$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: TgImM5Kd/+qhUU3X9BhRxobAsaYXd2OG2plc5GZqBM0= Subject key identifier: F5:28:F4:97:D5:62:6E:10:85:79:16:EF:94:4F:46:45:57:5A:50:EB Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A0C Signing time: Thu 24 Apr 2025 16:23:00 +0000 Manifest this update: Thu 24 Apr 2025 16:22:59 +0000 Manifest next update: Thu 01 May 2025 16:22:59 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: KBTykxMhJNDGpNuz702N6I7i5By5HiRMP2j8SWySjZw=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: nliRTAkVAtJ8FfxKEHQS9HqVovT0tZ32fPM48Sk/l8k=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: EijUWJlocJ1+GHXxh5XIDZa+yD2/CG2e199ekLmtdEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6696 (0x1a28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Apr 24 16:22:59 2025 GMT Not After : May 1 16:22:59 2025 GMT Subject: CN=680a6563-f1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:4d:e9:14:09:99:28:bb:81:9e:93:c1:33: 02:20:93:73:ce:d0:8c:6e:25:41:f6:f7:e0:19:bd: fb:ab:9b:cf:7b:63:a4:5e:9b:03:bd:39:a2:0d:5e: 05:b1:26:e6:ca:45:2f:94:6b:91:e0:3a:aa:35:d9: 3a:b6:89:fd:64:25:e4:2f:40:5f:60:2d:a7:84:6b: da:44:e9:15:18:39:2c:4b:ec:ed:06:1e:2b:1e:af: f0:69:fa:f9:18:fa:33:ae:78:fe:54:fd:7f:2c:0b: 10:85:01:80:10:58:4a:b1:25:41:2a:c2:fd:20:7a: 7f:ce:42:88:60:76:09:61:03:38:2f:e6:ce:87:13: 68:a5:53:41:a7:53:3c:82:70:0a:25:37:be:15:00: 6e:28:bc:52:8e:1f:e0:c8:f4:e2:ff:eb:b6:40:a4: 49:77:79:a1:dc:eb:76:97:a3:78:e9:cc:1b:73:9a: ef:b7:22:22:50:d2:96:74:73:21:1e:fe:c1:37:db: a5:fb:a1:39:f4:ce:0c:8a:77:f6:89:c9:e2:40:5f: 69:0d:fe:28:1a:2b:52:06:40:80:a4:fd:c3:c5:0b: ec:a0:c5:9e:6f:c9:4b:cc:9d:0d:40:21:4c:52:04: 85:6a:f7:69:87:78:b6:bd:cf:ac:fb:67:25:73:79: 82:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:28:F4:97:D5:62:6E:10:85:79:16:EF:94:4F:46:45:57:5A:50:EB X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:76:5e:26:46:f7:c8:b7:93:a1:06:28:29:64:63:1e:96:cb: 2b:7d:bf:77:68:c5:b6:1c:c4:fd:9b:90:bb:bd:6b:31:b4:b7: 95:b7:41:f3:8a:80:14:34:b7:80:fe:ac:d5:b1:48:0e:4a:62: a1:68:31:33:41:40:c9:99:2b:f2:d9:dd:36:a1:56:84:7d:93: 89:1a:f2:16:03:92:ce:8d:49:9d:f9:03:0c:37:45:12:22:ce: 7f:23:d7:21:c6:08:bc:21:f6:cd:d6:82:b9:45:bd:1e:5b:e4: 67:f0:bd:b9:35:e9:a1:62:5e:a9:32:5d:a5:e4:02:bb:26:3f: de:8e:b3:88:31:9e:b8:a3:a4:99:41:f7:81:d5:7b:09:2b:b6: bc:6e:3f:1c:7d:93:35:e5:10:84:79:4c:8d:01:58:87:56:08: 39:aa:61:ec:fc:a9:c1:58:86:d2:9d:f3:a8:28:40:5f:a2:74: c9:a2:38:7d:01:b5:af:f1:ee:87:36:a8:d6:2b:03:bd:f2:33: 36:9b:67:eb:49:e5:ef:6a:18:a8:c9:ab:26:13:e4:83:d9:88: 45:a2:56:a0:a3:40:20:2a:c5:4d:d3:88:33:63:67:54:17:49: 6d:a2:83:aa:1a:0f:7e:8b:33:16:9e:c8:30:69:60:44:97:39: 6c:11:8d:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUwNDI0MTYyMjU5WhcNMjUwNTAxMTYyMjU5WjAYMRYwFAYD VQQDEw02ODBhNjU2My1mMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQZN6RQJmSi7gZ6TwTMCIJNzztCMbiVB9vfgGb37q5vPe2OkXpsDvTmiDV4F sSbmykUvlGuR4DqqNdk6ton9ZCXkL0BfYC2nhGvaROkVGDksS+ztBh4rHq/wafr5 GPozrnj+VP1/LAsQhQGAEFhKsSVBKsL9IHp/zkKIYHYJYQM4L+bOhxNopVNBp1M8 gnAKJTe+FQBuKLxSjh/gyPTi/+u2QKRJd3mh3Ot2l6N46cwbc5rvtyIiUNKWdHMh Hv7BN9ul+6E59M4Minf2icniQF9pDf4oGitSBkCApP3DxQvsoMWeb8lLzJ0NQCFM UgSFavdph3i2vc+s+2clc3mCYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUo9JfV Ym4QhXkW75RPRkVXWlDrMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUdl4mRvfIt5OhBigpZGMelssrfb93aMW2HMT9m5C7vWsxtLeVt0Hz ioAUNLeA/qzVsUgOSmKhaDEzQUDJmSvy2d02oVaEfZOJGvIWA5LOjUmd+QMMN0US Is5/I9chxgi8IfbN1oK5Rb0eW+Rn8L25NemhYl6pMl2l5AK7Jj/ejrOIMZ64o6SZ QfeB1XsJK7a8bj8cfZM15RCEeUyNAViHVgg5qmHs/KnBWIbSnfOoKEBfonTJojh9 AbWv8e6HNqjWKwO98jM2m2frSeXvahioyasmE+SD2YhFolago0AgKsVN04gzY2dU F0ltooOqGg9+izMWnsgwaWBElzlsEY27 -----END CERTIFICATE-----Generated at Sat Apr 26 04:27:15 2025 by rpki-client