$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json) Hash identifier: 17dJcRB3JgWXWyg3WF1IYsAZHFmIzQNuhF59FbffmPE= Subject key identifier: D1:63:53:DB:26:18:9B:6E:9D:3D:C6:5B:85:41:29:22:40:EF:C1:2F Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft Manifest number: E4 Signing time: Fri 25 Apr 2025 04:38:36 +0000 Manifest this update: Fri 25 Apr 2025 04:38:36 +0000 Manifest next update: Fri 02 May 2025 04:38:36 +0000 Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: U7UHA6ikiDEce0+93e9b7AONbX0Cp8s4U5PDygx8AWY=) 2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552 Validity Not Before: Apr 25 04:38:36 2025 GMT Not After : May 2 04:38:36 2025 GMT Subject: CN=680b11cc-b096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8a:d6:70:66:64:6b:d0:f3:6f:e9:95:76:01: 17:b8:a1:0b:18:7d:b7:d9:cb:b4:d9:ad:77:ca:4d: 9f:53:74:06:43:27:f1:99:91:70:84:09:2b:71:f2: 63:33:ea:8d:76:4d:c5:21:82:a5:55:38:5e:a9:c8: 0b:e7:18:a1:f5:ae:75:2b:04:e0:84:43:c3:7d:d0: 1c:29:fe:73:bb:37:60:78:35:2a:34:05:c9:29:90: a2:37:cc:b9:98:1a:de:00:31:46:5b:6c:84:bc:52: 0e:d4:14:6e:a0:7d:4e:cc:70:26:80:26:ac:c0:40: 0b:cc:47:de:c8:64:5b:b1:b3:0d:80:b4:92:c7:b3: 37:c9:e6:fc:bf:e1:6b:55:51:47:54:26:ea:9e:34: 44:db:86:f2:34:5c:01:78:93:a1:6b:cb:ff:8e:81: da:be:7e:c9:54:6d:62:2e:a3:ea:ff:26:1e:6f:b3: c7:f3:03:c5:08:7e:68:17:4c:22:91:c4:26:d3:ee: d5:50:21:f3:cc:75:65:b6:f0:9f:fa:c3:05:06:ab: fa:a6:e3:a7:42:af:0e:64:80:c0:de:39:e2:7b:92: d4:fa:d5:07:4a:8d:34:72:2c:6a:87:07:43:e1:8f: 94:f4:e3:02:dc:3c:77:e1:35:94:f9:41:a1:51:58: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:63:53:DB:26:18:9B:6E:9D:3D:C6:5B:85:41:29:22:40:EF:C1:2F X509v3 Authority Key Identifier: keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:73:07:9b:5c:74:fd:a1:f4:4e:f8:d5:92:b9:14:8f:88:c9: b6:ba:3d:0e:dc:67:1c:bd:35:be:85:44:94:9a:b7:ed:0b:a5: 02:1a:69:4d:9b:d5:dd:03:51:3d:1b:09:62:46:dc:8c:3a:e0: f6:ec:ea:a5:8d:18:7e:ab:29:3f:01:24:0b:ef:6a:b6:5f:4c: 32:ce:4a:4a:a5:c5:bd:e2:54:f4:46:d7:ec:95:de:f3:90:28: 28:f9:ff:be:c5:91:98:ea:a9:e0:54:02:2c:99:36:85:cd:c5: a4:13:77:70:04:94:c3:d7:e7:09:6a:6e:d0:c1:91:1a:2e:0f: 63:63:45:3e:e1:ab:43:47:c4:ca:89:0a:ab:e4:52:d9:a8:75: ed:38:0e:82:61:84:f4:dc:d7:ba:87:b9:5c:f0:5e:b4:ac:0f: 68:cd:94:87:c8:9a:02:a2:38:0f:1f:ff:7e:db:ae:15:3b:5a: 92:21:79:b9:2d:67:06:ce:32:ec:86:19:ed:63:b7:fa:8e:d2: 0d:25:f2:8f:d2:86:c3:62:55:f4:cb:fd:77:65:c4:39:d7:83: 8e:aa:15:01:61:45:bd:36:b1:d5:12:80:20:ce:39:6d:55:3f: 26:c9:35:54:0e:a7:ab:38:b3:4e:41:01:15:03:ea:2f:ab:a3: d9:d1:82:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzY0RjUxMTAvBgNVBAUTKENDQjhFMDhGOTk5MEE3NTUzMUU5MzZBREIwNkRCQUNB QTczMUI1NTIwHhcNMjUwNDI1MDQzODM2WhcNMjUwNTAyMDQzODM2WjAYMRYwFAYD VQQDEw02ODBiMTFjYy1iMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA34rWcGZka9Dzb+mVdgEXuKELGH232cu02a13yk2fU3QGQyfxmZFwhAkrcfJj M+qNdk3FIYKlVTheqcgL5xih9a51KwTghEPDfdAcKf5zuzdgeDUqNAXJKZCiN8y5 mBreADFGW2yEvFIO1BRuoH1OzHAmgCaswEALzEfeyGRbsbMNgLSSx7M3yeb8v+Fr VVFHVCbqnjRE24byNFwBeJOha8v/joHavn7JVG1iLqPq/yYeb7PH8wPFCH5oF0wi kcQm0+7VUCHzzHVltvCf+sMFBqv6puOnQq8OZIDA3jnie5LU+tUHSo00cixqhwdD 4Y+U9OMC3Dx34TWU+UGhUVjPiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFjU9sm GJtunT3GW4VBKSJA78EvMB8GA1UdIwQYMBaAFMy44I+ZkKdVMek2rbBtusqnMbVS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjRGNS8zQTNBMjEwRUQ5 RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAxVXg2VGF0c0cyNnlxY3h0 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pMamdqNW1RcDFVeDZUYXRzRzI2eXFjeHRWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NjRGNS8zQTNBMjEwRUQ5RTIxMUVFOUJBRTM3MkVDNEY5QUUwMi96TGpnajVtUXAx VXg2VGF0c0cyNnlxY3h0VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKcwebXHT9ofRO+NWSuRSPiMm2uj0O3GccvTW+hUSUmrftC6UCGmlN m9XdA1E9GwliRtyMOuD27OqljRh+qyk/ASQL72q2X0wyzkpKpcW94lT0Rtfsld7z kCgo+f++xZGY6qngVAIsmTaFzcWkE3dwBJTD1+cJam7QwZEaLg9jY0U+4atDR8TK iQqr5FLZqHXtOA6CYYT03Ne6h7lc8F60rA9ozZSHyJoCojgPH/9+264VO1qSIXm5 LWcGzjLshhntY7f6jtINJfKP0obDYlX0y/13ZcQ514OOqhUBYUW9NrHVEoAgzjlt VT8myTVUDqerOLNOQQEVA+ovq6PZ0YK8 -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:26 2025 by rpki-client