$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: 2ZU2cjpFnwsZvyptw5Binnnbiyte6yPKWNIgwpfvUD4= Subject key identifier: 5B:A3:C0:86:60:AE:BF:27:F1:0C:12:A6:B8:39:35:88:8C:34:A8:62 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 302D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 301F Signing time: Thu 24 Apr 2025 15:27:54 +0000 Manifest this update: Thu 24 Apr 2025 15:27:54 +0000 Manifest next update: Thu 01 May 2025 15:27:54 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: mmkOqIlXWdOgwcIjMjBnQ5pwj4ODwQFjPEQy+NpT5yY=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: zrNmqSOn3x3Hv5ti8t9FO4ICa53YlMTKqR+0zV+p/zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12333 (0x302d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Apr 24 15:27:54 2025 GMT Not After : May 1 15:27:54 2025 GMT Subject: CN=680a587a-c58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0f:9b:a2:3d:0b:ff:e3:97:38:0b:c1:15:b8: a6:93:97:53:36:d2:c1:15:3b:31:1d:28:d9:de:e9: 1e:fa:d5:7c:a3:b4:86:a2:cc:b6:e8:cc:81:b0:bf: c6:f5:00:bc:87:d1:7d:68:f0:a6:b3:03:32:f9:b1: 72:11:40:64:17:20:89:26:79:a5:ed:9e:28:31:26: bc:f6:0f:29:4f:33:a6:5c:60:9a:a3:69:a0:73:9c: 61:23:65:10:81:5b:44:5d:c8:c1:ef:6d:2e:4f:d5: a7:06:84:cb:e2:c0:8f:96:c6:e9:6a:65:8a:12:43: a9:99:5a:06:db:a9:4b:4a:42:14:d5:62:3a:2f:26: dc:ec:72:df:1b:92:54:ef:f3:c5:08:8b:9a:7c:30: 60:8a:f2:ef:20:43:3b:39:0b:40:75:5e:78:ae:a5: 5c:8e:01:35:bf:54:80:63:88:c2:b2:27:2d:39:8c: c2:7c:0a:48:31:96:81:2d:ea:13:76:ad:5e:10:86: 9c:5f:d2:5c:af:37:60:91:44:b5:3f:f8:a5:ac:51: 08:f8:9a:17:37:8d:2b:83:40:c3:4d:41:aa:e1:21: 80:62:62:a2:b7:cf:0b:be:95:fd:10:e4:08:c7:03: 77:db:d1:9d:5d:23:68:8d:b2:34:73:5a:1e:8b:3b: 5c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:C0:86:60:AE:BF:27:F1:0C:12:A6:B8:39:35:88:8C:34:A8:62 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:13:a0:bb:81:d6:ad:99:8e:0f:ed:dd:6c:01:da:79:18:c2: cc:ea:81:3b:88:e9:cc:30:4b:68:6e:cf:42:dc:7f:64:19:1a: 11:6e:63:b4:f0:ff:ba:b5:de:05:0c:c4:1a:ed:01:ad:44:f5: b3:58:c1:f7:5d:84:90:43:c4:44:52:52:75:57:54:46:6a:4e: d6:31:a8:35:f1:f0:00:67:28:49:30:a3:3e:d0:0b:b3:bc:76: 17:82:55:4e:d9:7c:cd:2c:b4:fb:df:b0:9c:5b:5a:f4:29:b1: fd:3b:ac:09:55:b5:21:7b:d1:40:5c:55:1e:5b:93:5b:35:86: 83:2b:e1:36:50:51:80:dd:15:15:cd:c7:84:1e:b8:f7:04:01: 97:28:e9:71:45:05:da:5c:d4:75:72:0c:e0:15:e3:96:fa:2a: d4:d9:e0:0e:23:99:46:48:09:6a:44:1e:3a:95:60:cf:d7:a8: dc:96:fe:51:44:13:91:c3:45:89:c1:8a:e4:7c:b6:ef:80:a3: 17:a9:9b:65:87:06:58:de:5f:af:3e:7b:43:52:c5:3e:01:29: 51:b6:28:85:5b:94:e5:a3:42:8f:ac:8e:fc:a5:59:a3:54:26: f7:1f:9b:df:30:ef:48:8d:e9:40:00:0c:81:80:e7:93:d5:3e: 5e:d3:6c:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMC0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUwNDI0MTUyNzU0WhcNMjUwNTAxMTUyNzU0WjAYMRYwFAYD VQQDEw02ODBhNTg3YS1jNThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg+boj0L/+OXOAvBFbimk5dTNtLBFTsxHSjZ3uke+tV8o7SGosy26MyBsL/G 9QC8h9F9aPCmswMy+bFyEUBkFyCJJnml7Z4oMSa89g8pTzOmXGCao2mgc5xhI2UQ gVtEXcjB720uT9WnBoTL4sCPlsbpamWKEkOpmVoG26lLSkIU1WI6Lybc7HLfG5JU 7/PFCIuafDBgivLvIEM7OQtAdV54rqVcjgE1v1SAY4jCsictOYzCfApIMZaBLeoT dq1eEIacX9JcrzdgkUS1P/ilrFEI+JoXN40rg0DDTUGq4SGAYmKit88LvpX9EOQI xwN329GdXSNojbI0c1oeiztcvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFujwIZg rr8n8QwSprg5NYiMNKhiMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXE6C7gdatmY4P7d1sAdp5GMLM6oE7iOnMMEtobs9C3H9kGRoRbmO0 8P+6td4FDMQa7QGtRPWzWMH3XYSQQ8REUlJ1V1RGak7WMag18fAAZyhJMKM+0Auz vHYXglVO2XzNLLT737CcW1r0KbH9O6wJVbUhe9FAXFUeW5NbNYaDK+E2UFGA3RUV zceEHrj3BAGXKOlxRQXaXNR1cgzgFeOW+irU2eAOI5lGSAlqRB46lWDP16jclv5R RBORw0WJwYrkfLbvgKMXqZtlhwZY3l+vPntDUsU+ASlRtiiFW5Tlo0KPrI78pVmj VCb3H5vfMO9IjelAAAyBgOeT1T5e02yr -----END CERTIFICATE-----Generated at Sat Apr 26 04:35:56 2025 by rpki-client