$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: SXWVk7LCr6AN201dzXVWjkUXuOyCVZmvMdwkoAWGals= Subject key identifier: 92:54:EE:D7:ED:F1:63:BD:E2:EC:33:A6:92:B3:ED:75:21:4F:45:C2 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 035A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 0356 Signing time: Sun 27 Apr 2025 00:38:36 +0000 Manifest this update: Sun 27 Apr 2025 00:38:35 +0000 Manifest next update: Sun 04 May 2025 00:38:35 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: bIXTJS0kUrz90/lmuGx37kvEI2TaLqhYcW17UzfelpE=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 95fJ03bboSIkCN0DBXqmsgAZgIidDy4lfSJOy1nx1H8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 00:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 858 (0x35a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Apr 27 00:38:35 2025 GMT Not After : May 4 00:38:35 2025 GMT Subject: CN=680d7c8b-11ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:71:e7:fa:4c:90:ae:0a:41:26:09:d1:a3:ce: 1d:88:22:b0:64:11:49:fa:09:22:2e:28:5c:20:97: c9:be:5c:9a:44:ef:c8:bc:6e:08:d5:e8:65:79:80: 8f:42:a8:64:5c:4a:5f:db:2b:f7:f3:39:56:33:fb: 23:34:e7:86:81:27:dc:8f:c5:13:60:81:b8:25:ae: 07:62:96:00:c7:c9:83:46:c3:d4:2f:ea:38:5f:a6: 60:2b:9c:5d:7c:60:03:0b:bb:48:6e:db:88:07:11: 09:51:81:29:7a:88:d9:55:24:f4:7f:98:37:d5:71: e5:63:98:72:a9:76:c5:3b:c2:20:df:a1:65:00:b0: e4:0d:db:27:98:90:fa:5b:39:c1:9f:55:ef:99:10: c9:ec:15:a3:bf:f6:98:03:be:3d:cf:3c:91:14:c4: 03:ac:c8:bb:ac:bf:e2:20:22:94:d1:d6:08:b0:4d: 64:66:da:9d:57:a0:f8:23:33:83:d8:6c:3b:ee:1a: e6:62:39:95:0f:7e:d9:0e:d4:7a:0a:70:7c:7d:72: df:9e:30:82:5e:8e:b9:ed:f3:a9:93:80:a0:3b:9e: a5:18:a2:b7:bd:05:32:40:04:ba:41:01:5b:26:a8: fd:04:2c:1c:c5:f9:a5:af:6e:d1:e8:9f:05:b3:82: 10:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:54:EE:D7:ED:F1:63:BD:E2:EC:33:A6:92:B3:ED:75:21:4F:45:C2 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:58:ec:84:8e:e8:f1:f5:1a:12:19:98:6e:46:cb:9c:73:ac: ed:80:6b:51:ae:c3:23:b2:d6:de:cf:59:59:ca:f0:ce:34:90: 71:f5:2c:61:8d:d6:8f:f3:5f:7c:91:ce:34:3f:c0:c5:b8:ff: fe:28:43:c8:de:61:ad:47:c8:df:ea:cc:9b:c5:02:77:99:5e: da:48:32:10:60:72:de:86:b5:d7:c6:e2:35:81:26:96:b1:2d: 9c:6a:cf:fb:3b:26:4c:3d:26:37:90:a3:1d:f5:c8:bc:8d:b9: 41:f6:5a:76:3c:5c:53:d7:f6:00:13:22:50:22:08:f9:25:6d: c6:1f:61:85:db:58:12:4f:46:90:0f:2e:62:33:11:7c:5c:c7: 16:31:4d:2f:f9:de:f9:20:2d:1c:ed:65:31:b9:15:fb:32:84: 22:fe:2f:7e:06:df:60:f8:94:0a:3f:d9:28:3b:f2:7f:41:8e: 24:12:5a:bf:b0:41:3b:01:f3:74:17:ac:7f:9f:0f:27:06:dc: c9:09:8e:af:ef:23:45:43:3f:91:79:99:b0:46:f3:f2:d1:46: c2:ef:d5:fa:43:15:df:08:29:e3:6c:4a:7e:7f:15:cd:96:01: 2a:8c:8e:ec:ad:78:06:b4:57:70:78:a8:6c:b4:88:aa:de:4d: 78:eb:19:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUwNDI3MDAzODM1WhcNMjUwNTA0MDAzODM1WjAYMRYwFAYD VQQDEw02ODBkN2M4Yi0xMWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXHn+kyQrgpBJgnRo84diCKwZBFJ+gkiLihcIJfJvlyaRO/IvG4I1ehleYCP QqhkXEpf2yv38zlWM/sjNOeGgSfcj8UTYIG4Ja4HYpYAx8mDRsPUL+o4X6ZgK5xd fGADC7tIbtuIBxEJUYEpeojZVST0f5g31XHlY5hyqXbFO8Ig36FlALDkDdsnmJD6 WznBn1XvmRDJ7BWjv/aYA749zzyRFMQDrMi7rL/iICKU0dYIsE1kZtqdV6D4IzOD 2Gw77hrmYjmVD37ZDtR6CnB8fXLfnjCCXo657fOpk4CgO56lGKK3vQUyQAS6QQFb Jqj9BCwcxfmlr27R6J8Fs4IQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJU7tft 8WO94uwzppKz7XUhT0XCMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeWOyEjujx9RoSGZhuRsucc6ztgGtRrsMjstbez1lZyvDONJBx9Sxh jdaP8198kc40P8DFuP/+KEPI3mGtR8jf6sybxQJ3mV7aSDIQYHLehrXXxuI1gSaW sS2cas/7OyZMPSY3kKMd9ci8jblB9lp2PFxT1/YAEyJQIgj5JW3GH2GF21gST0aQ Dy5iMxF8XMcWMU0v+d75IC0c7WUxuRX7MoQi/i9+Bt9g+JQKP9koO/J/QY4kElq/ sEE7AfN0F6x/nw8nBtzJCY6v7yNFQz+ReZmwRvPy0UbC79X6QxXfCCnjbEp+fxXN lgEqjI7srXgGtFdweKhstIiq3k146xlN -----END CERTIFICATE-----Generated at Mon Apr 28 19:57:27 2025 by rpki-client