$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: 9IvqlINVIEgI7jzqihZzzYWxMGwjKk+y5HJhUO8bkqA= Subject key identifier: 32:75:FE:A5:B4:28:DA:66:29:B9:55:34:46:FE:1E:2C:39:8F:6E:F5 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0C2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C21 Signing time: Thu 24 Apr 2025 18:30:16 +0000 Manifest this update: Thu 24 Apr 2025 18:30:16 +0000 Manifest next update: Thu 01 May 2025 18:30:16 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: w2VRjtcyEQaxeovq7c07p8qQhoQVEtapqRbs2y/PWJU=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: O2LLRL8b/tm+vv16MRK3yWBKThY2uxl21s2tEaGgYZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3114 (0xc2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Apr 24 18:30:16 2025 GMT Not After : May 1 18:30:16 2025 GMT Subject: CN=680a8338-e034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:86:ba:61:3d:dd:06:e7:b7:23:d9:66:98:64: 26:0e:f5:d2:7c:60:2a:9e:df:46:6e:43:c3:5e:2d: ed:95:c9:39:7c:44:93:1c:3e:dc:9c:6b:bb:2a:ff: ee:6b:eb:5e:e1:98:e9:7c:f0:28:a6:08:d7:51:25: f3:fe:2e:84:74:0b:dc:8f:8c:80:ca:6b:e5:cc:a6: ea:9e:0d:54:92:65:19:a7:84:4b:e8:5a:bc:94:a7: 86:a0:23:d8:6d:57:4a:0a:53:1f:b0:3d:38:3c:22: 42:fc:67:4a:e5:c1:ba:45:b7:1d:d4:7b:0b:84:39: 54:42:a9:45:9b:3d:e2:9f:eb:3b:d1:e9:5c:0c:7a: f2:e1:68:8c:41:2c:c4:95:36:60:d3:b3:4e:36:18: b8:bf:7b:72:6b:bc:f9:79:26:75:76:16:bd:80:c6: 74:24:e1:e8:8b:9d:8e:0d:2b:54:c6:4c:51:a2:25: d3:b9:d3:1a:5a:d8:d6:b6:88:c8:1e:3f:cf:d9:73: 59:30:33:f9:ed:4f:7a:14:f8:e4:e6:ef:3a:5e:db: 65:63:7a:52:84:ff:fc:e7:4e:c4:15:4a:c9:2a:d5: dd:ef:90:c3:f3:1a:88:37:a8:0a:44:d0:4f:19:ad: bc:e5:77:9a:70:46:81:6f:0a:bb:76:f9:29:79:9e: 0b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:75:FE:A5:B4:28:DA:66:29:B9:55:34:46:FE:1E:2C:39:8F:6E:F5 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:a1:b3:b0:f7:36:1b:38:f2:91:d5:06:7c:17:2d:43:6b:5b: 4a:4e:9c:04:45:de:8d:6b:c4:02:d6:f4:64:e9:2f:60:d7:2e: ce:a0:95:75:b8:62:16:61:0f:79:ca:7b:b2:dd:17:da:c6:72: 4b:59:13:4f:60:8a:73:93:92:82:34:33:2f:85:28:6a:9f:16: 21:15:b5:42:73:24:cd:12:e3:cb:73:34:5e:fb:b4:f8:9d:2d: aa:c0:98:7c:1b:01:11:7b:77:e9:52:02:30:bf:5b:f5:07:a1: fd:59:44:79:cc:b3:24:23:60:12:66:57:d1:e1:e7:aa:de:2c: ff:54:12:db:60:80:30:b8:d2:66:db:45:7d:91:ec:95:f6:0d: fc:bf:6c:4d:dc:fd:e5:70:1a:bf:79:f5:0c:09:49:82:02:e9: 61:1f:db:f5:4d:d8:79:f7:5d:5e:39:d9:c1:4c:f1:dd:ae:18: 82:9d:9c:0d:80:55:74:07:02:28:05:b9:4c:92:d1:c8:c9:39: 83:8e:35:a1:14:c0:56:89:60:fa:f2:7f:ff:2c:de:e8:c2:55: ee:20:f2:6f:c1:e0:02:f3:01:d1:56:d9:79:fd:44:65:5a:2d: ce:23:c8:9c:dc:5b:f7:16:17:f1:62:e6:c2:c7:7c:79:66:ce: 38:6c:64:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUwNDI0MTgzMDE2WhcNMjUwNTAxMTgzMDE2WjAYMRYwFAYD VQQDEw02ODBhODMzOC1lMDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Ya6YT3dBue3I9lmmGQmDvXSfGAqnt9GbkPDXi3tlck5fESTHD7cnGu7Kv/u a+te4ZjpfPAopgjXUSXz/i6EdAvcj4yAymvlzKbqng1UkmUZp4RL6Fq8lKeGoCPY bVdKClMfsD04PCJC/GdK5cG6Rbcd1HsLhDlUQqlFmz3in+s70elcDHry4WiMQSzE lTZg07NONhi4v3tya7z5eSZ1dha9gMZ0JOHoi52ODStUxkxRoiXTudMaWtjWtojI Hj/P2XNZMDP57U96FPjk5u86XttlY3pShP/8507EFUrJKtXd75DD8xqIN6gKRNBP Ga285XeacEaBbwq7dvkpeZ4LewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJ1/qW0 KNpmKblVNEb+Hiw5j271MB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyobOw9zYbOPKR1QZ8Fy1Da1tKTpwERd6Na8QC1vRk6S9g1y7OoJV1 uGIWYQ95ynuy3RfaxnJLWRNPYIpzk5KCNDMvhShqnxYhFbVCcyTNEuPLczRe+7T4 nS2qwJh8GwERe3fpUgIwv1v1B6H9WUR5zLMkI2ASZlfR4eeq3iz/VBLbYIAwuNJm 20V9keyV9g38v2xN3P3lcBq/efUMCUmCAulhH9v1Tdh5911eOdnBTPHdrhiCnZwN gFV0BwIoBblMktHIyTmDjjWhFMBWiWD68n//LN7owlXuIPJvweAC8wHRVtl5/URl Wi3OI8ic3Fv3FhfxYubCx3x5Zs44bGSt -----END CERTIFICATE-----Generated at Sat Apr 26 05:05:09 2025 by rpki-client