$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: 1OmoD2vyn5mjLBUduQdHbjs/b+7GDHOfOeYdM+gVN68= Subject key identifier: 5A:F3:AD:93:FC:D4:08:4D:65:7A:A6:2B:7F:4F:9E:85:12:3E:46:29 Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 0427 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 041F Signing time: Fri 25 Apr 2025 00:11:38 +0000 Manifest this update: Fri 25 Apr 2025 00:11:37 +0000 Manifest next update: Fri 02 May 2025 00:11:37 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: wBSQEd2TPvZVizIiUtTzqWEDX9+82EG0tw2EOAil6u4=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:11:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1063 (0x427) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Apr 25 00:11:37 2025 GMT Not After : May 2 00:11:37 2025 GMT Subject: CN=680ad33a-9380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:94:c8:b2:6a:92:8a:3c:21:68:b9:1d:56:25: a7:b6:02:ef:a4:c3:6c:d1:7b:25:7c:b7:3e:f5:88: cd:05:28:a3:0d:4c:49:f9:ea:3e:30:a4:e6:de:e7: 56:13:d7:a1:40:26:75:ed:4c:08:c8:e9:9b:3f:bc: 3d:aa:a2:0c:61:f8:7e:d7:72:d5:67:fd:71:a8:90: 6f:fb:74:0a:33:3b:fa:50:32:5b:a6:95:af:56:a0: 66:49:8f:41:9f:57:01:f0:82:85:62:8e:39:38:6e: 8e:1f:b9:ff:93:d9:f1:f1:18:28:3a:c9:dd:7a:b8: bd:d7:22:55:9c:4b:e5:27:4b:a0:ab:32:ca:c4:d0: 39:7e:a3:41:d3:a9:74:46:cf:ee:20:e0:0f:b4:88: 3f:44:dc:24:44:5e:8d:4a:ab:00:ce:38:cc:aa:ef: 8d:d8:d8:ec:f2:5f:8e:01:9c:71:7d:42:7f:d9:49: 30:c9:0b:a8:6f:fc:c9:9b:31:ae:ea:8e:ff:4c:14: 69:ab:4e:83:bd:8c:63:ae:ce:c6:03:02:75:28:0d: 5a:d6:6c:1f:67:23:26:2d:d5:5b:f6:9a:f1:9f:f4: 1f:20:ee:c7:3b:d5:d8:87:76:77:b8:a4:aa:3b:6d: 2b:51:67:53:ab:5e:49:84:e4:12:51:37:4d:44:ee: 70:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:AD:93:FC:D4:08:4D:65:7A:A6:2B:7F:4F:9E:85:12:3E:46:29 X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:21:b9:27:1e:51:38:ec:77:4e:0b:ca:b6:d9:f2:ec:b6:27: 17:d2:b5:97:12:77:1f:a8:cb:f8:46:1e:8e:e9:9d:18:8a:ce: 3d:02:76:43:7f:30:45:2d:25:bc:07:73:a5:aa:2e:99:b7:7e: 05:52:1c:c9:9e:16:b8:5e:fe:25:88:3a:35:57:49:d8:2c:e7: 47:29:a0:c6:6d:f4:e6:58:45:91:5c:bc:86:4a:95:3e:f3:ab: 3c:0d:d7:b1:ab:d7:1e:df:43:b3:42:db:62:2d:17:27:62:a5: dd:07:5d:6c:bd:f8:ac:60:b2:0a:ba:04:75:98:9a:7b:5d:37: 7b:76:25:90:52:94:68:01:30:c8:79:77:bb:fc:5d:8f:41:d2: f1:1c:44:d5:2a:fc:06:a0:16:48:9a:83:ae:04:c8:95:4d:35: d9:23:58:53:30:93:a8:98:59:47:c7:9f:ac:50:b2:ab:b4:67: d7:37:46:a2:cf:3e:82:f4:94:c2:3a:0b:ff:a0:01:2f:c2:05: 04:fa:1d:84:f6:14:eb:2d:be:cd:1b:77:7f:0f:ec:47:5a:d1: 07:81:a1:38:54:3d:68:d4:50:51:85:42:70:42:f0:8a:3e:0a: 9e:00:90:ec:ac:2c:17:00:85:cf:22:01:94:29:1d:3e:da:d6: 3d:6b:61:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUwNDI1MDAxMTM3WhcNMjUwNTAyMDAxMTM3WjAYMRYwFAYD VQQDEw02ODBhZDMzYS05MzgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu5TIsmqSijwhaLkdViWntgLvpMNs0XslfLc+9YjNBSijDUxJ+eo+MKTm3udW E9ehQCZ17UwIyOmbP7w9qqIMYfh+13LVZ/1xqJBv+3QKMzv6UDJbppWvVqBmSY9B n1cB8IKFYo45OG6OH7n/k9nx8RgoOsnderi91yJVnEvlJ0ugqzLKxNA5fqNB06l0 Rs/uIOAPtIg/RNwkRF6NSqsAzjjMqu+N2Njs8l+OAZxxfUJ/2UkwyQuob/zJmzGu 6o7/TBRpq06DvYxjrs7GAwJ1KA1a1mwfZyMmLdVb9prxn/QfIO7HO9XYh3Z3uKSq O20rUWdTq15JhOQSUTdNRO5wMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrzrZP8 1AhNZXqmK39PnoUSPkYpMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqIbknHlE47HdOC8q22fLsticX0rWXEncfqMv4Rh6O6Z0Yis49AnZD fzBFLSW8B3Olqi6Zt34FUhzJnha4Xv4liDo1V0nYLOdHKaDGbfTmWEWRXLyGSpU+ 86s8Ddexq9ce30OzQttiLRcnYqXdB11svfisYLIKugR1mJp7XTd7diWQUpRoATDI eXe7/F2PQdLxHETVKvwGoBZImoOuBMiVTTXZI1hTMJOomFlHx5+sULKrtGfXN0ai zz6C9JTCOgv/oAEvwgUE+h2E9hTrLb7NG3d/D+xHWtEHgaE4VD1o1FBRhUJwQvCK PgqeAJDsrCwXAIXPIgGUKR0+2tY9a2E0 -----END CERTIFICATE-----Generated at Sat Apr 26 15:26:50 2025 by rpki-client