$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: TQ65nEmboCyepwOm2Pf8sMRo+hwvgQfQDK1lOlFKhMQ= Subject key identifier: 83:ED:49:76:88:FD:3E:05:D8:CD:BE:B4:93:2D:3F:0E:80:E6:17:5F Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 34C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 34A2 Signing time: Sun 04 May 2025 14:44:00 +0000 Manifest this update: Sun 04 May 2025 14:44:00 +0000 Manifest next update: Sun 11 May 2025 14:43:59 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: C1ABZ8dKSvWY6sVFI3jhJITi42rw5c/ZQG6N0cIFdCI=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: Gk1l67dg5FNqnZfalpzkFwLJz8/jIZg966YRagGgh6M=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: hQzBarqE7y1xhvVkKj4n1pe4CbqvYvdULHNvM+oOS2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13506 (0x34c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: May 4 14:44:00 2025 GMT Not After : May 11 14:43:59 2025 GMT Subject: CN=68177d30-6c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3b:36:93:cc:a2:20:45:9e:24:e5:1d:24:f0: 58:f5:8c:e0:ff:2b:94:bc:85:8a:c7:99:be:f9:4e: ad:d6:ba:f5:2f:ed:11:51:fd:9b:6f:98:d0:59:8f: 92:71:95:44:c3:fb:ab:7d:7b:38:56:9c:90:da:f0: e4:00:ab:ba:c2:98:6f:e0:32:fc:67:06:99:67:1c: 57:cd:94:3a:3f:4d:7b:77:be:50:ff:a7:f3:dd:07: 2d:31:f5:1f:bd:f2:c6:45:51:a9:69:e7:90:19:10: 6c:b4:c3:fe:07:96:30:a4:83:7b:0d:b0:11:c2:d8: 67:67:32:e8:0d:3a:5b:83:61:8b:69:4f:8e:ba:12: 64:35:4a:d6:47:07:37:7a:e6:a7:cb:bb:7c:5b:11: be:4f:d3:98:c2:8f:d9:6a:19:68:17:a6:33:6b:a0: 7e:ed:0d:48:8b:d2:e8:d7:2f:51:cb:3a:1e:58:bc: 84:ba:87:09:a3:52:61:f2:1e:71:7d:e4:bf:87:44: f6:2a:fe:d9:5b:a4:79:95:6c:a1:f6:65:17:3c:8c: 31:b0:47:e0:47:78:29:8f:9c:69:1b:89:8b:c7:ba: 30:76:22:b4:9d:86:e8:3f:7b:e3:e7:26:b6:5a:88: d9:3a:f5:38:3b:e7:26:ed:66:88:1f:d1:84:c8:89: 25:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:ED:49:76:88:FD:3E:05:D8:CD:BE:B4:93:2D:3F:0E:80:E6:17:5F X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:72:0f:4e:6a:58:99:34:58:ab:76:69:b0:56:f8:cb:24:05: e9:7f:e6:4b:7c:04:a7:fe:f0:e5:6b:2a:1e:ec:b1:11:e3:d8: 24:78:c6:da:ce:16:77:55:c2:60:32:61:c2:6b:22:01:8d:53: e8:a0:8e:0f:2c:7a:1d:6a:25:ca:d2:1d:81:07:1b:66:c7:12: 99:43:ea:fe:d1:cd:cd:5c:04:32:4a:32:0f:09:25:13:d6:9c: e9:bc:92:eb:e2:dc:a4:91:3a:84:4f:fc:f4:f7:3a:da:c6:a5: 1a:1a:53:aa:87:30:5e:24:7c:c7:d6:e9:ac:a7:7b:5a:15:73: cd:85:c4:65:78:60:18:97:75:35:24:4f:b3:ca:cb:dc:d1:2a: 05:ec:4a:b1:05:94:5f:91:17:65:86:05:ef:8b:aa:d4:2c:1d: 41:3c:a7:30:b5:86:8c:e4:d4:f9:f9:7a:06:9a:e6:23:dc:55: f8:9d:08:2a:94:22:48:3b:95:58:93:0c:10:d0:89:44:ef:ee: 95:7d:55:4e:09:d5:c4:a6:ff:71:1a:85:19:0f:3b:58:c4:57: 3d:e9:1f:f4:68:54:27:9b:26:84:51:4f:39:28:91:1a:51:1b: 8d:a9:fa:d8:c8:0a:b2:b3:49:58:f6:9a:67:bd:7b:a1:0d:76: 1b:36:c7:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUwNTA0MTQ0NDAwWhcNMjUwNTExMTQ0MzU5WjAYMRYwFAYD VQQDEw02ODE3N2QzMC02YzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Ds2k8yiIEWeJOUdJPBY9Yzg/yuUvIWKx5m++U6t1rr1L+0RUf2bb5jQWY+S cZVEw/urfXs4VpyQ2vDkAKu6wphv4DL8ZwaZZxxXzZQ6P017d75Q/6fz3QctMfUf vfLGRVGpaeeQGRBstMP+B5YwpIN7DbARwthnZzLoDTpbg2GLaU+OuhJkNUrWRwc3 euany7t8WxG+T9OYwo/ZahloF6Yza6B+7Q1Ii9Lo1y9RyzoeWLyEuocJo1Jh8h5x feS/h0T2Kv7ZW6R5lWyh9mUXPIwxsEfgR3gpj5xpG4mLx7owdiK0nYboP3vj5ya2 WojZOvU4O+cm7WaIH9GEyIklaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPtSXaI /T4F2M2+tJMtPw6A5hdfMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbcg9OaliZNFirdmmwVvjLJAXpf+ZLfASn/vDlayoe7LER49gkeMba zhZ3VcJgMmHCayIBjVPooI4PLHodaiXK0h2BBxtmxxKZQ+r+0c3NXAQySjIPCSUT 1pzpvJLr4tykkTqET/z09zraxqUaGlOqhzBeJHzH1umsp3taFXPNhcRleGAYl3U1 JE+zysvc0SoF7EqxBZRfkRdlhgXvi6rULB1BPKcwtYaM5NT5+XoGmuYj3FX4nQgq lCJIO5VYkwwQ0IlE7+6VfVVOCdXEpv9xGoUZDztYxFc96R/0aFQnmyaEUU85KJEa URuNqfrYyAqys0lY9ppnvXuhDXYbNsfQ -----END CERTIFICATE-----Generated at Mon May 5 01:54:11 2025 by rpki-client