$ rpki-client -vvf rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft File: ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft (raw, json) Hash identifier: Ft5jvXTxw876X10VdMAt/M966yM+wm3+GzSJ9YsJhRM= Subject key identifier: DF:16:9E:E6:26:D1:75:B4:1D:44:C0:65:50:07:58:4B:98:39:8A:84 Authority key identifier: 66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C Certificate issuer: /CN=A91E923A/serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft Manifest number: 0DFF Signing time: Fri 16 May 2025 18:22:19 +0000 Manifest this update: Fri 16 May 2025 18:22:19 +0000 Manifest next update: Fri 23 May 2025 18:22:19 +0000 Files and hashes: 1: ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl (hash: lB2Ftw7yzx57J4B+1+wPTaSUcpMjx1A3viEo0vOR/4I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 18:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E923A, serialNumber=6638A604260FCCF2E9D8B20C1792ECA15DC76D5C Validity Not Before: May 16 18:22:19 2025 GMT Not After : May 23 18:22:19 2025 GMT Subject: CN=6827825b-819b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:b4:73:91:37:c4:43:54:d7:7f:25:e0:7c: da:55:93:74:93:28:cf:6d:4b:48:19:34:8b:22:61: 6b:5e:fc:6c:a6:88:55:c8:58:b9:d6:73:7a:3f:fd: a2:b9:e0:49:37:c2:7e:45:7b:a0:fd:8d:31:40:f8: 94:17:ad:9d:b8:94:f0:c5:9e:67:46:8e:3d:a9:ce: cf:54:09:9b:63:e1:28:ad:ad:17:55:59:b2:ad:d5: 10:be:fe:74:a5:42:7b:03:33:9f:2f:29:7b:cb:2c: 9c:a7:cd:90:92:11:c2:b5:3c:a4:29:9a:3b:47:11: 6d:ef:df:7b:98:95:a3:7f:e4:8b:8b:d9:54:75:95: d0:39:f0:8e:72:f8:7a:98:a9:01:72:6d:a1:8c:83: a0:e0:34:26:62:6d:5f:c9:f9:e0:af:13:0f:77:98: 80:31:be:af:63:91:28:11:23:5d:d5:66:cf:75:72: 03:22:92:7e:de:e3:ef:4c:60:ba:4f:c8:f8:fa:bf: fd:9e:ca:63:34:ca:a9:31:b6:2b:3a:f4:30:97:2b: 70:51:86:98:3d:62:18:89:64:62:7d:7f:b7:f6:ba: a7:8b:0c:d2:da:72:b6:ec:3c:1a:1c:9b:6c:23:e6: 86:f3:af:14:bd:4f:8a:db:b3:f9:86:aa:8a:c4:3e: 2a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:16:9E:E6:26:D1:75:B4:1D:44:C0:65:50:07:58:4B:98:39:8A:84 X509v3 Authority Key Identifier: keyid:66:38:A6:04:26:0F:CC:F2:E9:D8:B2:0C:17:92:EC:A1:5D:C7:6D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjimBCYPzPLp2LIMF5LsoV3HbVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E923A/C9B3CC54EC1111E98E0F8647C4F9AE02/ZjimBCYPzPLp2LIMF5LsoV3HbVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4a:92:20:2d:1a:46:26:59:7b:df:80:9c:13:15:58:ef:e5: e8:e8:6e:fd:28:5f:77:a8:d1:69:ea:a9:27:7e:63:81:4e:f1: 81:1b:f6:71:dc:2d:f1:9d:91:8c:d9:fc:a9:cd:74:e3:40:04: b3:4d:98:03:c5:01:2c:fa:cb:fe:18:3d:e7:f9:00:62:69:ee: 80:1a:3d:4f:c5:ef:f7:7d:3d:0c:71:9b:a2:96:aa:8b:c4:66: da:ac:bc:88:74:b4:e2:60:8b:05:31:ef:42:1a:de:77:69:51: 60:5f:47:b2:19:4d:7a:5d:35:f3:07:40:5f:32:71:f9:5c:2a: c1:3d:68:1b:97:84:44:f6:c5:8b:29:e0:06:ff:ea:ea:40:33: da:8b:86:92:fa:72:6f:d0:4c:d5:55:d6:62:ae:ac:53:56:d5: 37:7b:c0:35:e9:cb:c1:f2:65:ee:86:79:2a:e2:39:30:9e:3c: 28:bb:49:a6:b3:7a:f4:96:19:f8:01:98:13:51:87:f1:a7:7d: 02:72:90:69:29:b1:02:cd:cc:37:aa:c9:a3:74:b4:50:bc:ee: d2:d1:54:c3:3b:80:a4:3f:86:b6:3d:e3:22:f0:8d:5d:ec:54: 05:58:a9:52:68:a5:10:4e:56:01:08:c3:27:6b:dd:6b:20:bb: 47:1c:ca:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkyM0ExMTAvBgNVBAUTKDY2MzhBNjA0MjYwRkNDRjJFOUQ4QjIwQzE3OTJFQ0Ex NURDNzZENUMwHhcNMjUwNTE2MTgyMjE5WhcNMjUwNTIzMTgyMjE5WjAYMRYwFAYD VQQDEw02ODI3ODI1Yi04MTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJS0c5E3xENU138l4HzaVZN0kyjPbUtIGTSLImFrXvxspohVyFi51nN6P/2i ueBJN8J+RXug/Y0xQPiUF62duJTwxZ5nRo49qc7PVAmbY+Eora0XVVmyrdUQvv50 pUJ7AzOfLyl7yyycp82QkhHCtTykKZo7RxFt7997mJWjf+SLi9lUdZXQOfCOcvh6 mKkBcm2hjIOg4DQmYm1fyfngrxMPd5iAMb6vY5EoESNd1WbPdXIDIpJ+3uPvTGC6 T8j4+r/9nspjNMqpMbYrOvQwlytwUYaYPWIYiWRifX+39rqniwzS2nK27DwaHJts I+aG868UvU+K27P5hqqKxD4quQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8WnuYm 0XW0HUTAZVAHWEuYOYqEMB8GA1UdIwQYMBaAFGY4pgQmD8zy6diyDBeS7KFdx21c MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTIzQS9DOUIzQ0M1NEVD MTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQTHAyTElNRjVMc29WM0hi VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqaW1CQ1lQelBMcDJMSU1GNUxzb1YzSGJWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTIzQS9DOUIzQ0M1NEVDMTExMUU5OEUwRjg2NDdDNEY5QUUwMi9aamltQkNZUHpQ THAyTElNRjVMc29WM0hiVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATSpIgLRpGJll734CcExVY7+Xo6G79KF93qNFp6qknfmOBTvGBG/Zx 3C3xnZGM2fypzXTjQASzTZgDxQEs+sv+GD3n+QBiae6AGj1Pxe/3fT0McZuilqqL xGbarLyIdLTiYIsFMe9CGt53aVFgX0eyGU16XTXzB0BfMnH5XCrBPWgbl4RE9sWL KeAG/+rqQDPai4aS+nJv0EzVVdZirqxTVtU3e8A16cvB8mXuhnkq4jkwnjwou0mm s3r0lhn4AZgTUYfxp30CcpBpKbECzcw3qsmjdLRQvO7S0VTDO4CkP4a2PeMi8I1d 7FQFWKlSaKUQTlYBCMMna91rILtHHMrw -----END CERTIFICATE-----Generated at Fri May 16 22:25:18 2025 by rpki-client