$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: kC/GG+WNOXE0/qaDyf9Gg4BTnH8mqYlklVfk5DFf+BU= Subject key identifier: 01:E1:9E:8A:27:AA:2E:94:B9:5B:F3:D7:CC:58:98:A3:A5:B0:9A:E1 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0211 Signing time: Tue 13 May 2025 01:47:35 +0000 Manifest this update: Tue 13 May 2025 01:47:35 +0000 Manifest next update: Tue 20 May 2025 01:47:35 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: swVM/LwRaBJJKPWnMphuMjn/dYALJEYR4/2SIILgNmE=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: 6NVu2HEI/2vQueP99wzaqxsinrZpCobkN5jNBib82oA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: May 13 01:47:35 2025 GMT Not After : May 20 01:47:35 2025 GMT Subject: CN=6822a4b7-c10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:09:f4:d4:a5:f6:15:91:bf:19:6d:f8:0f:2f: ad:d2:1a:66:d1:d4:65:d4:f5:77:5e:4f:06:81:69: 89:c8:08:26:5e:8e:6a:26:ae:86:58:40:9c:cf:31: 31:12:2e:da:0e:9c:f9:39:2b:5c:25:01:4a:c2:f1: 8a:15:f4:04:c8:29:d5:2d:0f:a3:85:b4:88:3c:31: 72:26:52:76:b2:c2:70:7f:5d:af:f5:05:21:ad:2e: 9e:f5:81:3c:c0:4a:f4:bc:6f:58:cc:a4:a3:19:dd: 52:ac:4e:bb:58:8d:18:18:c5:18:82:04:7c:ca:fd: 88:d1:75:3d:67:7c:bc:13:95:fa:41:5a:40:8e:82: 31:a3:89:e2:14:21:ee:bc:44:0a:58:92:04:e6:12: 8e:b8:7d:e4:36:dc:1f:54:15:57:da:3a:64:0f:b5: 42:74:be:0b:9b:51:3d:02:6a:e7:af:22:c6:c4:56: a1:16:84:a1:b6:a7:93:0d:71:b4:c6:3a:d6:31:c2: de:56:11:7a:8f:fb:f7:1c:1e:ad:4b:79:0c:f2:34: 5d:c4:3b:9b:dd:af:31:21:b8:ee:da:e6:89:ec:05: de:d5:d3:bb:81:ff:da:67:e2:0a:11:3a:d6:47:88: 6d:64:76:11:9b:56:18:2a:6a:da:bf:52:08:c8:c6: 19:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E1:9E:8A:27:AA:2E:94:B9:5B:F3:D7:CC:58:98:A3:A5:B0:9A:E1 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:35:09:b4:b6:b9:4b:e3:4f:e5:ab:e8:ae:28:55:e5:9d:66: a5:5e:5c:d4:46:6b:6c:ab:34:55:bb:d6:5a:cf:d9:e8:1a:4c: 4d:c4:9b:bf:b3:bd:d0:e9:eb:b2:53:19:87:e9:fe:22:73:f0: 8b:66:9a:fb:56:6d:97:e0:23:e3:c1:a3:89:28:ec:aa:85:b9: 12:4c:98:8f:68:3c:9d:be:49:c6:75:40:08:28:6d:93:5b:3e: b8:29:c1:3e:55:7f:f1:38:e6:42:95:ee:6b:c0:95:ee:0f:2f: bd:75:d7:e8:1a:96:61:2e:a1:f5:a6:b1:54:98:bc:b4:0a:de: 65:e6:cb:fb:ff:48:b1:b2:f5:bb:8f:42:6d:d0:0b:0f:10:ed: 94:81:7a:f0:7d:23:e7:03:3b:f0:c7:4c:24:2e:d9:71:fa:ee: e6:63:0b:b6:a6:5d:f4:e4:44:96:00:16:aa:c4:a9:9d:3c:32: 68:ed:2d:7c:c6:ac:96:b8:e5:ad:7e:d3:af:08:43:ab:f7:0f: a3:a1:27:e4:bb:80:be:12:d9:36:86:bb:14:2d:30:03:38:b5: 44:cc:2f:91:06:42:6e:11:66:9d:d7:22:a5:c2:7b:22:5a:9f: f2:83:4e:6d:12:9c:8b:11:2f:a0:5d:87:09:f8:96:19:ef:a7: c2:11:86:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUwNTEzMDE0NzM1WhcNMjUwNTIwMDE0NzM1WjAYMRYwFAYD VQQDEw02ODIyYTRiNy1jMTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQn01KX2FZG/GW34Dy+t0hpm0dRl1PV3Xk8GgWmJyAgmXo5qJq6GWECczzEx Ei7aDpz5OStcJQFKwvGKFfQEyCnVLQ+jhbSIPDFyJlJ2ssJwf12v9QUhrS6e9YE8 wEr0vG9YzKSjGd1SrE67WI0YGMUYggR8yv2I0XU9Z3y8E5X6QVpAjoIxo4niFCHu vEQKWJIE5hKOuH3kNtwfVBVX2jpkD7VCdL4Lm1E9AmrnryLGxFahFoShtqeTDXG0 xjrWMcLeVhF6j/v3HB6tS3kM8jRdxDub3a8xIbju2uaJ7AXe1dO7gf/aZ+IKETrW R4htZHYRm1YYKmrav1IIyMYZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHhnoon qi6UuVvz18xYmKOlsJrhMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENQm0trlL40/lq+iuKFXlnWalXlzURmtsqzRVu9Zaz9noGkxNxJu/ s73Q6euyUxmH6f4ic/CLZpr7Vm2X4CPjwaOJKOyqhbkSTJiPaDydvknGdUAIKG2T Wz64KcE+VX/xOOZCle5rwJXuDy+9ddfoGpZhLqH1prFUmLy0Ct5l5sv7/0ixsvW7 j0Jt0AsPEO2UgXrwfSPnAzvwx0wkLtlx+u7mYwu2pl305ESWABaqxKmdPDJo7S18 xqyWuOWtftOvCEOr9w+joSfku4C+Etk2hrsULTADOLVEzC+RBkJuEWad1yKlwnsi Wp/yg05tEpyLES+gXYcJ+JYZ76fCEYZy -----END CERTIFICATE-----Generated at Tue May 13 23:12:22 2025 by rpki-client