$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: VPrjv6Ra4BbayKvSxrILOQC3PyFu8/oVIAi5Fqsin98= Subject key identifier: A5:AC:39:3B:B5:A4:D4:03:37:BC:EC:AE:39:4D:8E:96:BD:BA:95:5E Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 04E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 04CF Signing time: Thu 24 Apr 2025 23:38:15 +0000 Manifest this update: Thu 24 Apr 2025 23:38:15 +0000 Manifest next update: Thu 01 May 2025 23:38:15 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: zOj5DJW3BgRuqXnHUm/dVdaQeEHclPPSc0/5LkciACU=) 2: 17E03256B62811EF8D234218C4F9AE02.roa (hash: K58ualcAz/8vUOZws7f1WHAGLYLtETkXGgN3zPvTq4E=) 3: 67624B6088B611EFA5F28A68C4F9AE02.roa (hash: qxNt5X+NJ/lDZV/a3w6QhqphN2TIJWTmHt+XWPeL2Fw=) 4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1252 (0x4e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Apr 24 23:38:15 2025 GMT Not After : May 1 23:38:15 2025 GMT Subject: CN=680acb67-da08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:61:33:4d:02:67:4d:17:33:7f:32:c2:bf: 7b:a4:d6:16:13:03:37:f3:48:c8:6d:72:d9:3c:c6: da:db:7d:50:af:a6:9e:7a:8e:e8:dd:23:a5:95:63: 7d:36:cb:48:6f:42:ea:b0:93:f9:3d:59:2a:61:85: 39:67:ff:aa:82:94:50:55:73:16:21:55:e3:df:83: e5:bc:77:30:16:8a:b5:5d:79:97:0c:25:e3:f3:c9: 99:5d:1f:a3:67:14:b0:b7:17:cb:98:0f:66:89:eb: b2:a2:e5:bf:34:88:f0:0a:2c:db:ce:44:25:03:25: b7:8d:9d:f3:59:f8:60:ba:27:90:77:75:a5:23:c4: ba:2a:45:67:d9:79:91:d1:c0:1a:63:f2:1e:10:70: be:2b:eb:9a:36:a2:1d:76:27:cf:fb:2f:1e:0c:83: 01:81:ea:08:3c:51:10:f9:c5:e5:a7:f5:d5:9a:24: 65:db:9a:44:ee:44:4c:7d:a4:b2:b9:5f:d2:29:f6: ff:62:ca:2f:84:ea:9b:ef:a9:15:e7:b8:0b:26:83: 6e:52:a7:b3:9c:fc:ce:5b:99:09:aa:c8:83:72:06: c4:ed:e9:ff:67:de:53:61:61:3c:89:b1:fa:ce:2e: df:b3:eb:35:d6:66:44:4f:33:6a:e9:5a:64:d1:be: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AC:39:3B:B5:A4:D4:03:37:BC:EC:AE:39:4D:8E:96:BD:BA:95:5E X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:25:80:90:6a:40:82:f6:25:1d:c0:6a:7a:e9:57:a3:9c:c6: 44:86:3f:f4:f2:81:69:ca:67:12:41:70:f8:fa:ee:44:e3:61: 7c:54:b3:f6:06:09:85:1e:db:f7:fc:04:19:31:e0:af:31:34: 46:57:d3:16:f5:64:e1:14:d0:7a:66:82:f9:2e:1e:81:00:27: de:9c:60:bf:1f:07:82:20:04:89:5c:b5:14:c7:78:bb:6f:9d: 38:01:ce:5e:50:87:0d:58:28:e1:75:8b:83:9d:92:9c:06:85: f8:2c:bb:40:c2:d0:7f:4c:47:38:bb:53:0f:31:fc:61:31:7c: c0:d5:26:4f:4d:f1:b3:01:55:ad:77:c6:51:04:31:ab:bb:4f: 5d:40:d5:16:60:d0:e2:4a:ba:9c:09:99:3b:d9:3c:16:db:01: 30:98:4c:42:9d:9e:ac:66:57:5f:1c:0b:40:44:48:97:90:50: 34:7b:2c:c1:57:0f:ab:88:d6:8e:2f:f9:32:e9:3b:c9:9b:eb: 14:90:a5:5d:46:fd:26:da:7b:b4:a7:8c:89:67:40:48:58:74: 11:60:a4:22:35:75:d4:55:e0:e9:e8:3f:a0:27:b5:bf:ef:98: bb:c6:36:31:5d:fe:06:af:f9:9a:fe:fa:20:7a:6a:cb:81:7a: f6:c0:04:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUwNDI0MjMzODE1WhcNMjUwNTAxMjMzODE1WjAYMRYwFAYD VQQDEw02ODBhY2I2Ny1kYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QphM00CZ00XM38ywr97pNYWEwM380jIbXLZPMba231Qr6aeeo7o3SOllWN9 NstIb0LqsJP5PVkqYYU5Z/+qgpRQVXMWIVXj34PlvHcwFoq1XXmXDCXj88mZXR+j ZxSwtxfLmA9mieuyouW/NIjwCizbzkQlAyW3jZ3zWfhguieQd3WlI8S6KkVn2XmR 0cAaY/IeEHC+K+uaNqIddifP+y8eDIMBgeoIPFEQ+cXlp/XVmiRl25pE7kRMfaSy uV/SKfb/YsovhOqb76kV57gLJoNuUqeznPzOW5kJqsiDcgbE7en/Z95TYWE8ibH6 zi7fs+s11mZETzNq6Vpk0b7u+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWsOTu1 pNQDN7zsrjlNjpa9upVeMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeJYCQakCC9iUdwGp66VejnMZEhj/08oFpymcSQXD4+u5E42F8VLP2 BgmFHtv3/AQZMeCvMTRGV9MW9WThFNB6ZoL5Lh6BACfenGC/HweCIASJXLUUx3i7 b504Ac5eUIcNWCjhdYuDnZKcBoX4LLtAwtB/TEc4u1MPMfxhMXzA1SZPTfGzAVWt d8ZRBDGru09dQNUWYNDiSrqcCZk72TwW2wEwmExCnZ6sZldfHAtAREiXkFA0eyzB Vw+riNaOL/ky6TvJm+sUkKVdRv0m2nu0p4yJZ0BIWHQRYKQiNXXUVeDp6D+gJ7W/ 75i7xjYxXf4Gr/ma/vogemrLgXr2wAQX -----END CERTIFICATE-----Generated at Sat Apr 26 04:26:34 2025 by rpki-client