$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: IQG0dWVck6rypwOa6Nm2ekIH1QjiSGNkbO0162Bp8o4= Subject key identifier: 1A:55:F5:5D:A8:9D:9A:53:FD:78:C4:92:86:F9:7D:C9:D3:DE:B0:4E Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 2350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 233F Signing time: Mon 12 May 2025 15:48:09 +0000 Manifest this update: Mon 12 May 2025 15:48:09 +0000 Manifest next update: Mon 19 May 2025 15:48:09 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: UdjHfRaVzvw3Dc7Y9cWjAvizASOValcb8+QU87rgKEw=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 15:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9040 (0x2350) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: May 12 15:48:09 2025 GMT Not After : May 19 15:48:09 2025 GMT Subject: CN=68221839-4163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:bc:db:29:d0:86:29:d8:21:83:26:31:ce: f0:c1:5a:65:b1:ed:fd:50:cc:37:cf:1b:f8:4f:b5: 6a:31:29:ea:35:8f:a3:a9:10:84:cb:b3:1e:69:ea: ef:2d:98:34:fa:b1:30:8f:ab:02:88:10:33:ce:6c: b2:62:4d:27:fe:89:c3:ab:7d:49:37:51:aa:5b:d4: eb:e1:ee:cc:3a:d1:c8:cf:d9:e7:77:ac:a3:8a:52: c8:c8:b3:d1:69:f6:71:a1:a1:a4:c3:eb:6c:aa:58: bf:c9:f1:6f:d7:a6:bb:ef:a7:b0:0c:a6:88:ca:3a: b2:a5:69:e1:d4:50:ae:b9:6c:aa:70:5b:2f:33:3e: a6:ad:01:14:4c:75:6f:68:95:4d:95:4b:af:59:05: d6:70:2b:61:04:50:70:1c:37:18:b1:dc:b2:bf:52: b6:37:95:40:ad:bc:ff:e0:74:f5:a6:e9:a4:e9:1a: 79:03:de:d7:e7:70:26:a1:0e:20:7b:d9:59:26:43: a7:35:f7:ba:4c:1a:ff:98:ca:28:9a:b5:73:40:3d: 2b:13:55:ca:07:55:fd:56:d6:38:37:02:4e:15:47: 66:d5:7e:47:d9:8d:4f:ad:5b:a9:b2:42:dd:c5:de: 87:64:de:74:06:2b:0a:5d:1d:d8:99:df:54:06:cf: 17:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:55:F5:5D:A8:9D:9A:53:FD:78:C4:92:86:F9:7D:C9:D3:DE:B0:4E X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:36:a9:d6:71:94:82:3e:e2:a7:3f:6b:a8:aa:63:54:b4:6c: 3d:e9:02:1d:30:3c:80:de:01:3b:62:ad:e3:24:23:2d:b8:1a: 49:48:bb:7e:a6:1a:2c:5b:58:35:bb:c0:44:c8:b5:80:cc:6e: 1e:4d:f9:57:22:11:ff:7b:6e:f0:2a:c0:88:e2:ed:6f:82:8b: 91:11:ec:a1:a8:e3:9e:53:3f:b5:31:43:5b:34:43:96:a2:58: df:5c:e7:e0:a8:e2:40:42:7f:16:0e:7b:ee:da:a8:1e:3d:49: 8c:b1:9c:2e:80:a9:b3:b1:26:62:5a:f9:99:b6:4b:30:79:c8: dc:bc:b7:6f:7d:1d:e7:01:5c:e0:af:77:ff:ab:fd:7c:64:b0: 96:24:90:e8:04:a7:11:70:75:47:9c:e8:11:94:94:19:d2:0c: e7:3d:6c:55:2e:e3:3f:c7:b5:0d:cc:50:7e:33:68:b7:15:90: 61:e4:2d:98:f6:64:c0:84:a4:8c:34:31:d7:0e:aa:c4:9d:d0: db:ac:aa:4d:57:31:2c:df:f1:b4:59:35:bc:37:a9:16:00:e1: 60:2e:35:c5:78:64:4a:75:36:22:43:2e:81:f9:46:db:87:79: bb:f6:69:54:61:74:07:10:8c:38:16:4a:a6:1c:12:2e:4d:01: 7c:e9:f7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUwNTEyMTU0ODA5WhcNMjUwNTE5MTU0ODA5WjAYMRYwFAYD VQQDEw02ODIyMTgzOS00MTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBK82ynQhinYIYMmMc7wwVplse39UMw3zxv4T7VqMSnqNY+jqRCEy7Meaerv LZg0+rEwj6sCiBAzzmyyYk0n/onDq31JN1GqW9Tr4e7MOtHIz9nnd6yjilLIyLPR afZxoaGkw+tsqli/yfFv16a776ewDKaIyjqypWnh1FCuuWyqcFsvMz6mrQEUTHVv aJVNlUuvWQXWcCthBFBwHDcYsdyyv1K2N5VArbz/4HT1pumk6Rp5A97X53AmoQ4g e9lZJkOnNfe6TBr/mMoomrVzQD0rE1XKB1X9VtY4NwJOFUdm1X5H2Y1PrVupskLd xd6HZN50BisKXR3Ymd9UBs8XzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpV9V2o nZpT/XjEkob5fcnT3rBOMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJNqnWcZSCPuKnP2uoqmNUtGw96QIdMDyA3gE7Yq3jJCMtuBpJSLt+ phosW1g1u8BEyLWAzG4eTflXIhH/e27wKsCI4u1vgouREeyhqOOeUz+1MUNbNEOW oljfXOfgqOJAQn8WDnvu2qgePUmMsZwugKmzsSZiWvmZtkswecjcvLdvfR3nAVzg r3f/q/18ZLCWJJDoBKcRcHVHnOgRlJQZ0gznPWxVLuM/x7UNzFB+M2i3FZBh5C2Y 9mTAhKSMNDHXDqrEndDbrKpNVzEs3/G0WTW8N6kWAOFgLjXFeGRKdTYiQy6B+Ubb h3m79mlUYXQHEIw4FkqmHBIuTQF86fd1 -----END CERTIFICATE-----Generated at Tue May 13 18:28:19 2025 by rpki-client