$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: cDj/hYEO4Ks/WjTmlg+1CgVVSk3Lf3FzbINasOL0/xs= Subject key identifier: 56:C5:8A:13:3E:46:F5:1D:41:23:70:B5:77:6B:A3:43:FF:94:3F:12 Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0C70 Signing time: Thu 24 Apr 2025 18:15:49 +0000 Manifest this update: Thu 24 Apr 2025 18:15:48 +0000 Manifest next update: Thu 01 May 2025 18:15:48 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: BO04AlxGsIeKgG8dpenspyNeY6+RjvOsMN3UspbJWYI=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: p6SITTbljN0hlBU7f4+8nDHZna6GzHkYBhTzSZbqV7g=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: rEzpNAZQS945WaHL0UH3po5H0rnYis3WD2bb2UXEPhw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Apr 24 18:15:48 2025 GMT Not After : May 1 18:15:48 2025 GMT Subject: CN=680a7fd5-8d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ed:14:df:3b:ba:d3:f7:be:1d:75:1d:3b:66: 7d:85:44:8f:1e:4d:a3:bb:d6:7f:4e:24:f4:af:e0: 46:9f:9b:37:73:1d:98:26:f6:03:19:d5:c7:17:af: 69:9c:2d:63:0b:39:1c:45:50:29:10:4b:ef:0d:ea: 1e:43:f0:9b:7d:52:f9:e5:fc:a5:81:7b:6a:e6:8f: 04:de:11:2a:63:2c:89:7f:0f:a6:04:0c:d6:d5:7d: 07:3c:a3:ad:1a:39:d6:c8:b9:0b:d4:b1:2a:22:a9: 1b:99:76:4a:bf:db:6a:0c:dd:35:00:4b:d1:2b:1f: ab:88:15:42:b2:bb:30:9c:c1:5f:12:96:02:a0:d4: b5:7d:7d:dd:62:74:62:e9:cf:f8:20:ca:1f:e8:a3: 0e:7e:4a:d6:d0:48:4a:d2:b0:00:18:b6:f9:4e:ed: f9:e9:eb:30:55:c5:e8:b4:4c:bb:d6:87:ea:6e:54: 58:4e:61:07:71:8a:30:88:4b:9f:92:c1:71:5c:6a: b3:32:9f:90:36:e0:e2:f4:fa:d4:25:dc:db:cd:17: b6:1b:75:e5:a9:5a:fc:03:c7:e7:a2:90:85:6f:26: dd:6f:b1:52:de:c7:6e:40:b4:e1:b5:92:33:58:1f: 81:aa:c7:f6:22:cc:bf:fa:3f:89:20:a8:ce:94:31: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:8A:13:3E:46:F5:1D:41:23:70:B5:77:6B:A3:43:FF:94:3F:12 X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:71:8c:2b:1e:ac:5a:31:92:e8:24:74:60:28:8a:4b:74:63: f7:77:73:1f:9e:43:61:a7:34:f6:1d:d5:52:86:f3:14:0f:ce: 37:0e:61:7e:85:e9:8b:ff:86:2e:be:aa:1c:9e:b8:da:97:c1: 3e:b6:36:ea:aa:8c:0f:2d:88:a6:5a:5b:4d:ea:6b:f3:54:94: e0:d7:d1:38:07:a5:6c:52:07:ef:48:9d:91:00:1b:56:94:17: 9e:5f:51:ed:54:34:fa:02:8a:a8:11:0b:12:31:75:c1:4c:3f: 0b:50:83:99:0f:82:03:bd:bb:76:c4:0f:27:90:80:03:d3:68: c7:cf:ed:62:c4:be:fa:79:de:b3:35:7f:d9:8e:83:b3:5f:2c: 3f:16:8a:2c:6a:38:0f:97:8c:f9:79:f7:0f:8b:c1:1f:22:66: 35:5c:bf:a4:d0:d3:73:5d:40:b4:41:00:44:39:33:48:e2:63: c4:25:3e:3b:10:f7:55:bd:60:a3:48:2c:72:9e:27:26:3e:49: da:a6:f9:02:5c:18:30:32:90:08:3c:9e:25:a1:88:6e:be:d6: bd:e2:96:c9:2a:0e:1b:ba:9d:1f:13:dc:74:76:de:96:23:41: 6b:35:f1:fb:67:40:5c:15:0c:0b:a6:4a:67:28:db:f8:2f:df: aa:71:a9:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUwNDI0MTgxNTQ4WhcNMjUwNTAxMTgxNTQ4WjAYMRYwFAYD VQQDEw02ODBhN2ZkNS04ZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO0U3zu60/e+HXUdO2Z9hUSPHk2ju9Z/TiT0r+BGn5s3cx2YJvYDGdXHF69p nC1jCzkcRVApEEvvDeoeQ/CbfVL55fylgXtq5o8E3hEqYyyJfw+mBAzW1X0HPKOt GjnWyLkL1LEqIqkbmXZKv9tqDN01AEvRKx+riBVCsrswnMFfEpYCoNS1fX3dYnRi 6c/4IMof6KMOfkrW0EhK0rAAGLb5Tu356eswVcXotEy71ofqblRYTmEHcYowiEuf ksFxXGqzMp+QNuDi9PrUJdzbzRe2G3XlqVr8A8fnopCFbybdb7FS3sduQLThtZIz WB+Bqsf2Isy/+j+JIKjOlDFBuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbFihM+ RvUdQSNwtXdro0P/lD8SMB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8cYwrHqxaMZLoJHRgKIpLdGP3d3MfnkNhpzT2HdVShvMUD843DmF+ hemL/4Yuvqocnrjal8E+tjbqqowPLYimWltN6mvzVJTg19E4B6VsUgfvSJ2RABtW lBeeX1HtVDT6AoqoEQsSMXXBTD8LUIOZD4IDvbt2xA8nkIAD02jHz+1ixL76ed6z NX/ZjoOzXyw/FoosajgPl4z5efcPi8EfImY1XL+k0NNzXUC0QQBEOTNI4mPEJT47 EPdVvWCjSCxynicmPknapvkCXBgwMpAIPJ4loYhuvta94pbJKg4bup0fE9x0dt6W I0FrNfH7Z0BcFQwLpkpnKNv4L9+qcakg -----END CERTIFICATE-----Generated at Sat Apr 26 13:05:45 2025 by rpki-client