$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: aNN77tqrXZYBmCctcZEnriCyviu5Sdm6Ac2SApYkhiQ= Subject key identifier: B7:14:7F:6D:7B:B9:5C:DC:DD:E8:B7:B5:96:97:28:90:76:9A:72:85 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 08B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 08AC Signing time: Thu 24 Apr 2025 20:23:28 +0000 Manifest this update: Thu 24 Apr 2025 20:23:28 +0000 Manifest next update: Thu 01 May 2025 20:23:28 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: S32sSa2YbDol1knxX3hibwD/h5ZV8nuBQ8BSSV78DCE=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: 7qPOEKIxNomgCIWc/yHC1zpaUnhuR5qP+cJAyuTEkQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:23:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2226 (0x8b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: Apr 24 20:23:28 2025 GMT Not After : May 1 20:23:28 2025 GMT Subject: CN=680a9dc0-76fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:6c:78:90:fc:f2:fa:88:41:83:a5:14:02: 56:7f:3b:f0:f8:f5:44:77:ba:30:fa:b8:85:ac:26: d8:96:e7:f9:d1:36:68:2a:f8:4c:d0:37:e5:3e:65: 3b:48:57:6b:ed:17:30:5b:d6:c7:4e:3a:5a:36:73: bb:a7:51:51:97:d1:77:71:11:06:5d:56:04:3d:e6: 4b:29:7e:26:15:f3:f7:42:22:43:17:fb:79:0b:1e: 4e:8d:6c:9e:51:9c:50:ed:08:f4:4f:9a:63:61:8d: 1e:06:2e:3b:c3:7f:6b:cc:cf:c2:4d:1a:ee:f0:31: 13:f3:02:15:66:05:6c:df:58:53:e3:aa:4d:97:ba: b6:a3:bc:5d:f6:d3:41:91:09:b2:95:ca:42:b9:23: 09:11:bf:13:73:9b:f8:14:57:95:d0:8c:2c:04:ee: aa:23:79:b3:76:2c:31:34:65:e6:c9:18:1c:f1:0c: 1a:ee:50:28:16:8b:18:fa:dd:4c:fb:4d:6e:79:76: c6:d7:00:f2:12:2c:e8:e5:9c:d7:77:b8:0e:e5:4a: 51:ca:82:99:28:9d:97:fc:d6:ad:85:b8:02:f3:78: 76:6b:fd:5e:b0:3f:7f:55:2a:2b:e6:0b:e1:41:ae: f2:fb:31:d2:b8:84:60:0c:a1:d6:f7:9c:66:f3:e0: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:14:7F:6D:7B:B9:5C:DC:DD:E8:B7:B5:96:97:28:90:76:9A:72:85 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:16:26:d8:b7:32:d9:9d:38:61:c7:3e:31:92:5e:92:50:cf: d9:b5:8b:b8:96:5b:9a:06:35:bc:6d:94:97:10:4d:86:fb:f0: 90:12:e2:b2:75:7f:be:fc:8d:1b:e9:13:22:50:af:9d:8d:6e: f7:73:6d:28:00:a7:9a:d0:0e:0c:13:3e:8a:94:f6:ea:55:fd: 68:48:28:20:c3:61:9d:55:da:aa:5d:00:80:91:31:47:d3:4d: 58:f1:b6:6e:c0:15:6b:a5:77:d3:05:39:f6:b6:19:37:e5:b3: f7:14:9d:37:4f:8f:58:c0:54:47:e8:7a:09:bb:92:e5:38:f9: 5b:0a:19:8b:4f:73:a8:6a:5a:f3:0e:f1:93:75:3e:7f:5f:37: 1f:1b:6a:58:2d:d4:c5:e5:bc:1f:6d:59:46:76:47:4e:a3:cf: 30:6e:1f:6a:c5:65:69:fb:b3:1f:8e:4c:7a:bc:e4:6b:c4:2a: 3e:25:df:f7:a1:49:70:4c:5a:40:4f:97:97:b9:66:ab:a5:60: ac:06:70:f7:00:32:f4:bd:8f:6f:f8:af:8b:c6:81:cf:cd:77: a6:12:ad:69:79:73:cb:c1:5c:d2:ad:e7:36:22:6e:a5:14:ad: 38:15:68:fb:34:53:df:1d:f5:2e:60:df:9b:49:5e:23:77:48: c4:54:ca:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjUwNDI0MjAyMzI4WhcNMjUwNTAxMjAyMzI4WjAYMRYwFAYD VQQDEw02ODBhOWRjMC03NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAriNseJD88vqIQYOlFAJWfzvw+PVEd7ow+riFrCbYluf50TZoKvhM0DflPmU7 SFdr7RcwW9bHTjpaNnO7p1FRl9F3cREGXVYEPeZLKX4mFfP3QiJDF/t5Cx5OjWye UZxQ7Qj0T5pjYY0eBi47w39rzM/CTRru8DET8wIVZgVs31hT46pNl7q2o7xd9tNB kQmylcpCuSMJEb8Tc5v4FFeV0IwsBO6qI3mzdiwxNGXmyRgc8Qwa7lAoFosY+t1M +01ueXbG1wDyEizo5ZzXd7gO5UpRyoKZKJ2X/NathbgC83h2a/1esD9/VSor5gvh Qa7y+zHSuIRgDKHW95xm8+CUmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLcUf217 uVzc3ei3tZaXKJB2mnKFMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyFibYtzLZnThhxz4xkl6SUM/ZtYu4lluaBjW8bZSXEE2G+/CQEuKy dX++/I0b6RMiUK+djW73c20oAKea0A4MEz6KlPbqVf1oSCggw2GdVdqqXQCAkTFH 001Y8bZuwBVrpXfTBTn2thk35bP3FJ03T49YwFRH6HoJu5LlOPlbChmLT3Ooalrz DvGTdT5/XzcfG2pYLdTF5bwfbVlGdkdOo88wbh9qxWVp+7Mfjkx6vORrxCo+Jd/3 oUlwTFpAT5eXuWarpWCsBnD3ADL0vY9v+K+LxoHPzXemEq1peXPLwVzSrec2Im6l FK04FWj7NFPfHfUuYN+bSV4jd0jEVMq1 -----END CERTIFICATE-----Generated at Sat Apr 26 04:33:55 2025 by rpki-client