wed 09 Apr 2025 01:05:11 +0000 Manifest this update: Wed 09 Apr 2025 01:05:11 +0000 Manifest next update: Wed 16 Apr 2025 01:05:11 +0000 Files and hashes: 1: ZeUkJf-EHg40jVL7EXypaQogvlQ.crl (hash: XsPQpAIMrVc8JMW1Fcf+o8oNtsYft8LASeja0OuDCsI=) 2: 463D6908E2BE11EFB6E1E780C4F9AE02.roa (hash: z/U3Mkt9VwxVqDogBYYiVzyvbWpXlgorgYhnUU244UM=) 3: 0B014EBA408E11EDA80A5272C4F9AE02.roa (hash: saU/mKblZfuPXjfaCBZNvJjF3cnnkkpxvAWRjd4uqyc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 01:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889C2 Validity Not Before: Apr 9 01:05:11 2025 GMT Not After : Apr 16 01:05:11 2025 GMT Subject: CN=67f5c7c7-466f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e9:a3:db:3f:42:73:4d:e5:e9:f0:73:46:32: 86:dd:c0:6e:cb:5d:c6:a7:9a:91:c0:c0:bc:cf:a2: 32:4d:54:b9:bb:5f:38:86:24:59:f9:0e:e0:49:a5: 12:6d:8d:29:25:f7:b4:59:7a:06:04:b6:b7:77:b0: e9:a2:e0:69:75:cb:39:65:49:b4:53:fb:03:ba:c3: ac:c3:63:0f:28:91:90:ea:52:06:bf:0d:3f:79:fa: 4b:c0:41:8a:63:9a:87:b7:15:44:48:3c:63:f8:8b: 0c:8c:4b:bc:10:c2:79:b8:c7:eb:12:37:15:8e:cf: 2c:d5:ab:3a:95:1a:c2:1c:91:49:72:77:5c:81:09: 94:41:67:e7:52:a4:2c:a5:b6:a5:1d:ae:69:68:1a: e5:56:d5:2b:05:2c:69:5b:12:d4:2c:96:96:30:b3: 9e:00:da:16:9a:6f:ee:ac:a4:77:ad:97:87:e5:a7: 15:a6:a1:8e:4d:f3:87:00:60:80:d6:2a:69:69:d9: 5e:8b:8b:ec:31:37:2a:f4:eb:78:af:1d:59:4d:a5: 72:69:48:41:f8:6e:50:13:ed:b4:3a:92:52:84:a5: 90:cb:13:95:78:bd:93:5d:fb:f2:20:93:6a:73:77: 76:34:13:9f:53:f3:0e:41:3a:43:f5:76:fa:eb:da: 68:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D6:A8:B1:34:ED:40:52:83:22:EA:85:F6:BE:56:88:B6:99:F0:DE X509v3 Authority Key Identifier: keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:51:f3:e2:5e:3d:6f:21:6a:4f:42:d4:8f:83:66:7d:23:91: 11:14:19:11:d9:d4:77:30:90:df:4a:84:09:d9:d5:85:e8:77: b6:d1:68:75:7f:a5:aa:f0:91:b7:e2:0a:f5:91:5b:36:50:48: 76:41:ec:09:e6:82:dc:c8:f2:d6:21:65:5a:8b:3f:f0:70:11: 8f:75:c0:50:29:98:1e:38:fc:f4:8d:10:b5:1a:00:c4:a8:3f: 66:d5:21:a7:c9:7c:9a:43:a0:28:e3:99:c8:34:31:db:a8:40: a6:5b:83:e2:d4:27:ff:9a:ca:9e:9e:00:61:03:d6:b7:e7:2a: c2:73:56:d4:65:53:0a:be:36:1b:bc:2e:1d:3f:77:22:dc:47: f3:91:02:6f:be:17:dc:ff:da:b4:70:54:3a:59:a4:df:05:ea: cb:55:2c:47:ce:2a:51:fb:82:80:f0:a1:cd:60:7b:3e:5d:e3: 4a:95:c0:8c:62:e7:82:ca:f3:4f:2e:89:37:96:b4:8c:eb:0d: 57:51:d3:9e:13:84:52:ed:d2:c5:a7:bd:d6:79:2e:b4:bb:c8: 18:d0:a0:12:5f:29:9c:4e:b7:99:b7:9a:65:97:d4:8d:12:16: 55:5b:c4:e9:8b:0e:e8:01:9b:28:af:c5:1e:0a:47:28:0c:3f: 26:a6:a5:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QzIxMTAvBgNVBAUTKDY1RTUyNDI1RkY4NDFFMEUzNDhENTJGQjExN0NBOTY5 MEEyMEJFNTQwHhcNMjUwNDA5MDEwNTExWhcNMjUwNDE2MDEwNTExWjAYMRYwFAYD VQQDEw02N2Y1YzdjNy00NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Omj2z9Cc03l6fBzRjKG3cBuy13Gp5qRwMC8z6IyTVS5u184hiRZ+Q7gSaUS bY0pJfe0WXoGBLa3d7DpouBpdcs5ZUm0U/sDusOsw2MPKJGQ6lIGvw0/efpLwEGK Y5qHtxVESDxj+IsMjEu8EMJ5uMfrEjcVjs8s1as6lRrCHJFJcndcgQmUQWfnUqQs pbalHa5paBrlVtUrBSxpWxLULJaWMLOeANoWmm/urKR3rZeH5acVpqGOTfOHAGCA 1ippadlei4vsMTcq9Ot4rx1ZTaVyaUhB+G5QE+20OpJShKWQyxOVeL2TXfvyIJNq c3d2NBOfU/MOQTpD9Xb669poTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHHWqLE0 7UBSgyLqhfa+Voi2mfDeMB8GA1UdIwQYMBaAFGXlJCX/hB4ONI1S+xF8qWkKIL5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlDMi9CRDczNjA0NEUy MzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhnNDBqVkw3RVh5cGFRb2d2 bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plVWtKZi1FSGc0MGpWTDdFWHlwYVFvZ3ZsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlDMi9CRDczNjA0NEUyMzYxMUVDOEM3Rjg1MjBDNEY5QUUwMi9aZVVrSmYtRUhn NDBqVkw3RVh5cGFRb2d2bFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUUfPiXj1vIWpPQtSPg2Z9I5ERFBkR2dR3MJDfSoQJ2dWF6He20Wh1 f6Wq8JG34gr1kVs2UEh2QewJ5oLcyPLWIWVaiz/wcBGPdcBQKZgeOPz0jRC1GgDE qD9m1SGnyXyaQ6Ao45nINDHbqECmW4Pi1Cf/msqengBhA9a35yrCc1bUZVMKvjYb vC4dP3ci3EfzkQJvvhfc/9q0cFQ6WaTfBerLVSxHzipR+4KA8KHNYHs+XeNKlcCM YueCyvNPLok3lrSM6w1XUdOeE4RS7dLFp73WeS60u8gY0KASXymcTreZt5pll9SN EhZVW8Tpiw7oAZsor8UeCkcoDD8mpqUK -----END CERTIFICATE-----Generated at Thu Apr 10 09:11:14 2025 by rpki-client