$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json) Hash identifier: cHnaDwrf3o6mDuGDsr2kowvgGst0QAr19T0+Qu3ISuU= Subject key identifier: FA:7A:C1:E1:5B:D1:A6:44:8A:9C:20:40:ED:7F:85:85:7A:6B:53:60 Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Certificate serial: 0478 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft Manifest number: 0471 Signing time: Thu 24 Apr 2025 23:52:40 +0000 Manifest this update: Thu 24 Apr 2025 23:52:40 +0000 Manifest next update: Thu 01 May 2025 23:52:40 +0000 Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: ZTDtLVbHDsB8A2Cv5mDGDrFNKp6KGf/ovbA4u1qn8jY=) 2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: /ooE2VFwIyhJ0GDoQeohGtb0l3eCORZIYsK88m8yo4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1144 (0x478) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D Validity Not Before: Apr 24 23:52:40 2025 GMT Not After : May 1 23:52:40 2025 GMT Subject: CN=680acec8-93e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:cf:3e:fa:cd:38:fe:6f:ef:a0:53:51:ba: 5e:15:29:bb:a7:e5:f9:45:51:c3:57:f2:f1:a1:c1: aa:68:d8:5e:7d:36:a0:fd:21:48:55:0c:b5:07:31: 5f:ae:64:16:a3:ab:f1:45:b4:59:fb:02:b2:82:61: a3:11:22:1b:ea:fe:53:48:18:88:dc:75:8a:12:26: b2:db:b4:5b:f4:b1:49:89:de:b9:d5:88:3d:48:64: b4:d7:0b:93:ed:27:0e:0c:15:84:36:a9:35:ab:72: c5:a4:91:7e:55:1a:0b:b0:ee:1d:83:c6:ba:99:ee: cd:75:41:f2:2f:6c:4e:06:46:27:c3:66:37:33:ef: c8:47:93:e2:c5:f5:fc:b0:be:c7:b6:a6:52:bd:5c: e9:48:9d:53:e9:7a:10:da:6f:e0:e5:39:31:54:00: 5a:ec:b4:72:2b:14:ae:d6:2d:f1:4b:7c:99:25:25: f4:87:56:1d:95:4a:61:5b:9c:c3:9c:40:97:31:48: 93:26:ba:dc:42:d4:e2:e2:09:89:75:bd:aa:46:db: 4d:29:34:fa:f5:4b:6f:15:55:d4:0c:a1:b7:d7:9a: 18:5b:89:0f:47:0a:bf:aa:1a:e8:fe:a4:19:3c:1c: 80:42:bb:c0:77:6f:87:9f:7f:47:6b:1a:c1:19:c2: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7A:C1:E1:5B:D1:A6:44:8A:9C:20:40:ED:7F:85:85:7A:6B:53:60 X509v3 Authority Key Identifier: keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:6d:7b:64:98:b0:74:36:68:e1:26:14:5f:c6:a3:55:37:79: 9e:7c:4d:8b:89:41:d8:ba:d1:68:6d:94:72:7b:9f:6b:3f:1c: 29:d4:93:b0:50:79:af:9d:96:98:a6:04:46:56:e6:f6:27:54: 4e:1d:58:c5:f8:4f:66:95:b2:a0:af:10:66:9a:6b:d0:c9:b2: 07:c6:47:77:2a:a9:20:f9:08:17:26:76:15:54:e5:2a:04:3d: 07:a3:69:f9:ea:57:99:94:57:b9:c0:d4:3d:d7:5e:5e:1e:fb: eb:60:24:dd:21:13:87:8f:4c:4a:13:dd:ff:d5:39:f4:8d:41: c7:44:50:99:11:c0:d0:dc:d4:e2:5f:31:e5:6a:70:50:df:80: 81:10:1e:37:fb:ad:03:5e:6b:bb:42:65:9b:1b:a8:32:0d:94: 53:1a:28:12:cb:35:8d:73:e6:5d:d7:67:78:a9:0c:31:c1:fb: a9:ce:e5:ac:e9:53:1d:83:99:f9:99:9e:f3:9a:d5:89:19:bd: d4:98:8c:83:30:4e:a7:63:7b:11:8e:0d:42:21:f2:93:0a:d4: b7:e9:5c:b2:2e:1b:fb:ff:05:ec:57:f2:c6:03:cc:03:05:c2: 08:16:a3:0a:5f:54:96:fe:47:6a:51:40:ff:af:99:56:1f:d2: 30:4e:88:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF Qjk4RTFCNUQwHhcNMjUwNDI0MjM1MjQwWhcNMjUwNTAxMjM1MjQwWjAYMRYwFAYD VQQDEw02ODBhY2VjOC05M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZjPPvrNOP5v76BTUbpeFSm7p+X5RVHDV/LxocGqaNhefTag/SFIVQy1BzFf rmQWo6vxRbRZ+wKygmGjESIb6v5TSBiI3HWKEiay27Rb9LFJid651Yg9SGS01wuT 7ScODBWENqk1q3LFpJF+VRoLsO4dg8a6me7NdUHyL2xOBkYnw2Y3M+/IR5PixfX8 sL7HtqZSvVzpSJ1T6XoQ2m/g5TkxVABa7LRyKxSu1i3xS3yZJSX0h1YdlUphW5zD nECXMUiTJrrcQtTi4gmJdb2qRttNKTT69UtvFVXUDKG315oYW4kPRwq/qhro/qQZ PByAQrvAd2+Hn39HaxrBGcLU1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPp6weFb 0aZEipwgQO1/hYV6a1NgMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2 Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArbXtkmLB0NmjhJhRfxqNVN3mefE2LiUHYutFobZRye59rPxwp1JOw UHmvnZaYpgRGVub2J1ROHVjF+E9mlbKgrxBmmmvQybIHxkd3Kqkg+QgXJnYVVOUq BD0Ho2n56leZlFe5wNQ9115eHvvrYCTdIROHj0xKE93/1Tn0jUHHRFCZEcDQ3NTi XzHlanBQ34CBEB43+60DXmu7QmWbG6gyDZRTGigSyzWNc+Zd12d4qQwxwfupzuWs 6VMdg5n5mZ7zmtWJGb3UmIyDME6nY3sRjg1CIfKTCtS36VyyLhv7/wXsV/LGA8wD BcIIFqMKX1SW/kdqUUD/r5lWH9IwTohG -----END CERTIFICATE-----Generated at Sat Apr 26 04:20:50 2025 by rpki-client