$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: nZLzAkblm8AWidm9SMu3EfuHdHc4s61WVpNqLZ1rN4U= Subject key identifier: C6:97:FA:20:B8:44:DC:B6:FB:65:A3:CD:0A:2F:C1:78:78:6B:CE:6A Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: 6A Signing time: Mon 05 May 2025 05:45:56 +0000 Manifest this update: Mon 05 May 2025 05:45:55 +0000 Manifest next update: Mon 12 May 2025 05:45:55 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: QHIpQeFaZccieBadpP12AiALoaO3MOm4ncm5YT4Cnrk=) 2: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: Yqud2bTFjov+C1pdCbSlf5tvHHuGfxaolxWJPbrmQo0=) 3: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: 0lusvoRBBLU3mMlixQdO0guOsXhOe5oiw811RsEa7eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:10:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: May 5 05:45:55 2025 GMT Not After : May 12 05:45:55 2025 GMT Subject: CN=68185094-f37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:59:5a:b4:47:30:35:b3:f8:54:69:7f:80:ed: ac:ec:01:0e:ef:29:d9:0f:69:0c:e9:cf:61:59:5b: b7:95:79:7d:cb:df:86:82:15:13:f5:d8:0d:50:33: 12:b2:9e:2f:cf:c4:45:c8:ef:35:88:d5:fa:19:0b: 76:1c:ac:2e:f8:87:6e:72:c0:a8:db:3a:da:b5:e5: 16:3b:19:ee:79:52:88:85:29:e2:f8:d1:57:50:98: 7e:13:1c:a7:f4:90:40:ae:e8:88:45:88:b2:6a:0f: c9:42:d4:ad:32:f0:e3:20:0c:62:19:5b:1a:54:e7: 25:cd:56:f8:43:bc:45:15:21:72:3c:9b:b1:f1:cd: aa:b6:7e:ed:7f:2d:10:39:30:5a:b1:ed:9b:fc:ae: 71:8b:7e:62:b4:4e:83:25:45:d3:75:8a:6a:d2:5d: 6b:c2:e8:b3:bf:a6:36:79:31:ce:b9:b6:fc:64:c8: 10:37:35:8f:e4:14:07:6b:df:05:0a:00:d6:cc:ba: 7c:d4:2c:c8:9d:21:2c:6e:d6:f2:c5:2f:5e:ef:0e: 4a:9a:cd:61:6a:9a:12:1e:4e:c0:57:04:a9:85:a0: d9:b9:11:5c:da:07:1b:a9:f5:0d:e5:ae:66:6a:3c: 32:c8:fa:36:58:d2:79:87:b0:e0:60:7c:01:c4:28: b2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:97:FA:20:B8:44:DC:B6:FB:65:A3:CD:0A:2F:C1:78:78:6B:CE:6A X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:59:dd:b4:cf:fb:b2:61:4e:6f:80:4c:72:ba:cd:0e:1a:15: 38:24:1b:25:da:57:e6:a3:d6:a6:14:05:af:80:95:7f:9f:7a: 76:78:b5:23:11:60:1e:eb:2f:3d:64:eb:b7:04:02:e3:cd:42: 74:ab:9e:99:7b:40:7d:f7:40:a4:a8:09:08:f9:8e:34:1b:27: d6:7d:27:51:8a:c0:dc:a6:8a:6f:e9:e4:fd:e6:3e:3d:c8:b5: 0f:34:be:f7:8b:b0:82:6c:de:04:64:3b:e2:c1:f9:58:eb:85: 10:21:df:fb:e4:c6:77:b1:a6:e7:d7:76:ea:4d:5d:0d:fb:b7: 01:15:e4:b6:48:24:cf:d5:ef:3d:2d:34:00:b2:7b:89:13:10: ff:38:5f:0a:4e:82:89:22:58:ff:c9:1e:b0:9e:b3:f6:4f:26: cb:95:51:3f:70:98:56:48:10:68:50:b9:87:78:df:60:4a:3f: a8:47:59:76:77:f8:86:e1:35:e4:8d:9c:59:58:44:98:3e:8c: 30:90:f0:3e:7e:d2:13:d9:89:2d:d4:5c:c9:0f:80:b8:b7:d7: b5:05:c0:1c:fb:a3:d6:ee:f7:e4:03:ca:2e:96:f2:b7:49:d6: 10:06:12:d8:38:92:5e:02:01:39:aa:d2:84:a6:8b:21:10:b6: 03:28:44:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD Q0FGMTExMC8GA1UEBRMoNjY5NDFEQTdFQUYzMEU5MzQ0RTAzMjFGMEI3NTRFN0FF RkZDMzUyOTAeFw0yNTA1MDUwNTQ1NTVaFw0yNTA1MTIwNTQ1NTVaMBgxFjAUBgNV BAMTDTY4MTg1MDk0LWYzN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7WVq0RzA1s/hUaX+A7azsAQ7vKdkPaQzpz2FZW7eVeX3L34aCFRP12A1QMxKy ni/PxEXI7zWI1foZC3YcrC74h25ywKjbOtq15RY7Ge55UoiFKeL40VdQmH4THKf0 kECu6IhFiLJqD8lC1K0y8OMgDGIZWxpU5yXNVvhDvEUVIXI8m7Hxzaq2fu1/LRA5 MFqx7Zv8rnGLfmK0ToMlRdN1imrSXWvC6LO/pjZ5Mc65tvxkyBA3NY/kFAdr3wUK ANbMunzULMidISxu1vLFL17vDkqazWFqmhIeTsBXBKmFoNm5EVzaBxup9Q3lrmZq PDLI+jZY0nmHsOBgfAHEKLL1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxpf6ILhE 3Lb7ZaPNCi/BeHhrzmowHwYDVR0jBBgwFoAUZpQdp+rzDpNE4DIfC3VOeu/8NSkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDQUYxLzAwMzEzQzMyOEFB RDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5T ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnBRZHAtcnpEcE5FNERJZkMzVk9ldV84TlNrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND QUYxLzAwMzEzQzMyOEFBRDExRUZCRUY5MTY2QUM0RjlBRTAyL1pwUWRwLXJ6RHBO RTRESWZDM1ZPZXVfOE5Tay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADdZ3bTP+7JhTm+ATHK6zQ4aFTgkGyXaV+aj1qYUBa+AlX+fenZ4tSMR YB7rLz1k67cEAuPNQnSrnpl7QH33QKSoCQj5jjQbJ9Z9J1GKwNymim/p5P3mPj3I tQ80vveLsIJs3gRkO+LB+VjrhRAh3/vkxnexpufXdupNXQ37twEV5LZIJM/V7z0t NACye4kTEP84XwpOgokiWP/JHrCes/ZPJsuVUT9wmFZIEGhQuYd432BKP6hHWXZ3 +IbhNeSNnFlYRJg+jDCQ8D5+0hPZiS3UXMkPgLi317UFwBz7o9bu9+QDyi6W8rdJ 1hAGEtg4kl4CATmq0oSmiyEQtgMoRJk= -----END CERTIFICATE-----Generated at Mon May 5 15:28:04 2025 by rpki-client