$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: yqMHGKrwx/zrsNP9Jc2B6IDxLMPkIxttcphtNMla57w= Subject key identifier: 99:9A:43:B8:63:CE:BB:4B:92:22:80:FF:F0:19:31:00:EC:0C:D9:F3 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 0FB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 0F9B Signing time: Sat 10 May 2025 17:25:43 +0000 Manifest this update: Sat 10 May 2025 17:25:42 +0000 Manifest next update: Sat 17 May 2025 17:25:42 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: SzkyFcOgH+zcMMf8+9kqD+dhPR4fgWjgH2LqY52xTzc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 17:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4016 (0xfb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: May 10 17:25:42 2025 GMT Not After : May 17 17:25:42 2025 GMT Subject: CN=681f8c16-a1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:40:6c:15:be:5e:8f:24:a8:1c:9a:df:e3: 56:82:ee:36:91:42:7e:0e:a1:bb:5e:f1:87:5d:68: 1b:91:19:23:c1:02:d1:6b:c4:79:af:c8:c5:a5:f1: 65:d6:f4:0e:da:95:d5:43:29:72:de:96:01:6d:5f: 2f:16:26:e9:8e:38:81:f0:68:22:f2:c0:65:74:01: 54:3d:3d:6e:61:69:07:f2:28:49:0a:a6:93:eb:ca: 7f:68:c1:0f:0b:70:66:0d:88:ff:c6:ca:2f:a5:24: d2:68:ee:33:29:cb:22:41:f0:cc:aa:23:5a:21:ae: c4:08:6e:d5:87:b1:ad:0e:f4:f5:58:05:03:d8:f1: 0e:a6:b0:85:3a:98:e4:5f:fd:81:47:4b:54:9c:fd: f9:92:06:1a:d6:c5:52:82:2b:ab:d7:f6:66:9a:bf: e9:04:b0:54:ed:1b:04:b6:5a:ac:c6:e9:8d:be:e5: e3:9b:b4:4f:1b:7d:55:26:4d:c1:e1:24:28:ad:49: 33:61:01:2f:c4:69:9f:71:9f:26:07:e3:d7:53:c4: de:27:45:62:87:5c:d5:74:3a:21:44:c2:13:41:8c: 09:68:94:1a:cf:c0:f1:bf:0e:36:15:a9:11:20:bd: aa:38:20:6b:60:e8:17:bd:5d:cd:b5:66:23:0d:cc: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9A:43:B8:63:CE:BB:4B:92:22:80:FF:F0:19:31:00:EC:0C:D9:F3 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1b:2d:11:9f:3b:61:04:84:8a:c1:d2:f3:90:ec:39:c0:50: 69:0d:80:fa:82:6e:98:83:5b:19:8d:4a:4c:7e:0f:87:dc:5e: 34:cd:de:11:be:1f:d1:0d:ef:04:b8:50:8a:5a:94:35:90:6a: 88:61:bb:02:d9:ff:fe:65:48:c6:54:ae:a2:df:57:c6:d8:ca: 95:18:bf:64:e3:ae:24:de:3a:c6:47:c7:d2:50:94:c9:8b:48: aa:d5:60:95:ef:94:6c:16:c3:ba:f9:87:10:62:c9:7a:63:b6: 38:de:c1:39:34:22:05:0a:0e:57:36:32:1b:80:a4:a1:ca:16: b6:6f:8b:01:fb:0e:48:d6:0e:1d:c1:06:d3:f6:e9:6c:7e:ea: 92:a4:4d:bc:90:04:90:2e:ba:2e:56:69:b9:ea:60:86:ff:36: fa:7a:48:75:48:31:32:5e:52:d9:e8:c9:4e:8f:65:9e:59:17: 7c:40:a0:63:02:53:4d:f8:67:7e:dd:5b:a3:69:ba:17:55:f6: 3d:77:7e:93:0d:89:4b:ab:57:c8:e6:28:3a:c8:88:1d:e1:70: 36:00:d1:bf:09:3d:a8:6a:24:a6:12:8c:b5:b5:a8:f0:b0:76: 2c:e3:c4:f6:83:6e:95:56:df:4b:c7:10:8c:2f:00:b3:99:f7: a3:37:43:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUwNTEwMTcyNTQyWhcNMjUwNTE3MTcyNTQyWjAYMRYwFAYD VQQDEw02ODFmOGMxNi1hMWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUJAbBW+Xo8kqBya3+NWgu42kUJ+DqG7XvGHXWgbkRkjwQLRa8R5r8jFpfFl 1vQO2pXVQyly3pYBbV8vFibpjjiB8Ggi8sBldAFUPT1uYWkH8ihJCqaT68p/aMEP C3BmDYj/xsovpSTSaO4zKcsiQfDMqiNaIa7ECG7Vh7GtDvT1WAUD2PEOprCFOpjk X/2BR0tUnP35kgYa1sVSgiur1/Zmmr/pBLBU7RsEtlqsxumNvuXjm7RPG31VJk3B 4SQorUkzYQEvxGmfcZ8mB+PXU8TeJ0Vih1zVdDohRMITQYwJaJQaz8Dxvw42FakR IL2qOCBrYOgXvV3NtWYjDcwVkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJmaQ7hj zrtLkiKA//AZMQDsDNnzMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmGy0RnzthBISKwdLzkOw5wFBpDYD6gm6Yg1sZjUpMfg+H3F40zd4R vh/RDe8EuFCKWpQ1kGqIYbsC2f/+ZUjGVK6i31fG2MqVGL9k464k3jrGR8fSUJTJ i0iq1WCV75RsFsO6+YcQYsl6Y7Y43sE5NCIFCg5XNjIbgKShyha2b4sB+w5I1g4d wQbT9ulsfuqSpE28kASQLrouVmm56mCG/zb6ekh1SDEyXlLZ6MlOj2WeWRd8QKBj AlNN+Gd+3VujaboXVfY9d36TDYlLq1fI5ig6yIgd4XA2ANG/CT2oaiSmEoy1tajw sHYs48T2g26VVt9LxxCMLwCzmfejN0Nr -----END CERTIFICATE-----Generated at Mon May 12 18:32:59 2025 by rpki-client