$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json) Hash identifier: nRiGaZ6BPxfEGUeAsRwkYN430mcr8GXmWcUkemaiOL0= Subject key identifier: DE:9F:5D:A7:68:7C:23:2A:19:B7:73:AA:05:AD:90:73:DA:AA:0D:F4 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 057E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft Manifest number: 0572 Signing time: Thu 24 Apr 2025 23:09:22 +0000 Manifest this update: Thu 24 Apr 2025 23:09:21 +0000 Manifest next update: Thu 01 May 2025 23:09:21 +0000 Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: tHG6HgdXBGPFiYRNtnjtEBTKlx4dk+z1VyomEkLhQVs=) 2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: SEXcu7MCAx7BgjEXcpxfIMBCBr8bF8QoXI0x5nMZMBc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1406 (0x57e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Apr 24 23:09:21 2025 GMT Not After : May 1 23:09:21 2025 GMT Subject: CN=680ac4a1-b0ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:02:95:3f:1b:f4:55:0d:a1:25:9f:ac:f8: 57:21:89:78:10:d6:c8:d5:8f:3f:d8:64:79:82:6f: 06:19:72:7e:c0:5d:a0:c1:eb:64:48:f2:01:63:a9: 18:b6:89:de:68:f3:f6:96:de:6d:d7:cd:07:f7:b2: 62:e6:fd:b9:0c:d9:a0:6f:0a:34:88:7b:3e:cf:9b: b2:c1:7f:7a:d0:8e:41:72:bf:7f:93:66:34:10:ff: 17:80:b6:78:ae:d1:ba:d5:96:c5:72:64:b9:3f:33: 47:4b:07:2f:e2:db:57:e5:9c:47:4d:2d:8e:f9:7d: e5:10:e5:14:de:bd:a7:ce:0f:5b:2c:83:a9:c5:8e: 71:94:01:e4:30:ba:04:b2:51:c4:d8:6c:50:9b:11: 29:c3:5b:c5:d5:32:ea:7f:b8:71:2d:68:78:14:2f: 19:ba:19:36:b3:14:4b:0b:8f:48:11:3e:ac:65:4d: bc:32:3d:c0:eb:3d:8b:5e:d4:f6:d4:1f:68:64:03: 82:c3:de:1c:dc:bd:ee:88:b3:de:67:22:4f:bc:a5: 25:94:a9:0c:52:e3:93:56:30:2a:af:65:e0:51:e3: 2a:5c:7e:9a:6c:c9:56:46:9b:43:17:fb:39:65:69: 3b:a0:17:31:40:89:d9:0f:b8:f9:d0:cf:ee:48:6f: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9F:5D:A7:68:7C:23:2A:19:B7:73:AA:05:AD:90:73:DA:AA:0D:F4 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:7a:b6:81:21:ab:a2:8b:c1:8d:06:43:c5:03:92:65:59:cd: de:f8:bd:8e:18:17:98:bb:98:dd:f6:6e:36:68:a9:91:bc:d8: f7:67:45:b0:38:49:e8:f2:a5:e7:4e:05:82:df:68:1d:80:e4: 81:30:ac:af:9d:b0:3c:22:cb:05:3c:cf:88:75:f7:b9:90:19: dc:9d:35:5c:e0:f8:d5:51:55:9f:05:30:9f:ea:54:4f:5e:15: a7:15:7c:ec:bf:36:60:1a:26:4e:15:4a:c7:7f:7d:3e:a1:f5: 39:13:94:95:be:ee:55:b4:06:1d:a3:78:dc:ee:30:67:eb:e2: ba:db:43:dd:7e:1d:d3:c9:97:25:69:4b:92:fd:76:9a:90:5e: ed:a8:3f:bf:35:5a:53:e0:c8:49:6a:cc:29:15:e0:1e:09:34: cb:f0:f2:c8:f8:54:d8:75:cd:29:bd:30:16:2c:37:96:84:4b: cd:43:68:15:00:9a:09:f9:5f:a1:2f:d0:3f:a5:a5:90:28:e2: df:c0:92:71:5f:98:7c:a5:11:e1:5c:97:ab:72:30:09:6d:86: 7e:72:77:0e:c1:76:3f:34:77:17:ec:35:52:74:87:96:35:cb: 16:84:ee:a2:cd:fc:4a:f4:cd:5d:b7:ec:ad:a4:bc:17:0a:2e: 08:d2:d5:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwNDI0MjMwOTIxWhcNMjUwNTAxMjMwOTIxWjAYMRYwFAYD VQQDEw02ODBhYzRhMS1iMGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFEClT8b9FUNoSWfrPhXIYl4ENbI1Y8/2GR5gm8GGXJ+wF2gwetkSPIBY6kY toneaPP2lt5t180H97Ji5v25DNmgbwo0iHs+z5uywX960I5Bcr9/k2Y0EP8XgLZ4 rtG61ZbFcmS5PzNHSwcv4ttX5ZxHTS2O+X3lEOUU3r2nzg9bLIOpxY5xlAHkMLoE slHE2GxQmxEpw1vF1TLqf7hxLWh4FC8Zuhk2sxRLC49IET6sZU28Mj3A6z2LXtT2 1B9oZAOCw94c3L3uiLPeZyJPvKUllKkMUuOTVjAqr2XgUeMqXH6abMlWRptDF/s5 ZWk7oBcxQInZD7j50M/uSG/G2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6fXado fCMqGbdzqgWtkHPaqg30MB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCreraBIauii8GNBkPFA5JlWc3e+L2OGBeYu5jd9m42aKmRvNj3Z0Ww OEno8qXnTgWC32gdgOSBMKyvnbA8IssFPM+Idfe5kBncnTVc4PjVUVWfBTCf6lRP XhWnFXzsvzZgGiZOFUrHf30+ofU5E5SVvu5VtAYdo3jc7jBn6+K620Pdfh3TyZcl aUuS/XaakF7tqD+/NVpT4MhJaswpFeAeCTTL8PLI+FTYdc0pvTAWLDeWhEvNQ2gV AJoJ+V+hL9A/paWQKOLfwJJxX5h8pRHhXJercjAJbYZ+cncOwXY/NHcX7DVSdIeW NcsWhO6izfxK9M1dt+ytpLwXCi4I0tUM -----END CERTIFICATE-----Generated at Sat Apr 26 04:31:29 2025 by rpki-client