$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft File: Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json) Hash identifier: 0lkvyiulpX3JusUFHQtkU5yeRFA0xa1TzEVcxUdTk74= Subject key identifier: 03:24:30:7E:AF:89:1F:39:C5:C9:2F:CA:33:33:E4:91:86:0D:AE:68 Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 Certificate issuer: /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Certificate serial: 0355 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft Manifest number: 0355 Signing time: Mon 12 May 2025 20:48:47 +0000 Manifest this update: Mon 12 May 2025 20:48:47 +0000 Manifest next update: Mon 19 May 2025 20:48:47 +0000 Files and hashes: 1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: VFnDs+gHNmL0PZ9MylB/zp9au8Axz3EHFJLrqyc17Ig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:48:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 853 (0x355) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574 Validity Not Before: May 12 20:48:47 2025 GMT Not After : May 19 20:48:47 2025 GMT Subject: CN=68225eaf-ae1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:b4:21:eb:c2:14:71:73:f2:cc:e7:9e:f8: ac:c9:bb:78:3a:6e:38:54:21:ec:69:ff:93:e7:aa: a8:ce:ab:5c:3b:bd:a7:a5:5a:96:0d:ab:49:cd:c1: 41:c5:9a:1c:d9:05:6c:ac:d5:a3:a7:9c:e0:7b:38: d0:fd:fd:e6:a9:f4:8f:8d:c4:47:50:52:fd:da:06: 4f:56:63:f7:65:9c:1c:30:61:bf:ae:ee:ac:a4:e5: 5c:a9:02:84:88:07:3f:0a:39:ef:56:7a:8d:7d:55: 18:34:b1:96:b0:76:bc:e5:91:9f:94:28:de:5a:4b: 3f:f0:98:f3:9f:c1:bd:3c:ba:65:99:2e:b4:0a:42: a2:14:d3:97:84:39:fe:fa:e1:0e:4b:13:e3:98:f2: 42:f4:f6:b8:3e:d9:7f:7e:07:cb:53:eb:db:8d:de: 49:c0:61:1d:40:c4:25:d2:b5:74:8c:82:3b:99:39: 2b:06:3e:98:df:ff:71:ea:db:7f:fe:31:46:12:c4: f5:2e:c4:bd:ce:a5:76:ce:6e:e9:7f:77:ee:57:fe: 48:ef:ef:8f:59:00:77:36:3b:29:50:11:b2:21:f6: 55:c2:6b:fb:d6:65:30:06:d4:ce:43:f0:92:5b:16: 61:eb:54:3b:69:49:23:98:76:50:e6:25:a7:33:34: d5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:30:7E:AF:89:1F:39:C5:C9:2F:CA:33:33:E4:91:86:0D:AE:68 X509v3 Authority Key Identifier: keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:3e:71:80:12:73:6f:bc:82:04:af:e7:07:54:4e:cb:d3:cc: e5:49:ab:67:29:64:ff:93:6a:e7:5e:88:ae:f5:38:b7:5b:52: 38:03:14:cf:ee:f4:17:f5:c7:86:e4:09:b0:13:bc:71:34:63: 6a:07:ef:15:bb:23:0a:a7:1f:65:e2:a3:c7:6e:33:54:20:94: f3:fd:16:f5:13:0f:ec:58:72:46:0b:46:cb:6f:2a:e6:9b:a3: 0d:c7:33:8a:14:f8:6a:61:3d:9d:8d:f5:60:03:3e:8d:88:5f: 9d:39:d5:4b:da:96:6a:1d:3c:01:b1:58:e6:15:e2:89:b5:bf: cf:53:86:20:2b:64:cc:73:11:49:ca:2e:21:e3:e8:4e:64:e4: 8f:2b:a7:76:73:74:23:62:89:4b:63:36:a0:30:3e:83:f9:ac: 0e:70:99:8f:ad:49:8e:86:ec:f7:2d:18:fb:6a:e9:dd:86:d3: 09:6c:0c:a4:c4:f9:eb:4c:be:e8:c9:76:a0:44:37:d1:04:8f: d5:4d:e8:59:96:88:92:dd:6c:c0:9f:01:b9:d4:f6:8c:ee:83: d5:13:06:0b:2c:2c:f7:31:89:ff:11:15:fa:07:a1:ce:83:24: 37:df:56:20:d8:76:99:1a:2d:fc:44:89:ff:4e:e8:1e:30:1c: df:b6:85:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1 OUZCQkQ1NzQwHhcNMjUwNTEyMjA0ODQ3WhcNMjUwNTE5MjA0ODQ3WjAYMRYwFAYD VQQDEw02ODIyNWVhZi1hZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuNm0IevCFHFz8sznnvisybt4Om44VCHsaf+T56qozqtcO72npVqWDatJzcFB xZoc2QVsrNWjp5zgezjQ/f3mqfSPjcRHUFL92gZPVmP3ZZwcMGG/ru6spOVcqQKE iAc/CjnvVnqNfVUYNLGWsHa85ZGflCjeWks/8Jjzn8G9PLplmS60CkKiFNOXhDn+ +uEOSxPjmPJC9Pa4Ptl/fgfLU+vbjd5JwGEdQMQl0rV0jII7mTkrBj6Y3/9x6tt/ /jFGEsT1LsS9zqV2zm7pf3fuV/5I7++PWQB3NjspUBGyIfZVwmv71mUwBtTOQ/CS WxZh61Q7aUkjmHZQ5iWnMzTVEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMkMH6v iR85xckvyjMz5JGGDa5oMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRPnGAEnNvvIIEr+cHVE7L08zlSatnKWT/k2rnXoiu9Ti3W1I4AxTP 7vQX9ceG5AmwE7xxNGNqB+8VuyMKpx9l4qPHbjNUIJTz/Rb1Ew/sWHJGC0bLbyrm m6MNxzOKFPhqYT2djfVgAz6NiF+dOdVL2pZqHTwBsVjmFeKJtb/PU4YgK2TMcxFJ yi4h4+hOZOSPK6d2c3QjYolLYzagMD6D+awOcJmPrUmOhuz3LRj7aundhtMJbAyk xPnrTL7oyXagRDfRBI/VTehZloiS3WzAnwG51PaM7oPVEwYLLCz3MYn/ERX6B6HO gyQ331Yg2HaZGi38RIn/TugeMBzftoUz -----END CERTIFICATE-----Generated at Tue May 13 20:22:10 2025 by rpki-client