$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: VG1Sd4fCcSKFwJb6EXA0XTikOxofQ4WxKFB64UTi0Og= Subject key identifier: A0:04:62:8B:A3:55:16:34:4A:C2:A9:F5:CF:12:F2:BE:1F:35:0A:F3 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0C52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0C44 Signing time: Thu 24 Apr 2025 18:18:43 +0000 Manifest this update: Thu 24 Apr 2025 18:18:43 +0000 Manifest next update: Thu 01 May 2025 18:18:43 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: MWJv80PC/3h9+eWbcpdtWogDxrAQ7xoYQ3iKAnga0oU=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: ZJYTa6/4Mo2ZhGCzzSDSUlHgf//iLKJXvM086ZIoSG4=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: y1Ah/sCRnzTCZTtDJj4VAK1Ak4axz54qZlJpOkCDzUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3154 (0xc52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Apr 24 18:18:43 2025 GMT Not After : May 1 18:18:43 2025 GMT Subject: CN=680a8083-03ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:62:b6:f6:ae:fc:22:4a:af:c2:f0:49:1e:3b: 72:25:d0:ef:b2:54:90:6f:db:0d:2e:ba:38:ba:c3: 1b:b0:54:b2:bf:47:fa:b1:cc:aa:27:79:b6:25:ef: 7c:90:b3:65:02:fb:19:44:25:13:5d:e9:ec:5b:7b: 68:c8:6d:9d:33:52:b3:a0:22:08:ef:e1:3d:d9:b0: 70:51:09:3f:58:68:b9:cf:4b:1b:a5:b2:13:c9:2e: 2f:af:03:a3:a1:62:74:fe:9c:02:2d:19:4b:01:a3: b2:75:7e:e0:a5:ce:8d:09:ca:bc:49:75:09:59:89: 76:f4:1b:b3:e2:64:10:8a:da:2f:f6:a1:9c:e8:ff: 4c:b8:c8:e6:57:f5:72:53:32:c8:a8:a8:bc:02:42: ae:0e:86:e9:b0:44:6a:df:b3:3f:d9:9a:ae:3f:9a: 2c:aa:d0:4d:93:a0:6e:60:4d:55:81:17:af:53:56: 42:31:92:4f:af:c2:d2:f7:22:b6:85:0c:65:d0:2e: c0:36:cb:43:6c:88:54:d2:55:e8:3c:a6:a3:35:0b: 24:42:ab:e9:c3:5c:88:c1:4d:21:73:8e:34:0e:bb: bb:2c:c8:f7:b6:d9:24:b9:0f:76:6d:d4:eb:0b:f1: 15:26:7b:11:4e:b9:68:81:10:92:e0:5d:2b:44:96: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:04:62:8B:A3:55:16:34:4A:C2:A9:F5:CF:12:F2:BE:1F:35:0A:F3 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:67:b4:3d:72:cf:bb:50:9e:a3:6d:0a:13:b2:e5:07:08:6f: d6:e5:71:61:7e:02:17:33:3c:5b:2c:ac:17:22:12:3b:bd:a6: 0b:a1:b2:df:35:8d:f9:5b:4b:50:2b:83:8f:08:66:ab:b5:81: af:db:32:19:36:cc:de:aa:44:8c:1f:a6:88:2d:e0:e2:4b:84: 46:f1:2c:51:5d:49:c1:05:c6:5c:13:1f:b1:0c:fd:8b:55:26: 1d:a1:5e:6d:c2:42:53:0a:cb:c4:e2:9b:31:4c:2b:76:93:a9: 5a:fb:d0:b3:fa:6e:ec:68:cc:a3:cc:4c:af:b7:99:4a:4b:4e: 0f:2c:1c:f6:2e:b2:31:22:6d:87:96:8b:ec:29:e6:c6:34:22: 8c:58:3f:29:62:6d:80:f8:a7:02:e1:6d:2a:f2:22:9b:68:bb: 98:02:b2:32:ed:db:78:f2:18:ff:b0:ae:fb:f3:3a:8a:ee:cf: 71:32:ff:eb:6f:25:ea:16:15:64:37:a0:f9:f1:95:99:1d:99: 35:6d:b2:53:46:70:f8:45:dc:14:08:1b:59:35:cf:6a:ce:ac: 3d:d3:fd:66:45:3a:64:98:aa:d6:64:84:15:39:aa:d7:78:d2: d9:1f:a7:f7:00:c4:28:97:69:b4:e3:6f:94:7c:bb:01:0c:fd: 05:80:ec:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUwNDI0MTgxODQzWhcNMjUwNTAxMTgxODQzWjAYMRYwFAYD VQQDEw02ODBhODA4My0wM2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2K29q78IkqvwvBJHjtyJdDvslSQb9sNLro4usMbsFSyv0f6scyqJ3m2Je98 kLNlAvsZRCUTXensW3toyG2dM1KzoCII7+E92bBwUQk/WGi5z0sbpbITyS4vrwOj oWJ0/pwCLRlLAaOydX7gpc6NCcq8SXUJWYl29Buz4mQQitov9qGc6P9MuMjmV/Vy UzLIqKi8AkKuDobpsERq37M/2ZquP5osqtBNk6BuYE1VgRevU1ZCMZJPr8LS9yK2 hQxl0C7ANstDbIhU0lXoPKajNQskQqvpw1yIwU0hc440Dru7LMj3ttkkuQ92bdTr C/EVJnsRTrlogRCS4F0rRJaMeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKAEYouj VRY0SsKp9c8S8r4fNQrzMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Z7Q9cs+7UJ6jbQoTsuUHCG/W5XFhfgIXMzxbLKwXIhI7vaYLobLf NY35W0tQK4OPCGartYGv2zIZNszeqkSMH6aILeDiS4RG8SxRXUnBBcZcEx+xDP2L VSYdoV5twkJTCsvE4psxTCt2k6la+9Cz+m7saMyjzEyvt5lKS04PLBz2LrIxIm2H lovsKebGNCKMWD8pYm2A+KcC4W0q8iKbaLuYArIy7dt48hj/sK778zqK7s9xMv/r byXqFhVkN6D58ZWZHZk1bbJTRnD4RdwUCBtZNc9qzqw90/1mRTpkmKrWZIQVOarX eNLZH6f3AMQol2m042+UfLsBDP0FgOyT -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:57 2025 by rpki-client