$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: UOLYUban8klrDIarGz6QYRQwjparOA4dbnXFeFVYKNM= Subject key identifier: 01:55:14:6C:2A:99:0F:4A:BC:D0:92:BC:0D:45:13:CB:DE:BC:AF:E2 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0C2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C26 Signing time: Thu 24 Apr 2025 18:28:35 +0000 Manifest this update: Thu 24 Apr 2025 18:28:34 +0000 Manifest next update: Thu 01 May 2025 18:28:34 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: 4lwi6rBSXspeubU53Rrh08ALTcM0ee/wjI3qC9fMm/E=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: x9X6wGJ3mbVyR78mjvIljIMszM7hIhEyNVBMIZ+VGz0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3116 (0xc2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Apr 24 18:28:34 2025 GMT Not After : May 1 18:28:34 2025 GMT Subject: CN=680a82d3-7eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:b4:9c:14:e8:13:94:c5:65:fb:c0:45:67: 24:91:ad:dc:43:98:08:2a:af:56:6c:2a:14:4b:d2: 8e:80:3a:cb:c2:c9:a5:85:2f:e1:1a:67:7e:d4:c1: 5f:8c:0f:d1:18:9a:9b:2f:69:26:00:b0:d7:7e:bb: 6b:66:61:1f:b8:d0:d7:a9:76:e9:c8:02:7d:70:e9: 71:5d:36:37:ea:54:2b:13:53:1f:99:a2:3e:32:6d: b7:ca:6f:6e:0e:06:97:4c:6d:16:d6:55:a5:71:1b: a7:ae:a6:22:31:3e:f7:fc:b1:d8:c5:47:77:44:1c: d5:f0:e6:8e:56:e1:2e:ec:24:1c:4f:fe:a1:7f:e0: 0d:47:f3:8f:bf:b1:d0:8f:d8:35:05:6b:c1:3c:12: 8b:61:b4:cf:20:cd:58:fa:af:08:d7:c3:fa:ec:7d: 68:aa:39:f7:ba:42:51:0a:60:e7:a6:d9:b2:e2:1b: 65:9f:9c:fe:bf:05:11:08:e0:62:a4:bd:ad:0f:3f: f7:9c:8b:e3:c3:e9:af:85:5f:05:d7:b1:07:5a:ad: d2:10:b3:f8:53:7d:86:fc:7d:77:a3:cb:0e:a4:9b: 2b:26:dd:bb:bd:a5:c9:a3:26:1e:e9:bc:62:e7:90: 81:3f:98:96:62:a4:30:2f:ab:f9:b9:bc:36:7d:f9: 32:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:55:14:6C:2A:99:0F:4A:BC:D0:92:BC:0D:45:13:CB:DE:BC:AF:E2 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ba:24:84:7f:1c:f0:9e:8f:c7:b8:36:15:11:1e:1c:ee:30: 0a:dd:ba:86:f5:e5:d3:19:f8:dd:f1:e1:cd:68:fc:21:d2:67: 25:f4:5b:7e:d7:f1:db:c5:71:e1:96:56:cf:36:cc:df:55:42: 44:52:a7:80:9d:d6:a6:db:95:34:5e:51:ab:c6:32:09:fd:61: 5e:4a:87:8e:46:05:66:d4:75:bd:86:11:cb:8f:16:4d:ed:54: 73:4f:9a:93:78:dd:9d:e9:48:b0:30:00:40:b1:97:da:d1:8d: 10:1a:bf:bd:8f:10:b2:a8:e8:18:52:d4:44:8d:54:9e:6e:c0: 18:bb:96:d4:63:76:65:ba:9f:00:04:f3:dd:61:01:96:29:22: 06:e4:83:05:bb:ed:49:22:7f:9e:4c:1c:ca:ad:f2:53:54:24: c2:0f:e1:b3:5e:43:a1:c5:d2:cc:27:60:82:d6:9d:71:9b:cd: 56:85:52:88:e8:6d:bc:93:e0:f5:08:66:4e:60:05:3c:71:7a: 89:4a:84:ee:15:a1:fe:8f:29:49:3d:d2:9d:ad:90:5f:48:14: ed:59:0c:9e:79:1a:86:58:ef:21:6d:34:e4:43:e4:aa:44:74: 85:23:12:99:e8:97:05:51:2c:92:f9:71:88:a1:b4:04:b5:3a: b4:d1:9c:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUwNDI0MTgyODM0WhcNMjUwNTAxMTgyODM0WjAYMRYwFAYD VQQDEw02ODBhODJkMy03ZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0kW0nBToE5TFZfvARWckka3cQ5gIKq9WbCoUS9KOgDrLwsmlhS/hGmd+1MFf jA/RGJqbL2kmALDXfrtrZmEfuNDXqXbpyAJ9cOlxXTY36lQrE1MfmaI+Mm23ym9u DgaXTG0W1lWlcRunrqYiMT73/LHYxUd3RBzV8OaOVuEu7CQcT/6hf+ANR/OPv7HQ j9g1BWvBPBKLYbTPIM1Y+q8I18P67H1oqjn3ukJRCmDnptmy4htln5z+vwURCOBi pL2tDz/3nIvjw+mvhV8F17EHWq3SELP4U32G/H13o8sOpJsrJt27vaXJoyYe6bxi 55CBP5iWYqQwL6v5ubw2ffkyUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFVFGwq mQ9KvNCSvA1FE8vevK/iMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7uiSEfxzwno/HuDYVER4c7jAK3bqG9eXTGfjd8eHNaPwh0mcl9Ft+ 1/HbxXHhllbPNszfVUJEUqeAndam25U0XlGrxjIJ/WFeSoeORgVm1HW9hhHLjxZN 7VRzT5qTeN2d6UiwMABAsZfa0Y0QGr+9jxCyqOgYUtREjVSebsAYu5bUY3Zlup8A BPPdYQGWKSIG5IMFu+1JIn+eTBzKrfJTVCTCD+GzXkOhxdLMJ2CC1p1xm81WhVKI 6G28k+D1CGZOYAU8cXqJSoTuFaH+jylJPdKdrZBfSBTtWQyeeRqGWO8hbTTkQ+Sq RHSFIxKZ6JcFUSyS+XGIobQEtTq00Zy9 -----END CERTIFICATE-----Generated at Sat Apr 26 04:18:10 2025 by rpki-client