$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json) Hash identifier: A+WT80B/VtwZZPCdNb2+WwnwvSWpZZqpRtDLDSJj+Pw= Subject key identifier: A9:4D:9B:74:95:6D:68:FA:73:7F:C7:33:EE:56:13:76:AA:EF:54:38 Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft Manifest number: 96 Signing time: Fri 09 May 2025 05:25:08 +0000 Manifest this update: Fri 09 May 2025 05:25:08 +0000 Manifest next update: Fri 16 May 2025 05:25:08 +0000 Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: FfrJXzdjnQyyKQKhuX6KCe8F/gkaUidJz5nneLuPCWs=) 2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: Y3ZFXjyQq0LuHhQHwB/WF8wGIt775M6n4ea3rF+TXp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5 Validity Not Before: May 9 05:25:08 2025 GMT Not After : May 16 05:25:08 2025 GMT Subject: CN=681d91b4-92eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:6f:4a:15:12:77:5e:f4:1d:a6:fb:b6:44: 61:61:60:77:e5:71:42:bf:1e:d0:dc:9b:fe:88:47: ef:fc:ab:85:2a:9d:39:d3:36:f6:25:d8:20:bf:e7: 65:32:ea:93:7d:56:be:10:58:b3:e5:26:9a:40:dd: f4:c9:d0:a2:c4:e6:51:da:c5:e7:a1:ff:f1:19:35: a8:25:bf:4e:62:39:64:b2:df:04:cd:f5:c0:5c:1e: 6f:da:81:c0:3a:7c:64:3c:ed:a1:40:68:df:7e:13: 11:ca:ef:51:b3:15:6e:21:b1:2b:47:6d:d6:6c:f1: 9b:d7:00:cb:52:e5:29:9d:ab:a8:0e:15:d1:55:9f: 37:60:a3:a2:ed:df:e1:2b:c7:32:42:d8:23:96:03: 79:79:46:0f:5d:e4:c2:f7:98:5f:f7:5d:ff:9c:af: 52:18:0c:fc:aa:be:5c:34:a7:79:13:fc:e3:d8:ea: af:a3:bc:2b:41:c1:c4:ba:f8:55:0d:76:17:f6:f1: 68:cd:aa:75:c9:02:76:c9:f7:b7:4a:ef:90:3d:08: 11:ff:49:7f:ec:69:21:88:70:cf:dc:7e:92:13:6f: 55:ce:1d:d4:23:c1:0c:9b:a2:d9:48:33:b3:36:25: af:4d:fc:57:8a:d7:be:e9:b1:60:c9:34:ab:3a:bc: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4D:9B:74:95:6D:68:FA:73:7F:C7:33:EE:56:13:76:AA:EF:54:38 X509v3 Authority Key Identifier: keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:fe:0d:99:09:80:4a:5a:25:64:d2:81:bd:25:81:1e:c5:94: c7:13:95:7a:ca:d6:08:8a:e8:8a:40:6a:44:44:57:fa:d9:ca: 22:86:ea:0e:29:d5:0e:a2:f1:4c:e7:1a:a9:5a:2c:1e:a3:90: e0:ad:53:fd:a8:68:53:78:bf:05:ff:d8:b9:32:16:64:74:e3: 9a:53:e0:5c:22:fc:77:4d:ed:6c:77:9c:fe:5a:4b:23:8c:fd: e0:61:ee:20:0d:cb:3d:67:a0:ed:93:05:a5:e4:16:97:82:f2: 00:3a:67:a8:4e:54:d6:a3:72:0c:32:08:7d:1e:fc:99:30:e5: b1:5f:fc:ee:8c:d2:e2:54:87:c5:10:d5:df:22:20:d1:ad:ec: d8:f9:75:e0:bb:ad:22:64:e2:1d:a5:6a:1e:28:54:3e:1a:c0: a5:b6:de:08:d9:a5:7f:b8:68:8e:bc:aa:88:b8:38:96:33:5c: 34:38:2a:1a:a4:ad:50:f9:8b:e6:2b:88:da:68:bb:db:ae:6c: 46:4f:4c:84:42:22:c7:fd:99:12:f4:ef:e6:72:32:cb:f3:9b: 08:4c:e3:69:5e:79:22:9b:54:de:a5:8f:a2:28:6b:d2:2e:b8: 0d:52:3b:5d:52:75:1f:8c:55:d3:33:eb:b8:60:26:98:92:1b: fa:be:20:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz NzE4MzJDQTUwHhcNMjUwNTA5MDUyNTA4WhcNMjUwNTE2MDUyNTA4WjAYMRYwFAYD VQQDEw02ODFkOTFiNC05MmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/lvShUSd170Hab7tkRhYWB35XFCvx7Q3Jv+iEfv/KuFKp050zb2Jdggv+dl MuqTfVa+EFiz5SaaQN30ydCixOZR2sXnof/xGTWoJb9OYjlkst8EzfXAXB5v2oHA OnxkPO2hQGjffhMRyu9RsxVuIbErR23WbPGb1wDLUuUpnauoDhXRVZ83YKOi7d/h K8cyQtgjlgN5eUYPXeTC95hf913/nK9SGAz8qr5cNKd5E/zj2Oqvo7wrQcHEuvhV DXYX9vFozap1yQJ2yfe3Su+QPQgR/0l/7GkhiHDP3H6SE29Vzh3UI8EMm6LZSDOz NiWvTfxXite+6bFgyTSrOrwxtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKlNm3SV bWj6c3/HM+5WE3aq71Q4MB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb/g2ZCYBKWiVk0oG9JYEexZTHE5V6ytYIiuiKQGpERFf62coihuoO KdUOovFM5xqpWiweo5DgrVP9qGhTeL8F/9i5MhZkdOOaU+BcIvx3Te1sd5z+Wksj jP3gYe4gDcs9Z6DtkwWl5BaXgvIAOmeoTlTWo3IMMgh9HvyZMOWxX/zujNLiVIfF ENXfIiDRrezY+XXgu60iZOIdpWoeKFQ+GsCltt4I2aV/uGiOvKqIuDiWM1w0OCoa pK1Q+YvmK4jaaLvbrmxGT0yEQiLH/ZkS9O/mcjLL85sITONpXnkim1TepY+iKGvS LrgNUjtdUnUfjFXTM+u4YCaYkhv6viBI -----END CERTIFICATE-----Generated at Sat May 10 22:02:32 2025 by rpki-client