$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: 1RdEFKaaFse6DSTvCYjka2poqdLfPFkhR6A3pfOGfaE= Subject key identifier: E7:8E:F1:6C:C7:E3:60:94:E5:12:1D:29:62:B4:37:50:75:80:75:2F Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0FB9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0FA4 Signing time: Fri 30 May 2025 17:43:49 +0000 Manifest this update: Fri 30 May 2025 17:43:49 +0000 Manifest next update: Fri 06 Jun 2025 17:43:49 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: 73qRPuNpJ8TIOyNhelw6WBin3hepn5X1buLo1lif3tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4025 (0xfb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: May 30 17:43:49 2025 GMT Not After : Jun 6 17:43:49 2025 GMT Subject: CN=6839ee55-ae0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:61:60:94:95:c1:0d:65:82:f9:47:83:53: 12:26:66:23:39:82:a8:cb:98:ab:9d:a7:c4:e5:97: e5:c0:04:e7:cd:d9:57:66:0a:84:66:3d:06:4d:83: 13:e3:61:63:d1:ce:86:21:3f:25:9b:36:02:3b:2d: e3:12:c1:aa:95:0c:40:8d:b4:a0:38:6f:8b:5f:c5: e7:4e:11:40:a1:2a:f4:f2:dc:db:d9:76:f7:0f:b1: 62:4b:a7:56:88:34:4b:5d:7e:b5:bd:09:c3:47:8a: 2f:2f:e5:20:c5:53:80:91:34:d8:3a:1f:62:00:35: 6b:d3:55:8a:ee:e1:e2:09:76:f8:3f:8a:9d:85:f6: 1a:28:f5:64:b4:92:1c:6f:f0:1f:f1:2e:0d:4a:dc: 26:80:06:7c:2e:cd:42:c2:82:57:2d:6b:29:2a:7e: f6:61:82:f3:21:48:ff:ae:2f:5a:c9:9f:46:2d:32: 7b:f5:b9:8e:40:7c:2a:a3:2f:14:54:57:be:58:14: c7:07:bc:ca:c3:10:3c:13:e2:8b:83:72:b7:4e:66: a6:2f:bb:57:7d:01:7a:3f:12:c3:ab:13:25:57:31: fe:a2:bd:da:d7:aa:44:55:70:ce:6b:47:b0:06:cd: ec:9a:f9:c7:ac:92:a5:07:95:7e:c7:a2:d3:7d:c5: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8E:F1:6C:C7:E3:60:94:E5:12:1D:29:62:B4:37:50:75:80:75:2F X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f1:24:cb:f3:f8:20:26:6b:a5:34:d5:90:f5:66:a5:1b:22: dc:eb:a8:65:ae:fd:6a:4f:37:a8:e7:d3:6f:81:ea:6a:82:37: 77:fc:39:30:ed:dc:2c:b2:de:a2:c0:99:94:7a:ad:ba:2b:7a: af:28:25:33:4a:3b:b1:f3:ce:dc:32:da:5d:4c:ef:ee:4f:d5: dd:77:bb:85:78:fe:d2:3a:af:d3:ab:5a:5b:a1:58:6d:17:cc: 61:e4:1d:8e:d8:7f:42:1e:5c:d9:b1:d6:92:54:6c:9e:d1:86: 20:f0:05:e7:1a:97:3d:19:c1:44:e9:13:1e:5f:00:62:39:6b: 13:0a:da:bc:9f:84:f6:47:c8:b5:8f:d5:eb:22:d2:a7:b2:90: f6:7a:27:5e:62:88:f1:d1:fd:61:4f:b3:73:99:97:aa:c5:08: 99:f5:d3:01:0e:6e:d9:ef:60:0f:3a:86:5d:f8:e7:dd:19:3a: 8e:1b:a2:f8:2a:cd:98:3d:f7:42:61:43:1e:ce:76:b8:5b:27: 00:e3:70:c7:45:bf:b7:52:e3:06:70:bd:f1:be:7f:db:d3:ab: e7:a7:ca:40:b0:ca:85:8d:df:37:f3:d0:b0:4f:14:92:3e:21: a9:33:16:a9:54:80:57:0b:62:d8:38:6c:86:29:48:5f:42:16: 5b:39:a0:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUwNTMwMTc0MzQ5WhcNMjUwNjA2MTc0MzQ5WjAYMRYwFAYD VQQDEw02ODM5ZWU1NS1hZTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoRhYJSVwQ1lgvlHg1MSJmYjOYKoy5irnafE5ZflwATnzdlXZgqEZj0GTYMT 42Fj0c6GIT8lmzYCOy3jEsGqlQxAjbSgOG+LX8XnThFAoSr08tzb2Xb3D7FiS6dW iDRLXX61vQnDR4ovL+UgxVOAkTTYOh9iADVr01WK7uHiCXb4P4qdhfYaKPVktJIc b/Af8S4NStwmgAZ8Ls1CwoJXLWspKn72YYLzIUj/ri9ayZ9GLTJ79bmOQHwqoy8U VFe+WBTHB7zKwxA8E+KLg3K3TmamL7tXfQF6PxLDqxMlVzH+or3a16pEVXDOa0ew Bs3smvnHrJKlB5V+x6LTfcVKawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOeO8WzH 42CU5RIdKWK0N1B1gHUvMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm8STL8/ggJmulNNWQ9WalGyLc66hlrv1qTzeo59Nvgepqgjd3/Dkw 7dwsst6iwJmUeq26K3qvKCUzSjux887cMtpdTO/uT9Xdd7uFeP7SOq/Tq1pboVht F8xh5B2O2H9CHlzZsdaSVGye0YYg8AXnGpc9GcFE6RMeXwBiOWsTCtq8n4T2R8i1 j9XrItKnspD2eideYojx0f1hT7NzmZeqxQiZ9dMBDm7Z72APOoZd+OfdGTqOG6L4 Ks2YPfdCYUMezna4WycA43DHRb+3UuMGcL3xvn/b06vnp8pAsMqFjd8389CwTxSS PiGpMxapVIBXC2LYOGyGKUhfQhZbOaDX -----END CERTIFICATE-----Generated at Sat May 31 16:53:43 2025 by rpki-client