$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: sMWlltbFcvIBP6FARBdvMgdXj8PRB/2N8RZer3mTPZY= Subject key identifier: 8F:E9:56:13:FC:B0:26:A3:34:DD:5F:B4:49:2E:82:0F:69:94:4F:C2 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1109 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1101 Signing time: Thu 24 Apr 2025 17:17:37 +0000 Manifest this update: Thu 24 Apr 2025 17:17:36 +0000 Manifest next update: Thu 01 May 2025 17:17:36 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: GPLu7Nzd71Eq2n0zSw9mzqZowFN2kUj4WuHy8A5G+L4=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4361 (0x1109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Apr 24 17:17:36 2025 GMT Not After : May 1 17:17:36 2025 GMT Subject: CN=680a7231-ce63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9f:ad:00:0e:b6:0d:f2:fc:0b:24:2c:b1:80: 43:79:4c:4f:b7:00:b6:87:ec:e0:2d:78:51:d7:a7: 61:3e:f0:cf:81:a4:17:fb:ec:90:60:96:32:52:53: ab:e9:cc:72:28:8a:dc:ed:16:ce:3a:d5:ac:71:77: e6:3c:8b:d8:28:1d:9e:4e:64:29:22:03:32:bd:df: 21:47:82:18:1f:dd:a2:83:9d:41:e9:19:43:e5:c3: 7a:94:80:17:29:34:2d:8f:dd:73:80:e2:a1:51:37: 45:f3:bf:ff:ab:4f:7a:18:4f:6b:f8:83:f4:a9:9c: 5c:ca:1f:e6:fe:cd:8c:71:5c:34:53:56:20:63:f9: 11:60:a7:2f:06:27:8c:b7:aa:07:bd:62:73:df:ae: c8:a8:e8:b3:25:5b:56:6b:ba:b0:ef:9c:0c:6b:58: 3d:a9:68:63:d0:9b:c5:2d:68:9e:70:c3:1b:1d:ae: f5:a0:dc:93:43:f2:f8:b5:86:7b:aa:4c:b3:ef:07: ce:ec:8f:2f:5a:09:48:58:a6:03:3f:17:6c:1e:85: 98:c3:1e:9d:48:5d:c0:96:8b:6d:c5:4d:2b:d5:5e: 09:de:85:02:57:33:f4:eb:24:1f:c3:78:70:5d:5d: 13:18:ef:9a:d0:8c:3b:66:53:bc:c1:54:56:c7:c3: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E9:56:13:FC:B0:26:A3:34:DD:5F:B4:49:2E:82:0F:69:94:4F:C2 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:dd:cd:c7:87:00:b9:f2:b1:c3:fb:78:43:83:5c:8d:69:86: 41:f4:76:dc:c0:33:68:0f:89:f1:74:60:3a:ce:ed:f2:fa:f2: 05:4e:6c:1b:d0:b5:4d:b0:22:2f:e0:fb:55:9e:fe:19:90:5f: d8:08:36:7a:6b:ff:f9:22:77:7f:4e:bd:fc:a0:f6:82:81:91: 59:0e:47:14:54:ae:2d:04:0f:d3:95:a5:e8:22:72:e4:3d:35: 13:05:a0:84:a8:2f:7d:17:ce:b0:a4:a8:b9:15:d0:90:07:40: ab:03:78:70:cf:59:d1:40:d1:dc:d6:62:74:49:b2:9f:24:3f: 0a:ea:81:31:5e:3e:27:66:44:d2:cb:4c:45:3e:b9:15:fc:70: 26:0d:f7:25:e8:55:24:df:96:5b:a1:d3:c5:4f:55:58:ec:33: ce:25:fc:f9:47:1e:fc:fc:23:f6:6e:64:35:ef:e1:9b:fd:9d: d3:58:8d:9e:89:24:58:b8:82:d0:fa:e2:f6:15:0a:4b:a5:bc: 9d:18:ee:1a:e2:6d:5b:2e:aa:9b:38:db:27:16:53:e2:d3:b7: 48:80:a5:f2:0a:b0:14:b7:eb:e2:9f:d9:4e:ff:00:7b:70:a8: 2b:4f:46:d9:49:08:1b:6e:17:2e:7e:86:7c:c3:9a:ca:f2:ad: aa:bf:cc:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUwNDI0MTcxNzM2WhcNMjUwNTAxMTcxNzM2WjAYMRYwFAYD VQQDEw02ODBhNzIzMS1jZTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs5+tAA62DfL8CyQssYBDeUxPtwC2h+zgLXhR16dhPvDPgaQX++yQYJYyUlOr 6cxyKIrc7RbOOtWscXfmPIvYKB2eTmQpIgMyvd8hR4IYH92ig51B6RlD5cN6lIAX KTQtj91zgOKhUTdF87//q096GE9r+IP0qZxcyh/m/s2McVw0U1YgY/kRYKcvBieM t6oHvWJz367IqOizJVtWa7qw75wMa1g9qWhj0JvFLWiecMMbHa71oNyTQ/L4tYZ7 qkyz7wfO7I8vWglIWKYDPxdsHoWYwx6dSF3AlottxU0r1V4J3oUCVzP06yQfw3hw XV0TGO+a0Iw7ZlO8wVRWx8P+uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/pVhP8 sCajNN1ftEkugg9plE/CMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/3c3HhwC58rHD+3hDg1yNaYZB9HbcwDNoD4nxdGA6zu3y+vIFTmwb 0LVNsCIv4PtVnv4ZkF/YCDZ6a//5Ind/Tr38oPaCgZFZDkcUVK4tBA/TlaXoInLk PTUTBaCEqC99F86wpKi5FdCQB0CrA3hwz1nRQNHc1mJ0SbKfJD8K6oExXj4nZkTS y0xFPrkV/HAmDfcl6FUk35ZbodPFT1VY7DPOJfz5Rx78/CP2bmQ17+Gb/Z3TWI2e iSRYuILQ+uL2FQpLpbydGO4a4m1bLqqbONsnFlPi07dIgKXyCrAUt+vin9lO/wB7 cKgrT0bZSQgbbhcufoZ8w5rK8q2qv8w2 -----END CERTIFICATE-----Generated at Sat Apr 26 05:12:18 2025 by rpki-client