$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: ccUMIvPoIqPJPSul1qyY1K3SwiN3SWHlZG9EQ4uj3sI= Subject key identifier: 24:B8:15:40:5A:1D:BD:7B:8F:6B:5A:5C:09:AF:6D:1C:16:2F:83:8B Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 08F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 08F7 Signing time: Wed 14 May 2025 20:27:49 +0000 Manifest this update: Wed 14 May 2025 20:27:49 +0000 Manifest next update: Wed 21 May 2025 20:27:49 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: PKsT0LR8lnE1vxLuCS8M5PqZvi2N3KBs+jwKBwzk5O0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 20:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2296 (0x8f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: May 14 20:27:49 2025 GMT Not After : May 21 20:27:49 2025 GMT Subject: CN=6824fcc5-4d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:9a:a4:13:6f:2f:27:5e:c5:94:f1:2b:7f: f1:83:ef:ba:f9:ef:d7:07:2b:b8:4a:2e:60:e3:cc: 15:ec:14:be:2f:f2:12:37:d9:fd:8c:46:c6:bb:ac: c0:c6:de:c0:d5:e5:a1:8d:4a:56:b2:d1:a3:fc:cd: d5:4e:52:a3:28:11:c1:ac:21:93:63:cb:32:05:85: 3e:ac:cd:1c:89:e2:42:31:ac:43:08:bd:0a:37:e2: 37:28:9f:3d:a2:35:fd:fd:8e:d7:0b:a4:70:d4:86: 9c:14:6f:7f:6a:da:ac:f7:16:ac:23:e8:b1:b8:76: 0a:7e:c3:b0:4b:04:53:8c:2e:83:d7:0f:93:e7:66: ef:af:13:e0:84:11:ac:23:22:ad:d6:18:ce:d1:26: 68:c0:24:2a:0c:f4:14:97:fb:3a:3b:53:23:66:87: b3:51:f7:de:35:ff:97:0c:c1:0f:73:97:21:98:2f: 77:9b:e5:6a:a2:24:28:ed:16:cd:a4:74:69:c2:4e: 3b:28:53:1d:c8:5b:3d:a6:6d:e7:3f:21:df:63:f3: 68:3a:17:ba:6e:6b:f5:50:07:a4:40:cc:86:0d:b4: bc:db:e2:d9:79:80:0f:85:06:30:18:17:fb:2b:07: 0b:eb:8e:b0:64:f7:5e:75:8c:3b:ff:ed:84:15:4e: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:15:40:5A:1D:BD:7B:8F:6B:5A:5C:09:AF:6D:1C:16:2F:83:8B X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:fb:63:71:16:4b:44:8e:23:34:8f:41:90:3a:5b:de:5f:a4: de:b9:95:36:88:ea:e2:54:7d:ba:54:d1:fc:04:16:e4:19:f5: bc:d0:cb:49:f3:e6:d3:a8:9c:93:c1:74:0a:e8:1f:77:ba:01: 53:50:5d:55:4a:9e:b9:a7:62:58:57:25:d8:16:7d:4b:77:8b: ca:20:30:ed:a2:55:ad:7d:5a:71:e6:77:35:ee:46:eb:da:b9: 75:9c:f6:67:8e:ee:53:d9:dd:0d:44:ba:74:71:00:6a:09:e1: 2c:3d:45:b4:69:23:be:f9:bd:08:82:b6:a7:e7:40:8c:93:5a: 91:17:01:69:ab:b5:5c:1e:3b:16:3d:07:34:16:1b:9a:dd:51: 25:f4:07:6b:2c:86:20:3a:47:38:9a:06:94:e1:8f:9f:7a:50: d1:7f:e0:97:57:37:21:15:0d:e0:6a:62:df:19:95:22:09:62: 02:ef:99:e5:f5:ca:b6:d9:76:42:ee:48:75:c8:35:10:71:1c: 21:bf:c4:45:c5:6f:fb:9f:0c:bb:bd:ac:67:9e:22:17:52:70: f3:e8:87:c1:d9:65:bf:60:d1:5a:90:41:8d:c0:b0:ea:fa:a3: b1:7c:3e:4e:b5:43:ea:af:fe:5b:56:c5:1d:08:a5:68:8f:2f: 6c:67:46:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUwNTE0MjAyNzQ5WhcNMjUwNTIxMjAyNzQ5WjAYMRYwFAYD VQQDEw02ODI0ZmNjNS00ZDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2X+apBNvLydexZTxK3/xg++6+e/XByu4Si5g48wV7BS+L/ISN9n9jEbGu6zA xt7A1eWhjUpWstGj/M3VTlKjKBHBrCGTY8syBYU+rM0cieJCMaxDCL0KN+I3KJ89 ojX9/Y7XC6Rw1IacFG9/atqs9xasI+ixuHYKfsOwSwRTjC6D1w+T52bvrxPghBGs IyKt1hjO0SZowCQqDPQUl/s6O1MjZoezUffeNf+XDMEPc5chmC93m+VqoiQo7RbN pHRpwk47KFMdyFs9pm3nPyHfY/NoOhe6bmv1UAekQMyGDbS82+LZeYAPhQYwGBf7 KwcL646wZPdedYw7/+2EFU5E+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCS4FUBa Hb17j2taXAmvbRwWL4OLMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8+2NxFktEjiM0j0GQOlveX6TeuZU2iOriVH26VNH8BBbkGfW80MtJ 8+bTqJyTwXQK6B93ugFTUF1VSp65p2JYVyXYFn1Ld4vKIDDtolWtfVpx5nc17kbr 2rl1nPZnju5T2d0NRLp0cQBqCeEsPUW0aSO++b0Igran50CMk1qRFwFpq7VcHjsW PQc0Fhua3VEl9AdrLIYgOkc4mgaU4Y+felDRf+CXVzchFQ3gamLfGZUiCWIC75nl 9cq22XZC7kh1yDUQcRwhv8RFxW/7nwy7vaxnniIXUnDz6IfB2WW/YNFakEGNwLDq +qOxfD5OtUPqr/5bVsUdCKVojy9sZ0Ye -----END CERTIFICATE-----Generated at Fri May 16 13:10:54 2025 by rpki-client