$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: Ch2jSMtOY2Qk5mOYevaOnqSXF5w4dO4PL6r04/zPOdE= Subject key identifier: 64:6B:EF:55:D2:0F:E3:09:6F:16:CB:BA:68:2D:EA:FE:2E:D8:C3:92 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: B2 Signing time: Thu 15 May 2025 05:19:23 +0000 Manifest this update: Thu 15 May 2025 05:19:23 +0000 Manifest next update: Thu 22 May 2025 05:19:23 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 3w7Tkuox6YL4AFeawL6C2XztJZiNZtBQxc0mAUb35eE=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: ThX/kgORO//6BjDOUSvwSiBpiPXxDMuawCnXFSmZzGI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 05:19:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: May 15 05:19:23 2025 GMT Not After : May 22 05:19:23 2025 GMT Subject: CN=6825795b-7833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:e7:ff:37:40:1b:92:ae:42:26:18:b5:3c: b4:a5:35:e4:41:eb:22:ab:c0:ee:bf:b0:82:16:d6: c0:a6:7d:4a:3c:eb:cc:e6:09:7a:53:15:37:26:39: 03:16:74:81:b3:0b:98:eb:b3:25:39:54:aa:00:68: e9:a3:2e:10:4e:6b:6e:dd:4d:a8:ca:a3:da:3f:e5: f5:77:d3:4f:aa:72:7a:02:ef:e8:f3:34:70:2c:7e: f5:cd:49:32:d6:3f:38:45:b1:69:bd:a6:bb:9b:6d: 48:7a:0f:08:ff:5b:9f:7d:2d:cf:c0:57:31:ad:8c: 87:e5:b2:22:cf:44:1f:60:e4:97:f1:4b:0b:52:49: 88:77:5f:d9:b1:d1:d0:07:be:6c:0d:d1:7a:7e:da: 67:b6:30:62:af:3a:27:8d:36:d6:ed:c7:b3:83:74: 15:b4:67:ff:d7:6b:10:ab:77:5a:86:6d:bf:92:c1: 01:1e:c1:2e:b0:45:c6:83:5e:b9:83:40:d7:1b:84: 14:35:f9:02:c8:f0:e9:f9:f9:7e:3a:08:4b:41:d8: b2:60:7b:26:42:ca:70:d1:b4:35:a4:5b:f3:30:86: bb:c4:af:6e:79:e3:8d:94:b8:5c:ac:8e:33:37:58: 83:35:65:c2:8e:d9:21:f4:4b:f7:2f:a3:83:53:7e: 84:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6B:EF:55:D2:0F:E3:09:6F:16:CB:BA:68:2D:EA:FE:2E:D8:C3:92 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:c5:70:f7:99:55:49:f3:36:ac:20:05:24:ba:17:04:e8:11: 09:a7:53:85:11:0f:2b:f6:45:f9:81:91:90:f2:59:ca:4f:e1: 17:7e:f3:6a:04:86:b5:fa:9c:12:7f:f9:10:83:a3:c6:9d:d2: b3:eb:49:53:23:f8:a7:3f:79:08:fe:2b:86:fe:6a:b9:a9:06: fb:f3:7f:81:53:16:30:3b:e4:eb:92:31:bb:2e:15:b0:7f:90: b0:e4:81:24:ac:4c:a4:ed:3e:a6:da:08:e0:c2:b1:6c:d6:b8: b1:2c:03:65:27:6c:9a:7e:ea:40:cb:c5:da:f4:37:f4:f7:fe: 08:ae:08:ef:8d:a6:5b:d2:6d:3b:9e:aa:63:28:f7:31:9d:2a: 79:36:ce:f9:ef:04:1f:50:d3:20:0a:4c:91:be:eb:8c:a9:24: c4:e7:ee:36:46:42:5e:0d:1c:c1:f0:34:08:2a:5a:8e:6b:a4: fd:47:90:72:46:f0:c9:53:0e:0b:bb:eb:65:6b:61:98:3e:c7: 23:0a:87:3b:8e:91:de:e1:57:6f:13:4a:d0:e7:e3:e4:b8:5a: 09:1f:76:1e:8b:3f:aa:d4:a5:43:ed:29:b5:6b:7c:77:db:ad: e5:4b:4d:3a:6c:8a:f1:aa:ad:92:5a:83:e8:d8:3a:6b:13:9d: 19:a6:4c:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUwNTE1MDUxOTIzWhcNMjUwNTIyMDUxOTIzWjAYMRYwFAYD VQQDEw02ODI1Nzk1Yi03ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFPn/zdAG5KuQiYYtTy0pTXkQesiq8Duv7CCFtbApn1KPOvM5gl6UxU3JjkD FnSBswuY67MlOVSqAGjpoy4QTmtu3U2oyqPaP+X1d9NPqnJ6Au/o8zRwLH71zUky 1j84RbFpvaa7m21Ieg8I/1uffS3PwFcxrYyH5bIiz0QfYOSX8UsLUkmId1/ZsdHQ B75sDdF6ftpntjBirzonjTbW7cezg3QVtGf/12sQq3dahm2/ksEBHsEusEXGg165 g0DXG4QUNfkCyPDp+fl+OghLQdiyYHsmQspw0bQ1pFvzMIa7xK9ueeONlLhcrI4z N1iDNWXCjtkh9Ev3L6ODU36EyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRr71XS D+MJbxbLumgt6v4u2MOSMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjxXD3mVVJ8zasIAUkuhcE6BEJp1OFEQ8r9kX5gZGQ8lnKT+EXfvNq BIa1+pwSf/kQg6PGndKz60lTI/inP3kI/iuG/mq5qQb783+BUxYwO+TrkjG7LhWw f5Cw5IEkrEyk7T6m2gjgwrFs1rixLANlJ2yafupAy8Xa9Df09/4IrgjvjaZb0m07 nqpjKPcxnSp5Ns757wQfUNMgCkyRvuuMqSTE5+42RkJeDRzB8DQIKlqOa6T9R5By RvDJUw4Lu+tla2GYPscjCoc7jpHe4VdvE0rQ5+PkuFoJH3Yeiz+q1KVD7Sm1a3x3 263lS006bIrxqq2SWoPo2DprE50ZpkwZ -----END CERTIFICATE-----Generated at Fri May 16 10:48:49 2025 by rpki-client