$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: kwWhYoRok3HRbQs50Gwm9sWUIS2dhLjmN7Ra7ldKyGk= Subject key identifier: 6F:E7:FA:3C:0F:11:D1:9B:14:A1:A9:02:6C:8F:50:CF:3D:98:E0:0F Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1AC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1A98 Signing time: Thu 24 Apr 2025 16:20:47 +0000 Manifest this update: Thu 24 Apr 2025 16:20:46 +0000 Manifest next update: Thu 01 May 2025 16:20:46 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: oh5UBSfYK5OkBm8uAzGm7vJcV5oYsUVikwa2pKEY7/Q=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: A6xdM14VrnCdwg0TqU0I0zzOpRFsFmCK+agsWkSMQCA=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: vrRUnpBdqM34i5a9Uoksk8sscXoYe/cPgohb+RiQ9YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:20:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6853 (0x1ac5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Apr 24 16:20:46 2025 GMT Not After : May 1 16:20:46 2025 GMT Subject: CN=680a64de-c44a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:66:10:bf:bf:0a:5b:4a:c4:3e:ee:99:1b:f4: dd:f9:cc:80:ee:cc:0d:42:b8:c9:b4:91:79:4b:88: 08:cd:5d:08:3e:13:91:e1:47:15:4a:e3:75:11:40: 90:01:1f:71:75:f5:c9:47:1f:eb:5c:ab:ba:1e:5a: 6c:46:f3:98:fb:33:fc:0c:67:9d:87:00:67:9e:fc: 33:89:b4:ae:76:dc:b6:a2:66:ff:d5:a8:d3:05:07: 0f:88:07:c2:2a:12:97:9a:37:85:a7:90:3c:8a:e4: 56:2f:9b:e5:75:e0:0c:4c:cb:56:7a:ae:be:be:43: 61:2c:07:42:a6:84:fd:f9:07:91:ea:89:69:d1:47: 34:ff:80:76:63:15:f4:7f:94:77:5c:5a:f4:a4:b6: a7:69:97:78:44:c1:ad:5f:82:99:09:e2:d2:2e:a8: b4:17:19:de:08:33:51:9e:ed:7c:29:88:a8:a3:38: 92:4f:a8:43:f7:f6:3b:0c:20:13:27:f0:67:29:84: 00:37:34:51:0f:0f:14:b5:e2:65:b6:7e:18:79:eb: bb:19:0c:5c:a9:2b:d4:35:1c:da:0c:31:64:f4:8c: 98:86:aa:fb:3d:78:b3:54:66:e0:d6:08:b4:25:a1: e6:0b:e4:6b:5d:94:95:f8:b9:54:6b:03:55:42:5f: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E7:FA:3C:0F:11:D1:9B:14:A1:A9:02:6C:8F:50:CF:3D:98:E0:0F X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fb:0d:3d:01:9b:08:00:5f:d1:a7:55:2b:d7:34:b3:c6:98: 37:d4:07:bc:e5:6b:f4:20:e0:35:3b:c8:03:ce:a6:46:3d:5e: aa:1e:98:c7:a0:7c:28:c1:0c:a8:bb:26:79:bb:dd:23:b2:33: a4:b6:76:29:6d:3d:d4:c3:42:26:08:ce:02:4d:a6:cf:5a:da: 68:aa:78:c9:69:02:a3:a7:3e:9d:ef:c4:e0:61:cc:4f:a3:64: 63:79:47:5c:f8:f0:45:b7:f4:52:21:c2:3f:5f:01:0e:e4:39: 02:c2:dd:fc:da:aa:5b:52:fd:02:05:a0:ba:08:25:20:ec:ea: 5f:76:68:5a:93:88:d0:6f:e8:8e:d7:ae:84:64:bf:86:a0:2a: 9e:d2:d9:fd:f4:88:f9:a8:f0:ee:d8:9d:9a:b7:9a:ad:e4:f6: b5:77:df:8b:39:fd:30:2c:97:55:1e:0f:cc:a1:5c:ec:57:41: d5:34:c0:3e:eb:cd:65:be:ce:66:dc:e7:4c:01:8e:91:bb:f8: e3:f6:c5:ce:ef:bd:b5:86:89:6a:2a:34:6d:32:39:4f:b7:e6: 60:ce:5f:f9:8c:3e:82:35:bf:5b:e5:ea:4f:ec:1c:12:02:a5: 7b:43:f1:bf:08:d6:87:f8:6d:4d:81:48:79:31:db:6f:bb:14: 69:cd:51:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUwNDI0MTYyMDQ2WhcNMjUwNTAxMTYyMDQ2WjAYMRYwFAYD VQQDEw02ODBhNjRkZS1jNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmYQv78KW0rEPu6ZG/Td+cyA7swNQrjJtJF5S4gIzV0IPhOR4UcVSuN1EUCQ AR9xdfXJRx/rXKu6HlpsRvOY+zP8DGedhwBnnvwzibSudty2omb/1ajTBQcPiAfC KhKXmjeFp5A8iuRWL5vldeAMTMtWeq6+vkNhLAdCpoT9+QeR6olp0Uc0/4B2YxX0 f5R3XFr0pLanaZd4RMGtX4KZCeLSLqi0FxneCDNRnu18KYiooziST6hD9/Y7DCAT J/BnKYQANzRRDw8UteJltn4Yeeu7GQxcqSvUNRzaDDFk9IyYhqr7PXizVGbg1gi0 JaHmC+RrXZSV+LlUawNVQl+JIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/n+jwP EdGbFKGpAmyPUM89mOAPMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL+w09AZsIAF/Rp1Ur1zSzxpg31Ae85Wv0IOA1O8gDzqZGPV6qHpjH oHwowQyouyZ5u90jsjOktnYpbT3Uw0ImCM4CTabPWtpoqnjJaQKjpz6d78TgYcxP o2RjeUdc+PBFt/RSIcI/XwEO5DkCwt382qpbUv0CBaC6CCUg7Opfdmhak4jQb+iO 166EZL+GoCqe0tn99Ij5qPDu2J2at5qt5Pa1d9+LOf0wLJdVHg/MoVzsV0HVNMA+ 681lvs5m3OdMAY6Ru/jj9sXO7721holqKjRtMjlPt+Zgzl/5jD6CNb9b5epP7BwS AqV7Q/G/CNaH+G1NgUh5MdtvuxRpzVG+ -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:07 2025 by rpki-client