$ rpki-client -vvf rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft File: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft (raw, json) Hash identifier: NyewxQ1x1un+HlJRhO0G+ng+jWEOsZ7P0GgWNv11kaM= Subject key identifier: 9E:8C:5C:80:A1:BD:B8:82:2C:5C:8C:43:CD:6C:1F:BE:14:90:BA:01 Authority key identifier: CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D Certificate issuer: /CN=A91594AE/serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Certificate serial: 0AC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft Manifest number: 0ABC Signing time: Sat 14 Jun 2025 19:19:07 +0000 Manifest this update: Sat 14 Jun 2025 19:19:06 +0000 Manifest next update: Sat 21 Jun 2025 19:19:06 +0000 Files and hashes: 1: zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl (hash: Fqw60/rbnHSDztt3JHzqgCSWbx9+suic4wOgvL4L+jA=) 2: 38CAF4EC52B911EAACE8041BC4F9AE02.roa (hash: lj/CFwKu+N9KL+BN8rOtiVH/zU3sp7+mG9hyAnPkezU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2756 (0xac4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91594AE, serialNumber=CDA47E0A1EEB525F3B5A0FAFB2FA0DBB363BFA4D Validity Not Before: Jun 14 19:19:06 2025 GMT Not After : Jun 21 19:19:06 2025 GMT Subject: CN=684dcb2a-edc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:39:dc:95:c4:14:aa:20:35:88:2d:f6:87: eb:fa:2f:ed:e7:e9:3b:f2:96:d8:8b:ba:ba:c6:f8: cb:b4:52:16:3a:ec:44:64:df:35:0b:52:df:77:3e: 2d:39:3e:c5:c0:04:c1:24:d5:08:bf:d0:2a:93:11: 14:bc:a3:99:d2:d0:52:91:b4:aa:37:38:02:1e:16: b6:ba:99:1c:73:3e:11:46:7b:a4:e3:eb:ce:f3:8e: e3:36:d9:07:7d:14:9f:53:db:8c:98:46:7c:4a:af: e8:74:ba:22:b8:04:92:dc:4c:bf:90:22:75:08:da: 85:c3:56:83:78:ea:89:55:44:0f:97:52:bd:8a:06: 41:62:68:59:9a:f7:9a:1e:e7:55:50:4e:ab:e6:29: a8:7a:81:72:8d:7e:0f:8d:24:ce:42:8b:34:db:6b: 62:be:7c:26:d1:e4:b7:fd:06:33:c4:77:71:4a:cc: 29:e0:72:fd:d8:f7:fd:34:f3:42:16:fb:9d:28:07: 54:68:af:91:ae:c8:c8:4d:c7:11:aa:0a:4d:bc:b5: 76:ad:9d:c7:33:6f:5e:39:53:e1:10:ff:ca:d6:05: 55:d6:0b:33:21:56:34:97:89:53:e8:f6:89:9e:6c: ee:67:13:f5:b0:83:0b:07:d3:c0:5b:0f:e2:1a:0b: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8C:5C:80:A1:BD:B8:82:2C:5C:8C:43:CD:6C:1F:BE:14:90:BA:01 X509v3 Authority Key Identifier: keyid:CD:A4:7E:0A:1E:EB:52:5F:3B:5A:0F:AF:B2:FA:0D:BB:36:3B:FA:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91594AE/3D8B8C4852B511EAA4A9D20EC4F9AE02/zaR-Ch7rUl87Wg-vsvoNuzY7-k0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:3a:b1:89:bd:60:ed:7e:a1:3d:73:09:1b:a4:e4:bb:de: 59:86:07:7d:8f:cb:01:30:13:91:5c:f2:b7:e8:40:98:0e:93: 5d:13:eb:19:af:8f:03:14:96:8b:2c:09:4a:f5:9e:ae:c5:a2: 6e:3e:7d:c7:e9:4b:45:22:04:22:c7:b4:14:1d:27:3f:96:ef: f6:47:d7:23:3f:20:cf:06:c3:cb:3e:d6:61:93:46:31:02:24: 3c:52:7e:b4:dd:68:90:05:dd:d2:e3:0a:d9:e2:c6:44:2a:43: 47:5b:e6:21:e9:3f:d4:6c:be:90:61:d4:30:63:33:4c:e3:32: cb:6a:d2:1d:fc:2b:da:84:18:a3:0d:8d:aa:ba:97:6e:fe:cf: 56:9e:22:d1:a9:65:a1:9c:6a:c0:7c:fc:91:87:f9:a9:96:79: 03:1d:7f:57:5f:68:24:6b:75:15:36:4a:81:b3:8b:ee:04:9e: da:e8:98:2f:5e:fc:a4:0d:55:13:9e:85:b5:4c:5b:79:3e:58: b7:cb:c8:e3:8c:09:72:21:e1:b9:5c:12:1b:9b:a1:7e:24:87: 8e:63:36:23:c2:0b:68:d1:81:e9:9d:6d:75:73:aa:db:cb:a5: bc:61:6f:3a:1c:cc:c6:a2:03:01:65:e2:2d:e6:44:af:b3:22: f5:fe:ec:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTk0QUUxMTAvBgNVBAUTKENEQTQ3RTBBMUVFQjUyNUYzQjVBMEZBRkIyRkEwREJC MzYzQkZBNEQwHhcNMjUwNjE0MTkxOTA2WhcNMjUwNjIxMTkxOTA2WjAYMRYwFAYD VQQDEw02ODRkY2IyYS1lZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTQ53JXEFKogNYgt9ofr+i/t5+k78pbYi7q6xvjLtFIWOuxEZN81C1Lfdz4t OT7FwATBJNUIv9AqkxEUvKOZ0tBSkbSqNzgCHha2upkccz4RRnuk4+vO847jNtkH fRSfU9uMmEZ8Sq/odLoiuASS3Ey/kCJ1CNqFw1aDeOqJVUQPl1K9igZBYmhZmvea HudVUE6r5imoeoFyjX4PjSTOQos022tivnwm0eS3/QYzxHdxSswp4HL92Pf9NPNC FvudKAdUaK+RrsjITccRqgpNvLV2rZ3HM29eOVPhEP/K1gVV1gszIVY0l4lT6PaJ nmzuZxP1sIMLB9PAWw/iGgvzIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6MXICh vbiCLFyMQ81sH74UkLoBMB8GA1UdIwQYMBaAFM2kfgoe61JfO1oPr7L6Dbs2O/pN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OTRBRS8zRDhCOEM0ODUy QjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVsODdXZy12c3ZvTnV6WTct azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3phUi1DaDdyVWw4N1dnLXZzdm9OdXpZNy1rMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OTRBRS8zRDhCOEM0ODUyQjUxMUVBQTRBOUQyMEVDNEY5QUUwMi96YVItQ2g3clVs ODdXZy12c3ZvTnV6WTctazAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3Tqxib1g7X6hPXMJG6Tku95Zhgd9j8sBMBORXPK36ECYDpNdE+sZ r48DFJaLLAlK9Z6uxaJuPn3H6UtFIgQix7QUHSc/lu/2R9cjPyDPBsPLPtZhk0Yx AiQ8Un603WiQBd3S4wrZ4sZEKkNHW+Yh6T/UbL6QYdQwYzNM4zLLatId/CvahBij DY2qupdu/s9WniLRqWWhnGrAfPyRh/mplnkDHX9XX2gka3UVNkqBs4vuBJ7a6Jgv XvykDVUTnoW1TFt5Pli3y8jjjAlyIeG5XBIbm6F+JIeOYzYjwgto0YHpnW11c6rb y6W8YW86HMzGogMBZeIt5kSvsyL1/uxD -----END CERTIFICATE-----Generated at Sun Jun 15 09:38:51 2025 by rpki-client