$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: 6FSp7DT91/SfI2kSgDS29FtPB3ny+2PpfakfIpz3PtQ= Subject key identifier: AB:61:34:29:35:00:6C:21:9A:EB:B5:5C:F8:74:2E:58:32:53:F6:6F Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: 90 Signing time: Fri 25 Apr 2025 05:24:48 +0000 Manifest this update: Fri 25 Apr 2025 05:24:47 +0000 Manifest next update: Fri 02 May 2025 05:24:47 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: qN8XYMZm5d6/1MPzMef5lewqZ+nahLHFI07PTxx1ZOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Apr 25 05:24:47 2025 GMT Not After : May 2 05:24:47 2025 GMT Subject: CN=680b1ca0-044e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:2c:d0:c6:7a:bc:2e:0e:44:01:9c:24:79: d3:69:24:a9:68:0c:24:64:3b:46:23:86:10:88:af: b3:92:6c:01:80:cd:61:ea:db:7b:a8:5d:0b:b7:80: 8c:27:42:17:71:fd:65:93:6d:b3:4e:e4:0a:11:51: bc:d6:63:61:c2:f7:54:f2:01:a1:6b:83:34:e4:50: 84:95:00:73:05:af:9e:6d:35:71:b5:47:e4:29:f0: 09:24:30:58:e0:d9:38:b6:c3:eb:b6:a8:cd:43:dd: 82:67:25:57:6e:f4:5c:ec:b4:e9:cd:fa:33:d5:cc: b7:2b:de:fe:3a:c9:31:a5:f1:b9:87:87:59:21:e4: 2a:61:b2:a8:47:38:8b:71:43:7c:cb:e8:60:bd:81: c1:79:c0:8c:f4:3b:fe:99:51:a3:e1:71:61:12:f1: ba:8c:7b:1f:1e:0d:b0:5e:8a:54:82:43:c5:62:60: ef:c1:16:0c:db:94:c1:e9:8f:58:51:ab:68:2d:3b: 12:98:3d:b3:6b:fb:6f:47:93:5e:94:8f:ad:e5:d5: 10:b4:9f:62:d4:14:56:fc:19:2f:f8:02:c0:3f:a1: ee:f3:0b:43:d4:54:b0:50:3e:e3:17:52:f9:0c:b0: 79:df:23:35:c0:b8:9f:6e:5b:9e:e9:ea:11:7d:75: a8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:61:34:29:35:00:6C:21:9A:EB:B5:5C:F8:74:2E:58:32:53:F6:6F X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:0d:4f:db:c7:8f:a4:40:f0:75:22:f8:07:e0:7b:09:7a:cf: 81:80:47:d1:85:aa:84:ed:0d:7f:a7:01:49:07:cd:de:f3:f7: 94:5d:62:11:ea:1e:7b:d5:18:67:42:5e:80:90:87:14:d6:da: 44:42:6a:66:4f:cc:cf:80:45:fb:9d:48:e6:5b:83:12:49:eb: 6a:ac:d3:43:ca:cb:b0:a3:32:4b:3b:ce:de:bf:d5:31:e4:28: 68:77:ad:7f:5d:cd:7c:51:e3:da:28:68:37:05:f6:1c:c4:41: 8e:83:a6:48:cf:a0:08:ca:d1:25:f8:5f:8c:f3:fb:4d:5c:87: e2:24:3e:41:69:fc:a5:97:bc:0e:8d:e0:29:19:3f:48:ef:cb: 0d:65:e3:ab:8b:01:95:39:c7:6b:f1:02:53:21:96:1a:b6:cf: 7f:18:3d:aa:45:6b:19:be:a3:02:3b:c5:61:c4:fa:0f:e3:59: 66:72:67:29:fa:d6:7d:d6:d1:09:31:4c:20:c1:bb:2b:3c:fc: ee:f9:db:de:55:a7:13:c4:ad:1e:6b:db:bd:77:00:c2:55:70: 50:10:ae:62:a4:ca:90:c6:75:23:d2:ee:04:d1:a0:56:a4:e6: 0f:18:07:42:fb:b8:5d:c6:f5:60:f6:5b:00:04:e1:a5:ea:52: 14:2b:b0:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjUwNDI1MDUyNDQ3WhcNMjUwNTAyMDUyNDQ3WjAYMRYwFAYD VQQDEw02ODBiMWNhMC0wNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK8s0MZ6vC4ORAGcJHnTaSSpaAwkZDtGI4YQiK+zkmwBgM1h6tt7qF0Lt4CM J0IXcf1lk22zTuQKEVG81mNhwvdU8gGha4M05FCElQBzBa+ebTVxtUfkKfAJJDBY 4Nk4tsPrtqjNQ92CZyVXbvRc7LTpzfoz1cy3K97+OskxpfG5h4dZIeQqYbKoRziL cUN8y+hgvYHBecCM9Dv+mVGj4XFhEvG6jHsfHg2wXopUgkPFYmDvwRYM25TB6Y9Y UatoLTsSmD2za/tvR5NelI+t5dUQtJ9i1BRW/Bkv+ALAP6Hu8wtD1FSwUD7jF1L5 DLB53yM1wLifblue6eoRfXWorwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKthNCk1 AGwhmuu1XPh0LlgyU/ZvMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3DU/bx4+kQPB1IvgH4HsJes+BgEfRhaqE7Q1/pwFJB83e8/eUXWIR 6h571RhnQl6AkIcU1tpEQmpmT8zPgEX7nUjmW4MSSetqrNNDysuwozJLO87ev9Ux 5Chod61/Xc18UePaKGg3BfYcxEGOg6ZIz6AIytEl+F+M8/tNXIfiJD5Bafyll7wO jeApGT9I78sNZeOriwGVOcdr8QJTIZYats9/GD2qRWsZvqMCO8VhxPoP41lmcmcp +tZ91tEJMUwgwbsrPPzu+dveVacTxK0ea9u9dwDCVXBQEK5ipMqQxnUj0u4E0aBW pOYPGAdC+7hdxvVg9lsABOGl6lIUK7Bm -----END CERTIFICATE-----Generated at Sat Apr 26 04:36:52 2025 by rpki-client