$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: StI6/y8Xvk9gECTNwNh5rPwAbLaoP6L3CsIbxqjSHK4= Subject key identifier: 8E:48:D4:A3:5B:4E:06:ED:3E:43:DD:7B:44:68:23:8D:75:69:E6:9F Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0E32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2990 Signing time: Sat 10 May 2025 16:52:59 +0000 Manifest this update: Sat 10 May 2025 16:52:59 +0000 Manifest next update: Sat 17 May 2025 16:52:59 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: AqzZY0K8QdAAznG8ZyIZkVPDL5xdMOwrbFMnyX83+yk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3634 (0xe32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: May 10 16:52:59 2025 GMT Not After : May 17 16:52:59 2025 GMT Subject: CN=681f846b-affe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a2:96:05:34:de:fe:a2:cb:4a:28:09:4d:ec: 3e:bc:f0:fb:f7:99:9c:1c:6b:7a:3d:8b:4b:b1:5b: a0:39:41:43:68:25:4f:0f:d6:42:dc:7a:f2:41:77: 5b:e1:ed:e1:c1:f4:c5:74:de:09:fa:5f:24:e3:b1: 34:8b:1e:23:27:76:ca:57:14:42:38:b2:06:0f:cf: d6:79:ed:c3:5c:0b:ec:89:f5:dd:97:a5:d1:69:f5: e2:20:d4:16:a5:73:0c:b7:b8:44:a5:22:05:ba:d2: 63:af:61:84:83:46:be:b9:1a:78:d2:c5:d3:90:4a: 62:6b:6f:cf:1b:7d:a3:96:d9:6e:e3:c8:da:91:40: 18:da:61:e2:97:d1:10:fb:fa:1c:bd:ed:36:63:43: 68:cd:f5:8b:32:81:cb:b7:a3:d7:2f:ad:fd:6a:20: 98:ed:c4:2a:c4:f4:ce:3e:c5:91:dd:8e:36:8b:12: 31:72:1f:be:5f:5f:a5:2c:b2:ff:08:1f:19:52:13: d8:59:03:3e:b0:cc:44:05:22:0e:2a:a3:71:1c:c7: 05:f3:ce:02:c1:f9:fc:e3:14:81:4d:a3:95:b4:39: 50:0e:1d:da:e8:ac:71:40:e7:78:68:06:eb:c6:c4: d3:43:6b:f8:6d:b6:f7:0e:3e:62:62:10:8d:c4:13: 79:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:48:D4:A3:5B:4E:06:ED:3E:43:DD:7B:44:68:23:8D:75:69:E6:9F X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:d9:33:c4:3d:47:bc:35:a6:c8:fa:ae:77:25:c2:ae:13:ca: be:9d:da:01:a0:ab:1a:5e:c2:f0:6c:e0:87:ed:42:d0:fb:9a: f4:b9:4c:c9:55:ca:95:8a:5f:83:05:90:e8:a1:3f:99:03:73: 49:45:67:36:6f:c0:b9:c9:dc:d5:68:16:25:cc:bb:e4:e9:6e: cb:83:da:e1:32:82:86:3e:77:fa:8c:af:e1:b6:a0:5b:c1:1f: 4f:2c:f1:36:35:45:6e:40:c6:a5:4f:2b:a1:05:dd:4c:23:00: 31:b0:4f:41:f5:1b:04:f0:7e:b7:03:5a:9c:40:8d:a8:e7:99: a8:d8:ae:08:0e:0b:e4:80:5a:71:53:ac:89:f7:a3:2f:2e:db: be:8f:e2:e6:25:b6:cf:1f:dc:5b:5d:a8:18:e2:3a:52:b3:ff: 27:7c:6b:18:d3:40:87:bf:77:c2:9c:23:05:85:89:af:c0:e8: 7d:7b:9d:7a:9e:dd:cd:3b:cd:bd:77:d9:80:f4:74:79:1d:f5: 6d:d7:d4:bd:89:4e:be:66:58:d0:2a:89:7e:a9:4c:fc:28:76: 12:f9:5a:05:66:cc:a7:c3:60:eb:47:43:b8:3b:41:bc:3d:35: dd:79:65:5c:28:31:bf:98:fd:d0:ad:34:f1:3d:24:bc:5f:34: 54:ca:46:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUwNTEwMTY1MjU5WhcNMjUwNTE3MTY1MjU5WjAYMRYwFAYD VQQDEw02ODFmODQ2Yi1hZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwKKWBTTe/qLLSigJTew+vPD795mcHGt6PYtLsVugOUFDaCVPD9ZC3HryQXdb 4e3hwfTFdN4J+l8k47E0ix4jJ3bKVxRCOLIGD8/Wee3DXAvsifXdl6XRafXiINQW pXMMt7hEpSIFutJjr2GEg0a+uRp40sXTkEpia2/PG32jltlu48jakUAY2mHil9EQ +/ocve02Y0NozfWLMoHLt6PXL639aiCY7cQqxPTOPsWR3Y42ixIxch++X1+lLLL/ CB8ZUhPYWQM+sMxEBSIOKqNxHMcF884Cwfn84xSBTaOVtDlQDh3a6KxxQOd4aAbr xsTTQ2v4bbb3Dj5iYhCNxBN5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5I1KNb TgbtPkPde0RoI411aeafMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBy2TPEPUe8NabI+q53JcKuE8q+ndoBoKsaXsLwbOCH7ULQ+5r0uUzJ VcqVil+DBZDooT+ZA3NJRWc2b8C5ydzVaBYlzLvk6W7Lg9rhMoKGPnf6jK/htqBb wR9PLPE2NUVuQMalTyuhBd1MIwAxsE9B9RsE8H63A1qcQI2o55mo2K4IDgvkgFpx U6yJ96MvLtu+j+LmJbbPH9xbXagY4jpSs/8nfGsY00CHv3fCnCMFhYmvwOh9e516 nt3NO829d9mA9HR5HfVt19S9iU6+ZljQKol+qUz8KHYS+VoFZsynw2DrR0O4O0G8 PTXdeWVcKDG/mP3QrTTxPSS8XzRUykYu -----END CERTIFICATE-----Generated at Sun May 11 15:24:38 2025 by rpki-client